$ rpki-client -vvf repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft File: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft (raw, json) Hash identifier: P4lYrkOfyKvuzfrzO+87iASzBwIWsYA5VmQqypZ63dU= Subject key identifier: CA:11:EA:F3:98:F7:13:31:18:66:AA:41:0C:5B:A2:E7:89:35:83:E8 Authority key identifier: 40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 Certificate issuer: /CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Certificate serial: 53171B9204A327B6E405949BA21056787A8C3726 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft Manifest number: 0250 Signing time: Sun 11 May 2025 02:20:40 +0000 Manifest this update: Sun 11 May 2025 02:15:40 +0000 Manifest next update: Wed 14 May 2025 10:33:40 +0000 Files and hashes: 1: 3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (hash: FhrbA6uuINHjqQzXHar/bpnjqFBEO5FZuzZ3IIsB7qk=) 2: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl (hash: z3QZst++oPN6+Ii+eBU6D27CGdepCI31OmamqBE86HA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 10:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:17:1b:92:04:a3:27:b6:e4:05:94:9b:a2:10:56:78:7a:8c:37:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Validity Not Before: May 11 02:15:40 2025 GMT Not After : May 14 10:33:40 2025 GMT Subject: CN=CA11EAF398F713311866AA410C5BA2E7893583E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f9:a2:29:40:79:90:91:fc:54:f7:ba:a9:81: 2a:5e:c2:36:43:22:b8:2f:2d:d5:ae:dd:41:85:58: d9:e9:8e:1f:79:13:93:93:24:fd:18:fb:6a:0d:20: b4:b4:e6:8e:13:96:09:6f:e6:17:6b:37:a5:9e:91: e1:9a:88:b6:97:73:2d:56:23:5e:40:a3:40:c3:4a: b8:19:cc:41:00:07:38:f8:64:02:f4:37:7b:f8:89: ad:73:28:2f:80:4d:f6:36:25:f9:7f:62:08:29:bd: 67:a3:13:95:68:92:be:e5:be:bc:66:e6:13:7f:55: 5a:96:10:f4:39:d2:de:0f:a9:7e:52:68:83:ab:6d: de:e0:63:2c:7c:76:96:31:f6:d1:23:27:a1:1e:bc: f8:e4:bf:ac:88:18:0d:25:34:f4:7d:dc:cc:b9:4c: f0:da:6f:79:b1:ce:44:a2:ba:f5:97:ea:30:51:46: 91:f4:8b:eb:ae:1c:de:8d:e9:69:54:d3:71:b5:d2: f9:9f:93:7a:d6:24:4d:18:f6:90:34:6c:e4:be:45: 79:13:0c:de:a6:d7:1b:7b:6b:8e:c4:2e:b5:45:4d: a2:7f:69:af:65:62:00:00:8c:a7:43:91:4f:14:72: 34:f5:6e:67:bb:3f:ce:42:51:95:05:41:73:4c:f3: 65:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:11:EA:F3:98:F7:13:31:18:66:AA:41:0C:5B:A2:E7:89:35:83:E8 X509v3 Authority Key Identifier: keyid:40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:14:cf:c4:a4:d7:ed:d1:c8:81:3f:52:99:c0:30:08:ce:90: ae:55:7b:3b:34:1e:3f:16:e8:13:38:78:65:df:49:3f:e5:b1: 5c:7d:29:30:b3:91:67:c6:dd:53:a4:7a:b8:2f:c4:c5:dc:2c: 57:8c:a9:3f:24:19:ac:ed:33:23:61:36:80:88:d7:8f:1f:64: ab:f5:e4:1d:c9:05:54:c6:94:2a:97:35:f9:0b:83:40:6a:85: 4a:71:a4:22:d7:a1:4a:da:68:bc:70:42:35:5b:2d:0a:62:71: 47:31:33:e1:68:f2:d2:6b:97:40:f3:99:b7:06:4c:f9:1c:d2: 77:ba:8f:c9:f4:8d:8c:46:64:bd:a0:97:3b:a9:5b:41:2a:90: 30:7f:ae:8d:77:7f:3d:c5:ec:e8:1b:2a:d8:5b:fb:0a:4e:f1: 35:0f:a4:6d:40:d0:74:9e:83:53:4b:e6:b2:38:8e:d7:a2:60: ef:ed:54:55:0f:09:0e:fb:1b:cb:1e:e7:96:bb:45:d4:a9:5d: 0f:6d:2e:e9:e0:ab:d3:85:b2:a6:49:d2:b3:8d:02:68:e4:38: d3:4f:da:1b:14:f3:c8:68:d6:03:85:3e:b4:57:a6:7d:1e:fe: e5:f6:2b:77:ba:82:1f:6e:9a:3a:5e:a2:37:43:8a:73:4c:2b: 78:82:87:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUxcbkgSjJ7bkBZSbohBWeHqMNyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4 RTMyQUI0MzAeFw0yNTA1MTEwMjE1NDBaFw0yNTA1MTQxMDMzNDBaMDMxMTAvBgNV BAMTKENBMTFFQUYzOThGNzEzMzExODY2QUE0MTBDNUJBMkU3ODkzNTgzRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU+aIpQHmQkfxU97qpgSpewjZD IrgvLdWu3UGFWNnpjh95E5OTJP0Y+2oNILS05o4Tlglv5hdrN6WekeGaiLaXcy1W I15Ao0DDSrgZzEEABzj4ZAL0N3v4ia1zKC+ATfY2Jfl/YggpvWejE5Vokr7lvrxm 5hN/VVqWEPQ50t4PqX5SaIOrbd7gYyx8dpYx9tEjJ6EevPjkv6yIGA0lNPR93My5 TPDab3mxzkSiuvWX6jBRRpH0i+uuHN6N6WlU03G10vmfk3rWJE0Y9pA0bOS+RXkT DN6m1xt7a47ELrVFTaJ/aa9lYgAAjKdDkU8UcjT1bme7P85CUZUFQXNM82XbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyhHq85j3EzEYZqpBDFui54k1g+gwHwYDVR0j BBgwFoAUQC2fHgWia0EWTiW3OlsHyI4yq0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjNkZjZhZi1kOWVlLTQwNzYtODFhNC0yNjQ4NzI3NDg5NzAvMC80MDJEOUYxRTA1 QTI2QjQxMTY0RTI1QjczQTVCMDdDODhFMzJBQjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4RTMy QUI0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IzZGY2YWYtZDllZS00MDc2LTgx YTQtMjY0ODcyNzQ4OTcwLzAvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3 Qzg4RTMyQUI0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8Uz8Sk1+3RyIE/UpnAMAjOkK5Vezs0Hj8W 6BM4eGXfST/lsVx9KTCzkWfG3VOkergvxMXcLFeMqT8kGaztMyNhNoCI148fZKv1 5B3JBVTGlCqXNfkLg0BqhUpxpCLXoUraaLxwQjVbLQpicUcxM+Fo8tJrl0DzmbcG TPkc0ne6j8n0jYxGZL2glzupW0EqkDB/ro13fz3F7OgbKthb+wpO8TUPpG1A0HSe g1NL5rI4jteiYO/tVFUPCQ77G8se55a7RdSpXQ9tLungq9OFsqZJ0rONAmjkONNP 2hsU88ho1gOFPrRXpn0e/uX2K3e6gh9umjpeojdDinNMK3iCh0s= -----END CERTIFICATE-----Generated at Mon May 12 10:14:33 2025 by rpki-client