$ rpki-client -vvf repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft File: 73238FE50473DF8F457921BE1B0C04764209BBF1.mft (raw, json) Hash identifier: u9TD51aPxzhU0wOtEzGCObkNQEHQ2G2IkMmsouyKiYs= Subject key identifier: 49:A4:54:2D:63:98:A2:49:47:13:CD:C4:D5:B2:CA:0D:62:B3:13:D0 Authority key identifier: 73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 Certificate issuer: /CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Certificate serial: 400B6F8575F9D024FF611391DB9F6CB09EA94405 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft Manifest number: 6A Signing time: Wed 12 Mar 2025 20:11:01 +0000 Manifest this update: Wed 12 Mar 2025 20:06:01 +0000 Manifest next update: Sun 16 Mar 2025 03:12:01 +0000 Files and hashes: 1: 3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa (hash: xeHbC/VCkuQ0ewa0mKT4AWB4+3P9LD9U12PZtoBDe2A=) 2: 73238FE50473DF8F457921BE1B0C04764209BBF1.crl (hash: jVUOu1jc9GpTtmW3o1ckRBdl07wymUa1keydoxpVAek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 11:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:0b:6f:85:75:f9:d0:24:ff:61:13:91:db:9f:6c:b0:9e:a9:44:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Validity Not Before: Mar 12 20:06:01 2025 GMT Not After : Mar 16 03:12:01 2025 GMT Subject: CN=49A4542D6398A2494713CDC4D5B2CA0D62B313D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f1:1e:50:96:8a:87:0f:40:eb:07:5d:c5:fe: ab:d1:d2:95:15:ba:9b:2f:b4:95:fb:f8:95:3c:42: 88:c8:71:f2:f3:4a:87:25:d8:67:14:d0:2d:46:ad: 1a:5c:60:b2:a3:5e:66:e2:e3:9d:4c:fe:b7:b2:07: 2f:8a:66:d0:24:12:69:47:55:37:ff:e5:f7:30:ab: 71:25:09:11:1d:ce:a5:47:ae:52:27:41:62:8e:c2: d5:aa:e0:30:41:63:fe:b0:3a:92:55:35:00:30:2d: 0d:04:33:ab:49:92:07:01:c4:45:30:a4:57:a3:3f: 01:d7:97:81:32:40:78:88:77:ec:9e:c0:a7:80:c2: 51:3c:4c:df:00:de:77:a5:79:0c:ae:a2:00:36:4c: 80:62:b8:18:bd:f7:5f:41:71:8d:f3:2d:f5:7d:06: 17:7d:a2:d5:68:33:d2:32:ab:5a:59:89:30:f4:09: 2d:94:5e:88:0e:9c:61:0c:ac:80:ad:5f:85:2e:e3: 47:b1:c1:50:29:02:17:a4:67:40:b6:f2:60:44:27: 80:e9:6a:4f:54:cf:bc:66:0f:5f:29:11:3d:de:46: aa:88:04:c3:bd:51:ba:e4:15:a0:1a:ff:1d:3f:1e: 96:eb:31:43:d5:a7:e0:c6:f4:6b:ca:e1:12:df:df: 4b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A4:54:2D:63:98:A2:49:47:13:CD:C4:D5:B2:CA:0D:62:B3:13:D0 X509v3 Authority Key Identifier: keyid:73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:8f:dc:f4:24:24:b1:e3:e2:92:00:9d:84:94:3b:57:1b:38: 7e:4e:9f:5a:53:48:7a:88:c5:35:bf:05:e9:d1:86:75:5d:52: 86:ae:16:a1:03:29:09:ff:16:7c:df:3a:18:36:55:3e:7b:f9: 8e:88:a9:39:6b:ef:5e:d0:4b:4d:37:15:cf:c4:13:a5:74:84: 9d:3b:24:b4:43:89:8d:68:97:27:84:74:0f:e5:bc:5a:d2:31: 03:cb:b8:66:2a:3c:df:1a:b0:ca:b8:eb:20:cb:f6:40:b8:50: c5:55:2d:0c:fb:96:c5:e8:5e:52:c9:52:1f:ae:af:45:49:a7: 9f:82:39:e0:71:22:b8:cb:59:98:90:9c:ba:33:02:dd:d4:21: a2:be:9d:05:72:63:79:cf:6a:43:a5:2e:5a:dc:19:99:bd:ac: 0a:17:ee:53:5b:e5:9b:d8:c4:dc:a0:f0:1f:41:40:2f:71:05: bf:78:0f:8c:5c:ae:14:85:0b:90:ea:21:94:6a:1c:b6:55:83: 8c:49:b8:55:21:d8:1e:05:9a:e9:2c:fa:43:76:f1:d6:88:76: cf:57:e3:a3:8a:27:02:ca:c7:b5:89:99:42:16:89:22:2e:cc: 08:47:30:91:6d:11:1b:78:e4:56:c0:9a:74:95:fa:ff:10:42: d0:61:8f:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQAtvhXX50CT/YROR259ssJ6pRAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0 MjA5QkJGMTAeFw0yNTAzMTIyMDA2MDFaFw0yNTAzMTYwMzEyMDFaMDMxMTAvBgNV BAMTKDQ5QTQ1NDJENjM5OEEyNDk0NzEzQ0RDNEQ1QjJDQTBENjJCMzEzRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC28R5QloqHD0DrB13F/qvR0pUV upsvtJX7+JU8QojIcfLzSocl2GcU0C1GrRpcYLKjXmbi451M/reyBy+KZtAkEmlH VTf/5fcwq3ElCREdzqVHrlInQWKOwtWq4DBBY/6wOpJVNQAwLQ0EM6tJkgcBxEUw pFejPwHXl4EyQHiId+yewKeAwlE8TN8A3neleQyuogA2TIBiuBi9919BcY3zLfV9 Bhd9otVoM9Iyq1pZiTD0CS2UXogOnGEMrICtX4Uu40exwVApAhekZ0C28mBEJ4Dp ak9Uz7xmD18pET3eRqqIBMO9UbrkFaAa/x0/HpbrMUPVp+DG9GvK4RLf30tvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSaRULWOYoklHE83E1bLKDWKzE9AwHwYDVR0j BBgwFoAUcyOP5QRz349FeSG+GwwEdkIJu/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MGE4Y2U2Yy04MjkwLTRiOWQtOWFlZC0wNzU0ZDNmZDhkMzIvMC83MzIzOEZFNTA0 NzNERjhGNDU3OTIxQkUxQjBDMDQ3NjQyMDlCQkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0MjA5 QkJGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDBhOGNlNmMtODI5MC00YjlkLTlh ZWQtMDc1NGQzZmQ4ZDMyLzAvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0 NzY0MjA5QkJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+P3PQkJLHj4pIAnYSUO1cbOH5On1pTSHqI xTW/BenRhnVdUoauFqEDKQn/FnzfOhg2VT57+Y6IqTlr717QS003Fc/EE6V0hJ07 JLRDiY1olyeEdA/lvFrSMQPLuGYqPN8asMq46yDL9kC4UMVVLQz7lsXoXlLJUh+u r0VJp5+COeBxIrjLWZiQnLozAt3UIaK+nQVyY3nPakOlLlrcGZm9rAoX7lNb5ZvY xNyg8B9BQC9xBb94D4xcrhSFC5DqIZRqHLZVg4xJuFUh2B4Fmuks+kN28daIds9X 46OKJwLKx7WJmUIWiSIuzAhHMJFtERt45FbAmnSV+v8QQtBhj90= -----END CERTIFICATE-----Generated at Thu Mar 13 21:33:46 2025 by rpki-client