$ rpki-client -vvf repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft File: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft (raw, json) Hash identifier: ikhCnyVGi2/9yFeRTItZae63DOoHmDrI+PlTkxnVUJs= Subject key identifier: 36:75:3B:60:32:AD:05:11:3A:6E:11:F8:C3:E6:D8:42:F0:C7:56:CE Authority key identifier: 37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 Certificate issuer: /CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Certificate serial: 25C4D981E28618DE4340828BE166B06523B41BCB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft Manifest number: 02E8 Signing time: Sat 05 Apr 2025 02:31:45 +0000 Manifest this update: Sat 05 Apr 2025 02:26:45 +0000 Manifest next update: Tue 08 Apr 2025 06:25:45 +0000 Files and hashes: 1: 3230322e382e32382e302f32342d3234203d3e203435373234.roa (hash: TGxuSO9FhQBkLIc4jzv5QfgoJ8WtxbBE2A0wVyFxCQ8=) 2: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl (hash: 7ScPdJKO73uGJMykVfRFsOCf33m4zkk1/A+TsoXpJrA=) 3: 3230322e382e32392e302f32342d3234203d3e203435373234.roa (hash: 07rhNtW/Y5m4M95o6Mh9hHoZo9bTd6uBptdm1OPHIUg=) 4: 3130332e3233312e3131322e302f32322d3234203d3e203435373234.roa (hash: nUVinFsoY0w+ulYAvUeNGakliI15G1kEe5kQEWg5wpI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c4:d9:81:e2:86:18:de:43:40:82:8b:e1:66:b0:65:23:b4:1b:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Validity Not Before: Apr 5 02:26:45 2025 GMT Not After : Apr 8 06:25:45 2025 GMT Subject: CN=36753B6032AD05113A6E11F8C3E6D842F0C756CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f4:55:7b:88:ea:4c:02:87:12:1b:fe:fe:b3: ce:55:93:a7:1a:09:04:3c:c9:07:0a:46:ca:b5:dc: a7:fb:51:c9:64:eb:46:dc:a4:a3:0a:18:89:21:18: 3a:f0:cf:df:85:3f:98:91:3e:51:90:18:10:a1:df: 73:20:4d:ba:88:4c:07:6a:45:94:82:c6:23:dd:20: 67:92:60:79:6c:82:e4:d2:0c:31:33:9e:f7:50:89: 86:fd:27:24:cd:2f:30:c5:d5:e0:b3:45:d1:3d:64: e0:a7:39:3f:3f:1c:43:1e:25:e9:41:12:07:cb:08: 93:c2:9c:52:ba:75:ca:d7:0f:d1:54:b5:fd:bf:90: f8:90:16:3c:f7:f8:8d:a5:f7:0a:78:13:ea:c0:99: 0a:3b:ef:7c:b3:85:85:1f:0a:f5:1d:0c:2b:f2:5b: 13:f4:4c:2b:42:84:b0:ed:d6:c8:0f:8f:ed:81:7b: f5:c9:a6:0f:5e:80:2c:2d:66:df:6c:93:de:e8:13: 4f:3e:07:60:18:d9:a4:3b:59:08:91:5f:e5:31:e9: 83:87:2a:b6:76:4d:c6:ce:fa:00:a9:75:af:7c:5b: eb:75:c8:48:2a:b3:de:f9:0b:28:c8:2f:48:46:63: 22:c2:94:eb:4a:58:be:b8:bc:92:7c:54:b6:6a:70: 07:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:75:3B:60:32:AD:05:11:3A:6E:11:F8:C3:E6:D8:42:F0:C7:56:CE X509v3 Authority Key Identifier: keyid:37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:8c:87:ee:19:aa:26:2e:15:7f:35:12:2a:38:94:64:c2:47: d2:4c:20:42:e1:b3:d7:57:20:b6:58:0a:3f:29:d4:13:f8:be: 4a:e6:6f:cc:b4:3b:04:81:fa:2d:24:56:09:ee:d4:bb:62:4b: c0:c4:e5:a9:67:2e:4e:1d:32:71:24:f8:1f:eb:89:ed:40:5e: 0b:3a:9e:d8:ca:49:48:5f:c9:c5:f6:30:13:df:ff:33:d7:e4: cf:f9:7c:bf:9b:b9:53:0e:96:b1:f7:4b:3b:20:a4:fa:f6:6d: 6d:da:56:db:9c:fd:38:b2:0d:b6:7f:e9:26:4a:5d:aa:57:8f: 38:75:90:dd:a5:dc:b9:06:8f:36:f8:41:71:50:a7:69:36:35: 9d:96:d1:e8:b4:7c:70:d6:ce:bb:b3:22:7f:c1:d0:39:f7:bd: c3:eb:52:1d:e0:d3:28:f4:ce:1c:d9:b0:a7:29:bd:b8:3f:95: 80:57:13:71:20:12:53:0e:83:de:cc:71:be:a3:5f:14:c4:9a: ae:b0:1d:2c:4c:d2:47:a3:ec:00:3f:28:c4:a9:10:07:2a:d6: 44:8d:93:1d:92:ec:08:74:6f:c3:28:b0:bd:6d:6f:48:23:a6: f4:e5:97:bb:ac:a7:28:b1:e9:b6:15:d0:26:e1:ab:a5:b0:15: f5:3c:32:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJcTZgeKGGN5DQIKL4WawZSO0G8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBD ODhFNEJBOTAeFw0yNTA0MDUwMjI2NDVaFw0yNTA0MDgwNjI1NDVaMDMxMTAvBgNV BAMTKDM2NzUzQjYwMzJBRDA1MTEzQTZFMTFGOEMzRTZEODQyRjBDNzU2Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+9FV7iOpMAocSG/7+s85Vk6ca CQQ8yQcKRsq13Kf7Uclk60bcpKMKGIkhGDrwz9+FP5iRPlGQGBCh33MgTbqITAdq RZSCxiPdIGeSYHlsguTSDDEznvdQiYb9JyTNLzDF1eCzRdE9ZOCnOT8/HEMeJelB EgfLCJPCnFK6dcrXD9FUtf2/kPiQFjz3+I2l9wp4E+rAmQo773yzhYUfCvUdDCvy WxP0TCtChLDt1sgPj+2Be/XJpg9egCwtZt9sk97oE08+B2AY2aQ7WQiRX+Ux6YOH KrZ2TcbO+gCpda98W+t1yEgqs975CyjIL0hGYyLClOtKWL64vJJ8VLZqcAcRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNnU7YDKtBRE6bhH4w+bYQvDHVs4wHwYDVR0j BBgwFoAUNxln370gOi/UToj3htnw8MiOS6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWI4Yjg4OS0zYjNkLTRlZjUtYWQ3MC01YjEwNDVlZmYzOTMvMC8zNzE5NjdERkJE MjAzQTJGRDQ0RTg4Rjc4NkQ5RjBGMEM4OEU0QkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBDODhF NEJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGViOGI4ODktM2IzZC00ZWY1LWFk NzAtNWIxMDQ1ZWZmMzkzLzAvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYw RjBDODhFNEJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiMh+4ZqiYuFX81Eio4lGTCR9JMIELhs9dX ILZYCj8p1BP4vkrmb8y0OwSB+i0kVgnu1LtiS8DE5alnLk4dMnEk+B/rie1AXgs6 ntjKSUhfycX2MBPf/zPX5M/5fL+buVMOlrH3SzsgpPr2bW3aVtuc/TiyDbZ/6SZK XapXjzh1kN2l3LkGjzb4QXFQp2k2NZ2W0ei0fHDWzruzIn/B0Dn3vcPrUh3g0yj0 zhzZsKcpvbg/lYBXE3EgElMOg97Mcb6jXxTEmq6wHSxM0kej7AA/KMSpEAcq1kSN kx2S7Ah0b8MosL1tb0gjpvTll7uspyix6bYV0Cbhq6WwFfU8Mgw= -----END CERTIFICATE-----Generated at Sat Apr 5 15:30:44 2025 by rpki-client