$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft File: 639473CD2054A78B39F9AC7A83232462F00E71AA.mft (raw, json) Hash identifier: MffA7uYCQi8lyBbdN9MP8q5/mEQISS8Px2Wd5c8NRBg= Subject key identifier: 11:2E:A6:1A:D4:BB:BC:A5:5F:C1:A7:E6:E4:B7:4A:B9:A5:D6:D1:06 Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA Certificate serial: 24D4926C4E61EB4864640EC92D94B9110C09DE5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft Manifest number: 08FE Signing time: Thu 03 Apr 2025 19:11:50 +0000 Manifest this update: Thu 03 Apr 2025 19:06:50 +0000 Manifest next update: Mon 07 Apr 2025 02:29:50 +0000 Files and hashes: 1: 639473CD2054A78B39F9AC7A83232462F00E71AA.crl (hash: oGwlMns9UXeHMePcIdhJbtp+My7uXD7Ueg7QpQr+7No=) 2: AS142395.roa (hash: vW3zaDs4B/0B4dgk4xj07ZGjVrPmOv0iMJHfXVSfu34=) 3: AS48.roa (hash: 3jc2QH57PJ+9Y1yfzdofUCeBl6n6kaY9ztEnCFZkFpE=) 4: AS59282.roa (hash: rn/foQIRZPZaJbefF4yS1h7Rqlzl8RA4UhyiMvZtbyI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 02:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:d4:92:6c:4e:61:eb:48:64:64:0e:c9:2d:94:b9:11:0c:09:de:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA Validity Not Before: Apr 3 19:06:50 2025 GMT Not After : Apr 7 02:29:50 2025 GMT Subject: CN=112EA61AD4BBBCA55FC1A7E6E4B74AB9A5D6D106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ee:15:96:4c:3b:9d:ef:c1:52:3a:75:e4:20: c2:29:ba:80:af:83:7e:fd:b7:f7:ef:4a:a5:9d:0e: 8e:9c:4a:35:54:34:d0:a2:45:cd:ce:71:bc:de:5c: c9:c1:a7:46:ed:04:55:d6:3d:64:fc:0c:1e:a9:46: e7:26:1d:ed:ce:88:9d:46:31:19:19:08:ee:9b:fa: cb:48:ed:bf:db:6c:6d:9a:16:d4:f1:0a:58:72:28: 2e:14:10:81:02:6b:e2:52:58:dc:5d:16:7e:e5:99: 37:a4:c4:c5:a6:f8:c2:d3:ab:3b:97:43:92:95:52: 50:bc:19:3e:8d:b1:f7:ff:72:ca:ea:20:cb:50:0f: bf:d7:1d:21:91:49:1c:80:18:fe:03:3e:82:2e:4d: 1e:0c:5f:ba:5b:24:10:93:d5:c5:b7:85:37:c7:4b: 82:47:37:32:e2:03:30:a6:94:de:6e:3e:d9:00:48: 16:49:c9:61:f3:14:64:d3:a6:b6:3f:ad:68:c3:c9: f8:fe:ba:9d:c4:1e:80:59:a5:a5:1b:7a:83:18:25: 3d:ec:87:29:2c:7a:e0:75:2c:d3:e7:f0:c8:7d:d7: 44:3b:b5:ef:b7:c8:e3:39:e8:e4:2c:04:0a:08:06: 60:57:9b:df:3b:74:52:c1:5f:30:95:18:d2:95:b4: aa:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:2E:A6:1A:D4:BB:BC:A5:5F:C1:A7:E6:E4:B7:4A:B9:A5:D6:D1:06 X509v3 Authority Key Identifier: keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:be:fd:54:14:f3:e7:87:9e:3e:32:c1:07:3d:48:5e:3c:0d: e0:f6:0d:d8:43:78:1f:3c:7c:ac:23:4b:fc:2b:9b:ad:c8:14: 52:fb:b3:5f:16:fd:a9:d3:8a:9d:da:66:2b:dd:31:cb:79:74: ba:21:6f:2f:f5:c1:ce:9c:1b:9a:33:a5:d7:e4:e7:f8:27:d2: e2:8d:34:f5:d4:29:f2:19:7f:f1:1a:b4:60:78:09:36:4a:60: 8c:9a:78:9f:07:e2:c1:b7:b4:e7:87:9b:6b:c7:7c:52:8a:8c: 53:2f:ca:e5:db:b3:5e:90:a2:1b:f6:4a:20:f5:4c:92:9a:18: 6a:ab:b8:8f:13:aa:58:62:94:1f:a7:f6:39:3b:6b:a3:89:a0: 25:37:a1:dd:d3:63:67:80:b1:db:63:c2:05:59:22:14:26:63: 5e:0e:61:f2:70:a8:71:21:42:18:84:50:8f:56:53:2a:8e:c3: 60:03:9f:ca:8b:af:ad:ff:da:b5:90:64:87:81:6b:48:d6:3b: d5:15:ad:e2:38:94:a3:aa:8a:56:2d:b9:f7:28:d1:9a:ad:87: 5d:2e:98:1d:cb:b4:a9:fb:b4:1e:e8:af:03:d3:f6:3a:ca:e8: e5:57:38:f0:ae:96:7f:ef:10:19:bf:91:e1:43:f0:3d:36:98: e6:82:d0:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJNSSbE5h60hkZA7JLZS5EQwJ3lwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG MDBFNzFBQTAeFw0yNTA0MDMxOTA2NTBaFw0yNTA0MDcwMjI5NTBaMDMxMTAvBgNV BAMTKDExMkVBNjFBRDRCQkJDQTU1RkMxQTdFNkU0Qjc0QUI5QTVENkQxMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC87hWWTDud78FSOnXkIMIpuoCv g379t/fvSqWdDo6cSjVUNNCiRc3OcbzeXMnBp0btBFXWPWT8DB6pRucmHe3OiJ1G MRkZCO6b+stI7b/bbG2aFtTxClhyKC4UEIECa+JSWNxdFn7lmTekxMWm+MLTqzuX Q5KVUlC8GT6Nsff/csrqIMtQD7/XHSGRSRyAGP4DPoIuTR4MX7pbJBCT1cW3hTfH S4JHNzLiAzCmlN5uPtkASBZJyWHzFGTTprY/rWjDyfj+up3EHoBZpaUbeoMYJT3s hykseuB1LNPn8Mh910Q7te+3yOM56OQsBAoIBmBXm987dFLBXzCVGNKVtKr7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUES6mGtS7vKVfwafm5LdKuaXW0QYwHwYDVR0j BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF NzFBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg0NjRhNWItMmZjZS00N2RhLTgw NDctNjhkMmJkNjNjOWMzLzAvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0 NjJGMDBFNzFBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2+/VQU8+eHnj4ywQc9SF48DeD2DdhDeB88 fKwjS/wrm63IFFL7s18W/anTip3aZivdMct5dLohby/1wc6cG5ozpdfk5/gn0uKN NPXUKfIZf/EatGB4CTZKYIyaeJ8H4sG3tOeHm2vHfFKKjFMvyuXbs16Qohv2SiD1 TJKaGGqruI8TqlhilB+n9jk7a6OJoCU3od3TY2eAsdtjwgVZIhQmY14OYfJwqHEh QhiEUI9WUyqOw2ADn8qLr63/2rWQZIeBa0jWO9UVreI4lKOqilYtufco0Zqth10u mB3LtKn7tB7orwPT9jrK6OVXOPCuln/vEBm/keFD8D02mOaC0Pc= -----END CERTIFICATE-----Generated at Sat Apr 5 16:37:57 2025 by rpki-client