$ rpki-client -vvf repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft File: 42CB30013F9704EFBDCF784FCD60289C7620A373.mft (raw, json) Hash identifier: cf9XKtk+pl5HL+HJr9Q1BqYU0V9RuIQf83atagVTggY= Subject key identifier: 97:44:33:11:0C:BC:7B:8D:69:4D:96:C3:6B:63:97:FB:7F:8A:58:6A Authority key identifier: 42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73 Certificate issuer: /CN=42CB30013F9704EFBDCF784FCD60289C7620A373 Certificate serial: 38F99C13834AD44F0BFD34CC97129C7023EBF054 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft Manifest number: 033F Signing time: Fri 18 Apr 2025 17:21:08 +0000 Manifest this update: Fri 18 Apr 2025 17:16:08 +0000 Manifest next update: Tue 22 Apr 2025 04:42:08 +0000 Files and hashes: 1: 3130332e3136392e3133342e302f32342d3234203d3e20313432333338.roa (hash: hMyDLqAom528DiTqwsKMUbv/O7C6Y2ZAhArZmLvzcpE=) 2: 3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa (hash: PLelRX92KnqBZTiq93z7FJFIC0ok4NpLF8ErJ3rGKfw=) 3: 42CB30013F9704EFBDCF784FCD60289C7620A373.crl (hash: /aqzXe5PSXhVc2352Wv2JFNbgsuAZDow/+MCyx2LbkY=) 4: 3130332e3136392e3133352e302f32342d3234203d3e20313432333338.roa (hash: tZygjXNqZieNjL+HqAvvCVSbJQiTp3/pMsS78j175rQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 00:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f9:9c:13:83:4a:d4:4f:0b:fd:34:cc:97:12:9c:70:23:eb:f0:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CB30013F9704EFBDCF784FCD60289C7620A373 Validity Not Before: Apr 18 17:16:08 2025 GMT Not After : Apr 22 04:42:08 2025 GMT Subject: CN=974433110CBC7B8D694D96C36B6397FB7F8A586A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:58:87:78:5b:3b:60:2a:0a:79:dc:a7:28:c4: 26:8b:8f:ee:e3:b4:d3:6f:9b:c9:0b:e0:b5:af:16: dd:48:77:20:93:80:da:c8:ad:34:6e:fc:77:97:2e: 1b:23:80:8c:59:3e:d6:cd:c8:f5:87:f5:64:09:c9: db:8b:11:b7:ab:76:a3:aa:58:91:29:85:ea:b5:c5: c9:f8:87:76:bd:55:b0:18:6a:1d:75:79:a2:2b:08: 1b:98:f8:de:23:07:00:ce:0d:67:40:46:77:ac:79: bc:5e:d9:23:ca:f3:36:36:9a:52:28:40:89:4e:f2: 04:2c:ef:45:d8:91:8e:1f:2d:68:ee:65:22:86:c6: 77:f8:ce:19:1d:e7:a2:9e:9e:51:29:aa:f6:72:49: 2c:38:8e:30:f6:0d:b2:d8:6a:a6:06:e1:0c:5a:32: da:ea:31:34:f4:76:3f:ad:77:ad:1e:f9:6b:db:91: 2c:ad:3a:87:a7:bd:87:59:55:43:38:0e:2a:06:6a: 23:8e:ce:e2:09:a6:9f:ee:8d:27:73:b1:07:bd:d8: 9c:41:42:19:8d:37:ff:5b:ff:f3:d5:e2:5e:59:95: cc:6d:34:25:b0:36:f3:e5:c1:4e:64:7e:65:6e:84: 9f:30:11:62:98:c0:35:82:8c:2d:b9:18:fa:2f:9f: 8a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:44:33:11:0C:BC:7B:8D:69:4D:96:C3:6B:63:97:FB:7F:8A:58:6A X509v3 Authority Key Identifier: keyid:42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a2:34:cc:65:be:b3:df:d5:fa:d9:ff:9f:6a:a0:82:70:a0: ca:68:97:c1:5a:ce:6c:ad:75:c6:89:b2:9e:3c:9b:5d:ac:ed: 0f:84:9d:cf:ea:9d:d7:03:d5:b7:ac:44:93:14:c3:3f:b6:c2: 3a:98:20:82:c6:65:98:d0:13:d8:92:b2:84:59:b4:b0:d2:7a: a4:50:51:ee:eb:36:e3:ba:a8:81:4c:e9:c6:e8:08:15:d8:2e: d1:f3:31:81:46:90:69:43:ad:16:81:55:a9:24:4d:2a:53:b1: d3:ac:51:f4:0b:57:b3:f8:7d:98:98:e6:65:c1:c0:aa:21:88: 7e:58:a5:9c:03:63:0d:e5:dc:c5:2e:3c:d9:6e:2c:da:61:00: 75:e5:bc:e1:0b:b5:19:88:4c:67:50:de:c6:4b:bb:7e:4a:8f: 6c:02:e3:1e:42:98:f8:47:99:a6:e9:0b:5a:e8:2b:c2:21:8f: ae:82:d9:9f:7c:ed:6e:6d:1d:8b:5a:60:d4:70:01:3e:57:c4: f0:00:d2:cb:e0:13:62:94:78:4a:ea:16:3b:07:38:71:f9:1e: 94:7d:70:19:a8:c6:0e:79:89:1c:40:7a:43:4d:11:9a:27:13: 18:21:9b:68:a4:ee:f7:61:7a:52:89:08:fa:0c:41:7e:62:31: 98:f5:68:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOPmcE4NK1E8L/TTMlxKccCPr8FQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4OUM3 NjIwQTM3MzAeFw0yNTA0MTgxNzE2MDhaFw0yNTA0MjIwNDQyMDhaMDMxMTAvBgNV BAMTKDk3NDQzMzExMENCQzdCOEQ2OTREOTZDMzZCNjM5N0ZCN0Y4QTU4NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfWId4WztgKgp53KcoxCaLj+7j tNNvm8kL4LWvFt1IdyCTgNrIrTRu/HeXLhsjgIxZPtbNyPWH9WQJyduLEberdqOq WJEpheq1xcn4h3a9VbAYah11eaIrCBuY+N4jBwDODWdARnesebxe2SPK8zY2mlIo QIlO8gQs70XYkY4fLWjuZSKGxnf4zhkd56KenlEpqvZySSw4jjD2DbLYaqYG4Qxa MtrqMTT0dj+td60e+WvbkSytOoenvYdZVUM4DioGaiOOzuIJpp/ujSdzsQe92JxB QhmNN/9b//PV4l5ZlcxtNCWwNvPlwU5kfmVuhJ8wEWKYwDWCjC25GPovn4q/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl0QzEQy8e41pTZbDa2OX+3+KWGowHwYDVR0j BBgwFoAUQsswAT+XBO+9z3hPzWAonHYgo3MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTAwM2Q2Yy05NWYxLTQ3YTQtOWQ1ZC1mN2I0OGNhYWE3ZjQvMC80MkNCMzAwMTNG OTcwNEVGQkRDRjc4NEZDRDYwMjg5Qzc2MjBBMzczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4OUM3NjIw QTM3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjkwMDNkNmMtOTVmMS00N2E0LTlk NWQtZjdiNDhjYWFhN2Y0LzAvNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4 OUM3NjIwQTM3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqiNMxlvrPf1frZ/59qoIJwoMpol8Fazmyt dcaJsp48m12s7Q+Enc/qndcD1besRJMUwz+2wjqYIILGZZjQE9iSsoRZtLDSeqRQ Ue7rNuO6qIFM6cboCBXYLtHzMYFGkGlDrRaBVakkTSpTsdOsUfQLV7P4fZiY5mXB wKohiH5YpZwDYw3l3MUuPNluLNphAHXlvOELtRmITGdQ3sZLu35Kj2wC4x5CmPhH mabpC1roK8Ihj66C2Z987W5tHYtaYNRwAT5XxPAA0svgE2KUeErqFjsHOHH5HpR9 cBmoxg55iRxAekNNEZonExghm2ik7vdhelKJCPoMQX5iMZj1aDw= -----END CERTIFICATE-----Generated at Sat Apr 19 16:01:01 2025 by rpki-client