$ rpki-client -vvf repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft File: B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft (raw, json) Hash identifier: dKMpOKoocpsqJJ1LlqAgFk7yG0a1nkA83mPr9QjoqGQ= Subject key identifier: A5:C7:46:E1:20:6D:C2:C5:1C:BE:68:15:26:D3:FA:A5:84:71:CA:28 Authority key identifier: B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA Certificate issuer: /CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Certificate serial: 0B1735769B2C7EA0A57748F3B37E08AB92A6E525 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft Manifest number: 01CD Signing time: Fri 04 Apr 2025 04:21:08 +0000 Manifest this update: Fri 04 Apr 2025 04:16:08 +0000 Manifest next update: Mon 07 Apr 2025 06:14:08 +0000 Files and hashes: 1: B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl (hash: IlOwgjnd9jKJY7DknagqbjjrpHV8YXQvQLO6ArlKRC4=) 2: 3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa (hash: fcX6dDB/6jZr5p1excLhOSLezwfpNz/DNvOt6VHyTLo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 06:14:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:17:35:76:9b:2c:7e:a0:a5:77:48:f3:b3:7e:08:ab:92:a6:e5:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Validity Not Before: Apr 4 04:16:08 2025 GMT Not After : Apr 7 06:14:08 2025 GMT Subject: CN=A5C746E1206DC2C51CBE681526D3FAA58471CA28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fe:2f:ab:43:f3:17:ca:54:76:29:22:e3:70: d7:d4:cf:94:a9:5d:32:77:91:93:d6:1f:5c:e8:34: c8:0f:01:87:e0:b1:9f:fd:74:b8:b3:22:9a:16:4e: c4:45:14:b5:56:b5:cd:e8:2f:7d:de:15:19:7c:e9: 50:d6:f5:0f:58:2f:7a:d9:a6:f2:b4:10:cc:e5:d1: 63:ab:17:a3:11:f7:6c:3a:63:16:6a:a7:b9:30:f0: 9b:06:7b:02:68:5c:19:50:f1:4d:0b:18:00:e5:d1: 8d:99:f5:f4:79:3d:a1:c2:cd:5b:7a:5e:e9:a5:6a: 42:d3:a6:fb:10:85:30:19:da:3a:cf:fa:4d:a3:56: 28:13:76:59:fb:0c:22:c7:0f:02:5f:cb:15:5e:0d: c5:89:2b:01:ff:ef:fa:ed:df:10:c6:74:db:82:d8: 5d:17:ab:c4:58:b3:ba:ff:45:ac:0d:66:1e:02:3b: 34:fc:1a:a1:11:a8:05:3f:a9:10:f5:85:62:d3:67: d8:15:33:26:26:24:14:06:90:4d:8c:8d:6d:04:6e: 0f:1f:8b:b3:d5:a1:38:8c:85:1c:da:38:0a:16:a5: ec:39:54:9b:99:9d:5b:b4:0a:3b:99:f0:f1:7f:16: 3f:55:b6:b8:ae:fd:e6:f3:d1:15:88:65:83:d0:dc: ef:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C7:46:E1:20:6D:C2:C5:1C:BE:68:15:26:D3:FA:A5:84:71:CA:28 X509v3 Authority Key Identifier: keyid:B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:49:b1:89:77:ce:39:fc:f4:84:11:67:87:3e:ea:bf:06:75: b3:fe:90:d1:20:a3:e7:e3:0e:db:5a:a2:67:4f:16:48:d7:f3: d1:5f:cc:a7:04:47:a6:61:62:71:b0:c0:8d:ba:c9:a8:32:a3: 78:7b:97:13:ab:92:f4:58:27:9b:e1:24:80:7f:af:79:d9:4b: 78:e3:16:ee:06:c7:b4:83:53:0e:31:7d:2a:d3:d5:a1:1c:8a: 8f:d5:0b:9c:71:b3:a4:a6:01:d7:f3:6b:df:df:48:c9:09:d2: 0e:ad:68:80:9a:d0:c3:17:b0:f5:e4:f4:90:75:ba:d2:15:ec: 1a:c0:d1:11:15:16:18:98:e9:d1:21:32:0a:5c:26:9e:6d:8c: 23:d0:38:48:53:d2:49:aa:51:e1:56:9f:9f:be:b7:01:ab:2e: 81:92:30:35:57:e1:cb:28:05:ad:aa:61:5c:23:76:0a:97:53: 01:83:71:c7:ae:67:d5:69:67:ab:09:5d:a3:41:57:7c:4e:6b: 3c:10:f2:7d:ae:3d:0c:34:07:e0:01:cc:04:b0:21:2b:70:34: cc:d7:1b:54:cc:e3:dc:11:7e:73:6f:7e:7b:79:ef:0f:80:cd: 41:87:bd:3c:14:bf:e8:c7:a4:d7:b9:e7:5e:4a:05:b0:9c:d9: 5a:dd:ee:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCxc1dpssfqCld0jzs34Iq5Km5SUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAx NTA0MTFDQTAeFw0yNTA0MDQwNDE2MDhaFw0yNTA0MDcwNjE0MDhaMDMxMTAvBgNV BAMTKEE1Qzc0NkUxMjA2REMyQzUxQ0JFNjgxNTI2RDNGQUE1ODQ3MUNBMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0/i+rQ/MXylR2KSLjcNfUz5Sp XTJ3kZPWH1zoNMgPAYfgsZ/9dLizIpoWTsRFFLVWtc3oL33eFRl86VDW9Q9YL3rZ pvK0EMzl0WOrF6MR92w6YxZqp7kw8JsGewJoXBlQ8U0LGADl0Y2Z9fR5PaHCzVt6 XumlakLTpvsQhTAZ2jrP+k2jVigTdln7DCLHDwJfyxVeDcWJKwH/7/rt3xDGdNuC 2F0Xq8RYs7r/RawNZh4COzT8GqERqAU/qRD1hWLTZ9gVMyYmJBQGkE2MjW0Ebg8f i7PVoTiMhRzaOAoWpew5VJuZnVu0CjuZ8PF/Fj9Vtriu/ebz0RWIZYPQ3O/RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpcdG4SBtwsUcvmgVJtP6pYRxyigwHwYDVR0j BBgwFoAUsHNKMtE6lvyz/fmCwu7FABUEEcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjMwOTdmMC0zOTc4LTQ5Y2UtYjY5Yy00YjIwYjRkY2ZiN2UvMC9CMDczNEEzMkQx M0E5NkZDQjNGREY5ODJDMkVFQzUwMDE1MDQxMUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAxNTA0 MTFDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzMDk3ZjAtMzk3OC00OWNlLWI2 OWMtNGIyMGI0ZGNmYjdlLzAvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1 MDAxNTA0MTFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZJsYl3zjn89IQRZ4c+6r8GdbP+kNEgo+fj DttaomdPFkjX89FfzKcER6ZhYnGwwI26yagyo3h7lxOrkvRYJ5vhJIB/r3nZS3jj Fu4Gx7SDUw4xfSrT1aEcio/VC5xxs6SmAdfza9/fSMkJ0g6taICa0MMXsPXk9JB1 utIV7BrA0REVFhiY6dEhMgpcJp5tjCPQOEhT0kmqUeFWn5++twGrLoGSMDVX4cso Ba2qYVwjdgqXUwGDcceuZ9VpZ6sJXaNBV3xOazwQ8n2uPQw0B+ABzASwIStwNMzX G1TM49wRfnNvfnt57w+AzUGHvTwUv+jHpNe5515KBbCc2Vrd7iA= -----END CERTIFICATE-----Generated at Sat Apr 5 21:24:20 2025 by rpki-client