$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft File: 1952B074D19D5AB562D7EE537AD3059EA097353B.mft (raw, json) Hash identifier: fM17fUPKf0S4oVFPPkiXN9Mo7x3kLCCTvYPl6U2EhWY= Subject key identifier: 4D:A4:50:9A:3C:21:5A:C0:4C:EA:6C:03:DC:5C:C7:F4:69:10:F6:5E Authority key identifier: 19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B Certificate issuer: /CN=1952B074D19D5AB562D7EE537AD3059EA097353B Certificate serial: 3CE332A0460FB220F7FB07E9734930E34F4D6237 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft Manifest number: 01B6 Signing time: Sat 05 Apr 2025 05:21:31 +0000 Manifest this update: Sat 05 Apr 2025 05:16:31 +0000 Manifest next update: Tue 08 Apr 2025 05:46:31 +0000 Files and hashes: 1: 3130332e3135382e32372e302f32342d3234203d3e20313431363735.roa (hash: kRIFZio38exK3BHLmfgjR+p7MGDva6afV6/G2wqCEYs=) 2: 323430363a616563303a3a2f34382d3438203d3e20313431363038.roa (hash: KczcNReWYkUeivDYKIxXDp5jDbj69dSn42qgUKnDpNU=) 3: 1952B074D19D5AB562D7EE537AD3059EA097353B.crl (hash: c0p3isI/04bKwlIPccshHyuSoipND3fqnYiKAczodVw=) 4: 323430363a616563303a313a3a2f34382d3438203d3e20313431363038.roa (hash: sSus2VekFQqdP746C1Oba95E9RuoDE9lUaWdASz7ATQ=) 5: 3130332e3135382e32362e302f32342d3234203d3e20313431363038.roa (hash: 5OCcdYMHQx3eaRp8N1KakhheYA1LVXtba8lQ3iS+KJc=) 6: 323430363a616563303a323a3a2f34382d3438203d3e20313431363038.roa (hash: f8rx+3fGUF07mbvTmIC7Ix6cj8JJ+4l3RQuywZkG++Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:e3:32:a0:46:0f:b2:20:f7:fb:07:e9:73:49:30:e3:4f:4d:62:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1952B074D19D5AB562D7EE537AD3059EA097353B Validity Not Before: Apr 5 05:16:31 2025 GMT Not After : Apr 8 05:46:31 2025 GMT Subject: CN=4DA4509A3C215AC04CEA6C03DC5CC7F46910F65E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:05:07:f3:ec:9e:42:bb:6c:73:be:39:af:cf: 68:8c:71:4a:81:f0:b3:90:60:ff:39:c5:dc:47:21: 6c:17:fe:72:44:e2:00:67:b3:a9:85:8a:4e:30:85: 43:d5:7d:e3:50:97:4b:4e:b7:81:84:ed:72:fc:63: 6f:65:44:4b:3b:75:ce:b4:1f:e8:e4:e8:57:a4:5d: 02:c9:81:05:d5:9c:21:23:7f:93:94:a0:0f:d6:66: 3e:a4:36:50:7a:ce:5d:8a:de:d3:31:90:ed:68:0e: 9a:7f:8b:5a:5f:5f:97:19:33:41:5c:e7:4c:b6:79: 55:92:79:1a:22:99:0c:d4:22:a0:92:f0:05:8d:20: 76:9c:49:78:f4:d4:ca:9f:b9:7b:c7:67:2e:61:4a: 45:4b:c4:76:10:60:e8:c8:59:3b:b3:6c:95:d0:3b: 59:8e:4b:b5:01:6c:9b:10:fa:cd:df:ac:36:f0:10: 02:06:d9:1c:3f:1f:5d:57:7d:02:53:85:06:b3:4a: 73:71:42:f2:46:7c:5a:96:18:b1:d4:c0:7d:8a:1a: 3b:33:c5:df:75:5c:1b:b0:fe:d6:fc:f5:28:41:45: 5f:79:94:fd:e8:c7:e3:ce:e6:d5:4e:1b:f3:e9:17: 6f:1d:99:a6:9b:1a:c2:98:4f:a2:ff:a9:21:fb:9d: 97:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A4:50:9A:3C:21:5A:C0:4C:EA:6C:03:DC:5C:C7:F4:69:10:F6:5E X509v3 Authority Key Identifier: keyid:19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:95:8f:8b:13:9d:5b:ea:88:49:f6:03:69:c8:4b:f8:85:51: 91:64:20:e6:78:4a:81:c7:23:b4:48:75:59:fc:d9:f9:25:fa: 36:98:98:3d:d6:5d:a2:b9:ee:28:a9:7d:18:ba:ee:82:af:4c: 21:aa:f6:73:15:b3:eb:be:21:82:22:44:65:97:4e:d9:0b:a7: 8b:f4:07:7e:0c:a4:33:69:3d:f9:85:c9:0b:1f:cf:39:61:2c: 3a:7b:4a:b4:51:85:c4:09:37:d7:6f:4a:5f:2b:62:a8:92:3b: 5c:ad:4d:c2:55:9c:7b:92:e9:f8:ad:a7:55:6b:97:1e:df:61: a3:e5:59:7a:c7:4d:82:09:a7:f0:c9:21:69:1d:da:02:4c:c9: ee:67:1b:63:2c:15:d0:f3:95:37:c3:97:3e:46:d2:65:a1:e4: 63:c9:be:c8:5f:28:f6:8e:47:de:cf:7f:0d:a8:11:a8:9e:7b: b9:1e:64:a9:8e:87:7d:9c:4f:49:d8:46:7b:d6:06:ef:99:ee: 08:8b:2d:16:fe:5a:91:27:9d:da:72:1f:b8:15:d4:9f:79:28: c2:cb:a9:9f:99:56:c7:a7:50:4b:60:fc:7f:00:93:c9:1f:85: 9e:45:f5:ce:c8:b7:68:e5:5b:43:11:6a:dd:53:cb:1b:8e:e1: 8a:78:5a:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPOMyoEYPsiD3+wfpc0kw409NYjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1OUVB MDk3MzUzQjAeFw0yNTA0MDUwNTE2MzFaFw0yNTA0MDgwNTQ2MzFaMDMxMTAvBgNV BAMTKDREQTQ1MDlBM0MyMTVBQzA0Q0VBNkMwM0RDNUNDN0Y0NjkxMEY2NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiBQfz7J5Cu2xzvjmvz2iMcUqB 8LOQYP85xdxHIWwX/nJE4gBns6mFik4whUPVfeNQl0tOt4GE7XL8Y29lREs7dc60 H+jk6FekXQLJgQXVnCEjf5OUoA/WZj6kNlB6zl2K3tMxkO1oDpp/i1pfX5cZM0Fc 50y2eVWSeRoimQzUIqCS8AWNIHacSXj01MqfuXvHZy5hSkVLxHYQYOjIWTuzbJXQ O1mOS7UBbJsQ+s3frDbwEAIG2Rw/H11XfQJThQazSnNxQvJGfFqWGLHUwH2KGjsz xd91XBuw/tb89ShBRV95lP3ox+PO5tVOG/PpF28dmaabGsKYT6L/qSH7nZe/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTaRQmjwhWsBM6mwD3FzH9GkQ9l4wHwYDVR0j BBgwFoAUGVKwdNGdWrVi1+5TetMFnqCXNTswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGYyYzAyNS0xZDc2LTRhMzYtODE2MC1hOWU4YWZlMzU3OWYvMC8xOTUyQjA3NEQx OUQ1QUI1NjJEN0VFNTM3QUQzMDU5RUEwOTczNTNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1OUVBMDk3 MzUzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRmMmMwMjUtMWQ3Ni00YTM2LTgx NjAtYTllOGFmZTM1NzlmLzAvMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1 OUVBMDk3MzUzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGyVj4sTnVvqiEn2A2nIS/iFUZFkIOZ4SoHH I7RIdVn82fkl+jaYmD3WXaK57iipfRi67oKvTCGq9nMVs+u+IYIiRGWXTtkLp4v0 B34MpDNpPfmFyQsfzzlhLDp7SrRRhcQJN9dvSl8rYqiSO1ytTcJVnHuS6fitp1Vr lx7fYaPlWXrHTYIJp/DJIWkd2gJMye5nG2MsFdDzlTfDlz5G0mWh5GPJvshfKPaO R97Pfw2oEaiee7keZKmOh32cT0nYRnvWBu+Z7giLLRb+WpEnndpyH7gV1J95KMLL qZ+ZVsenUEtg/H8Ak8kfhZ5F9c7It2jlW0MRat1TyxuO4Yp4Wus= -----END CERTIFICATE-----Generated at Sat Apr 5 16:42:25 2025 by rpki-client