$ rpki-client -vvf repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft File: 230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft (raw, json) Hash identifier: Nt1LQGvsdNIufRhT2qsbExb3dsnoc/27CZoCWLy/+W0= Subject key identifier: 07:31:1B:8E:28:0A:44:A9:F4:BC:FD:04:6E:98:4A:96:12:09:DD:E1 Authority key identifier: 23:0A:81:B2:83:31:4B:A7:9B:FA:02:4F:DF:9F:F4:DA:66:B4:24:BE Certificate issuer: /CN=230A81B283314BA79BFA024FDF9FF4DA66B424BE Certificate serial: 3B36CF8B223C8A8C9FB4C25C9273A6A76659BB6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft Manifest number: 01CA Signing time: Sat 03 May 2025 20:42:11 +0000 Manifest this update: Sat 03 May 2025 20:37:11 +0000 Manifest next update: Wed 07 May 2025 08:40:11 +0000 Files and hashes: 1: 230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl (hash: nTi5F9sxw50X/N/j4q4v+t2EADon2otZZR64s61hl/A=) 2: 3130332e3135322e3233382e302f32332d3234203d3e20313430343438.roa (hash: rBpy14k8W3mbLlNgX4J0/2ZVTjIArp0RYRGvkTqIoQQ=) 3: 323430363a333834303a3a2f33322d3438203d3e20313430343438.roa (hash: Ra1E9cOQanH1SiHnfJl04HYirMLU+Yh3tE7np1INosY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 08:40:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:36:cf:8b:22:3c:8a:8c:9f:b4:c2:5c:92:73:a6:a7:66:59:bb:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=230A81B283314BA79BFA024FDF9FF4DA66B424BE Validity Not Before: May 3 20:37:11 2025 GMT Not After : May 7 08:40:11 2025 GMT Subject: CN=07311B8E280A44A9F4BCFD046E984A961209DDE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:79:26:7d:6a:39:97:c6:76:e0:cf:f7:b6:b8: df:41:3c:21:17:bd:8b:51:be:b6:2e:84:f0:55:4d: 20:19:a7:af:2c:42:56:0f:c9:3e:d4:e0:85:6f:3f: 6c:ec:55:51:9c:b1:0a:d6:47:7b:4d:d5:26:49:02: 7b:2b:55:66:e6:d3:d8:0a:06:a8:80:57:e9:b2:c9: aa:f9:75:80:b2:18:f8:b9:62:3b:38:55:3f:d5:1d: e2:4c:cf:e2:0f:d7:cc:11:16:3e:db:b2:90:24:62: d5:f9:4e:8f:24:c6:2d:24:5e:92:93:65:0a:51:90: 7d:17:1b:8f:20:8a:aa:ae:9e:80:c3:03:73:4f:7f: da:71:b7:74:0f:9f:59:12:ed:ce:8a:a0:36:5b:33: 09:df:80:87:15:97:95:2d:3a:6c:49:3c:d9:c0:97: dd:8c:d2:28:d2:ad:4c:14:d3:32:79:63:54:f9:40: 65:8f:12:3e:5c:20:99:f5:7c:2d:42:9d:e3:4d:e5: 55:d0:b0:3f:ca:0d:e7:6c:ae:8c:7d:8a:df:ea:dc: bd:46:a3:53:15:d2:5c:fe:e7:ac:b9:2e:5d:10:82: 6a:82:39:6e:af:46:ab:10:ac:ed:fe:cc:cf:cd:a9: bb:32:ef:30:f0:ad:0f:d0:ac:0f:f6:54:96:ef:60: 60:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:31:1B:8E:28:0A:44:A9:F4:BC:FD:04:6E:98:4A:96:12:09:DD:E1 X509v3 Authority Key Identifier: keyid:23:0A:81:B2:83:31:4B:A7:9B:FA:02:4F:DF:9F:F4:DA:66:B4:24:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/230A81B283314BA79BFA024FDF9FF4DA66B424BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07a1ce4e-59c8-41cc-b5e6-bd7b7a704356/0/230A81B283314BA79BFA024FDF9FF4DA66B424BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:9e:04:69:89:9c:ca:45:b8:80:8f:38:25:cf:9e:2b:0d:7e: 92:08:53:83:8f:e9:75:c8:f6:45:17:2b:58:e5:ab:a3:5c:c0: 9b:db:74:7e:03:49:b3:81:2b:53:d3:32:f3:04:65:40:d3:d2: b9:6f:87:b2:89:ba:05:1d:58:60:f6:c2:b6:29:85:a7:64:08: b9:f7:1c:25:ce:0e:f4:61:87:c9:8b:64:da:60:df:6a:9c:92: 6d:df:65:c9:93:40:89:3d:7d:f1:6b:8f:eb:92:69:48:b6:b7: d3:96:90:05:46:7f:6e:8d:09:c2:50:45:05:1d:bd:80:54:fc: 7e:47:da:db:38:4c:e3:aa:5f:b0:5e:40:72:10:37:14:de:c8: 09:03:d3:c8:03:33:e4:86:36:fb:65:2e:b3:b4:2c:2b:50:8c: bf:52:90:67:9d:9f:e9:3e:f0:04:ee:33:d5:17:83:a3:a4:93: 86:3a:eb:8f:7f:fb:ae:2d:1a:f6:41:ac:73:24:16:04:6b:10: fe:cf:6a:a5:58:61:87:56:5f:1a:34:e8:a3:f3:d0:f5:26:62: 3c:73:36:48:22:73:9d:ee:10:89:03:2f:06:89:24:15:d4:ea: 04:30:af:7c:90:40:56:92:b6:ef:28:9a:6d:75:8a:a0:00:10: dd:36:16:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOzbPiyI8ioyftMJcknOmp2ZZu20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0REE2 NkI0MjRCRTAeFw0yNTA1MDMyMDM3MTFaFw0yNTA1MDcwODQwMTFaMDMxMTAvBgNV BAMTKDA3MzExQjhFMjgwQTQ0QTlGNEJDRkQwNDZFOTg0QTk2MTIwOURERTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOeSZ9ajmXxnbgz/e2uN9BPCEX vYtRvrYuhPBVTSAZp68sQlYPyT7U4IVvP2zsVVGcsQrWR3tN1SZJAnsrVWbm09gK BqiAV+myyar5dYCyGPi5Yjs4VT/VHeJMz+IP18wRFj7bspAkYtX5To8kxi0kXpKT ZQpRkH0XG48giqqunoDDA3NPf9pxt3QPn1kS7c6KoDZbMwnfgIcVl5UtOmxJPNnA l92M0ijSrUwU0zJ5Y1T5QGWPEj5cIJn1fC1CneNN5VXQsD/KDedsrox9it/q3L1G o1MV0lz+56y5Ll0QgmqCOW6vRqsQrO3+zM/Nqbsy7zDwrQ/QrA/2VJbvYGBjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBzEbjigKRKn0vP0EbphKlhIJ3eEwHwYDVR0j BBgwFoAUIwqBsoMxS6eb+gJP35/02ma0JL4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2ExY2U0ZS01OWM4LTQxY2MtYjVlNi1iZDdiN2E3MDQzNTYvMC8yMzBBODFCMjgz MzE0QkE3OUJGQTAyNEZERjlGRjREQTY2QjQyNEJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0REE2NkI0 MjRCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdhMWNlNGUtNTljOC00MWNjLWI1 ZTYtYmQ3YjdhNzA0MzU2LzAvMjMwQTgxQjI4MzMxNEJBNzlCRkEwMjRGREY5RkY0 REE2NkI0MjRCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWeBGmJnMpFuICPOCXPnisNfpIIU4OP6XXI 9kUXK1jlq6NcwJvbdH4DSbOBK1PTMvMEZUDT0rlvh7KJugUdWGD2wrYphadkCLn3 HCXODvRhh8mLZNpg32qckm3fZcmTQIk9ffFrj+uSaUi2t9OWkAVGf26NCcJQRQUd vYBU/H5H2ts4TOOqX7BeQHIQNxTeyAkD08gDM+SGNvtlLrO0LCtQjL9SkGedn+k+ 8ATuM9UXg6Okk4Y6649/+64tGvZBrHMkFgRrEP7PaqVYYYdWXxo06KPz0PUmYjxz Nkgic53uEIkDLwaJJBXU6gQwr3yQQFaStu8omm11iqAAEN02Fls= -----END CERTIFICATE-----Generated at Mon May 5 19:14:11 2025 by rpki-client