$ rpki-client -vvf repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft File: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft (raw, json) Hash identifier: N9ztuIZZiCYp/NDEYvIT2+t0SWCEcHjFWzJ+gTpQ+5A= Subject key identifier: 68:FF:E1:AF:D6:05:C9:43:90:48:DF:34:2C:41:E8:39:58:7D:75:29 Authority key identifier: 39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 Certificate issuer: /CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Certificate serial: 1F3E51CB36405E731BC5AA152747C7083F824F70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft Manifest number: 02BC Signing time: Thu 03 Apr 2025 15:40:47 +0000 Manifest this update: Thu 03 Apr 2025 15:35:47 +0000 Manifest next update: Sun 06 Apr 2025 23:40:47 +0000 Files and hashes: 1: 323030313a6466313a383530303a3a2f34382d3438203d3e20313336313131.roa (hash: XbIXaBlgITySOhG/uspxxWnRxeiDl4kKWER/oYyIcJ4=) 2: 399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl (hash: V5S/tAqEyIccz0qYn3MskLlVjLs4d1iOv24prldrGGY=) 3: 3130332e39342e3231322e302f32342d3234203d3e20313336313131.roa (hash: xGtojE5xQ38ofrHeox7psZGSkp6l9QQja9HVSx7iji8=) 4: 3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (hash: hDB00TLneDpVkLNbe7aAfk3b6UUvF3I8dBjAf/SLFFI=) 5: 3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (hash: 8WaehvbTOcF3pzR4s59v/gds3hIUxmrMCC7s3FSug0w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 23:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:3e:51:cb:36:40:5e:73:1b:c5:aa:15:27:47:c7:08:3f:82:4f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Validity Not Before: Apr 3 15:35:47 2025 GMT Not After : Apr 6 23:40:47 2025 GMT Subject: CN=68FFE1AFD605C9439048DF342C41E839587D7529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2a:d9:c0:a1:86:f8:71:b2:a6:da:36:35:7f: 05:bc:57:b5:a3:83:b8:71:5b:79:09:d0:31:f9:3b: a8:fd:24:b7:cd:e6:8f:5d:a6:c2:0a:5c:2f:77:3a: 01:c9:a8:22:b7:d5:f4:11:36:f9:8b:94:f9:d9:70: 5c:e8:3d:23:08:3a:fb:a2:65:65:d1:9c:d1:83:31: 2b:36:61:57:ca:40:f5:89:4b:2d:94:5c:18:aa:c3: 8d:7c:79:b8:dd:2e:e5:87:37:f6:7c:df:6a:56:e1: 36:be:18:58:56:2e:fc:6d:74:ed:d0:33:1c:35:e5: 2e:1c:e6:04:0b:ee:fa:b5:0f:72:18:4a:31:59:d8: d2:8d:3f:da:36:f3:7e:cf:c9:ce:ff:4f:a8:8d:4e: 5d:e0:0a:3e:c9:fc:1d:47:f2:cd:a2:e8:3f:5d:26: 55:b9:7d:12:cb:55:0e:e1:c4:2c:7e:7f:99:c8:53: 25:6d:07:6d:be:e6:5d:8f:db:44:a8:8e:09:09:5d: 76:eb:99:c8:51:c7:fc:82:41:e2:bc:df:96:db:e3: 0c:10:fe:46:69:4e:7f:de:b4:59:74:df:25:09:b5: 09:eb:06:31:5f:f9:86:fc:f1:2f:ba:79:f0:d2:9c: c8:d5:b1:d6:9f:25:6e:4e:e1:e0:45:bb:54:e5:41: f2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FF:E1:AF:D6:05:C9:43:90:48:DF:34:2C:41:E8:39:58:7D:75:29 X509v3 Authority Key Identifier: keyid:39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:86:ac:9a:e2:6e:62:08:11:b7:41:49:a9:a3:24:8f:70:3a: 4c:69:73:1b:81:42:92:af:f4:f5:79:76:47:51:e3:ee:e3:bd: ea:3f:0a:9f:3a:83:69:aa:58:aa:04:75:3e:a2:19:d4:86:36: 50:56:71:32:70:aa:fa:e0:66:44:33:ac:81:1f:d0:e0:2e:65: 0f:fe:12:06:af:fd:7e:c9:dd:b9:2f:d4:1f:15:6d:d3:66:3d: 4f:28:3f:09:61:4d:ee:b4:a5:1a:3c:48:52:b3:d3:f9:28:86: 34:0c:a3:21:18:23:33:7f:ef:dd:58:49:29:cd:5a:7f:db:ff: f4:b3:0d:96:38:d0:35:44:70:ae:d5:52:2c:ae:ff:d6:8d:d3: 03:85:80:03:2a:eb:94:c5:24:6b:6a:3f:b6:63:69:f1:c4:16: 0a:33:3d:71:f5:7b:58:20:64:a8:15:13:38:f6:2a:8a:32:b5: af:ad:30:04:44:38:e1:58:b3:81:7f:57:66:8f:63:54:5a:47: e2:54:f2:62:d3:c9:f1:07:37:5b:f0:6b:4e:bf:81:8b:a8:ff: 13:7a:f4:25:5d:ec:43:04:de:6c:cd:cb:43:0e:32:e7:57:a2: 4f:44:ec:69:3e:9a:11:31:39:ee:82:14:66:5e:08:28:9b:6f: 7f:69:56:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHz5RyzZAXnMbxaoVJ0fHCD+CT3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1 NzVBRjdEMTAeFw0yNTA0MDMxNTM1NDdaFw0yNTA0MDYyMzQwNDdaMDMxMTAvBgNV BAMTKDY4RkZFMUFGRDYwNUM5NDM5MDQ4REYzNDJDNDFFODM5NTg3RDc1MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxKtnAoYb4cbKm2jY1fwW8V7Wj g7hxW3kJ0DH5O6j9JLfN5o9dpsIKXC93OgHJqCK31fQRNvmLlPnZcFzoPSMIOvui ZWXRnNGDMSs2YVfKQPWJSy2UXBiqw418ebjdLuWHN/Z832pW4Ta+GFhWLvxtdO3Q Mxw15S4c5gQL7vq1D3IYSjFZ2NKNP9o2837Pyc7/T6iNTl3gCj7J/B1H8s2i6D9d JlW5fRLLVQ7hxCx+f5nIUyVtB22+5l2P20SojgkJXXbrmchRx/yCQeK835bb4wwQ /kZpTn/etFl03yUJtQnrBjFf+Yb88S+6efDSnMjVsdafJW5O4eBFu1TlQfJjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaP/hr9YFyUOQSN80LEHoOVh9dSkwHwYDVR0j BBgwFoAUOZMVsYun0N1mbcqMPbvgE1da99EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmYyODg3OS00ODQ0LTQyZGUtYjJkOS1hOTY2NmRlMjgyZWEvMC8zOTkzMTVCMThC QTdEMERENjY2RENBOEMzREJCRTAxMzU3NUFGN0QxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1NzVB RjdEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJmMjg4NzktNDg0NC00MmRlLWIy ZDktYTk2NjZkZTI4MmVhLzAvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUw MTM1NzVBRjdEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABaGrJribmIIEbdBSamjJI9wOkxpcxuBQpKv 9PV5dkdR4+7jveo/Cp86g2mqWKoEdT6iGdSGNlBWcTJwqvrgZkQzrIEf0OAuZQ/+ Egav/X7J3bkv1B8VbdNmPU8oPwlhTe60pRo8SFKz0/kohjQMoyEYIzN/791YSSnN Wn/b//SzDZY40DVEcK7VUiyu/9aN0wOFgAMq65TFJGtqP7ZjafHEFgozPXH1e1gg ZKgVEzj2Kooyta+tMAREOOFYs4F/V2aPY1RaR+JU8mLTyfEHN1vwa06/gYuo/xN6 9CVd7EME3mzNy0MOMudXok9E7Gk+mhExOe6CFGZeCCibb39pVp8= -----END CERTIFICATE-----Generated at Sat Apr 5 19:10:48 2025 by rpki-client