$ rpki-client -vvf repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft File: 0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft (raw, json) Hash identifier: uMhzE2oLIpG55IYoKdfPaBcgkwC1Hvn6rPsP00GwXNM= Subject key identifier: E9:43:C1:BD:3D:42:BE:8F:85:36:43:7A:00:0C:E0:87:2E:3B:EA:A5 Authority key identifier: 0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53 Certificate issuer: /CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853 Certificate serial: 623E7AADA2377AB0AF4D869DB9F87DFE3C230912 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer Subject info access: rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft Manifest number: 0378 Signing time: Sun 04 May 2025 10:11:48 +0000 Manifest this update: Sun 04 May 2025 10:06:48 +0000 Manifest next update: Wed 07 May 2025 16:00:48 +0000 Files and hashes: 1: 3130332e3131322e352e302f32342d3234203d3e20313332363639.roa (hash: bZ83knFcAIH+x3MCllavMdUXghwNZQdIi5y8BOAPyxE=) 2: 3130332e3131322e34352e302f32342d3234203d3e20313332363639.roa (hash: Z4m+4VYQxa9asx7q0PvLa+6IIDMkLHF/pNBvi09vFpg=) 3: 3130332e3131322e34342e302f32332d3233203d3e20313332363639.roa (hash: 6cj5uI59cR8iuhB+dGI9lfG37MPFAcebdXbUM0Dv2Ak=) 4: 0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl (hash: LsX91yN5wAAFZV5yxwq7GmIK6z0lfBePtsuk6hxtZxw=) 5: 3130332e3131322e34342e302f32342d3234203d3e20313332363639.roa (hash: KXby9djIRSMhLtiY+1iIK8h6Zdgp7aSyIhPxwupb118=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 16:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:3e:7a:ad:a2:37:7a:b0:af:4d:86:9d:b9:f8:7d:fe:3c:23:09:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853 Validity Not Before: May 4 10:06:48 2025 GMT Not After : May 7 16:00:48 2025 GMT Subject: CN=E943C1BD3D42BE8F8536437A000CE0872E3BEAA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:61:d6:1a:ca:f3:c3:d7:cb:6c:f7:e5:89:fb: 6f:4d:0d:62:51:53:30:31:ba:98:c9:f0:8f:a5:70: 1f:cb:72:d8:3a:8d:24:fe:27:0d:3c:7e:fb:42:80: 88:8a:85:1f:4c:37:ce:ab:e5:53:7d:f2:c1:63:e4: 8d:64:ff:fa:d1:c4:40:96:16:c8:fa:6b:4c:9d:10: 08:69:09:eb:b0:21:61:03:ce:ef:c0:ff:cf:97:04: 00:a1:2d:3c:78:92:37:dc:e6:e3:53:f9:f2:e3:ec: 74:01:c2:a8:64:8a:f2:c0:35:9e:2e:37:11:18:15: e6:e4:3f:30:e2:8d:0c:b8:97:28:0c:95:9e:a7:ad: b1:e9:95:49:45:7e:32:43:dd:74:69:41:35:9f:88: d9:d9:c7:ae:ee:2d:8b:e7:d4:2a:23:c9:1c:2e:15: 8a:cf:63:3e:95:08:c2:0c:ec:1e:3a:88:ca:24:10: 2d:8e:4f:27:ab:0b:df:26:b5:ff:37:84:e1:05:f5: 6b:c2:d7:60:83:e8:90:30:9e:bd:60:ec:3d:c4:a7: 13:0c:6f:46:31:a9:fe:59:65:e6:69:b9:69:59:5d: ee:bc:65:54:82:da:da:5f:a6:41:6c:7e:c3:be:18: 14:c1:df:d2:52:d0:ee:62:3b:59:2f:a8:26:3e:f7: 8e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:43:C1:BD:3D:42:BE:8F:85:36:43:7A:00:0C:E0:87:2E:3B:EA:A5 X509v3 Authority Key Identifier: keyid:0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:ff:78:43:2c:1e:ba:05:83:7b:ab:b9:56:11:06:0d:60:79: 5a:f0:f3:1e:21:54:2f:f1:43:70:02:25:d6:14:64:3c:d5:22: 72:ca:d0:59:82:bd:c5:a8:ce:7b:e7:63:aa:69:16:c6:87:b3: 43:14:bc:a2:55:c0:ec:91:38:41:ba:2c:72:ad:84:69:2a:04: 8e:e7:7e:85:fd:df:55:5b:95:cc:0c:92:c9:f6:fd:c5:b5:a3: aa:6a:39:96:50:53:8e:6c:59:cc:a0:80:52:ef:86:7a:d5:48: ad:7b:46:95:ba:f2:08:14:87:45:34:09:5a:1a:27:cf:3d:30: cb:6b:e1:de:31:3c:b0:39:7a:1e:3b:6e:10:4f:88:26:95:57: 84:b7:63:7a:f9:22:5f:75:28:a4:c6:75:e0:62:f8:0f:a9:9f: 8f:8a:24:87:00:2f:8e:7e:e3:7f:69:99:5b:b8:d1:b0:12:06: 24:ff:8b:b2:a4:ca:fa:0b:c4:f0:bd:97:43:78:31:87:7c:5b: 81:26:21:dd:ad:03:61:75:87:8f:f6:0b:70:51:b0:2d:a1:9f: 53:ab:b2:5d:c9:1c:44:b8:24:ba:93:a7:c6:31:69:03:89:4b: 70:11:3d:f9:91:ce:6a:fd:30:fa:7f:25:14:0a:c9:56:c2:ef: 5c:5e:2f:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYj56raI3erCvTYadufh9/jwjCRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQwODAwRjE1MTZEQTU3QkQ5Qjk1NjFGRkEyQTI0MkFF QjhGNDg1MzAeFw0yNTA1MDQxMDA2NDhaFw0yNTA1MDcxNjAwNDhaMDMxMTAvBgNV BAMTKEU5NDNDMUJEM0Q0MkJFOEY4NTM2NDM3QTAwMENFMDg3MkUzQkVBQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYYdYayvPD18ts9+WJ+29NDWJR UzAxupjJ8I+lcB/Lctg6jST+Jw08fvtCgIiKhR9MN86r5VN98sFj5I1k//rRxECW Fsj6a0ydEAhpCeuwIWEDzu/A/8+XBAChLTx4kjfc5uNT+fLj7HQBwqhkivLANZ4u NxEYFebkPzDijQy4lygMlZ6nrbHplUlFfjJD3XRpQTWfiNnZx67uLYvn1CojyRwu FYrPYz6VCMIM7B46iMokEC2OTyerC98mtf83hOEF9WvC12CD6JAwnr1g7D3EpxMM b0Yxqf5ZZeZpuWlZXe68ZVSC2tpfpkFsfsO+GBTB39JS0O5iO1kvqCY+944tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6UPBvT1Cvo+FNkN6AAzghy476qUwHwYDVR0j BBgwFoAUDQgA8VFtpXvZuVYf+iokKuuPSFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDFiYzNlYy04NmI4LTRhZmItOGE4Zi1hMGE4NmE0YzI5YzYvMC8wRDA4MDBGMTUx NkRBNTdCRDlCOTU2MUZGQTJBMjQyQUVCOEY0ODUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQwODAwRjE1MTZEQTU3QkQ5Qjk1NjFGRkEyQTI0MkFFQjhG NDg1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQxYmMzZWMtODZiOC00YWZiLThh OGYtYTBhODZhNGMyOWM2LzAvMEQwODAwRjE1MTZEQTU3QkQ5Qjk1NjFGRkEyQTI0 MkFFQjhGNDg1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABX/eEMsHroFg3uruVYRBg1geVrw8x4hVC/x Q3ACJdYUZDzVInLK0FmCvcWoznvnY6ppFsaHs0MUvKJVwOyROEG6LHKthGkqBI7n foX931VblcwMksn2/cW1o6pqOZZQU45sWcyggFLvhnrVSK17RpW68ggUh0U0CVoa J889MMtr4d4xPLA5eh47bhBPiCaVV4S3Y3r5Il91KKTGdeBi+A+pn4+KJIcAL45+ 439pmVu40bASBiT/i7KkyvoLxPC9l0N4MYd8W4EmId2tA2F1h4/2C3BRsC2hn1Or sl3JHES4JLqTp8YxaQOJS3ARPfmRzmr9MPp/JRQKyVbC71xeL6I= -----END CERTIFICATE-----Generated at Wed May 7 08:47:56 2025 by rpki-client