$ rpki-client -vvf repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft File: 034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft (raw, json) Hash identifier: tV+CPgVo9Qq6wn1/hNkDneyg7Zxtvdq++YOPe2XVvfA= Subject key identifier: 0D:7B:AC:46:50:20:F2:59:95:42:45:D0:D0:D2:9C:63:E0:B1:3A:A0 Authority key identifier: 03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9 Certificate issuer: /CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9 Certificate serial: 48D0F4935EFAA8E1060AF8E912CF3EE6CDC02566 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft Manifest number: 032E Signing time: Sun 06 Apr 2025 09:51:20 +0000 Manifest this update: Sun 06 Apr 2025 09:46:20 +0000 Manifest next update: Wed 09 Apr 2025 18:08:20 +0000 Files and hashes: 1: 034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl (hash: XuVdo9bFAOkRw9M2FSzZB0rTZ9tfA06HTembF7OvT7E=) 2: 3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa (hash: DRt67ofnF1ECJ9/bHZxiXN6I94m8Z1I85hzUhgLXTtU=) 3: 323430353a666134303a3a2f33322d3438203d3e20313430333930.roa (hash: /tgMP3qpTllWANVJztTHaFQZOo0xw/JDtcJozDIog/4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 18:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d0:f4:93:5e:fa:a8:e1:06:0a:f8:e9:12:cf:3e:e6:cd:c0:25:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9 Validity Not Before: Apr 6 09:46:20 2025 GMT Not After : Apr 9 18:08:20 2025 GMT Subject: CN=0D7BAC465020F259954245D0D0D29C63E0B13AA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:27:e4:15:db:e4:8b:e6:ab:3c:3f:ec:53:84: a6:a1:24:30:69:38:a8:08:77:2a:95:1c:30:81:75: 8c:36:66:88:f0:bd:f1:1c:26:07:a5:75:84:c2:44: 1a:ac:a6:ec:85:8a:c3:79:6d:e6:ea:b3:85:00:e7: fa:3b:e0:12:0b:35:3b:f1:16:2c:e2:f7:dd:93:04: 0a:17:91:66:4b:1c:ef:30:17:6e:b2:c4:c8:af:a7: 54:8e:9b:95:c1:11:0e:eb:74:bf:11:e8:bb:12:19: b6:a9:ec:40:76:92:32:f6:c5:76:0e:17:c8:e0:b8: 4d:6b:75:e5:8c:82:ef:8c:0a:eb:63:df:e0:3e:0c: f5:fa:64:0b:a2:ac:60:fa:77:a2:bb:e9:c3:79:52: 70:97:ed:12:15:bc:45:8e:41:28:f0:5d:ee:01:4d: ad:89:61:4a:19:a1:1c:63:de:68:1a:14:8c:1c:3c: df:91:ca:62:50:a1:92:e7:a6:7a:ef:0e:60:99:9a: bb:2f:ee:d1:c4:21:69:42:9c:e6:8e:3a:1f:e7:12: a5:15:54:1a:56:ab:02:25:f4:4e:58:99:11:d3:bc: 3f:ce:0a:73:fe:ea:fa:4b:46:a4:64:f0:c1:44:c3: 05:bf:0d:d0:35:81:c5:d3:48:40:63:ab:f7:0d:02: 59:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:7B:AC:46:50:20:F2:59:95:42:45:D0:D0:D2:9C:63:E0:B1:3A:A0 X509v3 Authority Key Identifier: keyid:03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:30:67:49:62:ef:29:d8:dc:67:ca:8c:8b:93:05:aa:29:cf: c7:34:44:40:98:fc:af:fc:0b:42:60:a0:9c:15:6f:05:49:21: d1:05:41:f0:ad:53:99:a0:c3:b1:50:9d:5c:49:ba:35:f3:46: 3d:50:87:cd:b3:35:da:72:03:83:d7:84:4b:db:1d:15:8c:28: 99:b9:b0:3e:10:3c:c7:c2:f1:9e:d6:d4:53:8f:01:32:a4:77: 4d:cb:48:f7:a0:e1:fb:70:91:f3:39:aa:7a:e9:22:bd:e9:2c: 63:dd:cd:84:9f:81:af:f6:55:54:b1:49:50:0a:45:c6:d4:ed: a7:cf:4d:47:f2:99:57:a4:ba:fd:9c:07:ca:ca:0f:9e:19:56: 37:06:a8:c4:2b:b5:9d:c9:9b:be:b4:b9:c8:b3:11:d5:bd:0f: 6e:77:72:51:76:ce:a6:72:e1:99:a8:5d:18:6f:3b:3f:63:90: 94:e2:dc:a4:30:d3:1d:63:9b:be:a2:20:68:b9:c3:52:f2:30: 4f:c6:6d:28:5a:75:e2:7a:11:a1:26:9f:00:8d:0f:ee:f3:f5: 8d:12:40:37:e7:12:9a:76:3f:2a:52:20:3d:0c:4b:51:ee:63: 00:8b:da:53:e7:12:41:e7:da:ee:f8:65:14:1a:1d:79:d4:28: 5e:c8:2d:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSND0k176qOEGCvjpEs8+5s3AJWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2QTE2 MzUyREZGOTAeFw0yNTA0MDYwOTQ2MjBaFw0yNTA0MDkxODA4MjBaMDMxMTAvBgNV BAMTKDBEN0JBQzQ2NTAyMEYyNTk5NTQyNDVEMEQwRDI5QzYzRTBCMTNBQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqJ+QV2+SL5qs8P+xThKahJDBp OKgIdyqVHDCBdYw2ZojwvfEcJgeldYTCRBqspuyFisN5bebqs4UA5/o74BILNTvx Fizi992TBAoXkWZLHO8wF26yxMivp1SOm5XBEQ7rdL8R6LsSGbap7EB2kjL2xXYO F8jguE1rdeWMgu+MCutj3+A+DPX6ZAuirGD6d6K76cN5UnCX7RIVvEWOQSjwXe4B Ta2JYUoZoRxj3mgaFIwcPN+RymJQoZLnpnrvDmCZmrsv7tHEIWlCnOaOOh/nEqUV VBpWqwIl9E5YmRHTvD/OCnP+6vpLRqRk8MFEwwW/DdA1gcXTSEBjq/cNAlnDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDXusRlAg8lmVQkXQ0NKcY+CxOqAwHwYDVR0j BBgwFoAUA04PpbbBtOFWSSTO4Ny2oWNS3/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWY1MDM4My03ZDA0LTQ3YzgtYWFlYi1mN2U3NjY5Mzc3MzEvMC8wMzRFMEZBNUI2 QzFCNEUxNTY0OTI0Q0VFMERDQjZBMTYzNTJERkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2QTE2MzUy REZGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmNTAzODMtN2QwNC00N2M4LWFh ZWItZjdlNzY2OTM3NzMxLzAvMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2 QTE2MzUyREZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALAwZ0li7ynY3GfKjIuTBaopz8c0RECY/K/8 C0JgoJwVbwVJIdEFQfCtU5mgw7FQnVxJujXzRj1Qh82zNdpyA4PXhEvbHRWMKJm5 sD4QPMfC8Z7W1FOPATKkd03LSPeg4ftwkfM5qnrpIr3pLGPdzYSfga/2VVSxSVAK RcbU7afPTUfymVekuv2cB8rKD54ZVjcGqMQrtZ3Jm760ucizEdW9D253clF2zqZy 4ZmoXRhvOz9jkJTi3KQw0x1jm76iIGi5w1LyME/GbShadeJ6EaEmnwCND+7z9Y0S QDfnEpp2PypSID0MS1HuYwCL2lPnEkHn2u74ZRQaHXnUKF7ILRY= -----END CERTIFICATE-----Generated at Mon Apr 7 07:41:16 2025 by rpki-client