$ rpki-client -vvf repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft File: B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft (raw, json) Hash identifier: tFjWveop9SiZmMQ6u4GPDPy3NzgmPTO4hwfO2Kmv3Us= Subject key identifier: 8F:33:EA:18:16:CF:CD:FB:1A:A2:F6:76:21:50:49:4E:1E:1E:D5:CE Authority key identifier: B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94 Certificate issuer: /CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094 Certificate serial: 40022D48F048E6895332E48F09795A73F0ED07E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft Manifest number: 017D Signing time: Sat 19 Apr 2025 21:20:04 +0000 Manifest this update: Sat 19 Apr 2025 21:15:04 +0000 Manifest next update: Tue 22 Apr 2025 23:42:04 +0000 Files and hashes: 1: 3130332e312e35312e302f32342d3234203d3e20313432333532.roa (hash: Lx6mbXqTbsqqqJEaZ6Ptl1cSIXULA4hNI34A7lM8ago=) 2: 3130332e312e35302e302f32342d3234203d3e20313432333532.roa (hash: 13a296YbpXPKiDroOx9RoYtV5Gqcvos+cOx12thufiw=) 3: B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl (hash: 8VEckOMV1Lof3KuhT0+dmnMQAP3TCUxY2aANIshJyRA=) 4: 3130332e312e35302e302f32332d3233203d3e20313432333532.roa (hash: Pk+CfBb09D2NLm+w/mIdTLsk/cAe1V1lpiWgoIeGFHc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 23:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:02:2d:48:f0:48:e6:89:53:32:e4:8f:09:79:5a:73:f0:ed:07:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094 Validity Not Before: Apr 19 21:15:04 2025 GMT Not After : Apr 22 23:42:04 2025 GMT Subject: CN=8F33EA1816CFCDFB1AA2F6762150494E1E1ED5CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5c:6d:46:a4:60:2c:83:16:cb:3a:64:06:f7: c0:e3:95:17:11:b6:00:2a:04:50:9b:ad:5d:61:a1: 9b:11:15:cd:cd:fe:ed:cb:9a:bc:12:67:b0:5a:7b: 75:3b:25:5d:d9:90:4c:a5:44:aa:f8:2e:95:d7:78: 2f:54:e0:68:20:f7:6e:ce:2f:2f:3b:0a:1c:0b:b5: 57:a5:93:9a:51:2f:81:db:87:0d:90:fc:d3:cd:ef: 95:92:53:63:60:2b:31:84:8c:08:f5:a1:6a:45:2f: 29:b9:c3:74:1a:8f:d6:0b:16:e8:09:66:2b:92:8d: 28:77:b3:7d:89:d4:ba:9c:e3:d5:f5:78:ff:be:13: 01:43:d7:ad:44:70:2c:e6:b3:79:1a:74:90:8b:c2: a7:00:0e:33:c1:82:46:d0:ca:45:79:b9:12:41:3a: 12:a3:ca:96:83:99:f7:d2:5b:8a:6e:69:47:d3:2e: a9:08:af:8c:97:64:0c:c1:54:ee:48:99:37:2a:a3: 17:5c:fa:66:2c:8e:19:bd:b9:67:48:c2:a2:28:84: a6:4e:15:90:9d:35:e0:ba:8d:d5:9d:38:34:ff:ae: cc:f5:6e:d6:35:4c:d0:f3:e0:26:d3:d5:7d:bd:38: 45:ea:d2:12:ca:c2:6f:f2:29:d7:c5:bb:de:e4:48: f1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:33:EA:18:16:CF:CD:FB:1A:A2:F6:76:21:50:49:4E:1E:1E:D5:CE X509v3 Authority Key Identifier: keyid:B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:4a:98:ec:10:cf:32:c4:75:d8:75:2a:d1:9c:35:ec:b1:e4: c2:59:d5:90:07:47:65:07:b0:1a:f9:41:be:ad:5d:51:f9:02: 1c:1a:f4:ac:79:98:e2:bb:5b:37:c8:7a:7e:ff:b4:b9:68:b5: de:a5:44:3c:79:77:80:06:50:79:bb:d5:22:a8:78:2d:c4:62: 52:71:85:63:a2:f0:07:0f:6b:da:3d:c5:f7:ae:5f:03:ff:67: 24:4c:55:88:9f:23:43:45:08:3a:d8:9e:2b:ed:1b:61:7d:ff: c3:bd:8a:34:f6:ef:a5:de:2f:87:44:35:30:7f:2f:c7:3a:a0: 98:72:17:54:17:f7:22:72:e1:79:1f:5e:e2:b4:7a:16:f5:c3: 8c:1e:b5:3a:95:ca:aa:54:3a:49:d3:37:ae:d2:40:aa:d8:bf: 68:e5:61:45:0a:43:7b:48:88:dd:3f:10:e0:b5:08:e4:e4:22: b2:f7:43:fd:89:0f:d0:8d:a5:66:21:05:38:40:e7:51:db:ad: 4a:b8:ec:2c:23:6b:c9:c0:fa:5a:95:2b:3a:79:73:47:ba:cc: cc:91:49:7d:1f:c5:c6:17:39:11:a7:42:ed:0f:b1:66:4f:3d: 57:66:e1:be:fe:ed:79:77:ad:bb:60:02:a0:bf:f8:94:43:be: c8:c3:d4:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQAItSPBI5olTMuSPCXlac/DtB+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJB MDk5MzA5NDAeFw0yNTA0MTkyMTE1MDRaFw0yNTA0MjIyMzQyMDRaMDMxMTAvBgNV BAMTKDhGMzNFQTE4MTZDRkNERkIxQUEyRjY3NjIxNTA0OTRFMUUxRUQ1Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+XG1GpGAsgxbLOmQG98DjlRcR tgAqBFCbrV1hoZsRFc3N/u3LmrwSZ7Bae3U7JV3ZkEylRKr4LpXXeC9U4Ggg927O Ly87ChwLtVelk5pRL4Hbhw2Q/NPN75WSU2NgKzGEjAj1oWpFLym5w3Qaj9YLFugJ ZiuSjSh3s32J1Lqc49X1eP++EwFD161EcCzms3kadJCLwqcADjPBgkbQykV5uRJB OhKjypaDmffSW4puaUfTLqkIr4yXZAzBVO5ImTcqoxdc+mYsjhm9uWdIwqIohKZO FZCdNeC6jdWdODT/rsz1btY1TNDz4CbT1X29OEXq0hLKwm/yKdfFu97kSPFtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjzPqGBbPzfsaovZ2IVBJTh4e1c4wHwYDVR0j BBgwFoAUtINF9/n7TxT//ovFt0aF0qCZMJQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjUyYmY5Yy02MzRiLTQwYjktYWMwYy1hODdiNDdkNTlmOTEvMC9CNDgzNDVGN0Y5 RkI0RjE0RkZGRThCQzVCNzQ2ODVEMkEwOTkzMDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJBMDk5 MzA5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY1MmJmOWMtNjM0Yi00MGI5LWFj MGMtYTg3YjQ3ZDU5ZjkxLzAvQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1 RDJBMDk5MzA5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFlKmOwQzzLEddh1KtGcNeyx5MJZ1ZAHR2UH sBr5Qb6tXVH5Ahwa9Kx5mOK7WzfIen7/tLlotd6lRDx5d4AGUHm71SKoeC3EYlJx hWOi8AcPa9o9xfeuXwP/ZyRMVYifI0NFCDrYnivtG2F9/8O9ijT276XeL4dENTB/ L8c6oJhyF1QX9yJy4XkfXuK0ehb1w4wetTqVyqpUOknTN67SQKrYv2jlYUUKQ3tI iN0/EOC1COTkIrL3Q/2JD9CNpWYhBThA51HbrUq47Cwja8nA+lqVKzp5c0e6zMyR SX0fxcYXORGnQu0PsWZPPVdm4b7+7Xl3rbtgAqC/+JRDvsjD1Hk= -----END CERTIFICATE-----Generated at Sun Apr 20 04:14:53 2025 by rpki-client