$ rpki-client -vvf repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft File: 4A243A1EC4991C40D3A6148515E3C51981B425F7.mft (raw, json) Hash identifier: V3WC2mrViL4iJdCaclAWMSohEKUcO5TwB+iK5+yN3VA= Subject key identifier: 81:39:89:E9:F0:17:2A:5A:45:0E:57:6D:FF:92:71:5A:CA:E0:85:CF Authority key identifier: 4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 Certificate issuer: /CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Certificate serial: 1ACFFC457478CBC345CA90612DA4ACA08C1D3B99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft Manifest number: 0158 Signing time: Sat 05 Apr 2025 03:10:58 +0000 Manifest this update: Sat 05 Apr 2025 03:05:58 +0000 Manifest next update: Tue 08 Apr 2025 14:17:58 +0000 Files and hashes: 1: 3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (hash: Rcu96XphgA8WvPbRK/1ptZ3CZTir4MCBj7MHKlWlNMw=) 2: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (hash: W7qNwUKI6yVYK0QKsHqMQf5TpfiakU3FHDTDzkx2y0k=) 3: 4A243A1EC4991C40D3A6148515E3C51981B425F7.crl (hash: Cnqhoqoirw/l8w0sDfbTe+/5jDXCXGXbuD6nLbX1eR8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 14:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:cf:fc:45:74:78:cb:c3:45:ca:90:61:2d:a4:ac:a0:8c:1d:3b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Validity Not Before: Apr 5 03:05:58 2025 GMT Not After : Apr 8 14:17:58 2025 GMT Subject: CN=813989E9F0172A5A450E576DFF92715ACAE085CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:01:ea:c6:27:50:24:1e:4b:a3:ce:32:98:a8: 5d:e8:70:43:15:6b:00:b4:fd:fa:25:2a:a0:2c:c6: e5:18:e0:a3:d9:4a:55:f7:de:5e:77:2e:17:b3:79: 92:71:10:ac:16:c5:e0:bc:12:f3:16:b4:fb:c5:e0: 06:ca:d1:ef:9d:08:c7:78:63:b0:d1:bd:91:1b:d9: 99:a5:9c:23:2c:e3:3a:f4:e1:c5:62:5b:9f:69:e1: b9:20:dd:bd:3e:5d:80:78:63:ab:a5:de:bb:ed:65: 2e:3f:81:dd:b3:ab:8c:6f:0f:b5:ea:c1:8e:cb:63: 51:80:9f:a2:d8:08:35:da:9a:8b:f0:d4:4d:fa:fe: 06:b1:ba:d7:38:b6:e6:4c:f9:18:24:d6:8f:ff:48: ab:66:2a:ac:62:f0:40:ff:4a:0f:9e:a5:97:56:f1: 08:a6:0a:8f:c3:05:ae:4c:86:38:60:83:ad:68:a8: 0f:83:9f:f6:27:eb:8d:2d:13:f7:b3:6d:6f:e3:bf: 5f:8e:79:e6:52:85:8f:3e:cc:35:85:5b:af:63:bf: 14:bf:46:11:43:c8:f9:b4:11:f4:e9:6e:cc:55:14: 25:c2:3f:e3:25:40:8c:fd:01:28:57:27:b6:38:7f: a9:dd:c4:a7:77:69:e9:f9:db:ae:08:d1:b5:20:2c: b2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:39:89:E9:F0:17:2A:5A:45:0E:57:6D:FF:92:71:5A:CA:E0:85:CF X509v3 Authority Key Identifier: keyid:4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:45:e2:f8:9d:e0:f3:aa:bb:59:ce:00:8a:50:37:91:2b:d2: 48:15:7a:5f:4c:e4:60:34:7d:b5:bd:0c:7e:5f:c1:3e:a0:5b: 6e:78:a0:00:d3:fe:cf:79:51:13:87:7d:1d:45:51:8e:82:a7: c5:ca:dc:55:da:b4:23:b9:af:4d:dc:31:10:d7:a2:88:83:ea: f4:71:39:f9:34:75:05:13:a1:48:b6:86:52:88:4d:1e:f6:c9: c5:de:43:9a:38:11:94:26:fb:07:0e:e1:f7:99:16:27:55:70: 5c:e5:b7:31:9f:13:c0:8f:41:39:1f:03:ab:66:90:46:cb:75: e5:50:48:9f:d7:3f:bb:06:c8:6f:25:c6:15:03:06:12:59:06: d5:ee:c1:af:90:d6:ac:df:80:37:bb:b7:ad:e5:60:e0:0f:5b: 3c:ed:15:61:a4:5d:a1:a1:dc:52:72:e0:84:ec:db:95:4c:09: 24:d1:3c:cc:e5:0e:5f:bb:f9:80:2e:57:ec:a7:0d:ce:bf:24: dc:50:26:01:ad:9e:fe:4a:f8:a2:36:78:86:a8:9d:0c:50:e3: 3c:dd:10:9b:c3:82:4a:af:90:d7:05:fa:64:41:c8:8c:1f:1e: 64:82:4d:c7:cd:58:72:95:43:f3:80:73:3c:cd:82:3e:17:b4: e3:65:18:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGs/8RXR4y8NFypBhLaSsoIwdO5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4 MUI0MjVGNzAeFw0yNTA0MDUwMzA1NThaFw0yNTA0MDgxNDE3NThaMDMxMTAvBgNV BAMTKDgxMzk4OUU5RjAxNzJBNUE0NTBFNTc2REZGOTI3MTVBQ0FFMDg1Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiAerGJ1AkHkujzjKYqF3ocEMV awC0/folKqAsxuUY4KPZSlX33l53LhezeZJxEKwWxeC8EvMWtPvF4AbK0e+dCMd4 Y7DRvZEb2ZmlnCMs4zr04cViW59p4bkg3b0+XYB4Y6ul3rvtZS4/gd2zq4xvD7Xq wY7LY1GAn6LYCDXamovw1E36/gaxutc4tuZM+Rgk1o//SKtmKqxi8ED/Sg+epZdW 8QimCo/DBa5Mhjhgg61oqA+Dn/Yn640tE/ezbW/jv1+OeeZShY8+zDWFW69jvxS/ RhFDyPm0EfTpbsxVFCXCP+MlQIz9AShXJ7Y4f6ndxKd3aen5264I0bUgLLK1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgTmJ6fAXKlpFDldt/5JxWsrghc8wHwYDVR0j BBgwFoAUSiQ6HsSZHEDTphSFFePFGYG0JfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yzg4OTJlYi1kZGMwLTRjYjYtOTU3Yy1iNjUzZjI4YmJmMzkvMC80QTI0M0ExRUM0 OTkxQzQwRDNBNjE0ODUxNUUzQzUxOTgxQjQyNUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4MUI0 MjVGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM4ODkyZWItZGRjMC00Y2I2LTk1 N2MtYjY1M2YyOGJiZjM5LzAvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1 MTk4MUI0MjVGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKdF4vid4POqu1nOAIpQN5Er0kgVel9M5GA0 fbW9DH5fwT6gW254oADT/s95UROHfR1FUY6Cp8XK3FXatCO5r03cMRDXooiD6vRx Ofk0dQUToUi2hlKITR72ycXeQ5o4EZQm+wcO4feZFidVcFzltzGfE8CPQTkfA6tm kEbLdeVQSJ/XP7sGyG8lxhUDBhJZBtXuwa+Q1qzfgDe7t63lYOAPWzztFWGkXaGh 3FJy4ITs25VMCSTRPMzlDl+7+YAuV+ynDc6/JNxQJgGtnv5K+KI2eIaonQxQ4zzd EJvDgkqvkNcF+mRByIwfHmSCTcfNWHKVQ/OAczzNgj4XtONlGJg= -----END CERTIFICATE-----Generated at Mon Apr 7 13:03:00 2025 by rpki-client