$ rpki-client -vvf repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft File: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft (raw, json) Hash identifier: XuDmHEI4d3DTNRCP2Djbjek1uMI0DJw7T+TL6ntDfls= Subject key identifier: 10:83:A5:C6:5D:AC:3A:84:B3:FD:28:91:F4:6A:58:E3:8A:B8:E7:5C Authority key identifier: 4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD Certificate issuer: /CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Certificate serial: 3812217BB2E964ABE4B4853FD4718C256D33478F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft Manifest number: A7 Signing time: Wed 09 Apr 2025 13:31:34 +0000 Manifest this update: Wed 09 Apr 2025 13:26:34 +0000 Manifest next update: Sat 12 Apr 2025 20:18:34 +0000 Files and hashes: 1: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl (hash: noeb3SCqi/YHUEKWCt5fdAXqFWT1A4hvLvp4omHIgiE=) 2: 3135372e31302e36332e302f32342d3234203d3e20313532303835.roa (hash: 9mpAVpAO+aHJhHpBlGcLDx3eGU5On+hoBdAGOhixT1Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 12:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:12:21:7b:b2:e9:64:ab:e4:b4:85:3f:d4:71:8c:25:6d:33:47:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Validity Not Before: Apr 9 13:26:34 2025 GMT Not After : Apr 12 20:18:34 2025 GMT Subject: CN=1083A5C65DAC3A84B3FD2891F46A58E38AB8E75C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f8:20:52:3d:59:16:c2:98:58:6f:e9:96:0c: cd:53:2d:bf:09:ee:b9:26:5f:9d:67:34:3d:aa:7b: 2f:b2:0c:9a:a9:82:d8:c1:df:01:f6:2e:11:d4:9e: c1:2d:f6:6f:c1:2b:50:85:4a:80:68:96:20:a8:6c: af:d7:0a:78:d8:07:3c:75:b2:9d:9d:c7:8f:5e:39: e4:f0:30:af:69:50:4f:53:32:cb:9b:f1:65:29:e7: ea:49:8f:9d:c3:24:4a:b8:5f:4e:e4:0d:a8:7c:c0: 22:61:a4:bb:a9:42:4a:fd:3f:96:50:13:04:ef:c1: ac:98:0a:01:ae:79:9f:57:9e:ac:0e:d6:c9:b4:1d: a6:14:fa:dc:35:27:8e:ac:cd:5d:af:9a:9d:65:98: 48:4e:fa:9d:79:98:36:02:65:67:ce:8e:a6:79:d6: 27:20:ba:f0:df:75:73:b5:5d:c1:2f:c3:11:21:8c: c2:cf:cd:b5:20:b6:57:ef:9d:88:ed:9d:7e:5c:2a: 82:a4:53:cc:7d:ed:15:fa:31:9a:c3:fc:3a:cc:86: 55:e4:a0:f5:ed:41:bc:c1:b9:0a:01:bc:6d:9b:7e: 8b:30:a3:d5:e1:01:88:97:0e:46:01:84:38:3b:22: e1:cd:80:84:c7:53:c8:11:d1:47:e0:0a:e0:ef:34: 3e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:83:A5:C6:5D:AC:3A:84:B3:FD:28:91:F4:6A:58:E3:8A:B8:E7:5C X509v3 Authority Key Identifier: keyid:4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:08:e6:4c:6f:17:5b:f4:c2:5c:b9:d5:f4:2c:6c:de:b3:c3: 98:cd:63:98:a7:7b:4c:23:0c:46:52:3f:17:cd:99:74:2a:cc: 69:22:e1:91:f8:ca:3e:ad:65:17:56:9a:20:bf:e8:28:52:fc: 64:b9:ae:d0:ca:a1:5c:fc:46:6e:f1:53:a6:75:de:33:2c:9b: a7:75:1b:7a:01:f1:76:9b:e1:9e:82:b6:bc:d4:c5:2a:e9:00: 5f:0e:43:0f:c6:a0:66:01:5a:82:ae:43:7b:00:62:b4:10:fa: 20:ee:f8:c5:61:58:08:95:e9:fb:cd:7e:5a:07:5a:3f:5f:4b: 58:43:35:52:ad:b8:4f:db:08:2d:eb:2b:8d:15:02:cd:89:3c: 86:24:08:0d:63:88:86:29:85:71:e2:d1:bb:3e:0d:20:42:95: a0:ab:0a:4e:dd:2d:76:b8:f0:82:8a:f2:f7:4f:9f:98:5e:db: 53:c0:34:e4:a4:d6:07:9b:93:17:b8:46:3d:6f:7d:79:da:5a: c6:cd:08:1e:ca:cb:ec:45:7c:3b:f5:e0:fa:35:0d:f8:c2:90: 62:2d:91:ce:e3:0a:c3:3d:82:b9:0d:0c:17:09:ee:2c:cb:96: 1b:64:9c:9d:e7:4f:3f:5a:b4:d4:28:51:06:59:4d:d8:e1:d0: 84:b9:cd:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOBIhe7LpZKvktIU/1HGMJW0zR48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUw QkU1MkNCRDAeFw0yNTA0MDkxMzI2MzRaFw0yNTA0MTIyMDE4MzRaMDMxMTAvBgNV BAMTKDEwODNBNUM2NURBQzNBODRCM0ZEMjg5MUY0NkE1OEUzOEFCOEU3NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9+CBSPVkWwphYb+mWDM1TLb8J 7rkmX51nND2qey+yDJqpgtjB3wH2LhHUnsEt9m/BK1CFSoBoliCobK/XCnjYBzx1 sp2dx49eOeTwMK9pUE9TMsub8WUp5+pJj53DJEq4X07kDah8wCJhpLupQkr9P5ZQ EwTvwayYCgGueZ9XnqwO1sm0HaYU+tw1J46szV2vmp1lmEhO+p15mDYCZWfOjqZ5 1icguvDfdXO1XcEvwxEhjMLPzbUgtlfvnYjtnX5cKoKkU8x97RX6MZrD/DrMhlXk oPXtQbzBuQoBvG2bfoswo9XhAYiXDkYBhDg7IuHNgITHU8gR0UfgCuDvND5xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEIOlxl2sOoSz/SiR9GpY44q451wwHwYDVR0j BBgwFoAUSjd2TMgNG4poGeDw8UVGbgvlLL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDNhMmZkZi1iY2JhLTQ3NTctYjM2Ni1lMWEwYWQyZDM3NGEvMC80QTM3NzY0Q0M4 MEQxQjhBNjgxOUUwRjBGMTQ1NDY2RTBCRTUyQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUwQkU1 MkNCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQzYTJmZGYtYmNiYS00NzU3LWIz NjYtZTFhMGFkMmQzNzRhLzAvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2 NkUwQkU1MkNCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkI5kxvF1v0wly51fQsbN6zw5jNY5ine0wj DEZSPxfNmXQqzGki4ZH4yj6tZRdWmiC/6ChS/GS5rtDKoVz8Rm7xU6Z13jMsm6d1 G3oB8Xab4Z6CtrzUxSrpAF8OQw/GoGYBWoKuQ3sAYrQQ+iDu+MVhWAiV6fvNfloH Wj9fS1hDNVKtuE/bCC3rK40VAs2JPIYkCA1jiIYphXHi0bs+DSBClaCrCk7dLXa4 8IKK8vdPn5he21PANOSk1gebkxe4Rj1vfXnaWsbNCB7Ky+xFfDv14Po1DfjCkGIt kc7jCsM9grkNDBcJ7izLlhtknJ3nTz9atNQoUQZZTdjh0IS5zac= -----END CERTIFICATE-----Generated at Wed Apr 9 18:23:54 2025 by rpki-client