$ rpki-client -vvf repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft File: CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft (raw, json) Hash identifier: D08MpdRN4dVwdgh91LdjxOvV1xWFCgMMCGPRXh8lRCY= Subject key identifier: AA:43:AD:08:91:CB:9A:ED:B3:81:E5:AC:F9:0A:CC:AE:26:FB:07:E0 Authority key identifier: CA:13:A9:BA:C2:93:15:E5:C5:DA:CF:0B:C7:38:8C:34:2A:D6:E5:92 Certificate issuer: /CN=CA13A9BAC29315E5C5DACF0BC7388C342AD6E592 Certificate serial: 3D3BFA6367D01043BA29B9CBE1B9570FF6A0438A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft Manifest number: 02AA Signing time: Sat 05 Apr 2025 02:51:10 +0000 Manifest this update: Sat 05 Apr 2025 02:46:10 +0000 Manifest next update: Tue 08 Apr 2025 09:15:10 +0000 Files and hashes: 1: 3130332e3137322e3139362e302f32332d3234203d3e20313432333934.roa (hash: ik3JwPueGh0lC4/wMe1++inmZhlbllGr5PVZbJzidbY=) 2: CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl (hash: cYpUaIAYhd90510vp0h+7H5N3ZATDwRprVTJ0boRM6Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 09:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:3b:fa:63:67:d0:10:43:ba:29:b9:cb:e1:b9:57:0f:f6:a0:43:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA13A9BAC29315E5C5DACF0BC7388C342AD6E592 Validity Not Before: Apr 5 02:46:10 2025 GMT Not After : Apr 8 09:15:10 2025 GMT Subject: CN=AA43AD0891CB9AEDB381E5ACF90ACCAE26FB07E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:09:f2:b1:b0:87:36:a1:16:5a:37:d7:74:67: 60:91:3d:7a:41:f0:7c:b5:d4:8e:3a:9f:d9:69:f1: 87:39:ae:dc:6d:a7:63:88:82:94:97:78:17:3a:f0: cf:de:a8:18:80:95:29:bc:db:af:a2:2a:e2:aa:ba: 5d:ef:a1:f9:ca:b8:89:49:4c:a0:ea:9f:f1:69:f8: ea:bd:63:e7:2b:e2:67:c6:6b:5c:17:82:b0:4a:0a: ac:8c:e5:d9:bf:d1:f8:93:4c:bc:7b:c6:f9:4a:8e: 01:ae:ab:3b:65:b7:ab:2a:7b:8e:e6:ff:d0:74:cf: ec:10:0e:9e:ad:b3:71:7d:9c:35:60:c3:1b:7a:fe: 53:0a:97:db:7d:1f:cd:4b:6d:a0:dc:27:56:a0:66: f6:48:a6:b1:a9:40:9a:50:87:3f:74:04:20:53:31: 15:9a:63:81:e1:d5:52:3f:60:7b:fd:7b:d7:2d:c5: 63:b3:58:33:e1:91:77:98:0d:8c:d2:32:e4:09:c5: f2:65:5d:13:a7:c1:b7:e2:46:8d:26:43:3b:c0:b8: cf:1e:31:c7:0f:b9:f5:27:07:a6:b4:b6:8e:f3:0a: 34:60:fd:9f:d4:f1:86:39:60:d4:6b:06:e1:12:8b: bc:5d:65:a3:a1:54:58:49:4d:3c:9f:0b:63:f8:4e: 74:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:43:AD:08:91:CB:9A:ED:B3:81:E5:AC:F9:0A:CC:AE:26:FB:07:E0 X509v3 Authority Key Identifier: keyid:CA:13:A9:BA:C2:93:15:E5:C5:DA:CF:0B:C7:38:8C:34:2A:D6:E5:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:fc:0a:c1:14:2c:e1:69:9b:f1:81:1d:9a:3d:52:cd:b5:74: 2d:9e:4a:3a:89:e2:13:db:af:0b:28:32:75:7e:c2:83:b4:ef: bb:4a:72:cb:17:b8:5f:0b:c1:d4:f4:a3:ed:93:a3:b6:08:86: c2:a2:25:51:39:ec:cc:99:8a:92:13:25:ce:dc:03:5d:5f:8f: 74:9a:c2:c8:f7:da:63:5e:c7:6f:7f:1d:2c:80:07:c8:94:ec: b3:67:9d:62:0f:ac:08:8d:11:79:56:7f:e1:c9:73:3f:f2:14: 59:6a:10:3b:85:ae:9a:87:1e:43:3c:f0:72:12:28:64:64:10: 01:3e:ed:f5:83:8b:fd:4a:b0:cf:25:0c:e7:6b:b0:c0:33:62: f3:ac:18:59:5a:e9:41:16:ea:5b:e8:51:37:7f:f9:81:17:2a: 63:fa:57:63:47:cd:02:2e:3f:89:8f:a7:65:37:cd:d3:88:73: 21:c1:3a:b4:a1:52:d3:5f:04:66:8c:f7:84:02:d2:72:35:20: 05:99:da:48:64:c6:7c:9f:a8:a5:f8:f2:c1:0c:15:85:ba:57: f9:ca:8d:33:84:63:e6:31:46:ca:13:7a:12:29:88:c6:56:aa: 6a:00:53:c6:eb:43:2f:b3:95:82:b5:04:1c:16:7d:27:91:7b: ff:09:56:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPTv6Y2fQEEO6KbnL4blXD/agQ4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhDMzQy QUQ2RTU5MjAeFw0yNTA0MDUwMjQ2MTBaFw0yNTA0MDgwOTE1MTBaMDMxMTAvBgNV BAMTKEFBNDNBRDA4OTFDQjlBRURCMzgxRTVBQ0Y5MEFDQ0FFMjZGQjA3RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqCfKxsIc2oRZaN9d0Z2CRPXpB 8Hy11I46n9lp8Yc5rtxtp2OIgpSXeBc68M/eqBiAlSm826+iKuKqul3vofnKuIlJ TKDqn/Fp+Oq9Y+cr4mfGa1wXgrBKCqyM5dm/0fiTTLx7xvlKjgGuqztlt6sqe47m /9B0z+wQDp6ts3F9nDVgwxt6/lMKl9t9H81LbaDcJ1agZvZIprGpQJpQhz90BCBT MRWaY4Hh1VI/YHv9e9ctxWOzWDPhkXeYDYzSMuQJxfJlXROnwbfiRo0mQzvAuM8e MccPufUnB6a0to7zCjRg/Z/U8YY5YNRrBuESi7xdZaOhVFhJTTyfC2P4TnTzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqkOtCJHLmu2zgeWs+QrMrib7B+AwHwYDVR0j BBgwFoAUyhOpusKTFeXF2s8LxziMNCrW5ZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Mzk3Y2ZjNS1lMGIwLTQ4MjAtYjg1OS03OTYyNTIwMWVjYWYvMC9DQTEzQTlCQUMy OTMxNUU1QzVEQUNGMEJDNzM4OEMzNDJBRDZFNTkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhDMzQyQUQ2 RTU5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM5N2NmYzUtZTBiMC00ODIwLWI4 NTktNzk2MjUyMDFlY2FmLzAvQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhD MzQyQUQ2RTU5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHr8CsEULOFpm/GBHZo9Us21dC2eSjqJ4hPb rwsoMnV+woO077tKcssXuF8LwdT0o+2To7YIhsKiJVE57MyZipITJc7cA11fj3Sa wsj32mNex29/HSyAB8iU7LNnnWIPrAiNEXlWf+HJcz/yFFlqEDuFrpqHHkM88HIS KGRkEAE+7fWDi/1KsM8lDOdrsMAzYvOsGFla6UEW6lvoUTd/+YEXKmP6V2NHzQIu P4mPp2U3zdOIcyHBOrShUtNfBGaM94QC0nI1IAWZ2khkxnyfqKX48sEMFYW6V/nK jTOEY+YxRsoTehIpiMZWqmoAU8brQy+zlYK1BBwWfSeRe/8JVlo= -----END CERTIFICATE-----Generated at Sun Apr 6 06:07:50 2025 by rpki-client