$ rpki-client -vvf repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft File: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft (raw, json) Hash identifier: lVTWTo4nP1wzWD90k0HrOmYBkWjRr2REkUSPCpsoV8Y= Subject key identifier: 7F:0A:EE:95:A8:FD:70:FB:A7:64:17:D3:B9:7A:5D:83:1F:D6:E3:82 Authority key identifier: 43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E Certificate issuer: /CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E Certificate serial: 2A2150B49DDEA6553B0F59CA28706D4E161DAF29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft Manifest number: 040D Signing time: Sun 06 Apr 2025 14:00:40 +0000 Manifest this update: Sun 06 Apr 2025 13:55:40 +0000 Manifest next update: Wed 09 Apr 2025 19:55:40 +0000 Files and hashes: 1: 3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa (hash: QOFHoPuY9NpdPQj6xa7cBpnTsr+iASD85o3lNcYlh68=) 2: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl (hash: Wsg5BBzx9xv1ejkpffrfLfZjspuySUHayPLXeyxhkNU=) 3: 3130332e3233332e3130322e302f32332d3234203d3e20313336313037.roa (hash: JI3pjhPmyInlzEtZ8PXbjRWk78z+cy0q6o/inypVTws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 19:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:21:50:b4:9d:de:a6:55:3b:0f:59:ca:28:70:6d:4e:16:1d:af:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E Validity Not Before: Apr 6 13:55:40 2025 GMT Not After : Apr 9 19:55:40 2025 GMT Subject: CN=7F0AEE95A8FD70FBA76417D3B97A5D831FD6E382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:21:2c:d4:b4:b5:4a:3c:f0:1b:f5:98:7f:f8: 78:c5:b1:1e:be:d5:63:af:fa:3b:0f:de:62:99:db: 6a:93:48:32:5a:79:2a:6d:b4:93:32:8d:5d:b4:c4: 53:1c:fa:26:48:b5:1b:d9:9f:f4:a4:3b:fb:d9:80: b2:f3:8a:0d:e0:aa:84:7f:ba:4a:db:71:6b:1c:6b: da:c4:14:d9:69:88:86:69:76:13:a7:b0:fd:de:be: 68:0e:53:38:ee:8e:c8:9f:e7:9a:87:35:37:72:d5: df:01:24:77:9a:e6:d6:38:84:16:8b:53:58:30:2f: 0f:1b:f5:19:f3:c1:1e:f4:37:14:51:e0:4f:36:cd: d6:45:2b:cd:24:d8:20:ca:cd:62:72:b7:ac:54:67: d9:70:24:f7:86:69:3b:92:5b:f9:44:17:a7:f1:f1: f7:c6:28:72:9f:ff:36:a0:0a:36:bf:b2:d4:91:81: bf:bd:ae:d8:74:9c:47:cd:50:70:57:e0:a7:54:64: d2:ae:42:7d:e1:8d:60:99:af:5a:de:a6:e0:08:9b: 0a:cb:b6:96:9b:ab:42:75:90:de:59:e0:16:fa:d5: 89:5a:94:da:b3:83:5b:18:36:58:8e:83:1b:00:1b: a6:d1:28:fe:82:0e:0d:2f:4e:7f:a6:b3:0f:9e:b9: de:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:0A:EE:95:A8:FD:70:FB:A7:64:17:D3:B9:7A:5D:83:1F:D6:E3:82 X509v3 Authority Key Identifier: keyid:43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:30:11:88:8a:36:f9:8c:c9:fd:51:6a:fe:7a:e5:4a:92:74: fc:69:12:78:76:f3:6e:30:3c:89:d7:be:c5:72:d3:fc:20:b2: 4a:da:97:bd:27:73:f6:8e:11:3f:ac:fe:47:32:b7:42:1a:30: 67:4c:bc:51:29:83:67:f6:c1:d0:5f:58:7d:89:2e:88:0b:a8: 3e:ee:bf:ad:dc:67:f8:8d:d3:45:9e:ce:f1:ac:7d:21:93:b8: 26:11:87:98:5e:45:17:84:46:0b:7e:8f:fe:b8:a2:6e:bd:41: 57:55:73:80:90:94:3f:a9:4e:b5:62:93:ca:ce:49:d9:cc:66: 21:02:0f:87:a1:65:b4:aa:66:c6:79:83:fc:78:3b:f2:48:d9: 2c:db:89:6d:4d:5d:9b:e5:6f:f5:b6:8f:bd:9e:86:76:db:fb: e7:b4:8e:0d:2e:a0:45:e1:49:bc:e9:2b:bd:a4:9d:e0:cb:04: f0:6d:68:29:3c:b8:51:4b:59:ae:d5:f0:f6:18:7f:99:e8:05: 2f:8a:f0:ef:3a:bc:90:a8:24:ec:3f:a7:48:07:fc:12:f0:03: 87:35:54:f8:fe:4a:85:89:83:a3:78:f5:84:75:6c:ea:9a:94: 24:19:da:2e:fb:6f:e4:24:15:b6:94:bf:69:24:21:64:42:e5: 5d:ef:b9:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKiFQtJ3eplU7D1nKKHBtThYdrykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERC Rjk5QTgxRTAeFw0yNTA0MDYxMzU1NDBaFw0yNTA0MDkxOTU1NDBaMDMxMTAvBgNV BAMTKDdGMEFFRTk1QThGRDcwRkJBNzY0MTdEM0I5N0E1RDgzMUZENkUzODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ISzUtLVKPPAb9Zh/+HjFsR6+ 1WOv+jsP3mKZ22qTSDJaeSpttJMyjV20xFMc+iZItRvZn/SkO/vZgLLzig3gqoR/ ukrbcWsca9rEFNlpiIZpdhOnsP3evmgOUzjujsif55qHNTdy1d8BJHea5tY4hBaL U1gwLw8b9RnzwR70NxRR4E82zdZFK80k2CDKzWJyt6xUZ9lwJPeGaTuSW/lEF6fx 8ffGKHKf/zagCja/stSRgb+9rth0nEfNUHBX4KdUZNKuQn3hjWCZr1repuAImwrL tpabq0J1kN5Z4Bb61YlalNqzg1sYNliOgxsAG6bRKP6CDg0vTn+msw+eud4HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfwrulaj9cPunZBfTuXpdgx/W44IwHwYDVR0j BBgwFoAUQ5pJgVSauxUbEtbshfyNDb+ZqB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTQ3MjMxZi0wMmRkLTQ5ZTgtYWEyNS0yZDU0YzBhOTk5Y2EvMC80MzlBNDk4MTU0 OUFCQjE1MUIxMkQ2RUM4NUZDOEQwREJGOTlBODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERCRjk5 QTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0NzIzMWYtMDJkZC00OWU4LWFh MjUtMmQ1NGMwYTk5OWNhLzAvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhE MERCRjk5QTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcwEYiKNvmMyf1Rav565UqSdPxpEnh2824w PInXvsVy0/wgskral70nc/aOET+s/kcyt0IaMGdMvFEpg2f2wdBfWH2JLogLqD7u v63cZ/iN00WezvGsfSGTuCYRh5heRReERgt+j/64om69QVdVc4CQlD+pTrVik8rO SdnMZiECD4ehZbSqZsZ5g/x4O/JI2SzbiW1NXZvlb/W2j72ehnbb++e0jg0uoEXh SbzpK72kneDLBPBtaCk8uFFLWa7V8PYYf5noBS+K8O86vJCoJOw/p0gH/BLwA4c1 VPj+SoWJg6N49YR1bOqalCQZ2i77b+QkFbaUv2kkIWRC5V3vufU= -----END CERTIFICATE-----Generated at Mon Apr 7 11:47:49 2025 by rpki-client