$ rpki-client -vvf repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft File: 1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft (raw, json) Hash identifier: qfqWmg6mqVEeHwh9k5YMG6U7kMp+SWUVO5Tu/U+kzHQ= Subject key identifier: 5C:AC:C7:7C:6D:99:6C:9D:62:C5:DE:30:20:D7:60:6F:CD:51:13:11 Authority key identifier: 19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08 Certificate issuer: /CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808 Certificate serial: 1F74837A686A703E172FEEC991CE2EB0D8818205 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft Manifest number: AE Signing time: Sat 05 Apr 2025 13:00:01 +0000 Manifest this update: Sat 05 Apr 2025 12:55:01 +0000 Manifest next update: Tue 08 Apr 2025 21:14:01 +0000 Files and hashes: 1: 3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa (hash: Jwv0gA8fk3yoBN8wNHBZ8Dx27fR4hWBf2um8D+vcr6o=) 2: 1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl (hash: DGYNSI8pODVCNuoddKKKkxlopPnx9iG26jCvVfdI1A0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:74:83:7a:68:6a:70:3e:17:2f:ee:c9:91:ce:2e:b0:d8:81:82:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808 Validity Not Before: Apr 5 12:55:01 2025 GMT Not After : Apr 8 21:14:01 2025 GMT Subject: CN=5CACC77C6D996C9D62C5DE3020D7606FCD511311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f5:b9:d0:f3:80:1b:a2:34:f5:7f:25:42:a2: 88:ed:2f:c5:65:68:99:e0:54:b9:db:98:ca:58:14: ce:f9:be:3d:49:75:fe:d1:1e:f3:31:f9:fb:62:bb: 78:e2:b4:7a:7a:ae:19:79:a6:99:b5:8f:9f:56:a2: 9c:9f:cb:24:63:e1:22:80:3b:ea:8a:49:a8:3d:c6: 94:b9:e9:60:4f:14:a3:02:95:98:61:34:90:c3:43: bf:b0:19:ee:96:32:8b:7d:b2:c0:ff:b7:17:02:1c: 91:8c:a8:f2:01:fe:fc:83:f4:1b:81:6a:0e:27:f0: cc:5a:69:fb:b6:4f:ff:58:07:c2:a1:e2:ac:53:ff: 76:a4:ab:67:ef:cc:52:5d:88:b3:f6:0b:fc:7d:77: ba:3d:d8:9c:dd:e0:98:3c:a5:be:27:0c:a3:b0:6e: a1:c0:cd:45:45:69:d0:f7:e0:17:b6:b1:e9:51:14: cb:17:74:e7:3c:ab:98:a1:c3:fb:3a:65:81:8c:11: e2:5b:cd:46:0a:77:e5:38:ea:e2:f3:4f:5a:47:26: 5e:97:53:0a:2d:fb:ad:88:fa:4f:7e:7b:54:b0:23: 19:cc:b3:23:3d:34:69:b7:77:ea:5a:39:5e:77:ce: 2a:78:7c:88:a6:4c:d3:62:90:f5:d5:00:be:f6:42: b4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:AC:C7:7C:6D:99:6C:9D:62:C5:DE:30:20:D7:60:6F:CD:51:13:11 X509v3 Authority Key Identifier: keyid:19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:b2:03:6a:c6:98:21:3e:d6:75:04:d1:df:2c:5a:2a:e4:fb: 93:d3:5e:91:e3:58:76:ec:4d:a5:1b:6e:0c:19:a5:c3:04:00: 36:44:66:e4:df:2a:2c:48:3c:fc:60:87:da:44:29:bd:e2:cb: 6e:99:b5:3b:b1:32:ac:77:e1:2c:79:5d:5c:0f:01:f9:93:39: 2d:06:94:fe:3b:7a:14:0e:6a:34:88:4d:68:4c:7d:9c:7c:8b: 05:5d:c4:31:1c:01:52:47:4a:ee:56:ad:08:39:72:17:06:b5: 94:b9:a4:e1:e5:da:e9:19:6f:7a:7e:ea:87:42:5a:3e:81:97: 1e:11:d4:ca:c1:e9:97:da:ff:a2:a5:fe:4f:3b:61:37:29:a2: 0d:28:bc:73:ea:37:68:ae:d8:f8:a7:10:f1:92:69:be:59:91: b5:b6:01:fc:da:11:f0:e9:e5:69:00:21:c9:30:08:2f:06:85: 96:0e:f1:56:1c:b5:6b:cf:16:4b:d0:8c:f8:b8:cb:8e:37:ee: 77:6f:1d:b6:e7:52:3f:ac:32:97:be:83:39:ff:4e:a6:c1:f3: 0c:4c:6f:08:96:d0:17:e5:77:de:a3:84:fa:9c:30:92:76:22: 1c:a4:95:88:1c:a1:a9:98:60:94:43:14:9f:c7:bf:38:44:ec: 11:0b:14:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH3SDemhqcD4XL+7Jkc4usNiBggUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTNDMUE2 RTMwRTgwODAeFw0yNTA0MDUxMjU1MDFaFw0yNTA0MDgyMTE0MDFaMDMxMTAvBgNV BAMTKDVDQUNDNzdDNkQ5OTZDOUQ2MkM1REUzMDIwRDc2MDZGQ0Q1MTEzMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa9bnQ84AbojT1fyVCoojtL8Vl aJngVLnbmMpYFM75vj1Jdf7RHvMx+ftiu3jitHp6rhl5ppm1j59WopyfyyRj4SKA O+qKSag9xpS56WBPFKMClZhhNJDDQ7+wGe6WMot9ssD/txcCHJGMqPIB/vyD9BuB ag4n8Mxaafu2T/9YB8Kh4qxT/3akq2fvzFJdiLP2C/x9d7o92Jzd4Jg8pb4nDKOw bqHAzUVFadD34Be2selRFMsXdOc8q5ihw/s6ZYGMEeJbzUYKd+U46uLzT1pHJl6X Uwot+62I+k9+e1SwIxnMsyM9NGm3d+paOV53zip4fIimTNNikPXVAL72QrSLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXKzHfG2ZbJ1ixd4wINdgb81RExEwHwYDVR0j BBgwFoAUGRGuQYRd7i64hJDFdn48Gm4w6AgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTU3ZmE1ZC1mYTY3LTRlNmItODkyMC1jNDc0N2FkYjMwYmIvMC8xOTExQUU0MTg0 NURFRTJFQjg4NDkwQzU3NjdFM0MxQTZFMzBFODA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTNDMUE2RTMw RTgwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjk1N2ZhNWQtZmE2Ny00ZTZiLTg5 MjAtYzQ3NDdhZGIzMGJiLzAvMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTND MUE2RTMwRTgwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSyA2rGmCE+1nUE0d8sWirk+5PTXpHjWHbs TaUbbgwZpcMEADZEZuTfKixIPPxgh9pEKb3iy26ZtTuxMqx34Sx5XVwPAfmTOS0G lP47ehQOajSITWhMfZx8iwVdxDEcAVJHSu5WrQg5chcGtZS5pOHl2ukZb3p+6odC Wj6Blx4R1MrB6Zfa/6Kl/k87YTcpog0ovHPqN2iu2PinEPGSab5ZkbW2AfzaEfDp 5WkAIckwCC8GhZYO8VYctWvPFkvQjPi4y4437ndvHbbnUj+sMpe+gzn/TqbB8wxM bwiW0Bfld96jhPqcMJJ2IhyklYgcoamYYJRDFJ/HvzhE7BELFJ0= -----END CERTIFICATE-----Generated at Sat Apr 5 23:15:28 2025 by rpki-client