$ rpki-client -vvf repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft File: 3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft (raw, json) Hash identifier: uBpJNjQebwvmgITNupdMeCNDnL20sDGMkoUWvRMrZnE= Subject key identifier: AC:A0:E4:E2:BA:16:4F:B8:E3:A8:0E:6C:D6:F2:DB:5B:EA:86:65:5B Authority key identifier: 31:94:DF:D6:64:57:35:9A:F7:BF:3B:F0:9E:A7:66:AD:EF:13:29:B5 Certificate issuer: /CN=3194DFD66457359AF7BF3BF09EA766ADEF1329B5 Certificate serial: 2B378AEA8749BA0D5FEE5546D8990FF67001049E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft Manifest number: 3A Signing time: Wed 07 May 2025 17:50:45 +0000 Manifest this update: Wed 07 May 2025 17:45:45 +0000 Manifest next update: Sun 11 May 2025 03:13:45 +0000 Files and hashes: 1: 3130332e3136322e33352e302f32342d3234203d3e20313431363535.roa (hash: 2q+rh+u7xtZBbh00UB11LmVHu3mC0doj4usif/1P0SE=) 2: 3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl (hash: hcDFXhZIHG6TE+vws9vifdEhK0EZYziUeKfdj5D6RvY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 03:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:37:8a:ea:87:49:ba:0d:5f:ee:55:46:d8:99:0f:f6:70:01:04:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3194DFD66457359AF7BF3BF09EA766ADEF1329B5 Validity Not Before: May 7 17:45:45 2025 GMT Not After : May 11 03:13:45 2025 GMT Subject: CN=ACA0E4E2BA164FB8E3A80E6CD6F2DB5BEA86655B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:49:e3:b1:dc:e0:59:1e:83:8b:99:a5:0b:51: 0e:ef:b9:fc:aa:94:d2:d7:6c:37:01:7b:6d:3a:fd: 1d:50:a9:95:f4:5d:c9:85:c7:b5:3c:65:4a:2d:53: 4e:d2:62:94:c1:30:c3:63:fe:4b:57:18:24:fd:24: 54:11:62:85:5e:5c:d2:35:6e:97:2f:07:9f:26:4f: e7:4e:16:ba:b1:e7:1d:c4:65:6e:df:c3:dc:f2:ed: dd:ed:f8:2b:d7:5c:c6:8f:3f:60:1e:2f:f2:de:88: bb:7f:eb:9f:b3:06:aa:ae:21:0d:6c:1f:06:b8:da: ac:a1:0b:c3:6e:f3:62:3d:7f:d3:26:e9:6c:f3:de: 61:d7:87:41:19:ba:c3:ed:b9:fa:20:57:c4:95:af: 4f:52:e9:dc:a3:a9:a3:56:9a:96:ee:74:58:ea:eb: 00:26:74:50:a9:ea:93:56:7c:a5:62:91:ad:65:29: 4e:e6:1f:0b:ab:04:94:36:09:71:ff:cb:5a:e2:d9: eb:6d:15:c9:ac:6f:49:1d:00:bf:47:05:fe:8e:a2: bd:94:0f:af:f9:51:4c:e6:2a:e9:c9:b3:a3:d7:90: 86:5e:07:40:59:53:b3:21:0e:84:85:43:74:da:92: de:9b:d9:db:f9:f8:50:c4:46:d8:5b:3c:fc:b7:8b: 2e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A0:E4:E2:BA:16:4F:B8:E3:A8:0E:6C:D6:F2:DB:5B:EA:86:65:5B X509v3 Authority Key Identifier: keyid:31:94:DF:D6:64:57:35:9A:F7:BF:3B:F0:9E:A7:66:AD:EF:13:29:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:83:5c:0f:dc:05:cc:32:1c:64:29:27:35:21:94:2f:1e:f1: 54:e9:4e:66:ce:64:bf:01:24:1b:26:b5:11:57:8e:6b:d2:1a: 58:ee:03:96:be:80:55:fa:7e:67:aa:2f:a9:9f:e5:a3:7a:4d: 25:e6:76:40:0e:81:43:eb:57:02:cb:38:0a:56:66:63:30:98: ab:88:4f:32:00:e0:01:f6:f2:fe:88:d7:b3:64:c0:39:bb:aa: b4:9c:95:48:a6:45:07:b7:a1:00:a1:5d:59:91:f6:a3:19:d4: ca:24:7b:15:b8:22:97:93:f1:a3:c8:58:0c:b1:1a:f3:9c:80: 48:8a:ae:96:92:c5:24:ec:07:24:13:cf:f8:2d:c9:c6:70:d2: b6:2a:36:34:ea:a8:2c:fe:98:f1:53:47:ff:52:96:8a:61:4b: c8:2a:ec:5b:89:bc:e0:e8:1e:23:70:7f:43:13:6a:31:fa:6b: 04:b2:9c:5a:c1:e7:f3:ff:b9:fe:51:d2:24:57:57:5f:f6:5d: 36:f3:86:dc:5b:3b:e3:d5:33:3e:52:27:91:50:40:1f:ff:29: b1:d9:c2:cd:02:9f:44:ff:ae:79:dc:52:ef:63:e3:cc:38:2b: af:c3:db:40:57:6c:38:a8:2f:ad:60:36:2a:a5:82:ad:39:7d: e8:90:30:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKzeK6odJug1f7lVG2JkP9nABBJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2QURF RjEzMjlCNTAeFw0yNTA1MDcxNzQ1NDVaFw0yNTA1MTEwMzEzNDVaMDMxMTAvBgNV BAMTKEFDQTBFNEUyQkExNjRGQjhFM0E4MEU2Q0Q2RjJEQjVCRUE4NjY1NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjSeOx3OBZHoOLmaULUQ7vufyq lNLXbDcBe206/R1QqZX0XcmFx7U8ZUotU07SYpTBMMNj/ktXGCT9JFQRYoVeXNI1 bpcvB58mT+dOFrqx5x3EZW7fw9zy7d3t+CvXXMaPP2AeL/LeiLt/65+zBqquIQ1s Hwa42qyhC8Nu82I9f9Mm6Wzz3mHXh0EZusPtufogV8SVr09S6dyjqaNWmpbudFjq 6wAmdFCp6pNWfKVika1lKU7mHwurBJQ2CXH/y1ri2ettFcmsb0kdAL9HBf6Oor2U D6/5UUzmKunJs6PXkIZeB0BZU7MhDoSFQ3Takt6b2dv5+FDERthbPPy3iy6vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrKDk4roWT7jjqA5s1vLbW+qGZVswHwYDVR0j BBgwFoAUMZTf1mRXNZr3vzvwnqdmre8TKbUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y M2JhMDI0Yi04N2YyLTRlZGQtODlmZi1hNGZjYTcwMDhjMzYvMC8zMTk0REZENjY0 NTczNTlBRjdCRjNCRjA5RUE3NjZBREVGMTMyOUI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2QURFRjEz MjlCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjNiYTAyNGItODdmMi00ZWRkLTg5 ZmYtYTRmY2E3MDA4YzM2LzAvMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2 QURFRjEzMjlCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADuDXA/cBcwyHGQpJzUhlC8e8VTpTmbOZL8B JBsmtRFXjmvSGljuA5a+gFX6fmeqL6mf5aN6TSXmdkAOgUPrVwLLOApWZmMwmKuI TzIA4AH28v6I17NkwDm7qrSclUimRQe3oQChXVmR9qMZ1MokexW4IpeT8aPIWAyx GvOcgEiKrpaSxSTsByQTz/gtycZw0rYqNjTqqCz+mPFTR/9SlophS8gq7FuJvODo HiNwf0MTajH6awSynFrB5/P/uf5R0iRXV1/2XTbzhtxbO+PVMz5SJ5FQQB//KbHZ ws0Cn0T/rnncUu9j48w4K6/D20BXbDioL61gNiqlgq05feiQMCk= -----END CERTIFICATE-----Generated at Thu May 8 13:10:47 2025 by rpki-client