$ rpki-client -vvf repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft File: A708865394D992A01D1736F0AB500E24889B7F34.mft (raw, json) Hash identifier: RuJ0qcWWjOEMYgwsbDF4Z/uTt5DxtjUvDK6DckyhAbs= Subject key identifier: 2F:03:A9:FC:D7:0A:53:94:A4:CB:39:32:A6:A2:E0:01:F2:94:BB:61 Authority key identifier: A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 Certificate issuer: /CN=A708865394D992A01D1736F0AB500E24889B7F34 Certificate serial: 58D3F99D58D51DEB029F7FF206488AB4FC0739DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft Manifest number: 011A Signing time: Thu 17 Apr 2025 08:10:46 +0000 Manifest this update: Thu 17 Apr 2025 08:05:46 +0000 Manifest next update: Sun 20 Apr 2025 08:10:46 +0000 Files and hashes: 1: A708865394D992A01D1736F0AB500E24889B7F34.crl (hash: 8r63ME9A0ATY+dqmEeOM5U9jtU0PSq9Cefs0fxUjoNs=) 2: 3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa (hash: rgZhMMMnE/8X/ajx3/StMU1scrnbaZrzmmCgG9/im6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 08:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:d3:f9:9d:58:d5:1d:eb:02:9f:7f:f2:06:48:8a:b4:fc:07:39:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A708865394D992A01D1736F0AB500E24889B7F34 Validity Not Before: Apr 17 08:05:46 2025 GMT Not After : Apr 20 08:10:46 2025 GMT Subject: CN=2F03A9FCD70A5394A4CB3932A6A2E001F294BB61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:71:3b:d3:ed:d8:98:80:fa:79:29:47:20: b9:b3:e8:5b:e5:1a:0e:db:79:87:bd:57:dc:11:13: 69:9a:21:c7:9b:a1:df:bf:09:ed:bb:0c:2c:7d:86: 11:3d:a3:3f:f4:ec:ca:20:10:e0:b3:64:20:e5:0e: 2b:2c:a2:ea:07:55:8c:bb:e2:ef:e0:db:ea:3f:7e: 8b:77:e1:7c:64:aa:d6:a6:3e:08:93:1d:1e:e8:73: 64:6a:d2:be:0d:30:88:1e:17:48:32:60:e7:e6:d1: 31:e4:21:4a:cd:77:19:44:da:b6:d4:80:c1:bc:20: ee:68:13:7a:19:0b:60:45:87:d9:f0:14:50:eb:27: 4e:1d:56:05:7a:31:9d:23:80:7d:17:4f:6c:96:1c: a2:fd:3e:9a:84:6b:23:9c:83:84:3c:8d:a9:51:ac: a2:b8:ab:d9:56:16:39:9b:39:ff:bb:d2:ac:3a:80: 45:21:64:dc:6e:57:80:1e:6a:6e:0a:8b:0d:d7:fc: be:6b:5e:99:f3:7b:75:2f:a4:df:8d:bd:33:b5:fe: 57:bd:3b:60:c5:28:ff:95:b1:99:ba:fd:b4:cf:d6: a1:51:9a:53:80:84:5a:0e:10:e0:17:2e:b2:b9:30: 4e:c7:11:7b:c0:0f:d8:bd:53:cc:57:46:8e:c9:4d: 6d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:03:A9:FC:D7:0A:53:94:A4:CB:39:32:A6:A2:E0:01:F2:94:BB:61 X509v3 Authority Key Identifier: keyid:A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:17:a5:62:61:56:fb:64:f1:9d:6d:be:34:92:8e:c9:84:8f: f0:bc:95:f7:9a:fb:26:db:3f:73:01:12:a7:5e:b0:0b:15:18: 92:bc:e0:00:8d:78:54:72:91:c4:39:bc:4e:ba:6a:55:09:11: 16:73:6a:fe:fd:52:75:e1:31:00:70:8a:32:a2:21:0e:a8:28: 76:17:e6:ec:26:90:1d:ef:67:77:2f:1f:2f:55:02:3f:39:59: 48:00:5a:4b:ce:5d:cd:eb:7c:cd:d3:ae:cd:76:69:a9:82:24: ee:4f:e8:62:d1:67:a7:24:34:d1:f5:e3:e7:2d:6c:94:17:e5: 15:75:4c:ae:5d:bf:2a:f8:3b:a7:f8:35:b0:28:cf:a5:43:27: 8f:7b:58:4e:9c:ed:45:d9:18:44:56:ae:40:93:b5:e5:4f:62: f2:3a:e1:eb:a2:49:df:51:f7:61:4f:e9:f8:f8:31:9a:70:65: b2:6b:db:ce:01:77:01:21:0c:eb:a9:4c:90:8f:8e:3f:6d:c7: ff:23:4f:37:f0:32:58:7c:20:2f:25:f9:a6:f1:eb:98:4e:a6: d2:08:4a:11:10:14:c8:ad:18:73:af:58:5b:58:a3:45:a8:77: 33:9a:44:94:5e:8a:04:51:0b:8e:ed:1d:11:6f:1a:06:df:5b: 67:52:dc:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWNP5nVjVHesCn3/yBkiKtPwHOd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4 ODlCN0YzNDAeFw0yNTA0MTcwODA1NDZaFw0yNTA0MjAwODEwNDZaMDMxMTAvBgNV BAMTKDJGMDNBOUZDRDcwQTUzOTRBNENCMzkzMkE2QTJFMDAxRjI5NEJCNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+WHE70+3YmID6eSlHILmz6Fvl Gg7beYe9V9wRE2maIcebod+/Ce27DCx9hhE9oz/07MogEOCzZCDlDissouoHVYy7 4u/g2+o/fot34XxkqtamPgiTHR7oc2Rq0r4NMIgeF0gyYOfm0THkIUrNdxlE2rbU gMG8IO5oE3oZC2BFh9nwFFDrJ04dVgV6MZ0jgH0XT2yWHKL9PpqEayOcg4Q8jalR rKK4q9lWFjmbOf+70qw6gEUhZNxuV4Aeam4Kiw3X/L5rXpnze3UvpN+NvTO1/le9 O2DFKP+VsZm6/bTP1qFRmlOAhFoOEOAXLrK5ME7HEXvAD9i9U8xXRo7JTW3tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULwOp/NcKU5SkyzkypqLgAfKUu2EwHwYDVR0j BBgwFoAUpwiGU5TZkqAdFzbwq1AOJIibfzQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjBjN2EzNy01ZDE5LTRjNWMtOTMwMS1hMTRhN2YxODVjOTIvMC9BNzA4ODY1Mzk0 RDk5MkEwMUQxNzM2RjBBQjUwMEUyNDg4OUI3RjM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4ODlC N0YzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYwYzdhMzctNWQxOS00YzVjLTkz MDEtYTE0YTdmMTg1YzkyLzAvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBF MjQ4ODlCN0YzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0XpWJhVvtk8Z1tvjSSjsmEj/C8lfea+ybb P3MBEqdesAsVGJK84ACNeFRykcQ5vE66alUJERZzav79UnXhMQBwijKiIQ6oKHYX 5uwmkB3vZ3cvHy9VAj85WUgAWkvOXc3rfM3Trs12aamCJO5P6GLRZ6ckNNH14+ct bJQX5RV1TK5dvyr4O6f4NbAoz6VDJ497WE6c7UXZGERWrkCTteVPYvI64euiSd9R 92FP6fj4MZpwZbJr284BdwEhDOupTJCPjj9tx/8jTzfwMlh8IC8l+abx65hOptII ShEQFMitGHOvWFtYo0WodzOaRJReigRRC47tHRFvGgbfW2dS3Lk= -----END CERTIFICATE-----Generated at Thu Apr 17 21:14:49 2025 by rpki-client