$ rpki-client -vvf repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft File: A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft (raw, json) Hash identifier: AUStXF0UzhbNb2ffv8eyRqCzQtkgeyrWSCFMQlskcJY= Subject key identifier: BA:29:F6:7B:84:C0:8A:0F:72:79:E2:B9:1F:47:B9:9D:53:4D:B9:88 Authority key identifier: A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD Certificate issuer: /CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD Certificate serial: 3F9BC66DA3EA1D572BF433D955AE9A1D76F02D02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft Manifest number: 017D Signing time: Thu 03 Apr 2025 14:41:06 +0000 Manifest this update: Thu 03 Apr 2025 14:36:06 +0000 Manifest next update: Sun 06 Apr 2025 22:18:06 +0000 Files and hashes: 1: A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl (hash: C8yeYzD/n1rWPa8rIfDGXnztkBQQKNvK/GZiGrqTMa0=) 2: 3130332e3134372e3134322e302f32332d3234203d3e203137373639.roa (hash: J8hK76n9jAxJfoZwmgnUWZPJmdbHYnBHcHNL1o/2t5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 22:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:9b:c6:6d:a3:ea:1d:57:2b:f4:33:d9:55:ae:9a:1d:76:f0:2d:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD Validity Not Before: Apr 3 14:36:06 2025 GMT Not After : Apr 6 22:18:06 2025 GMT Subject: CN=BA29F67B84C08A0F7279E2B91F47B99D534DB988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5f:da:74:5c:0f:3f:42:02:bb:f5:08:bc:c2: 44:cc:01:2c:e6:eb:c9:a1:e6:85:11:38:8c:d2:db: c3:e5:f6:dc:0f:67:0f:97:33:fe:c1:4b:36:6d:90: 42:a2:17:dc:d5:25:98:d6:a1:12:87:f9:b4:5e:37: 39:e8:56:a7:a8:71:a6:bc:8b:1b:a5:ec:79:b3:de: 91:89:69:ed:63:58:83:83:27:86:4b:63:d9:ed:03: 4f:d4:ba:43:cf:b8:e8:a9:c3:e9:11:6e:20:0c:3f: 20:fa:e3:71:e4:cc:c9:fd:cc:9c:18:42:1d:d9:65: 2b:ca:19:b6:6d:99:a9:79:e7:c3:0f:ea:f2:b8:f7: ba:f6:c5:7c:f3:4f:d5:0f:f2:4c:67:fd:99:30:9b: f4:61:a1:82:00:0b:20:ae:d7:22:8f:5f:e5:1d:11: f0:2a:58:4d:56:25:46:34:c4:23:60:c9:d2:61:a0: 5e:4a:c0:08:60:bd:f3:1e:c1:47:8c:77:2a:d9:21: 5f:12:ff:71:37:a4:21:75:25:41:33:ed:02:21:eb: 31:15:6e:0d:04:c0:f3:0d:b5:a6:f9:b5:2f:6d:c9: c4:55:2d:f1:ce:04:20:4c:fb:ac:d0:f7:15:eb:d5: 2d:e9:30:2c:77:08:dd:ab:58:1b:9e:f9:c3:a8:e5: 24:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:29:F6:7B:84:C0:8A:0F:72:79:E2:B9:1F:47:B9:9D:53:4D:B9:88 X509v3 Authority Key Identifier: keyid:A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:66:94:98:85:2a:d9:26:34:3d:f2:11:8d:de:93:59:84:a8: 1e:ce:eb:0d:df:23:66:cc:90:13:3e:55:f9:e7:8b:c8:2c:bd: 4b:6e:ca:8d:8c:8f:3d:df:04:85:b5:bc:cd:df:d5:5c:b2:0e: 86:e1:73:08:61:d7:1a:f5:d5:68:28:11:f8:9b:24:3a:e0:f9: 8d:4f:df:1c:ff:2f:b7:81:50:2e:7a:e6:61:c9:cf:56:4e:69: de:f2:75:2e:e4:46:d6:61:1e:fc:7b:7a:3d:7d:24:82:e4:52: 01:d8:f3:d1:95:af:a2:a8:c7:ff:ff:a5:22:52:42:25:b1:b5: 78:93:57:02:e9:4c:11:88:41:1a:6d:c4:fe:5f:07:94:de:4c: c7:d5:34:3a:95:c4:c2:5c:01:e8:81:e4:55:94:c8:25:48:0a: a3:3c:b5:a0:d5:e6:9b:4d:42:97:12:aa:b0:c1:b7:29:8f:c6: ff:3b:e4:a9:ca:8a:ac:db:92:ee:44:6c:5c:db:ca:dd:0e:0b: 60:f5:39:01:e3:94:ba:44:94:2b:a2:57:11:f0:40:22:44:91: 1b:16:14:de:12:24:f3:7b:58:bb:8a:e7:0d:55:15:29:c8:26: c7:30:79:fb:c4:9a:51:df:d8:38:c1:14:82:63:7a:fa:1e:e3: 01:06:b6:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP5vGbaPqHVcr9DPZVa6aHXbwLQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURDNjgx MUNGMTRCRDAeFw0yNTA0MDMxNDM2MDZaFw0yNTA0MDYyMjE4MDZaMDMxMTAvBgNV BAMTKEJBMjlGNjdCODRDMDhBMEY3Mjc5RTJCOTFGNDdCOTlENTM0REI5ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYX9p0XA8/QgK79Qi8wkTMASzm 68mh5oUROIzS28Pl9twPZw+XM/7BSzZtkEKiF9zVJZjWoRKH+bReNznoVqeocaa8 ixul7Hmz3pGJae1jWIODJ4ZLY9ntA0/UukPPuOipw+kRbiAMPyD643HkzMn9zJwY Qh3ZZSvKGbZtmal558MP6vK497r2xXzzT9UP8kxn/Zkwm/RhoYIACyCu1yKPX+Ud EfAqWE1WJUY0xCNgydJhoF5KwAhgvfMewUeMdyrZIV8S/3E3pCF1JUEz7QIh6zEV bg0EwPMNtab5tS9tycRVLfHOBCBM+6zQ9xXr1S3pMCx3CN2rWBue+cOo5STRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuin2e4TAig9yeeK5H0e5nVNNuYgwHwYDVR0j BBgwFoAUoteQJD7WULJ9elTr0WrcaBHPFL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmYwYWY2YS1jNjgwLTQ3MzEtOWI5Mi05YWE5M2Q5YzAxNmMvMC9BMkQ3OTAyNDNF RDY1MEIyN0Q3QTU0RUJEMTZBREM2ODExQ0YxNEJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURDNjgxMUNG MTRCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZmMGFmNmEtYzY4MC00NzMxLTli OTItOWFhOTNkOWMwMTZjLzAvQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURD NjgxMUNGMTRCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVmlJiFKtkmND3yEY3ek1mEqB7O6w3fI2bM kBM+Vfnni8gsvUtuyo2Mjz3fBIW1vM3f1VyyDobhcwhh1xr11WgoEfibJDrg+Y1P 3xz/L7eBUC565mHJz1ZOad7ydS7kRtZhHvx7ej19JILkUgHY89GVr6Kox///pSJS QiWxtXiTVwLpTBGIQRptxP5fB5TeTMfVNDqVxMJcAeiB5FWUyCVICqM8taDV5ptN QpcSqrDBtymPxv875KnKiqzbku5EbFzbyt0OC2D1OQHjlLpElCuiVxHwQCJEkRsW FN4SJPN7WLuK5w1VFSnIJscwefvEmlHf2DjBFIJjevoe4wEGtgw= -----END CERTIFICATE-----Generated at Sat Apr 5 19:06:38 2025 by rpki-client