$ rpki-client -vvf repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft File: B126A372835801BBB738696C56DCF255D032D42F.mft (raw, json) Hash identifier: V8aJiQP/xRySwtRG0Z+QriKNjI5PEi032lxyV2TinXM= Subject key identifier: 91:F2:06:14:A8:5E:02:C8:BD:25:83:24:1A:21:73:CA:D9:67:DB:4A Authority key identifier: B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F Certificate issuer: /CN=B126A372835801BBB738696C56DCF255D032D42F Certificate serial: 2534954DFCCF6908D7EC389B169EE19245E1FBDE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft Manifest number: 0335 Signing time: Wed 12 Mar 2025 06:11:57 +0000 Manifest this update: Wed 12 Mar 2025 06:06:57 +0000 Manifest next update: Sat 15 Mar 2025 07:49:57 +0000 Files and hashes: 1: 3130332e3136362e33342e302f32332d3234203d3e203137393935.roa (hash: CQWJwi60gRop4QOS7F0vqvaI5MYRHZka0+yE7SAoHY0=) 2: B126A372835801BBB738696C56DCF255D032D42F.crl (hash: B7DtaX2TeqDBVicq8VtH1k0bGxeH+v4K8lUD7w5X9qA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 07:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:34:95:4d:fc:cf:69:08:d7:ec:38:9b:16:9e:e1:92:45:e1:fb:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B126A372835801BBB738696C56DCF255D032D42F Validity Not Before: Mar 12 06:06:57 2025 GMT Not After : Mar 15 07:49:57 2025 GMT Subject: CN=91F20614A85E02C8BD2583241A2173CAD967DB4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7e:f0:94:24:b9:3e:11:d8:e8:da:54:9a:26: 71:f4:7c:1a:d3:8b:e2:ed:bf:b1:59:af:75:4d:c9: a2:61:3c:f4:dd:3f:1f:2f:7e:da:8c:87:9d:d7:98: 8c:c1:f0:97:8e:0a:1f:c1:59:08:56:3d:ce:10:83: 02:6a:81:2f:cf:29:a2:a2:ee:eb:81:3e:fb:ef:3a: 24:e5:e2:67:75:75:a9:05:6b:2a:f3:61:2e:c4:81: b8:6b:ee:7a:2d:da:23:b6:e3:de:07:ca:9b:4b:54: 39:57:04:bc:d2:25:0a:64:f0:46:eb:40:4d:b3:67: d9:81:e6:6a:d1:91:47:3a:0b:2b:76:71:42:76:c5: 51:27:71:2f:85:fb:11:45:f4:a2:0a:e1:bf:8f:2d: 29:be:5d:10:d7:e2:85:57:15:c5:21:d5:7f:1d:8f: af:ce:1a:43:f9:a4:f7:6a:ee:62:d7:8d:d2:0e:77: cf:17:97:40:ef:be:ef:54:14:27:ed:9b:3f:5e:ac: 56:cb:2b:83:4f:d4:da:eb:ff:92:a5:47:20:95:a2: 5e:54:cb:2d:b3:da:60:cf:1b:2a:e2:8f:9d:1d:46: 5d:ed:46:7a:54:5c:40:d2:d9:e2:2b:a0:c8:cb:07: 1a:0f:b2:ea:f5:c8:e9:9e:cb:14:63:78:24:02:8b: ee:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F2:06:14:A8:5E:02:C8:BD:25:83:24:1A:21:73:CA:D9:67:DB:4A X509v3 Authority Key Identifier: keyid:B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:bc:c6:42:8e:af:59:70:87:35:8d:50:42:d8:72:a5:b3:ac: f5:57:72:ad:56:51:da:51:e9:65:d4:9a:65:68:db:ae:d1:2b: 5a:c1:c6:93:a4:bf:65:bb:22:a1:7b:47:f5:70:66:23:ef:2d: f5:cf:cb:1a:4f:b3:ca:58:7b:0f:40:f4:33:72:74:b8:7d:2d: 63:fd:18:1d:24:63:39:64:89:3f:13:84:0f:9a:7b:a0:fa:58: 8d:93:2a:f3:de:6f:c5:2a:b4:3f:df:8e:b7:8c:14:a2:ad:b3: 81:7b:d7:12:fc:e3:50:cc:72:d0:5a:3c:0e:6b:1a:23:47:7c: 6c:35:9f:ef:8a:4f:e2:e1:2c:c7:d6:01:79:aa:da:6e:df:51: eb:11:fb:9d:1c:15:7e:1f:ec:e8:6b:ba:77:c4:b4:f4:f0:df: d8:64:62:20:a9:a2:5e:0b:ab:54:59:f3:38:0f:68:7a:32:bf: d5:d9:5b:29:a5:eb:2c:ba:ea:e0:62:b4:43:0c:b8:fe:8d:06: 3e:14:98:e0:ed:ae:99:ca:d5:f2:ef:35:08:fa:bb:ac:e4:87: 70:3e:fc:fc:70:cd:be:72:ff:26:79:35:e8:df:b0:50:f0:ce: c0:b3:e7:25:c9:88:5f:9c:9b:93:5d:50:ff:e8:40:d6:25:ba: 2f:b9:20:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJTSVTfzPaQjX7DibFp7hkkXh+94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0YyNTVE MDMyRDQyRjAeFw0yNTAzMTIwNjA2NTdaFw0yNTAzMTUwNzQ5NTdaMDMxMTAvBgNV BAMTKDkxRjIwNjE0QTg1RTAyQzhCRDI1ODMyNDFBMjE3M0NBRDk2N0RCNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCafvCUJLk+Edjo2lSaJnH0fBrT i+Ltv7FZr3VNyaJhPPTdPx8vftqMh53XmIzB8JeOCh/BWQhWPc4QgwJqgS/PKaKi 7uuBPvvvOiTl4md1dakFayrzYS7Egbhr7not2iO2494HyptLVDlXBLzSJQpk8Ebr QE2zZ9mB5mrRkUc6Cyt2cUJ2xVEncS+F+xFF9KIK4b+PLSm+XRDX4oVXFcUh1X8d j6/OGkP5pPdq7mLXjdIOd88Xl0Dvvu9UFCftmz9erFbLK4NP1Nrr/5KlRyCVol5U yy2z2mDPGyrij50dRl3tRnpUXEDS2eIroMjLBxoPsur1yOmeyxRjeCQCi+5XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkfIGFKheAsi9JYMkGiFzytln20owHwYDVR0j BBgwFoAUsSajcoNYAbu3OGlsVtzyVdAy1C8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDQ0ZjkxOC05MzMyLTQyNTctYjUxMC0zODFjODU5MGZmNTQvMC9CMTI2QTM3Mjgz NTgwMUJCQjczODY5NkM1NkRDRjI1NUQwMzJENDJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0YyNTVEMDMy RDQyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA0NGY5MTgtOTMzMi00MjU3LWI1 MTAtMzgxYzg1OTBmZjU0LzAvQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0Yy NTVEMDMyRDQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJG8xkKOr1lwhzWNUELYcqWzrPVXcq1WUdpR 6WXUmmVo267RK1rBxpOkv2W7IqF7R/VwZiPvLfXPyxpPs8pYew9A9DNydLh9LWP9 GB0kYzlkiT8ThA+ae6D6WI2TKvPeb8UqtD/fjreMFKKts4F71xL841DMctBaPA5r GiNHfGw1n++KT+LhLMfWAXmq2m7fUesR+50cFX4f7OhrunfEtPTw39hkYiCpol4L q1RZ8zgPaHoyv9XZWyml6yy66uBitEMMuP6NBj4UmODtrpnK1fLvNQj6u6zkh3A+ /Pxwzb5y/yZ5NejfsFDwzsCz5yXJiF+cm5NdUP/oQNYlui+5IH4= -----END CERTIFICATE-----Generated at Thu Mar 13 21:30:45 2025 by rpki-client