$ rpki-client -vvf repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft File: F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft (raw, json) Hash identifier: oW3J25hpviSVb3d7vEmc7dY5Ety8s8ipc/0bKjqfgJk= Subject key identifier: DF:37:1B:4C:77:B7:C0:70:81:E8:8C:E2:09:C2:F2:0F:0B:FF:3A:41 Authority key identifier: F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80 Certificate issuer: /CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880 Certificate serial: 7AFC41A3AA7A9329A54FA250EF42B0B4A1C7257F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft Manifest number: 04C0 Signing time: Tue 08 Apr 2025 07:31:18 +0000 Manifest this update: Tue 08 Apr 2025 07:26:18 +0000 Manifest next update: Fri 11 Apr 2025 12:17:18 +0000 Files and hashes: 1: 3230322e39342e38332e302f32342d3234203d3e203535363732.roa (hash: Ixm7ifW1MV0NJkzYpRAOaXDcBc0UAsgPk2HmJSCGIc4=) 2: F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl (hash: oh4GIK3kGbhDOTePRNTc1S5gkgHog8gKVZ0qRJq0cik=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 12:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:fc:41:a3:aa:7a:93:29:a5:4f:a2:50:ef:42:b0:b4:a1:c7:25:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880 Validity Not Before: Apr 8 07:26:18 2025 GMT Not After : Apr 11 12:17:18 2025 GMT Subject: CN=DF371B4C77B7C07081E88CE209C2F20F0BFF3A41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:40:d7:f8:55:9f:05:f9:56:f5:45:1e:af:70: 83:f4:5a:2b:93:5d:4b:1f:bb:59:40:66:78:df:02: c5:df:2a:d4:f9:87:fd:44:03:03:86:97:80:29:a4: 29:c6:70:ac:45:a8:ab:46:bd:83:c9:50:17:fa:9c: cd:f3:f8:c3:07:11:16:4c:fc:4f:37:a5:b7:97:79: f1:c9:fb:35:45:af:b0:47:71:ff:37:29:ee:c6:24: a5:9f:62:33:0a:4d:2d:20:7f:59:be:97:35:fb:22: e1:bd:c3:f5:00:74:49:be:d0:7f:c7:58:30:bd:d3: 5f:ec:fc:56:35:71:b2:9d:2a:51:3e:24:60:97:c3: 2e:9a:0e:d6:07:ff:45:3c:d6:6d:2b:43:e9:10:90: 77:16:e6:4f:3b:de:79:1e:b5:b1:7b:85:c2:60:4a: 8c:fc:88:5e:ea:2e:aa:38:bb:05:bf:51:e2:37:40: ba:94:6e:3a:3b:df:da:03:95:cf:52:56:3f:17:bd: b3:53:1e:34:0e:e1:92:6b:ec:2f:fb:7b:da:99:83: c4:37:2b:17:f3:bb:19:2e:d2:ff:ab:bf:85:96:23: c1:ad:62:e9:c2:99:44:2c:82:8e:de:a1:17:df:ce: 04:38:04:16:e4:2c:f0:0f:4b:5f:38:0f:24:78:b9: 04:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:37:1B:4C:77:B7:C0:70:81:E8:8C:E2:09:C2:F2:0F:0B:FF:3A:41 X509v3 Authority Key Identifier: keyid:F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:0f:2a:7f:a3:e9:8c:ea:81:a1:76:e2:f8:fb:aa:df:de:07: 21:77:52:b9:02:45:68:99:4a:5e:fc:b3:e6:43:16:6d:d0:dc: 2f:ca:04:ae:93:de:82:a1:34:2f:b4:45:d3:0a:e4:2f:a2:ec: 66:f5:cb:27:97:11:72:c6:35:4c:f5:17:93:64:a5:95:44:2a: 8b:86:85:40:eb:9c:5d:17:a0:db:d8:68:a0:3e:b5:a7:e7:3f: 29:bf:c2:ec:f2:0e:4b:6b:77:f6:06:86:2c:1b:ff:e9:6d:31: 00:45:67:c9:08:47:49:06:2b:0e:22:de:77:8a:af:ea:7f:67: cc:d1:35:21:2c:7e:de:a9:b5:78:b6:1c:e2:48:50:27:7e:eb: 70:02:76:2a:e7:59:b8:26:5c:0e:80:8d:dc:43:c0:a8:b4:ca: be:2c:04:a7:5b:b4:9a:38:3a:d8:0d:75:72:7e:a6:7c:99:b5: b0:97:fa:64:55:fe:a6:7c:c0:dd:ae:78:a9:5a:bf:9d:05:7a: 3f:aa:b1:40:67:07:3d:62:8d:62:63:8d:c3:9d:b8:ad:41:d6: e1:8f:7c:74:0a:b9:99:e9:de:75:13:82:c0:5d:d7:b7:e3:3d: f2:e1:11:65:3f:b1:ed:aa:95:09:50:a9:d3:a4:a9:2d:36:71: 4d:67:0a:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUevxBo6p6kymlT6JQ70KwtKHHJX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4OUNF RDI2QTg4MDAeFw0yNTA0MDgwNzI2MThaFw0yNTA0MTExMjE3MThaMDMxMTAvBgNV BAMTKERGMzcxQjRDNzdCN0MwNzA4MUU4OENFMjA5QzJGMjBGMEJGRjNBNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMQNf4VZ8F+Vb1RR6vcIP0WiuT XUsfu1lAZnjfAsXfKtT5h/1EAwOGl4AppCnGcKxFqKtGvYPJUBf6nM3z+MMHERZM /E83pbeXefHJ+zVFr7BHcf83Ke7GJKWfYjMKTS0gf1m+lzX7IuG9w/UAdEm+0H/H WDC901/s/FY1cbKdKlE+JGCXwy6aDtYH/0U81m0rQ+kQkHcW5k873nketbF7hcJg Soz8iF7qLqo4uwW/UeI3QLqUbjo739oDlc9SVj8XvbNTHjQO4ZJr7C/7e9qZg8Q3 Kxfzuxku0v+rv4WWI8GtYunCmUQsgo7eoRffzgQ4BBbkLPAPS184DyR4uQRZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3zcbTHe3wHCB6IziCcLyDwv/OkEwHwYDVR0j BBgwFoAU8kQXMaOPbwPti/2xTzz4nO0mqIAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OGI0NDFhZC1mMWFhLTQ4ZDMtOWVkYi1iOWE1ZDVjZTliYTgvMC9GMjQ0MTczMUEz OEY2RjAzRUQ4QkZEQjE0RjNDRjg5Q0VEMjZBODgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4OUNFRDI2 QTg4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjhiNDQxYWQtZjFhYS00OGQzLTll ZGItYjlhNWQ1Y2U5YmE4LzAvRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4 OUNFRDI2QTg4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEPKn+j6YzqgaF24vj7qt/eByF3UrkCRWiZ Sl78s+ZDFm3Q3C/KBK6T3oKhNC+0RdMK5C+i7Gb1yyeXEXLGNUz1F5NkpZVEKouG hUDrnF0XoNvYaKA+tafnPym/wuzyDktrd/YGhiwb/+ltMQBFZ8kIR0kGKw4i3neK r+p/Z8zRNSEsft6ptXi2HOJIUCd+63ACdirnWbgmXA6AjdxDwKi0yr4sBKdbtJo4 OtgNdXJ+pnyZtbCX+mRV/qZ8wN2ueKlav50Fej+qsUBnBz1ijWJjjcOduK1B1uGP fHQKuZnp3nUTgsBd17fjPfLhEWU/se2qlQlQqdOkqS02cU1nCnk= -----END CERTIFICATE-----Generated at Tue Apr 8 20:51:19 2025 by rpki-client