$ rpki-client -vvf repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft File: 439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft (raw, json) Hash identifier: /kIUBTsyahJQNGVWPYxhKk1gB/mI3r0oBtgWrQXqYvo= Subject key identifier: 0D:56:9C:C3:C0:9D:CE:DE:FB:67:19:96:A6:21:0F:93:5C:56:B2:4D Authority key identifier: 43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 Certificate issuer: /CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057 Certificate serial: 4D8664A580BF2D9C67C19B515F4F467293B7CF65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft Manifest number: 01B1 Signing time: Wed 19 Feb 2025 11:40:44 +0000 Manifest this update: Wed 19 Feb 2025 11:35:44 +0000 Manifest next update: Sat 22 Feb 2025 21:06:44 +0000 Files and hashes: 1: 3130332e3138372e39302e302f32342d3234203d3e20313439383839.roa (hash: Qhaq6Vv40uX/zzLekFlWUrrGqgBIJAaA692wJ/q4O9w=) 2: 439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl (hash: Rahx7mGOLS/sg2T4GE2O1W8h20L5vX3hCg+TcbR7kUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 21:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:86:64:a5:80:bf:2d:9c:67:c1:9b:51:5f:4f:46:72:93:b7:cf:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439D16E03D05D5CECA2B7F135D2BBB1B30105057 Validity Not Before: Feb 19 11:35:44 2025 GMT Not After : Feb 22 21:06:44 2025 GMT Subject: CN=0D569CC3C09DCEDEFB671996A6210F935C56B24D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e7:d5:a8:68:62:85:fb:69:b3:59:c0:43:bb: c9:4c:f8:75:f5:6d:8e:95:dd:c8:d4:4a:aa:fe:55: 45:d8:57:08:24:3a:85:1f:4e:40:6b:f6:52:f9:3e: a0:5a:8f:26:e3:58:22:fd:0b:0e:12:7e:29:3b:2e: a1:e9:df:b2:95:97:62:b1:06:52:50:f7:6c:7e:46: 26:db:5b:42:ff:58:0f:9b:1f:9b:0d:9a:30:be:8f: 97:19:e6:18:99:0b:bd:78:52:84:d2:90:a4:62:e7: 00:95:28:e8:5c:94:23:f6:e1:64:fb:4f:4d:06:31: 88:36:7e:c1:67:77:b3:f8:52:34:d8:3b:0a:2f:d0: 71:72:fc:22:8e:01:31:e4:cf:a3:9a:44:52:0e:85: 8f:ff:fb:6b:f0:a0:3b:ca:3c:2e:a6:09:a7:c3:7c: 0d:5a:45:4b:68:cc:dc:24:6b:e4:ec:97:f0:6d:52: c9:06:e1:ea:7b:81:95:3f:d8:1a:02:36:9b:30:c5: 61:bb:a3:e7:9a:9d:f2:30:21:a8:2a:2c:33:83:ca: bd:f2:b3:b8:d2:38:cf:db:f0:f6:e7:6a:3b:1b:e0: 92:43:90:df:cb:c5:aa:fd:22:33:28:05:04:fa:09: a8:e6:10:6e:a8:a0:77:d4:53:f7:51:56:4b:e6:4b: e9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:56:9C:C3:C0:9D:CE:DE:FB:67:19:96:A6:21:0F:93:5C:56:B2:4D X509v3 Authority Key Identifier: keyid:43:9D:16:E0:3D:05:D5:CE:CA:2B:7F:13:5D:2B:BB:1B:30:10:50:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439D16E03D05D5CECA2B7F135D2BBB1B30105057.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8f3b37d-fe4d-436d-a93b-e1f6fcc9fc4d/0/439D16E03D05D5CECA2B7F135D2BBB1B30105057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:96:d9:22:8b:dd:03:5d:b6:42:cc:4e:af:fc:6e:c2:0c:9c: fe:0a:e3:68:96:33:c9:bb:9d:1d:80:11:88:2d:83:eb:4f:7d: 67:eb:76:13:83:d5:9b:ed:92:20:6e:34:18:93:61:c0:e6:4a: 15:83:06:ce:e4:7b:a4:38:47:11:c9:3c:60:45:31:7f:69:69: 24:91:5c:2b:e7:3f:6c:9c:11:bf:e4:d1:f0:60:9b:b2:4b:ea: 3e:d2:67:0b:4c:68:32:7a:d2:d5:e0:65:05:5e:ad:8d:95:5b: a9:a8:99:bb:b2:ce:8b:2e:04:d4:a8:3b:aa:4a:72:65:83:34: a8:27:8e:e8:3d:62:df:66:77:dc:82:e1:c0:6f:4a:a7:c0:88: 53:bb:1f:23:5f:bc:76:da:77:7c:c7:76:15:6f:ea:e2:70:ce: e8:9e:d9:58:ff:eb:a5:92:0d:0a:4d:26:2b:c7:1b:a3:db:c7: 68:be:4a:2d:c4:fa:05:f9:1f:29:09:d0:21:e8:5b:78:90:48: a3:3d:37:5f:ca:ed:13:03:0f:43:10:70:1b:7c:78:93:a9:a5: ed:63:55:9d:8a:c1:be:fc:ab:f0:ae:69:88:90:ac:6e:f7:9a: 68:40:3b:8e:3d:c6:76:83:11:0d:df:e8:c6:3c:d1:58:9b:f7: 2c:7b:be:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTYZkpYC/LZxnwZtRX09GcpO3z2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIz MDEwNTA1NzAeFw0yNTAyMTkxMTM1NDRaFw0yNTAyMjIyMTA2NDRaMDMxMTAvBgNV BAMTKDBENTY5Q0MzQzA5RENFREVGQjY3MTk5NkE2MjEwRjkzNUM1NkIyNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ59WoaGKF+2mzWcBDu8lM+HX1 bY6V3cjUSqr+VUXYVwgkOoUfTkBr9lL5PqBajybjWCL9Cw4Sfik7LqHp37KVl2Kx BlJQ92x+RibbW0L/WA+bH5sNmjC+j5cZ5hiZC714UoTSkKRi5wCVKOhclCP24WT7 T00GMYg2fsFnd7P4UjTYOwov0HFy/CKOATHkz6OaRFIOhY//+2vwoDvKPC6mCafD fA1aRUtozNwka+Tsl/BtUskG4ep7gZU/2BoCNpswxWG7o+eanfIwIagqLDODyr3y s7jSOM/b8Pbnajsb4JJDkN/Lxar9IjMoBQT6CajmEG6ooHfUU/dRVkvmS+krAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDVacw8Cdzt77ZxmWpiEPk1xWsk0wHwYDVR0j BBgwFoAUQ50W4D0F1c7KK38TXSu7GzAQUFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGYzYjM3ZC1mZTRkLTQzNmQtYTkzYi1lMWY2ZmNjOWZjNGQvMC80MzlEMTZFMDNE MDVENUNFQ0EyQjdGMTM1RDJCQkIxQjMwMTA1MDU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJCMUIzMDEw NTA1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThmM2IzN2QtZmU0ZC00MzZkLWE5 M2ItZTFmNmZjYzlmYzRkLzAvNDM5RDE2RTAzRDA1RDVDRUNBMkI3RjEzNUQyQkJC MUIzMDEwNTA1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEeW2SKL3QNdtkLMTq/8bsIMnP4K42iWM8m7 nR2AEYgtg+tPfWfrdhOD1ZvtkiBuNBiTYcDmShWDBs7ke6Q4RxHJPGBFMX9paSSR XCvnP2ycEb/k0fBgm7JL6j7SZwtMaDJ60tXgZQVerY2VW6mombuyzosuBNSoO6pK cmWDNKgnjug9Yt9md9yC4cBvSqfAiFO7HyNfvHbad3zHdhVv6uJwzuie2Vj/66WS DQpNJivHG6Pbx2i+Si3E+gX5HykJ0CHoW3iQSKM9N1/K7RMDD0MQcBt8eJOppe1j VZ2Kwb78q/CuaYiQrG73mmhAO449xnaDEQ3f6MY80Vib9yx7vqI= -----END CERTIFICATE-----Generated at Wed Feb 19 22:21:22 2025 by rpki-client