$ rpki-client -vvf repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft File: C43D9C91D389ADDD2039882757F731CAFAAC740F.mft (raw, json) Hash identifier: XTZFQixJpmsxEfBu1aBa3v2sbW/83q/+/U+FTCTRLLE= Subject key identifier: 7F:66:09:DA:04:D7:EC:DF:4E:25:5A:2B:3B:84:62:97:4A:8F:6E:2C Authority key identifier: C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F Certificate issuer: /CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Certificate serial: 18D45AF91689E45900AB834C8622F731824AE985 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft Manifest number: 01D6 Signing time: Sat 05 Apr 2025 06:40:49 +0000 Manifest this update: Sat 05 Apr 2025 06:35:49 +0000 Manifest next update: Tue 08 Apr 2025 12:50:49 +0000 Files and hashes: 1: 323030313a6466313a353438303a3a2f34382d3438203d3e20313339333737.roa (hash: UhZmsK1JV2dvdlJPQwAkZ3FUoREjtD3PWxnZnEWW6L0=) 2: 3130332e3134322e3139352e302f32342d3234203d3e20313339333737.roa (hash: +/f3QiszY3XbrdRJyoIxW8G+STpu2ntK0BASvPpvFYs=) 3: 3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa (hash: yRanOZGnih6RR4ZAoNL3Hr2Kj0Og2jieWRKzIVb/EXs=) 4: C43D9C91D389ADDD2039882757F731CAFAAC740F.crl (hash: vPAQf5VeJyH3WHv4aoJFVmtpkKEjW0nqKaQVMIPlRVQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:d4:5a:f9:16:89:e4:59:00:ab:83:4c:86:22:f7:31:82:4a:e9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Validity Not Before: Apr 5 06:35:49 2025 GMT Not After : Apr 8 12:50:49 2025 GMT Subject: CN=7F6609DA04D7ECDF4E255A2B3B8462974A8F6E2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6b:fb:54:d5:cc:07:fc:5f:f5:31:b7:aa:90: 66:b7:0a:86:7e:0c:76:12:27:76:d1:8a:f1:60:0c: 9b:b3:53:76:14:3a:f6:c0:68:79:87:fa:ff:4f:fc: c3:85:cd:bf:81:a3:b3:4f:0e:d4:da:87:4a:ef:90: 14:3f:bd:b6:00:d8:0b:41:a2:54:12:5a:01:19:aa: 2b:50:c6:59:f1:a1:2d:42:58:0d:99:46:73:98:c7: 34:69:5c:30:8a:ad:68:f6:a5:66:87:68:94:4a:5d: 16:da:17:4d:dd:7f:6c:6a:50:df:16:70:9a:87:00: 0c:60:70:48:e8:50:4a:c6:33:db:fb:24:2d:e9:92: b9:bb:66:bb:5f:82:bb:81:49:bb:7a:a8:7b:1b:28: bc:e7:c2:41:06:42:8a:5d:e8:e4:d8:d6:37:05:7a: 49:e6:22:67:d6:0c:3c:06:04:55:a7:82:3b:57:4a: 62:39:87:88:a0:90:a8:37:87:26:7a:c4:84:3d:ae: 64:81:f7:84:e0:76:e9:68:da:8c:a9:76:b9:34:8c: cb:17:fc:cd:a1:fe:ab:ab:e8:d6:4f:3b:df:04:06: 7d:1c:8c:4e:01:db:dc:c3:85:c2:4f:6b:7f:5b:9b: 49:32:ff:a9:19:9a:12:9d:3a:4c:53:6e:71:9b:0c: 47:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:66:09:DA:04:D7:EC:DF:4E:25:5A:2B:3B:84:62:97:4A:8F:6E:2C X509v3 Authority Key Identifier: keyid:C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:c6:d9:b2:27:59:b0:78:03:92:6a:f2:6b:85:d9:7a:9a:21: a6:6c:23:4a:50:8b:c5:81:e2:10:f2:46:3e:7d:2f:b4:03:6a: 2a:71:96:c0:0d:d3:96:a2:b7:32:ac:99:4c:8f:66:74:a8:c6: b1:70:06:ba:2c:6b:70:44:67:80:fb:33:f1:87:41:a3:78:4f: 5d:6f:f5:01:df:36:29:52:35:bb:8d:82:c1:51:2b:fe:a2:e7: 72:08:5f:cb:a6:af:98:29:ed:1c:37:77:fe:65:d8:eb:40:2a: 1a:28:b8:11:1a:c9:48:fd:2c:c4:f2:7b:78:29:4a:ab:f9:39: 33:96:9c:5d:b3:bf:15:ce:69:9d:b9:19:e3:e9:59:08:81:86: 81:90:7f:0a:a5:72:94:90:6f:86:4e:92:7d:04:f6:a0:b1:a2: 1f:2b:6f:4f:be:89:07:5b:e7:86:f4:c4:1d:ab:2b:1f:70:d5: 92:5c:68:46:50:49:04:6d:7b:8d:7d:8c:64:14:51:11:cb:12: d7:99:ae:92:14:50:12:94:67:d0:fd:9f:25:57:0e:42:8d:7a: 97:95:8d:31:87:bb:2e:ec:32:8d:9d:72:58:8d:b6:91:01:12: 8b:25:8e:fa:86:1b:6b:20:54:80:9f:c1:97:7c:68:cf:fc:e5: a5:50:bc:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGNRa+RaJ5FkAq4NMhiL3MYJK6YUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FG QUFDNzQwRjAeFw0yNTA0MDUwNjM1NDlaFw0yNTA0MDgxMjUwNDlaMDMxMTAvBgNV BAMTKDdGNjYwOURBMDREN0VDREY0RTI1NUEyQjNCODQ2Mjk3NEE4RjZFMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYa/tU1cwH/F/1MbeqkGa3CoZ+ DHYSJ3bRivFgDJuzU3YUOvbAaHmH+v9P/MOFzb+Bo7NPDtTah0rvkBQ/vbYA2AtB olQSWgEZqitQxlnxoS1CWA2ZRnOYxzRpXDCKrWj2pWaHaJRKXRbaF03df2xqUN8W cJqHAAxgcEjoUErGM9v7JC3pkrm7ZrtfgruBSbt6qHsbKLznwkEGQopd6OTY1jcF eknmImfWDDwGBFWngjtXSmI5h4igkKg3hyZ6xIQ9rmSB94Tgdulo2oypdrk0jMsX /M2h/qur6NZPO98EBn0cjE4B29zDhcJPa39bm0ky/6kZmhKdOkxTbnGbDEdpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf2YJ2gTX7N9OJVorO4Ril0qPbiwwHwYDVR0j BBgwFoAUxD2ckdOJrd0gOYgnV/cxyvqsdA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmFhMmQxMC0zZmFhLTQyNzItYmUxZi04MTAyOTU3YjY1ZTYvMC9DNDNEOUM5MUQz ODlBREREMjAzOTg4Mjc1N0Y3MzFDQUZBQUM3NDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FGQUFD NzQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJhYTJkMTAtM2ZhYS00MjcyLWJl MWYtODEwMjk1N2I2NWU2LzAvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMx Q0FGQUFDNzQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMXG2bInWbB4A5Jq8muF2XqaIaZsI0pQi8WB 4hDyRj59L7QDaipxlsAN05aitzKsmUyPZnSoxrFwBrosa3BEZ4D7M/GHQaN4T11v 9QHfNilSNbuNgsFRK/6i53IIX8umr5gp7Rw3d/5l2OtAKhoouBEayUj9LMTye3gp Sqv5OTOWnF2zvxXOaZ25GePpWQiBhoGQfwqlcpSQb4ZOkn0E9qCxoh8rb0++iQdb 54b0xB2rKx9w1ZJcaEZQSQRte419jGQUURHLEteZrpIUUBKUZ9D9nyVXDkKNepeV jTGHuy7sMo2dcliNtpEBEosljvqGG2sgVICfwZd8aM/85aVQvB8= -----END CERTIFICATE-----Generated at Sat Apr 5 19:06:15 2025 by rpki-client