$ rpki-client -vvf repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft File: 037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft (raw, json) Hash identifier: ZV4BpKAeZ2Wa0MG8N7A3XHgKunWSFcuz97z4csTnhlA= Subject key identifier: 2E:25:2C:AF:10:CA:6C:DC:8E:EF:F6:04:A7:5C:10:85:11:DE:19:69 Authority key identifier: 03:7A:1E:47:FB:1C:CE:3B:6E:6A:93:69:ED:DD:87:0D:AE:80:D6:65 Certificate issuer: /CN=037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665 Certificate serial: 33A4CE39CB0F917D8DF8A0D366790A3AC693FCB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft Manifest number: F0 Signing time: Thu 03 Apr 2025 15:20:47 +0000 Manifest this update: Thu 03 Apr 2025 15:15:47 +0000 Manifest next update: Sun 06 Apr 2025 20:05:47 +0000 Files and hashes: 1: 3130332e3233392e34312e302f32342d3234203d3e20313531353331.roa (hash: XSreqIJljknfOIObygSCrMVbPXNgjuTPQtrsZby6wgM=) 2: 037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.crl (hash: CdrkPXhHrlUSu+eoSH6Ue+rArFCgDmA//7cO/+EB0TA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.crl rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 20:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a4:ce:39:cb:0f:91:7d:8d:f8:a0:d3:66:79:0a:3a:c6:93:fc:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665 Validity Not Before: Apr 3 15:15:47 2025 GMT Not After : Apr 6 20:05:47 2025 GMT Subject: CN=2E252CAF10CA6CDC8EEFF604A75C108511DE1969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bf:4b:2a:ec:84:60:57:9e:52:4c:7e:a4:75: 2f:a8:11:ae:dd:48:78:f3:20:a7:6c:c2:3b:1b:6d: a5:b4:81:e4:3a:1e:7e:13:36:e0:d3:91:3b:a4:6a: bd:e5:a4:a3:78:c8:aa:ff:84:0c:98:7b:3f:ef:c1: 92:df:0e:c3:aa:85:15:f2:da:20:df:dc:e8:39:ff: 49:46:7d:62:ea:57:16:01:2d:68:dc:2c:96:6c:41: 19:50:90:d4:a5:b1:21:ff:51:e7:2b:08:70:ae:34: 16:c1:db:82:cc:2e:71:87:c6:f0:cd:92:ec:2d:c6: 5e:7e:2f:0d:82:3d:e1:ba:62:43:59:b7:89:74:c1: af:80:bf:44:5b:fa:5b:88:5f:36:ad:51:02:fd:84: db:aa:a0:c0:c9:fa:c3:e0:00:fc:d1:b7:0d:e7:f3: 33:b6:bc:e8:c0:3d:1a:32:4b:01:d2:df:c7:f8:7a: 80:4d:b5:64:df:58:5d:1f:e7:96:6e:4d:fa:9e:ac: 66:b9:01:af:37:8b:c7:4e:36:c6:94:5b:82:40:b1: bb:a3:59:dd:15:c0:13:10:6f:ed:82:e5:81:40:df: 6a:26:11:52:1f:b4:e8:ff:79:33:f4:6a:38:45:cb: 6a:5a:4e:91:80:fb:f1:12:00:a6:f2:cc:b7:c3:82: 33:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:25:2C:AF:10:CA:6C:DC:8E:EF:F6:04:A7:5C:10:85:11:DE:19:69 X509v3 Authority Key Identifier: keyid:03:7A:1E:47:FB:1C:CE:3B:6E:6A:93:69:ED:DD:87:0D:AE:80:D6:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:57:99:80:53:3d:e4:39:ba:ea:ca:75:1e:4d:9e:ca:10:c2: cb:fd:42:af:82:ce:bc:3f:47:0b:60:7d:76:e8:29:3e:a3:5d: 29:47:0c:6e:15:45:40:8c:de:97:11:84:26:9e:41:90:b1:2d: 3e:21:46:fa:b3:42:bb:fe:59:3c:ed:86:82:0d:46:8d:97:c7: 4a:a9:1e:28:9f:01:21:73:2f:2f:4a:e5:63:10:23:94:97:6d: 5f:2a:3e:93:8b:4f:06:1c:fa:5b:d9:83:9a:30:90:bd:1d:4d: be:55:03:5f:33:d5:67:03:58:5e:33:20:c0:12:2d:68:ac:93: f1:57:6d:1e:d4:5a:1d:1a:b9:94:67:54:d3:97:40:f9:e0:33: 82:f1:cf:c2:c1:2a:bb:71:ce:54:d2:67:94:6a:c6:ac:16:58: a5:e9:e9:97:cd:6c:be:af:50:da:2b:ba:3c:4d:e9:7f:9d:b1: 12:f0:e8:61:2c:ab:f2:a1:21:91:6c:b2:cd:a7:51:21:48:74: 4b:a5:e5:12:fa:81:92:dd:e0:ff:ac:ad:48:74:07:e2:e0:8b: 3c:a6:af:b8:6e:6e:7b:86:f7:ca:9a:9e:4f:98:41:97:ff:2f: 1e:05:cd:b2:22:e2:28:30:4d:0e:72:2b:3e:4b:56:8d:12:84: 42:8d:cd:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM6TOOcsPkX2N+KDTZnkKOsaT/LgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM3QTFFNDdGQjFDQ0UzQjZFNkE5MzY5RURERDg3MERB RTgwRDY2NTAeFw0yNTA0MDMxNTE1NDdaFw0yNTA0MDYyMDA1NDdaMDMxMTAvBgNV BAMTKDJFMjUyQ0FGMTBDQTZDREM4RUVGRjYwNEE3NUMxMDg1MTFERTE5NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHv0sq7IRgV55STH6kdS+oEa7d SHjzIKdswjsbbaW0geQ6Hn4TNuDTkTukar3lpKN4yKr/hAyYez/vwZLfDsOqhRXy 2iDf3Og5/0lGfWLqVxYBLWjcLJZsQRlQkNSlsSH/UecrCHCuNBbB24LMLnGHxvDN kuwtxl5+Lw2CPeG6YkNZt4l0wa+Av0Rb+luIXzatUQL9hNuqoMDJ+sPgAPzRtw3n 8zO2vOjAPRoySwHS38f4eoBNtWTfWF0f55ZuTfqerGa5Aa83i8dONsaUW4JAsbuj Wd0VwBMQb+2C5YFA32omEVIftOj/eTP0ajhFy2paTpGA+/ESAKbyzLfDgjNFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULiUsrxDKbNyO7/YEp1wQhRHeGWkwHwYDVR0j BBgwFoAUA3oeR/sczjtuapNp7d2HDa6A1mUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGJmYzVjMy1jMzljLTQ1ZWQtYWU4Ny0zODRhNmRjYjc5MzgvMC8wMzdBMUU0N0ZC MUNDRTNCNkU2QTkzNjlFREREODcwREFFODBENjY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM3QTFFNDdGQjFDQ0UzQjZFNkE5MzY5RURERDg3MERBRTgw RDY2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRiZmM1YzMtYzM5Yy00NWVkLWFl ODctMzg0YTZkY2I3OTM4LzAvMDM3QTFFNDdGQjFDQ0UzQjZFNkE5MzY5RURERDg3 MERBRTgwRDY2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9XmYBTPeQ5uurKdR5NnsoQwsv9Qq+Czrw/ RwtgfXboKT6jXSlHDG4VRUCM3pcRhCaeQZCxLT4hRvqzQrv+WTzthoINRo2Xx0qp HiifASFzLy9K5WMQI5SXbV8qPpOLTwYc+lvZg5owkL0dTb5VA18z1WcDWF4zIMAS LWisk/FXbR7UWh0auZRnVNOXQPngM4Lxz8LBKrtxzlTSZ5RqxqwWWKXp6ZfNbL6v UNorujxN6X+dsRLw6GEsq/KhIZFsss2nUSFIdEul5RL6gZLd4P+srUh0B+Lgizym r7hubnuG98qank+YQZf/Lx4FzbIi4igwTQ5yKz5LVo0ShEKNzR8= -----END CERTIFICATE-----Generated at Sat Apr 5 16:42:25 2025 by rpki-client