$ rpki-client -vvf repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft File: 292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft (raw, json) Hash identifier: 1iSAQ3Wb9Z2sMdsJ87tETfW2SyQwfI1UdBIktyVlNrk= Subject key identifier: 3C:76:24:FA:6D:15:51:C9:C2:02:B0:0C:9D:B8:F8:4B:DD:D7:77:03 Authority key identifier: 29:2C:6C:F5:F3:36:CE:0D:75:8E:47:F5:DF:97:78:63:3C:DC:A7:69 Certificate issuer: /CN=292C6CF5F336CE0D758E47F5DF9778633CDCA769 Certificate serial: 671FBA656205149B1AE2232A41B3C9EB6A4C2B7E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft Manifest number: 0340 Signing time: Sun 06 Apr 2025 05:52:18 +0000 Manifest this update: Sun 06 Apr 2025 05:47:18 +0000 Manifest next update: Wed 09 Apr 2025 08:16:18 +0000 Files and hashes: 1: 292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl (hash: DjAlygOQ/8cDPwCSGeDdw4YlOnujimjrvr8lTxVtMIM=) 2: 3130332e3136362e3133362e302f32332d3234203d3e203137393935.roa (hash: RBc8t0SzZzq6PvIsQn/Y8gWPBkf8OuMfzBXzr0Qs6z4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 08:16:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:1f:ba:65:62:05:14:9b:1a:e2:23:2a:41:b3:c9:eb:6a:4c:2b:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=292C6CF5F336CE0D758E47F5DF9778633CDCA769 Validity Not Before: Apr 6 05:47:18 2025 GMT Not After : Apr 9 08:16:18 2025 GMT Subject: CN=3C7624FA6D1551C9C202B00C9DB8F84BDDD77703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:09:2c:7d:d1:95:e4:ea:d1:f4:76:71:87:8c: 11:ea:22:40:97:d4:4d:ba:8c:fd:60:f2:b9:e8:08: 38:36:2f:30:c1:a1:fc:f5:92:e1:2c:50:51:df:08: 6d:53:3f:f1:e9:8a:8c:9e:74:cd:2c:55:63:83:e7: 59:c8:2b:2e:21:e4:a7:a8:68:93:94:fb:13:de:96: 74:3f:ed:38:c2:d8:a9:28:5d:2b:8d:44:56:3a:a5: 5d:08:ca:e5:e8:7c:ea:59:7b:fe:00:09:11:24:81: 8a:2e:80:15:31:90:dc:2c:7d:1a:67:5a:ed:cb:34: ba:de:d1:91:8d:ba:bd:17:a5:15:1f:78:45:34:a2: 40:fd:48:f3:23:ea:f8:c5:38:b4:25:df:3e:3e:5e: 72:1a:e0:ae:0f:10:c4:53:f6:f0:54:75:99:be:04: 6c:4c:53:4f:59:b6:52:d7:c7:8f:91:20:14:61:62: a9:1f:53:a7:a9:8f:0c:2c:d6:91:ba:9d:19:08:ed: c9:c2:85:a7:ec:5c:22:a1:e7:d9:38:32:61:37:ca: 92:a1:ab:7d:13:ab:21:f6:d0:e8:cd:01:e9:fa:7f: a4:b6:2d:3d:04:8e:f8:0c:88:cc:e8:d1:72:bb:d1: 11:20:c1:01:79:e5:59:6c:21:71:91:99:d0:85:22: 14:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:76:24:FA:6D:15:51:C9:C2:02:B0:0C:9D:B8:F8:4B:DD:D7:77:03 X509v3 Authority Key Identifier: keyid:29:2C:6C:F5:F3:36:CE:0D:75:8E:47:F5:DF:97:78:63:3C:DC:A7:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:a3:65:96:ff:2b:05:39:5d:c7:27:43:2e:3e:88:07:ad:a9: 1d:f5:a6:e7:38:37:1f:bc:65:38:0d:88:a9:80:02:fe:b2:f3: 59:e7:2c:da:9a:f8:b5:1f:dc:cf:e2:61:6e:86:86:37:31:1f: de:44:87:6c:f7:c6:f2:1f:54:5b:92:bc:5f:70:9c:e7:db:f2: 52:bb:08:c0:02:4c:02:72:8d:fc:c5:97:46:db:fd:15:0a:5d: c9:09:c1:31:86:71:9e:b1:5a:a5:af:de:54:1b:39:13:06:10: 7c:9b:df:00:44:74:85:45:10:42:60:73:70:9c:08:68:cb:e5: 6a:ca:a2:a3:7c:cc:11:94:05:72:09:12:4c:38:2d:86:4f:06: 46:c4:6e:9b:07:8b:1d:15:3e:8f:2b:39:9a:2a:31:d8:2b:0e: a2:9c:4d:49:8e:ef:69:bc:98:64:a2:12:0e:9b:71:e3:ed:f1: 68:bd:2b:b7:be:da:0b:0b:28:e6:c1:f9:1a:45:79:c3:eb:ea: c9:28:01:74:01:7a:74:84:29:b0:49:c8:be:41:b1:69:98:5a: cb:c6:d3:ed:3f:98:71:f7:b7:92:d8:cb:b6:de:2d:65:c3:ef: a8:a4:52:d0:5a:45:76:77:4a:95:8b:b5:cc:e5:cd:99:d6:d2: 3f:43:18:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZx+6ZWIFFJsa4iMqQbPJ62pMK34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4NjMz Q0RDQTc2OTAeFw0yNTA0MDYwNTQ3MThaFw0yNTA0MDkwODE2MThaMDMxMTAvBgNV BAMTKDNDNzYyNEZBNkQxNTUxQzlDMjAyQjAwQzlEQjhGODRCRERENzc3MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwCSx90ZXk6tH0dnGHjBHqIkCX 1E26jP1g8rnoCDg2LzDBofz1kuEsUFHfCG1TP/HpioyedM0sVWOD51nIKy4h5Keo aJOU+xPelnQ/7TjC2KkoXSuNRFY6pV0IyuXofOpZe/4ACREkgYougBUxkNwsfRpn Wu3LNLre0ZGNur0XpRUfeEU0okD9SPMj6vjFOLQl3z4+XnIa4K4PEMRT9vBUdZm+ BGxMU09ZtlLXx4+RIBRhYqkfU6epjwws1pG6nRkI7cnChafsXCKh59k4MmE3ypKh q30TqyH20OjNAen6f6S2LT0EjvgMiMzo0XK70REgwQF55VlsIXGRmdCFIhRzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPHYk+m0VUcnCArAMnbj4S93XdwMwHwYDVR0j BBgwFoAUKSxs9fM2zg11jkf135d4Yzzcp2kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM0YzhkYy04ODUzLTRmNjUtODIwOS00ZmJlZTdhYjQyNTIvMC8yOTJDNkNGNUYz MzZDRTBENzU4RTQ3RjVERjk3Nzg2MzNDRENBNzY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4NjMzQ0RD QTc2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNGM4ZGMtODg1My00ZjY1LTgy MDktNGZiZWU3YWI0MjUyLzAvMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4 NjMzQ0RDQTc2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFejZZb/KwU5XccnQy4+iAetqR31puc4Nx+8 ZTgNiKmAAv6y81nnLNqa+LUf3M/iYW6GhjcxH95Eh2z3xvIfVFuSvF9wnOfb8lK7 CMACTAJyjfzFl0bb/RUKXckJwTGGcZ6xWqWv3lQbORMGEHyb3wBEdIVFEEJgc3Cc CGjL5WrKoqN8zBGUBXIJEkw4LYZPBkbEbpsHix0VPo8rOZoqMdgrDqKcTUmO72m8 mGSiEg6bcePt8Wi9K7e+2gsLKObB+RpFecPr6skoAXQBenSEKbBJyL5BsWmYWsvG 0+0/mHH3t5LYy7beLWXD76ikUtBaRXZ3SpWLtczlzZnW0j9DGG8= -----END CERTIFICATE-----Generated at Sun Apr 6 19:28:21 2025 by rpki-client