$ rpki-client -vvf repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft File: 331490A5F62E7F3FD55E137CB052AC340E403BDF.mft (raw, json) Hash identifier: rPpHl+0u1/gEe54ocY4YRfuu91uO9ReA7Zs2lFfIKC0= Subject key identifier: 91:72:09:1B:D1:67:D3:59:A3:3A:D9:E7:44:3D:33:C5:D7:5C:FA:7E Authority key identifier: 33:14:90:A5:F6:2E:7F:3F:D5:5E:13:7C:B0:52:AC:34:0E:40:3B:DF Certificate issuer: /CN=331490A5F62E7F3FD55E137CB052AC340E403BDF Certificate serial: 0F113945E6E820492E7D53E717C7444D37D1B9A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft Manifest number: 0151 Signing time: Tue 08 Apr 2025 20:01:28 +0000 Manifest this update: Tue 08 Apr 2025 19:56:28 +0000 Manifest next update: Sat 12 Apr 2025 06:34:28 +0000 Files and hashes: 1: 331490A5F62E7F3FD55E137CB052AC340E403BDF.crl (hash: rC1rxQQo9lRoiuzC+4Ym3Q8cdO7M3oxhguTZv/u6e9k=) 2: 3130332e3139322e3137342e302f32342d3234203d3e20313530353439.roa (hash: I/e8pz2HwtXx0PhrGgambRJs/dGIlkUlFDHx6iNzq9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.crl rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:11:39:45:e6:e8:20:49:2e:7d:53:e7:17:c7:44:4d:37:d1:b9:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331490A5F62E7F3FD55E137CB052AC340E403BDF Validity Not Before: Apr 8 19:56:28 2025 GMT Not After : Apr 12 06:34:28 2025 GMT Subject: CN=9172091BD167D359A33AD9E7443D33C5D75CFA7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a6:1c:10:16:38:c4:2a:f4:80:09:88:75:9d: 8d:7c:2d:41:e7:e1:b1:ae:f7:cb:11:27:34:96:7d: 64:43:2a:ba:1c:10:53:57:28:6f:e6:a0:2d:d3:20: 8b:04:98:27:cf:d7:e3:21:a1:c1:28:6b:45:36:81: cf:51:b8:6e:d8:9d:99:64:39:02:b4:f4:48:9a:9a: c3:e1:60:1f:91:d7:2c:ea:52:29:c1:b0:4d:ee:fe: 6c:b3:1e:79:a5:08:ea:64:a3:81:23:9a:1b:11:62: 36:7d:a7:fa:8f:fa:f2:4f:a9:c0:cf:9d:4b:f8:26: 8b:7d:6e:be:75:9e:e8:ce:9f:77:0e:4a:0a:4a:3d: ba:a5:8a:0e:37:f7:53:4b:67:f6:99:a9:bc:d4:8c: 5c:5b:b3:ac:ce:95:94:f9:96:6c:27:2d:88:dd:44: c3:b8:9c:aa:89:1e:7d:f2:02:4b:46:22:f4:e5:51: 1c:87:1d:b0:49:c6:0c:8e:36:88:39:b7:5e:f9:e0: bb:e5:f7:ec:22:73:4d:60:05:6a:81:b9:e6:04:1c: f6:32:73:86:28:03:66:34:a9:ab:7d:2e:e2:46:af: 82:22:35:67:43:11:3c:33:4a:2d:4c:f7:7a:58:c5: da:b2:fd:76:7b:5f:a4:4f:26:02:47:98:69:f4:41: 0e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:72:09:1B:D1:67:D3:59:A3:3A:D9:E7:44:3D:33:C5:D7:5C:FA:7E X509v3 Authority Key Identifier: keyid:33:14:90:A5:F6:2E:7F:3F:D5:5E:13:7C:B0:52:AC:34:0E:40:3B:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:da:e4:21:d2:46:28:f1:de:8d:40:16:8e:e9:16:48:d3:10: 3a:df:f3:c8:32:f9:4f:ed:4d:a7:29:0d:f7:8a:3d:eb:d6:dc: 88:d6:0a:c5:91:30:b7:ee:2a:b0:5f:91:f5:63:a7:07:41:e3: 22:38:09:53:07:d3:f9:00:a4:e5:51:d5:95:69:a9:26:7b:3b: 71:0e:bc:3d:84:2a:00:df:3d:44:da:c1:08:c5:d7:e7:44:13: db:8a:bd:7d:4f:d0:a6:bd:6c:79:c8:6f:a4:15:e9:58:44:7b: 12:52:7e:3a:87:bd:2e:01:3f:14:d1:43:d8:d2:07:eb:7d:43: cf:ab:b0:13:11:aa:2f:b6:ab:37:fa:d4:4a:d4:40:c4:ae:7c: ec:2a:8d:9e:4e:50:a9:a7:8d:3c:ab:ec:a1:fe:ad:31:d1:9e: f7:f1:e1:68:8a:bb:e5:e6:ce:f1:b0:15:20:8c:21:d3:77:ff: a8:1e:8f:ff:51:ce:88:fc:44:bb:ff:4a:0c:d9:ca:95:fc:4d: ab:5c:f4:82:ae:b3:4b:5b:d7:0e:c9:b5:9e:6c:70:0c:e8:b6: 83:ab:0c:1b:d7:ac:e7:f1:98:bd:9e:c4:2c:75:1c:dc:f4:93: a8:33:c9:88:77:0b:30:6d:49:e2:55:26:97:db:2c:5b:2a:67: 53:ae:30:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDxE5ReboIEkufVPnF8dETTfRuagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFDMzQw RTQwM0JERjAeFw0yNTA0MDgxOTU2MjhaFw0yNTA0MTIwNjM0MjhaMDMxMTAvBgNV BAMTKDkxNzIwOTFCRDE2N0QzNTlBMzNBRDlFNzQ0M0QzM0M1RDc1Q0ZBN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiphwQFjjEKvSACYh1nY18LUHn 4bGu98sRJzSWfWRDKrocEFNXKG/moC3TIIsEmCfP1+MhocEoa0U2gc9RuG7YnZlk OQK09EiamsPhYB+R1yzqUinBsE3u/myzHnmlCOpko4EjmhsRYjZ9p/qP+vJPqcDP nUv4Jot9br51nujOn3cOSgpKPbqlig4391NLZ/aZqbzUjFxbs6zOlZT5lmwnLYjd RMO4nKqJHn3yAktGIvTlURyHHbBJxgyONog5t1754Lvl9+wic01gBWqBueYEHPYy c4YoA2Y0qat9LuJGr4IiNWdDETwzSi1M93pYxdqy/XZ7X6RPJgJHmGn0QQ6bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkXIJG9Fn01mjOtnnRD0zxddc+n4wHwYDVR0j BBgwFoAUMxSQpfYufz/VXhN8sFKsNA5AO98wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGRhZGNkMC1mMWE5LTQ4ZTQtYTJjNS1kZTE4MThiZmZlNDMvMC8zMzE0OTBBNUY2 MkU3RjNGRDU1RTEzN0NCMDUyQUMzNDBFNDAzQkRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFDMzQwRTQw M0JERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRkYWRjZDAtZjFhOS00OGU0LWEy YzUtZGUxODE4YmZmZTQzLzAvMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFD MzQwRTQwM0JERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETa5CHSRijx3o1AFo7pFkjTEDrf88gy+U/t TacpDfeKPevW3IjWCsWRMLfuKrBfkfVjpwdB4yI4CVMH0/kApOVR1ZVpqSZ7O3EO vD2EKgDfPUTawQjF1+dEE9uKvX1P0Ka9bHnIb6QV6VhEexJSfjqHvS4BPxTRQ9jS B+t9Q8+rsBMRqi+2qzf61ErUQMSufOwqjZ5OUKmnjTyr7KH+rTHRnvfx4WiKu+Xm zvGwFSCMIdN3/6gej/9Rzoj8RLv/SgzZypX8Tatc9IKus0tb1w7JtZ5scAzotoOr DBvXrOfxmL2exCx1HNz0k6gzyYh3CzBtSeJVJpfbLFsqZ1OuMKA= -----END CERTIFICATE-----Generated at Wed Apr 9 09:09:14 2025 by rpki-client