$ rpki-client -vvf repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft File: 020EA2304929066809CA6F723574798639D77438.mft (raw, json) Hash identifier: 0FW8/mmcEJLq5AN/hEViviV1ALFTSWyJcJXr07zpm64= Subject key identifier: 16:2B:97:85:66:49:97:CD:94:84:E4:1D:04:87:CD:5B:62:38:AC:C1 Authority key identifier: 02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 Certificate issuer: /CN=020EA2304929066809CA6F723574798639D77438 Certificate serial: 145378B86793311DEA2CCE82E6BB9C5E7686CB83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft Manifest number: 8F Signing time: Mon 07 Apr 2025 18:20:38 +0000 Manifest this update: Mon 07 Apr 2025 18:15:38 +0000 Manifest next update: Fri 11 Apr 2025 01:58:38 +0000 Files and hashes: 1: 3136302e32352e35352e302f32342d3234203d3e20313533303630.roa (hash: e1/ZISiUaEqFgEoOZNhif4u64Oi3EdH2IOJ0spV1FKE=) 2: 3136302e32352e35342e302f32342d3234203d3e20313533303630.roa (hash: vKG2Q2FQRs4DS7NN4/lYH+GoEGCznEIbbOzchLmAsO4=) 3: 020EA2304929066809CA6F723574798639D77438.crl (hash: X3jYy9b3YE2oRrLfICpS5mZiYjzqA5QgHF48Kh3GsJg=) 4: 3136302e32352e35342e302f32332d3233203d3e20313533303630.roa (hash: xGNAaG0xNMk64EfdvvCGeHAonw6BrwsqvBD5BwQLiBI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:53:78:b8:67:93:31:1d:ea:2c:ce:82:e6:bb:9c:5e:76:86:cb:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020EA2304929066809CA6F723574798639D77438 Validity Not Before: Apr 7 18:15:38 2025 GMT Not After : Apr 11 01:58:38 2025 GMT Subject: CN=162B9785664997CD9484E41D0487CD5B6238ACC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f1:2e:0e:dc:f2:b6:70:e7:d9:84:79:c6:86: f2:4b:25:e3:dd:b8:11:8e:2d:28:36:a1:54:ad:c7: e8:34:ba:d6:fb:55:a8:1e:f5:64:88:d7:a2:a3:25: 68:7f:1c:b4:47:56:e0:b4:32:18:f6:02:d2:c1:f4: 45:6f:83:f0:19:32:70:e2:f7:74:26:1f:53:a6:58: 70:3b:92:7c:64:ba:4c:5e:25:ee:5b:38:26:bc:d8: 1d:66:ba:87:0e:36:c5:88:e2:a1:86:ea:7f:1f:c2: 91:ca:af:4b:a5:d4:e6:15:de:40:9c:81:e7:5b:e2: 92:59:6e:57:b0:e5:50:30:c6:8f:63:24:c0:4f:43: 51:eb:77:88:2f:f3:52:18:57:e1:19:e3:0e:65:f6: 47:fa:1d:09:04:1a:f5:27:4d:5b:ac:b9:6c:a2:17: fe:07:b2:4c:bf:fe:03:c7:29:ae:4e:dc:3b:3b:3f: b5:dc:10:4e:b4:3e:79:9a:12:d2:ff:a3:48:6e:a8: 74:2b:cc:c6:7b:b1:25:15:99:d4:fc:f0:ea:d9:2e: 32:5c:a5:de:f7:1a:65:4a:c1:0f:8b:3f:93:4c:cb: ed:3c:d2:13:bf:1a:b6:10:c6:4a:0c:95:ff:cf:90: 2f:15:1f:ee:e0:05:b2:ea:12:2b:60:3c:5e:69:26: 30:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2B:97:85:66:49:97:CD:94:84:E4:1D:04:87:CD:5B:62:38:AC:C1 X509v3 Authority Key Identifier: keyid:02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:84:f0:db:5a:d5:d6:b5:93:36:d2:40:7b:6d:f9:25:45:a6: d6:c6:c9:a4:0b:3b:14:4a:18:2d:4a:06:c3:99:04:78:50:0d: 30:75:ae:fa:4c:db:c4:9e:9b:ee:f9:36:19:90:46:df:fd:19: aa:97:7c:b5:34:78:5f:c6:83:2e:16:91:00:ee:02:37:2d:6b: 1a:20:1f:1e:0d:05:c3:4c:e5:90:cc:24:81:75:09:5e:0c:9e: cd:01:1d:cd:a6:e2:ef:9e:04:3b:d1:4d:c5:7b:fa:c6:bd:a9: eb:36:51:93:5d:b2:37:29:b8:6d:1d:8a:40:19:c5:6b:e3:6f: 06:ef:53:ff:f6:03:4e:e3:96:f0:f1:ad:89:e7:26:b8:94:e1: 07:a9:7a:49:df:33:0d:d2:0b:46:84:60:fd:f2:89:29:8a:9b: ab:8f:37:b7:bb:dc:a0:d1:79:f2:30:77:4c:a1:4e:a5:bb:cd: a9:fd:6d:df:06:79:0e:be:01:74:8a:66:36:a1:ca:7d:da:57: 1f:49:bb:87:36:97:58:0c:5a:05:8b:76:09:e7:30:d9:da:c4: a4:4b:fa:14:f6:f5:7e:21:40:57:e8:15:d0:a2:c1:e4:5b:e5: 41:fc:41:eb:e8:df:80:a7:ba:32:2b:9a:0d:98:43:57:91:e8: 23:2a:64:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFFN4uGeTMR3qLM6C5rucXnaGy4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5ODYz OUQ3NzQzODAeFw0yNTA0MDcxODE1MzhaFw0yNTA0MTEwMTU4MzhaMDMxMTAvBgNV BAMTKDE2MkI5Nzg1NjY0OTk3Q0Q5NDg0RTQxRDA0ODdDRDVCNjIzOEFDQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj8S4O3PK2cOfZhHnGhvJLJePd uBGOLSg2oVStx+g0utb7Vage9WSI16KjJWh/HLRHVuC0Mhj2AtLB9EVvg/AZMnDi 93QmH1OmWHA7knxkukxeJe5bOCa82B1muocONsWI4qGG6n8fwpHKr0ul1OYV3kCc gedb4pJZblew5VAwxo9jJMBPQ1Hrd4gv81IYV+EZ4w5l9kf6HQkEGvUnTVusuWyi F/4Hsky//gPHKa5O3Ds7P7XcEE60PnmaEtL/o0huqHQrzMZ7sSUVmdT88OrZLjJc pd73GmVKwQ+LP5NMy+080hO/GrYQxkoMlf/PkC8VH+7gBbLqEitgPF5pJjCHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFiuXhWZJl82UhOQdBIfNW2I4rMEwHwYDVR0j BBgwFoAUAg6iMEkpBmgJym9yNXR5hjnXdDgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWEyNmExMC01OGU4LTQzYzctOTQ3ZS03MjIxNzNkNjY2MTQvMC8wMjBFQTIzMDQ5 MjkwNjY4MDlDQTZGNzIzNTc0Nzk4NjM5RDc3NDM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5ODYzOUQ3 NzQzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVhMjZhMTAtNThlOC00M2M3LTk0 N2UtNzIyMTczZDY2NjE0LzAvMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5 ODYzOUQ3NzQzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmE8Nta1da1kzbSQHtt+SVFptbGyaQLOxRK GC1KBsOZBHhQDTB1rvpM28Sem+75NhmQRt/9GaqXfLU0eF/Ggy4WkQDuAjctaxog Hx4NBcNM5ZDMJIF1CV4Mns0BHc2m4u+eBDvRTcV7+sa9qes2UZNdsjcpuG0dikAZ xWvjbwbvU//2A07jlvDxrYnnJriU4QepeknfMw3SC0aEYP3yiSmKm6uPN7e73KDR efIwd0yhTqW7zan9bd8GeQ6+AXSKZjahyn3aVx9Ju4c2l1gMWgWLdgnnMNnaxKRL +hT29X4hQFfoFdCiweRb5UH8Qevo34CnujIrmg2YQ1eR6CMqZDQ= -----END CERTIFICATE-----Generated at Mon Apr 7 21:03:52 2025 by rpki-client