$ rpki-client -vvf repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft File: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft (raw, json) Hash identifier: XsfYUFopRu2nme6aCKWbEHBjsP8ReKgedMrLcZfv0v8= Subject key identifier: 88:58:C6:D1:4D:25:1A:E4:A1:FD:81:4F:15:67:74:93:D3:CE:1C:04 Authority key identifier: 40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2 Certificate issuer: /CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2 Certificate serial: 3257CE49E6A50FA59D448D374F6D03FACEA78960 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft Manifest number: 044C Signing time: Fri 04 Apr 2025 18:00:59 +0000 Manifest this update: Fri 04 Apr 2025 17:55:59 +0000 Manifest next update: Tue 08 Apr 2025 03:30:59 +0000 Files and hashes: 1: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl (hash: AlvlS2JY9VvbqD6aWqqqBcg2E6bGkGZlFINzW2UICmg=) 2: 3130332e3134332e32302e302f32342d3234203d3e20313339343035.roa (hash: 486gYpHFPIGrMV4cst/8HcDYBuujcWoRBQU44C89Iu0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:57:ce:49:e6:a5:0f:a5:9d:44:8d:37:4f:6d:03:fa:ce:a7:89:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2 Validity Not Before: Apr 4 17:55:59 2025 GMT Not After : Apr 8 03:30:59 2025 GMT Subject: CN=8858C6D14D251AE4A1FD814F15677493D3CE1C04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7e:42:9f:4d:3a:5f:3f:48:a7:dd:0a:32:21: 18:ab:7a:fc:19:3f:09:c0:81:0f:b5:59:67:31:8c: ca:ff:b2:1c:f9:e6:a3:d0:63:31:a3:6d:df:f5:6d: 33:af:0b:09:01:7a:e3:48:3c:0a:8c:5b:da:fb:20: da:ba:7c:52:cc:c8:5b:bf:a1:c1:3c:69:d5:5b:82: e7:ea:53:9c:a5:d2:d0:3e:f0:76:84:ae:fc:47:8a: 62:fa:4a:d8:06:07:c7:7c:85:89:5f:ab:72:18:fe: 9d:8a:99:72:20:04:14:bf:a6:03:92:7e:38:f3:6d: be:0b:6c:68:fc:37:9e:6c:70:da:b7:2f:8f:7a:d4: 01:f1:43:e0:09:fe:e7:74:cd:85:d2:59:cd:7a:f9: ac:0a:7a:16:34:6f:23:ec:ec:83:d2:23:63:f4:8b: 3f:cb:2d:40:77:b3:fc:85:ac:d3:13:c2:d0:6f:0e: cf:18:f3:d9:cd:bc:16:75:bb:20:75:3e:ec:ee:c8: 58:eb:b8:37:c8:15:ce:5d:c2:8a:c7:69:95:90:f3: b5:ca:74:02:d3:d0:26:29:fa:46:40:d7:0c:eb:d2: 7a:d0:90:0b:5f:02:af:e1:9e:c4:71:53:e5:97:a9: ba:0d:e6:27:cd:87:e6:02:95:83:f6:67:39:25:85: 2e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:58:C6:D1:4D:25:1A:E4:A1:FD:81:4F:15:67:74:93:D3:CE:1C:04 X509v3 Authority Key Identifier: keyid:40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:40:58:bf:8d:05:96:8a:2c:fd:25:b4:c1:82:1c:64:97:86: 50:1d:06:51:25:9e:fe:90:ad:2d:f1:fb:9d:97:00:33:c8:06: 3d:eb:93:47:08:7c:c8:81:85:4f:56:b4:39:cd:a1:5f:ff:28: 38:13:cd:b7:b9:90:35:4c:bf:12:01:5e:0e:e5:8c:46:92:0d: 49:3d:4d:5d:c9:47:4c:9a:61:90:b5:bf:d2:e8:31:27:8f:e0: 59:c7:19:41:fa:8a:2c:6c:73:6d:22:46:e0:b4:24:7c:e7:56: 77:e9:fa:c8:84:cf:92:bd:c7:86:97:77:6c:44:bd:04:5d:83: 6f:15:19:d1:a4:bd:37:84:52:01:b1:e6:57:49:e2:e3:f5:ed: d2:e4:a6:8a:74:bc:1b:82:37:71:d1:fd:ff:25:b1:67:32:8f: 46:ca:ce:77:fc:d6:78:8b:b9:58:62:45:3a:94:f5:7f:98:f4: ee:31:bd:55:8a:2a:e4:2c:70:5f:e9:57:cc:a2:6f:58:bc:9e: fe:6a:fe:11:63:a5:a3:d6:05:75:80:f0:b1:e9:68:2e:e2:26: ef:61:a3:26:0a:f0:5b:c0:35:0b:6c:23:01:62:70:26:ec:00: 7f:4a:e7:66:75:8e:55:83:32:2e:8c:8d:d1:55:35:7c:9d:d9: 30:47:b9:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMlfOSealD6WdRI03T20D+s6niWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgyQzYx RTA4MDFGMjAeFw0yNTA0MDQxNzU1NTlaFw0yNTA0MDgwMzMwNTlaMDMxMTAvBgNV BAMTKDg4NThDNkQxNEQyNTFBRTRBMUZEODE0RjE1Njc3NDkzRDNDRTFDMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCffkKfTTpfP0in3QoyIRirevwZ PwnAgQ+1WWcxjMr/shz55qPQYzGjbd/1bTOvCwkBeuNIPAqMW9r7INq6fFLMyFu/ ocE8adVbgufqU5yl0tA+8HaErvxHimL6StgGB8d8hYlfq3IY/p2KmXIgBBS/pgOS fjjzbb4LbGj8N55scNq3L4961AHxQ+AJ/ud0zYXSWc16+awKehY0byPs7IPSI2P0 iz/LLUB3s/yFrNMTwtBvDs8Y89nNvBZ1uyB1PuzuyFjruDfIFc5dworHaZWQ87XK dALT0CYp+kZA1wzr0nrQkAtfAq/hnsRxU+WXqboN5ifNh+YClYP2ZzklhS6BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiFjG0U0lGuSh/YFPFWd0k9POHAQwHwYDVR0j BBgwFoAUQIOVkUoadP9OarHeBj+Cxh4IAfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzhjM2M2OS0zNmQwLTRhZTgtYThkZi02M2QzZjQ0Y2NkOGQvMC80MDgzOTU5MTRB MUE3NEZGNEU2QUIxREUwNjNGODJDNjFFMDgwMUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgyQzYxRTA4 MDFGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc4YzNjNjktMzZkMC00YWU4LWE4 ZGYtNjNkM2Y0NGNjZDhkLzAvNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgy QzYxRTA4MDFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdAWL+NBZaKLP0ltMGCHGSXhlAdBlElnv6Q rS3x+52XADPIBj3rk0cIfMiBhU9WtDnNoV//KDgTzbe5kDVMvxIBXg7ljEaSDUk9 TV3JR0yaYZC1v9LoMSeP4FnHGUH6iixsc20iRuC0JHznVnfp+siEz5K9x4aXd2xE vQRdg28VGdGkvTeEUgGx5ldJ4uP17dLkpop0vBuCN3HR/f8lsWcyj0bKznf81niL uVhiRTqU9X+Y9O4xvVWKKuQscF/pV8yib1i8nv5q/hFjpaPWBXWA8LHpaC7iJu9h oyYK8FvANQtsIwFicCbsAH9K52Z1jlWDMi6MjdFVNXyd2TBHub8= -----END CERTIFICATE-----Generated at Sat Apr 5 23:15:36 2025 by rpki-client