$ rpki-client -vvf repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft File: A385F006CB4A332AED2E94013E7482A62617F17F.mft (raw, json) Hash identifier: bbHIHDpsD8kCKZzeQi6hK9ZVrBXPH6rLPY53YAxAxD4= Subject key identifier: FA:6B:08:4D:A6:18:A4:3D:C5:FB:5A:8C:39:F3:F4:CA:49:B9:1C:AA Authority key identifier: A3:85:F0:06:CB:4A:33:2A:ED:2E:94:01:3E:74:82:A6:26:17:F1:7F Certificate issuer: /CN=A385F006CB4A332AED2E94013E7482A62617F17F Certificate serial: 1927806F07AB8DAE063B59709A5E791E036DCEA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft Manifest number: 0337 Signing time: Mon 07 Apr 2025 16:01:28 +0000 Manifest this update: Mon 07 Apr 2025 15:56:28 +0000 Manifest next update: Fri 11 Apr 2025 02:47:28 +0000 Files and hashes: 1: A385F006CB4A332AED2E94013E7482A62617F17F.crl (hash: Eu1FGLFzuRJTOHmUTcSeAXTlcj8edjYRJ0Th8vGKU/8=) 2: 3130332e3136392e3138382e302f32332d3234203d3e20313432333437.roa (hash: D3IFwC+agUDfefnTI4Rr2XGP2SiD66JV5F/CoQ1sgto=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.crl rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 02:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:27:80:6f:07:ab:8d:ae:06:3b:59:70:9a:5e:79:1e:03:6d:ce:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A385F006CB4A332AED2E94013E7482A62617F17F Validity Not Before: Apr 7 15:56:28 2025 GMT Not After : Apr 11 02:47:28 2025 GMT Subject: CN=FA6B084DA618A43DC5FB5A8C39F3F4CA49B91CAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4c:8e:ed:99:38:d9:69:f5:0f:a7:e8:b4:34: 92:56:4f:46:6f:23:42:6b:a5:8c:dc:84:a4:a1:b8: cb:f3:61:a6:6c:d0:4e:dc:fd:a7:ec:bb:65:86:87: 1b:de:4c:9a:64:ac:2d:e5:ca:d1:4c:a6:4a:1e:96: 93:dd:d1:e9:98:b8:17:9e:36:2a:39:53:ba:6e:04: 44:75:5b:57:e5:73:e9:75:cc:2c:3d:9e:5e:a8:b1: 94:4d:5a:d0:38:f8:0a:3f:10:d4:30:5d:5f:ea:f3: 76:37:a5:32:c1:00:90:8c:d9:30:e8:c5:e9:21:a8: 2a:40:09:2c:da:3d:55:1a:97:c2:a3:29:50:f5:95: bc:2d:1a:2a:bd:a0:24:0e:e5:aa:58:ca:e6:a9:b2: 6b:14:4f:de:00:9d:f6:14:e3:13:3b:b8:38:7f:5f: 77:d9:e6:e5:6c:25:af:44:3e:39:85:5b:0d:cd:cc: a2:18:6e:20:62:30:88:78:f0:aa:eb:58:b1:d5:2e: d0:75:29:fb:31:72:81:dd:b6:7a:07:7c:96:4c:e4: 65:bb:94:1b:e9:33:ba:2a:79:04:1e:99:29:fa:fd: 89:97:a1:0a:8e:85:10:5a:2c:24:e5:77:8a:81:92: de:3f:84:1f:42:68:62:ed:69:9d:09:15:67:da:65: 10:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:6B:08:4D:A6:18:A4:3D:C5:FB:5A:8C:39:F3:F4:CA:49:B9:1C:AA X509v3 Authority Key Identifier: keyid:A3:85:F0:06:CB:4A:33:2A:ED:2E:94:01:3E:74:82:A6:26:17:F1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:12:1c:c9:85:4b:b0:5d:d5:0d:5d:62:20:40:05:74:a8:e0: 13:03:0e:73:22:9b:bd:21:89:ac:e7:df:f4:72:6c:ea:b4:35: e8:8a:bc:d5:fe:37:6f:01:63:31:d7:e9:06:6e:e2:76:91:d3: d8:12:18:4a:c8:61:65:13:be:56:77:03:d4:6d:43:ec:4e:7a: d9:db:c2:f3:10:53:02:10:ad:48:4f:7b:2e:4c:f7:31:20:e2: 21:9b:a8:5d:70:b2:ed:0b:e5:4d:a6:2b:8a:f7:4f:34:16:5a: 49:48:a6:93:f3:06:7b:39:04:04:2c:99:38:ff:dd:3d:03:3c: 0d:ae:c8:ca:e9:ce:46:d9:84:8d:87:8c:a8:c6:c3:56:c8:a4: 91:f4:dd:94:8a:b5:13:27:14:8c:ac:92:ab:5b:07:1c:db:e3: fc:10:45:bd:14:18:f7:cb:ab:a8:3d:7f:0c:82:d4:9e:2b:75: dc:1b:55:53:60:4a:d8:ba:b6:5c:ee:f5:61:d9:aa:2b:96:7c: fe:4e:d1:0d:e5:7d:08:f9:e4:01:05:70:f0:23:6f:9d:ce:9d: 96:20:bc:93:b7:35:e6:30:b3:c9:16:7b:49:d8:1a:ab:8f:95: 3d:d1:e4:68:61:fa:1a:cb:3a:d5:ac:b1:87:13:9a:18:40:83: bc:41:30:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGSeAbwerja4GO1lwml55HgNtzqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgyQTYy NjE3RjE3RjAeFw0yNTA0MDcxNTU2MjhaFw0yNTA0MTEwMjQ3MjhaMDMxMTAvBgNV BAMTKEZBNkIwODREQTYxOEE0M0RDNUZCNUE4QzM5RjNGNENBNDlCOTFDQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwTI7tmTjZafUPp+i0NJJWT0Zv I0JrpYzchKShuMvzYaZs0E7c/afsu2WGhxveTJpkrC3lytFMpkoelpPd0emYuBee Nio5U7puBER1W1flc+l1zCw9nl6osZRNWtA4+Ao/ENQwXV/q83Y3pTLBAJCM2TDo xekhqCpACSzaPVUal8KjKVD1lbwtGiq9oCQO5apYyuapsmsUT94AnfYU4xM7uDh/ X3fZ5uVsJa9EPjmFWw3NzKIYbiBiMIh48KrrWLHVLtB1KfsxcoHdtnoHfJZM5GW7 lBvpM7oqeQQemSn6/YmXoQqOhRBaLCTld4qBkt4/hB9CaGLtaZ0JFWfaZRDzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+msITaYYpD3F+1qMOfP0ykm5HKowHwYDVR0j BBgwFoAUo4XwBstKMyrtLpQBPnSCpiYX8X8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmUyYTJlMS0xYjJkLTQ4Y2MtOWRiMy02N2E4MWFmNjcwNjIvMC9BMzg1RjAwNkNC NEEzMzJBRUQyRTk0MDEzRTc0ODJBNjI2MTdGMTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgyQTYyNjE3 RjE3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZlMmEyZTEtMWIyZC00OGNjLTlk YjMtNjdhODFhZjY3MDYyLzAvQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgy QTYyNjE3RjE3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKYSHMmFS7Bd1Q1dYiBABXSo4BMDDnMim70h iazn3/RybOq0NeiKvNX+N28BYzHX6QZu4naR09gSGErIYWUTvlZ3A9RtQ+xOetnb wvMQUwIQrUhPey5M9zEg4iGbqF1wsu0L5U2mK4r3TzQWWklIppPzBns5BAQsmTj/ 3T0DPA2uyMrpzkbZhI2HjKjGw1bIpJH03ZSKtRMnFIyskqtbBxzb4/wQRb0UGPfL q6g9fwyC1J4rddwbVVNgSti6tlzu9WHZqiuWfP5O0Q3lfQj55AEFcPAjb53OnZYg vJO3NeYws8kWe0nYGquPlT3R5Ghh+hrLOtWssYcTmhhAg7xBMEA= -----END CERTIFICATE-----Generated at Tue Apr 8 13:26:00 2025 by rpki-client