$ rpki-client -vvf repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.mft File: 798D703C19A93E4E19F716304D78F20AA3261B8A.mft (raw, json) Hash identifier: nnZpZ7jW3W++XeIJC3dbSjJMQBvwcj4LTxE6KWFegkY= Subject key identifier: CB:0C:16:E3:15:21:C4:6E:C5:50:DF:91:D6:D2:F1:C4:F0:2D:9F:DA Authority key identifier: 79:8D:70:3C:19:A9:3E:4E:19:F7:16:30:4D:78:F2:0A:A3:26:1B:8A Certificate issuer: /CN=798D703C19A93E4E19F716304D78F20AA3261B8A Certificate serial: 26F7826D7C29D3ADB9871DDAF257CB61C80057CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798D703C19A93E4E19F716304D78F20AA3261B8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.mft Manifest number: 04C3 Signing time: Sat 05 Apr 2025 06:01:47 +0000 Manifest this update: Sat 05 Apr 2025 05:56:47 +0000 Manifest next update: Tue 08 Apr 2025 10:02:47 +0000 Files and hashes: 1: 3130332e38332e39362e302f32322d3234203d3e20313336303738.roa (hash: lfUWC325hgsLSmwZ8K2x7Ld1LKoPn7WB61kvOPUUgL8=) 2: 323430303a393163303a3a2f33322d3438203d3e20313336303738.roa (hash: 9Qq9nGAg7vTOcr7lz/i/AMHp0f1G534wHtpDft2fpT0=) 3: 798D703C19A93E4E19F716304D78F20AA3261B8A.crl (hash: G0jDtYh661gN3CuWif9L+Bl9nFN+R1vl7C/o1FpmRQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.crl rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798D703C19A93E4E19F716304D78F20AA3261B8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:f7:82:6d:7c:29:d3:ad:b9:87:1d:da:f2:57:cb:61:c8:00:57:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798D703C19A93E4E19F716304D78F20AA3261B8A Validity Not Before: Apr 5 05:56:47 2025 GMT Not After : Apr 8 10:02:47 2025 GMT Subject: CN=CB0C16E31521C46EC550DF91D6D2F1C4F02D9FDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c8:b4:a1:d6:9b:9b:8f:41:8e:c9:dc:08:c6: 12:27:d4:b8:15:e0:94:fd:b8:aa:39:81:63:47:7b: 4f:11:52:05:75:45:45:46:d8:77:aa:94:3f:34:d2: ce:b3:51:c5:6b:e9:a9:31:3f:a7:61:68:1a:2d:a0: 91:41:d1:a6:54:51:8a:1f:24:86:2a:b1:5a:36:bb: 5f:13:53:60:fd:38:e4:af:c3:8b:68:b6:c6:b0:2c: 1b:c8:01:ee:3f:26:fe:27:a3:dd:ff:5a:50:d5:47: 0e:c6:94:b0:aa:72:9e:1b:3a:ea:ba:f7:93:46:53: fd:00:47:55:79:87:ef:a3:cc:5d:cd:cc:b8:7e:ed: 76:d5:a0:5a:28:07:b5:46:d3:c3:31:37:ea:31:11: f9:c0:9c:ec:5d:e2:86:39:22:1f:e8:20:25:61:8b: 99:ef:7b:38:de:25:f5:b1:34:b4:79:37:9c:03:7e: 6e:1b:08:ef:95:50:15:1f:d6:5a:58:4e:95:79:cd: 46:ba:b1:7c:41:e7:09:c7:19:7b:ad:f0:ad:fe:dd: f2:70:fd:75:21:d7:25:08:be:a1:08:c0:20:8c:f6: f1:7c:cf:0c:d5:6b:0f:c9:17:c5:39:94:f9:fb:ab: 9a:22:93:81:1d:f7:02:34:9c:a9:7d:24:01:0a:17: 05:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0C:16:E3:15:21:C4:6E:C5:50:DF:91:D6:D2:F1:C4:F0:2D:9F:DA X509v3 Authority Key Identifier: keyid:79:8D:70:3C:19:A9:3E:4E:19:F7:16:30:4D:78:F2:0A:A3:26:1B:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798D703C19A93E4E19F716304D78F20AA3261B8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:d8:11:11:62:26:08:00:c4:3f:b3:62:e5:b7:17:0a:fd:9c: 36:37:62:05:9c:e5:0f:dd:99:e7:08:7c:96:d2:9f:d2:d0:bb: c3:6b:76:3b:29:b2:d7:12:52:b5:6a:c3:1a:7d:d8:41:d5:75: b6:50:03:3e:29:a9:01:1b:3f:39:1c:3c:c7:21:5e:64:0d:66: a9:e6:9d:c2:23:8e:3e:2b:a2:b2:47:50:ba:9a:1c:97:65:6f: 94:f5:ad:69:9b:ed:9d:28:55:61:ca:3c:32:b6:a6:d5:52:83: 9d:00:5d:0c:e0:cc:fc:42:99:27:81:3d:15:59:31:2e:3f:ec: 93:f6:19:f0:e8:c6:8c:5e:4c:2e:43:48:57:c3:2b:3f:0d:d0: 37:93:6c:06:92:ca:7a:c0:e6:39:ec:00:51:1d:9a:ef:01:9f: f0:a1:48:4b:cd:d7:72:6b:c3:d3:4d:ee:e7:a9:c9:ed:4d:8a: e4:8b:12:8f:7c:9a:4e:7e:9a:2f:3d:d2:1e:8e:ca:ee:b5:64: df:f7:c5:b2:ab:1f:55:f8:cd:48:05:8d:2a:74:de:0f:28:97: 4a:09:81:e8:d3:f4:a3:a8:66:bd:34:7d:7a:bc:d8:72:f7:5d: 64:53:dc:92:78:cd:05:d8:2b:c6:e5:7e:60:72:0f:49:87:c0: 22:5d:d2:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJveCbXwp0625hx3a8lfLYcgAV8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk4RDcwM0MxOUE5M0U0RTE5RjcxNjMwNEQ3OEYyMEFB MzI2MUI4QTAeFw0yNTA0MDUwNTU2NDdaFw0yNTA0MDgxMDAyNDdaMDMxMTAvBgNV BAMTKENCMEMxNkUzMTUyMUM0NkVDNTUwREY5MUQ2RDJGMUM0RjAyRDlGREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlyLSh1pubj0GOydwIxhIn1LgV 4JT9uKo5gWNHe08RUgV1RUVG2HeqlD800s6zUcVr6akxP6dhaBotoJFB0aZUUYof JIYqsVo2u18TU2D9OOSvw4totsawLBvIAe4/Jv4no93/WlDVRw7GlLCqcp4bOuq6 95NGU/0AR1V5h++jzF3NzLh+7XbVoFooB7VG08MxN+oxEfnAnOxd4oY5Ih/oICVh i5nvezjeJfWxNLR5N5wDfm4bCO+VUBUf1lpYTpV5zUa6sXxB5wnHGXut8K3+3fJw /XUh1yUIvqEIwCCM9vF8zwzVaw/JF8U5lPn7q5oik4Ed9wI0nKl9JAEKFwUvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUywwW4xUhxG7FUN+R1tLxxPAtn9owHwYDVR0j BBgwFoAUeY1wPBmpPk4Z9xYwTXjyCqMmG4owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmVjMzVlZC0wZjM2LTQzZDctYjUzNy0wNmRiMzE0YzkwZDUvMC83OThENzAzQzE5 QTkzRTRFMTlGNzE2MzA0RDc4RjIwQUEzMjYxQjhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzk4RDcwM0MxOUE5M0U0RTE5RjcxNjMwNEQ3OEYyMEFBMzI2 MUI4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZlYzM1ZWQtMGYzNi00M2Q3LWI1 MzctMDZkYjMxNGM5MGQ1LzAvNzk4RDcwM0MxOUE5M0U0RTE5RjcxNjMwNEQ3OEYy MEFBMzI2MUI4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfYERFiJggAxD+zYuW3Fwr9nDY3YgWc5Q/d mecIfJbSn9LQu8NrdjspstcSUrVqwxp92EHVdbZQAz4pqQEbPzkcPMchXmQNZqnm ncIjjj4rorJHULqaHJdlb5T1rWmb7Z0oVWHKPDK2ptVSg50AXQzgzPxCmSeBPRVZ MS4/7JP2GfDoxoxeTC5DSFfDKz8N0DeTbAaSynrA5jnsAFEdmu8Bn/ChSEvN13Jr w9NN7uepye1NiuSLEo98mk5+mi890h6Oyu61ZN/3xbKrH1X4zUgFjSp03g8ol0oJ gejT9KOoZr00fXq82HL3XWRT3JJ4zQXYK8blfmByD0mHwCJd0mU= -----END CERTIFICATE-----Generated at Sat Apr 5 16:42:22 2025 by rpki-client