$ rpki-client -vvf repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft File: A70723C87D2C27B95BE6227C631E7D85EF89D513.mft (raw, json) Hash identifier: ATEIPHTiUrykUpA0ZE/syo472qFAqob+WoNvdbtq9XY= Subject key identifier: 6A:61:93:24:70:7F:81:A6:AF:A6:97:CF:78:66:0D:81:3C:C6:B2:CB Authority key identifier: A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13 Certificate issuer: /CN=A70723C87D2C27B95BE6227C631E7D85EF89D513 Certificate serial: 173D315497F105A751A6B4C98F8B06A58C3132CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft Manifest number: 04BD Signing time: Thu 03 Apr 2025 18:50:50 +0000 Manifest this update: Thu 03 Apr 2025 18:45:50 +0000 Manifest next update: Mon 07 Apr 2025 05:35:50 +0000 Files and hashes: 1: 3130332e34382e3132382e302f32322d3234203d3e203633383631.roa (hash: ou6+fUJHXdcSj0cXtfBnZqccyTs9EPGW/7KsWbkPHEQ=) 2: A70723C87D2C27B95BE6227C631E7D85EF89D513.crl (hash: +99pTygdH5ysjNmEKztzm7Nafpft7hdlBwhZ6eUVKiI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.crl rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 05:35:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:3d:31:54:97:f1:05:a7:51:a6:b4:c9:8f:8b:06:a5:8c:31:32:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A70723C87D2C27B95BE6227C631E7D85EF89D513 Validity Not Before: Apr 3 18:45:50 2025 GMT Not After : Apr 7 05:35:50 2025 GMT Subject: CN=6A619324707F81A6AFA697CF78660D813CC6B2CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:67:22:01:ab:d4:5a:52:f3:32:b4:b5:84:f4: 71:78:e4:b6:bf:31:35:69:a2:02:3f:bc:3a:30:14: 40:0c:e5:34:0b:d6:ff:88:93:4d:be:6e:c9:47:e2: f8:ef:ca:e3:1b:60:62:e3:80:0b:9c:8e:85:2c:7d: 3e:73:e8:58:5d:76:fd:0d:20:6c:1f:e6:07:46:10: e4:e6:0b:19:26:b5:57:41:59:08:61:26:16:f0:90: fb:8c:63:d6:1b:84:51:64:47:1b:84:93:50:9a:1a: b0:2f:75:1d:60:78:0c:77:67:14:65:ae:16:67:68: ef:fb:98:de:53:9b:a2:22:5f:8b:49:7c:ef:96:05: 7d:61:65:d9:d6:4e:66:31:96:0b:bf:bf:83:4c:2a: 99:d5:09:97:ee:bd:cb:16:60:e5:67:48:de:b0:3c: 20:fb:f4:ea:d1:bc:12:72:89:93:75:71:bd:be:6e: 38:86:5d:d2:ac:e0:4b:04:7a:07:86:5e:c7:fc:51: 3d:d8:fd:6f:ca:aa:06:d7:d2:df:bf:d3:eb:5e:eb: f3:f9:de:48:e6:04:8f:a3:7d:66:c4:5e:d0:75:8b: 0d:2d:d7:fc:7f:2c:c5:a8:10:0c:09:d9:1b:4e:04: 09:f4:4c:d7:a8:c5:da:ca:63:da:b2:8c:5c:de:3d: 45:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:61:93:24:70:7F:81:A6:AF:A6:97:CF:78:66:0D:81:3C:C6:B2:CB X509v3 Authority Key Identifier: keyid:A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:9d:ec:1f:9b:97:eb:05:d5:9b:d6:19:f6:38:25:7b:d7:ed: 75:53:3b:ae:7e:b8:ce:a3:09:16:1e:74:7b:91:c0:96:a8:0e: d4:b4:ea:79:2e:fa:4f:f8:bb:0f:f9:f1:34:61:c0:d3:0e:b8: 62:a6:1c:1a:f0:a0:f4:51:13:30:28:94:71:5b:aa:b0:ea:37: 4f:a2:e3:8a:ba:db:d1:d4:14:36:42:87:93:48:71:b2:ca:b9: bd:67:19:03:80:06:21:fe:3c:59:2b:b3:44:1c:44:af:ea:3b: 81:e7:02:32:29:a5:a0:79:4a:1a:60:85:60:6f:16:1b:a9:4a: f7:b2:d7:5b:b1:bc:db:38:e8:06:cc:32:6e:cf:45:24:ee:e6: ea:cd:59:0e:a2:14:95:8f:e3:95:a2:7d:1c:47:7e:28:9a:2f: b6:7c:a6:44:72:85:82:0f:b3:d1:26:6e:b6:ea:e7:51:8a:45: 6a:3a:f2:80:9d:87:e3:92:fd:8f:cb:2a:f2:7c:25:9f:70:0f: 61:b3:92:52:93:f9:9d:88:85:1c:aa:bd:02:17:bc:ae:1b:be: 84:d7:05:d5:3c:48:f4:94:08:6f:b7:e8:a5:fc:69:c6:1a:f8: fb:b8:d6:93:2b:01:3a:b6:6f:d4:8d:99:f3:c3:05:4c:97:4a: 85:28:68:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFz0xVJfxBadRprTJj4sGpYwxMs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdEODVF Rjg5RDUxMzAeFw0yNTA0MDMxODQ1NTBaFw0yNTA0MDcwNTM1NTBaMDMxMTAvBgNV BAMTKDZBNjE5MzI0NzA3RjgxQTZBRkE2OTdDRjc4NjYwRDgxM0NDNkIyQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBZyIBq9RaUvMytLWE9HF45La/ MTVpogI/vDowFEAM5TQL1v+Ik02+bslH4vjvyuMbYGLjgAucjoUsfT5z6Fhddv0N IGwf5gdGEOTmCxkmtVdBWQhhJhbwkPuMY9YbhFFkRxuEk1CaGrAvdR1geAx3ZxRl rhZnaO/7mN5Tm6IiX4tJfO+WBX1hZdnWTmYxlgu/v4NMKpnVCZfuvcsWYOVnSN6w PCD79OrRvBJyiZN1cb2+bjiGXdKs4EsEegeGXsf8UT3Y/W/KqgbX0t+/0+te6/P5 3kjmBI+jfWbEXtB1iw0t1/x/LMWoEAwJ2RtOBAn0TNeoxdrKY9qyjFzePUVzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUamGTJHB/gaavppfPeGYNgTzGssswHwYDVR0j BBgwFoAUpwcjyH0sJ7lb5iJ8Yx59he+J1RMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjcwOTA0NC01NzE4LTRmMWQtYTZkMC04NzY2ZWE3M2VhZjQvMC9BNzA3MjNDODdE MkMyN0I5NUJFNjIyN0M2MzFFN0Q4NUVGODlENTEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdEODVFRjg5 RDUxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MDkwNDQtNTcxOC00ZjFkLWE2 ZDAtODc2NmVhNzNlYWY0LzAvQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdE ODVFRjg5RDUxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+d7B+bl+sF1ZvWGfY4JXvX7XVTO65+uM6j CRYedHuRwJaoDtS06nku+k/4uw/58TRhwNMOuGKmHBrwoPRREzAolHFbqrDqN0+i 44q629HUFDZCh5NIcbLKub1nGQOABiH+PFkrs0QcRK/qO4HnAjIppaB5ShpghWBv FhupSvey11uxvNs46AbMMm7PRSTu5urNWQ6iFJWP45WifRxHfiiaL7Z8pkRyhYIP s9Embrbq51GKRWo68oCdh+OS/Y/LKvJ8JZ9wD2GzklKT+Z2IhRyqvQIXvK4bvoTX BdU8SPSUCG+36KX8acYa+Pu41pMrATq2b9SNmfPDBUyXSoUoaPE= -----END CERTIFICATE-----Generated at Sat Apr 5 16:44:56 2025 by rpki-client