$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft File: A0021383E40D55B69009CDEA313E654C3CE463B0.mft (raw, json) Hash identifier: KTvExfKjJCAr6tK4uE8Yp2zEnktRlgE/vhD07tLISUk= Subject key identifier: 1D:03:F3:C8:FC:6A:8B:80:6C:7F:81:B4:6B:40:F7:D3:44:13:31:B8 Authority key identifier: A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0 Certificate issuer: /CN=A0021383E40D55B69009CDEA313E654C3CE463B0 Certificate serial: 42F28E0FDF45909D07ECE0CAFDB6D32907BD2275 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft Manifest number: 041F Signing time: Thu 08 May 2025 18:01:36 +0000 Manifest this update: Thu 08 May 2025 17:56:36 +0000 Manifest next update: Sun 11 May 2025 23:22:36 +0000 Files and hashes: 1: 3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa (hash: jXDgy/eb14qmJfmNT0dKlIUN6+pIglpydCTus9xQXkw=) 2: A0021383E40D55B69009CDEA313E654C3CE463B0.crl (hash: wPBy4OAiRslp0LwVbRS8ylIFh0amIs4rSx27r528jsc=) 3: 3130332e3135382e3139332e302f32342d3234203d3e20313439373035.roa (hash: rXrrXvyCDd8NdDQpC4YJVYW6xZrnJFF55E2ij+QGKtw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 23:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f2:8e:0f:df:45:90:9d:07:ec:e0:ca:fd:b6:d3:29:07:bd:22:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0021383E40D55B69009CDEA313E654C3CE463B0 Validity Not Before: May 8 17:56:36 2025 GMT Not After : May 11 23:22:36 2025 GMT Subject: CN=1D03F3C8FC6A8B806C7F81B46B40F7D3441331B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2a:33:27:ad:43:24:ff:25:53:70:ce:d1:9b: 47:07:85:79:40:c5:4f:e1:2f:07:95:e2:7b:98:73: 98:38:b2:cb:bd:b9:20:78:ea:e2:b4:78:2f:5f:a7: b9:d0:56:cf:37:89:5a:a3:e9:21:98:1b:48:16:66: 2a:d0:49:a3:86:98:e4:14:b1:a9:91:c6:ba:7d:7b: c7:7a:cb:0e:9d:3f:d7:90:ff:35:1e:64:8f:4b:df: cd:1e:47:e0:1c:59:aa:91:5b:86:6e:20:d5:37:0d: e1:77:3a:40:1b:4d:4c:ae:21:6c:39:0d:b0:96:ec: 7b:4c:18:55:6b:6d:2f:df:c4:5a:be:33:70:33:e9: a9:14:d5:3f:ac:df:25:1b:4e:0d:7d:89:93:69:20: a8:d1:4b:c1:ba:3d:ea:d9:b3:5c:ce:d6:7b:83:24: 15:5c:71:65:24:78:42:1f:38:90:29:f0:73:8c:2e: 5a:bb:17:49:b3:6c:dd:91:50:dc:4f:ce:4e:d9:3f: 7d:d1:2d:4e:19:be:75:52:cd:65:48:6f:3d:92:42: c9:a2:c0:be:39:c6:00:e9:8a:ac:75:27:f8:66:d7: ef:5b:83:3d:d7:72:d7:f6:af:da:bf:a1:c4:9a:b2: 34:da:f5:78:d8:f7:9b:dd:bd:76:5b:74:07:85:f0: 3a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:03:F3:C8:FC:6A:8B:80:6C:7F:81:B4:6B:40:F7:D3:44:13:31:B8 X509v3 Authority Key Identifier: keyid:A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:4d:8c:cd:86:61:2f:06:04:ee:78:8f:d7:28:54:69:94:cb: bd:c4:e8:46:98:25:64:36:59:59:0d:b0:55:ca:c8:51:40:ab: 63:c3:d0:76:69:d6:5a:c7:6b:e6:ed:16:14:3e:46:fd:84:93: 81:10:01:ca:e1:d0:d8:aa:2e:9b:ab:96:1c:fa:6d:dd:03:f0: ef:8d:4e:57:0f:83:67:d6:2d:08:1b:e9:9c:e7:a2:08:c9:58: b1:1f:1d:c4:44:01:e8:b5:fe:ad:46:d4:12:c0:b5:e8:81:ad: bf:b9:f6:f7:92:b4:61:6c:20:ed:65:ce:dd:a4:fa:fc:e8:32: ff:28:10:d1:06:62:e9:24:6b:f7:0e:7e:8f:d8:79:2e:98:00: f9:95:07:9d:a3:e0:46:3c:d3:62:44:bd:26:de:e7:c5:c2:f3: 6b:d2:4f:0e:3e:89:6e:f4:9e:67:28:45:1b:8d:9c:7a:c7:a2: ec:83:29:d5:17:69:ac:1b:e9:69:ae:63:6b:65:ca:62:9a:ed: 33:ee:68:63:52:f0:ce:b5:8a:bb:a8:f0:8e:25:22:09:4d:d4: 42:71:00:7b:3e:99:18:89:24:52:f5:dd:fe:b1:e3:9f:37:73: 3d:d6:6a:e8:a3:9d:55:89:5e:5d:f9:70:0c:c5:df:ed:fb:66: 06:dc:0c:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQvKOD99FkJ0H7ODK/bbTKQe9InUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1NEMz Q0U0NjNCMDAeFw0yNTA1MDgxNzU2MzZaFw0yNTA1MTEyMzIyMzZaMDMxMTAvBgNV BAMTKDFEMDNGM0M4RkM2QThCODA2QzdGODFCNDZCNDBGN0QzNDQxMzMxQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHKjMnrUMk/yVTcM7Rm0cHhXlA xU/hLweV4nuYc5g4ssu9uSB46uK0eC9fp7nQVs83iVqj6SGYG0gWZirQSaOGmOQU samRxrp9e8d6yw6dP9eQ/zUeZI9L380eR+AcWaqRW4ZuINU3DeF3OkAbTUyuIWw5 DbCW7HtMGFVrbS/fxFq+M3Az6akU1T+s3yUbTg19iZNpIKjRS8G6PerZs1zO1nuD JBVccWUkeEIfOJAp8HOMLlq7F0mzbN2RUNxPzk7ZP33RLU4ZvnVSzWVIbz2SQsmi wL45xgDpiqx1J/hm1+9bgz3Xctf2r9q/ocSasjTa9XjY95vdvXZbdAeF8DojAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHQPzyPxqi4Bsf4G0a0D300QTMbgwHwYDVR0j BBgwFoAUoAITg+QNVbaQCc3qMT5lTDzkY7AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjZjNjE0Zi1kMGZmLTQxYTktOTJkMC0zYTIxMzU4MTUzN2IvMC9BMDAyMTM4M0U0 MEQ1NUI2OTAwOUNERUEzMTNFNjU0QzNDRTQ2M0IwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1NEMzQ0U0 NjNCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2YzYxNGYtZDBmZi00MWE5LTky ZDAtM2EyMTM1ODE1MzdiLzAvQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1 NEMzQ0U0NjNCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApNjM2GYS8GBO54j9coVGmUy73E6EaYJWQ2 WVkNsFXKyFFAq2PD0HZp1lrHa+btFhQ+Rv2Ek4EQAcrh0NiqLpurlhz6bd0D8O+N TlcPg2fWLQgb6ZznogjJWLEfHcREAei1/q1G1BLAteiBrb+59veStGFsIO1lzt2k +vzoMv8oENEGYukka/cOfo/YeS6YAPmVB52j4EY802JEvSbe58XC82vSTw4+iW70 nmcoRRuNnHrHouyDKdUXaawb6WmuY2tlymKa7TPuaGNS8M61iruo8I4lIglN1EJx AHs+mRiJJFL13f6x4583cz3WauijnVWJXl35cAzF3+37ZgbcDKU= -----END CERTIFICATE-----Generated at Sat May 10 11:30:24 2025 by rpki-client