$ rpki-client -vvf repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft File: C380A411E3CE15C60336341BB4B0994B307B920D.mft (raw, json) Hash identifier: iCGxmJ3qgFZTr87slSa2m5ub/TeALOBwS1KURqdBSvU= Subject key identifier: 17:7B:D2:4B:B0:3D:50:6B:3B:4E:54:6F:9F:A4:07:86:32:22:8A:94 Authority key identifier: C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D Certificate issuer: /CN=C380A411E3CE15C60336341BB4B0994B307B920D Certificate serial: 1CBD679679BB9C585432FA47A5FBA805795CC0D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft Manifest number: 03BD Signing time: Fri 09 May 2025 08:41:55 +0000 Manifest this update: Fri 09 May 2025 08:36:55 +0000 Manifest next update: Mon 12 May 2025 15:13:55 +0000 Files and hashes: 1: 3130332e3134332e32342e302f32332d3233203d3e203536323432.roa (hash: 6ARHaxkV0HQRmAgHPZ4dlFB+3c6L0ZGJmc/nN2+k+no=) 2: 3130332e3134332e32342e302f32342d3234203d3e203536323432.roa (hash: 8zQK8AXHLSApMmYd7tjNJsIjZnWf3yDUEAsA1LFehWw=) 3: C380A411E3CE15C60336341BB4B0994B307B920D.crl (hash: 7DORmP/5QAybuJZUGdxSNedTmOUgCq6qmlgMvvcQP8w=) 4: 3130332e3134332e32352e302f32342d3234203d3e203536323432.roa (hash: 6KZnCoun2OeRfJhfU31JgFdGtJDoY9NCrchaCehwgfg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 15:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:bd:67:96:79:bb:9c:58:54:32:fa:47:a5:fb:a8:05:79:5c:c0:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C380A411E3CE15C60336341BB4B0994B307B920D Validity Not Before: May 9 08:36:55 2025 GMT Not After : May 12 15:13:55 2025 GMT Subject: CN=177BD24BB03D506B3B4E546F9FA4078632228A94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ae:9d:56:4d:75:5a:7b:e3:93:08:39:07:21: c4:4b:43:b6:56:f1:50:3b:3d:63:93:d2:f3:0f:87: 94:62:c8:7d:ee:8e:eb:50:3e:89:60:18:be:a5:f8: 16:37:bf:d9:bb:3a:a9:5f:a7:31:a5:24:86:9f:27: 65:4b:f2:dc:76:f0:a2:ad:3b:8d:55:25:73:68:16: 2f:48:ca:7a:b2:ba:5f:13:d2:d0:b1:70:ac:d8:2f: da:7c:46:54:de:b9:02:c7:f7:df:af:82:fb:3a:80: 20:e9:b4:17:96:c9:d0:9f:fc:57:3f:0e:4b:17:83: 77:78:6c:d2:20:93:55:d4:b0:5e:b1:06:ef:8f:3f: 40:e5:76:03:27:bd:88:be:18:10:b4:a8:2f:1a:3b: 20:1c:4e:39:89:07:99:93:3c:8a:23:d1:65:0e:8f: ce:18:5e:b6:bf:92:bb:5d:e5:ea:13:c1:d6:71:e6: 08:07:7d:28:81:48:5c:64:df:3c:db:1b:46:64:47: bd:0a:a0:e6:09:17:30:30:24:68:91:ee:02:f2:bc: 77:22:e8:45:46:31:04:19:e4:c7:5f:7d:05:8c:0b: 9c:19:2e:8a:9b:97:7d:8e:9d:1c:07:b5:fa:6a:00: 7d:5f:f2:3d:d8:33:0e:39:97:60:83:7e:92:1a:21: f4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:7B:D2:4B:B0:3D:50:6B:3B:4E:54:6F:9F:A4:07:86:32:22:8A:94 X509v3 Authority Key Identifier: keyid:C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:c8:cb:f8:fe:cd:13:ed:93:5e:5d:c1:1e:08:f5:52:ee:fb: a3:f3:5f:ff:20:dd:b2:27:b8:fc:3c:c9:66:01:05:1a:16:95: 0f:a7:00:01:03:df:0e:86:87:6b:c0:d9:8e:eb:31:01:87:d3: 86:15:8c:03:8d:46:80:cf:bd:82:0b:94:ef:dc:22:9e:27:c5: 05:85:58:1d:41:6a:7e:3f:d9:ca:29:67:91:c5:9c:e6:6e:17: 7e:bd:f3:ec:65:19:36:6d:04:73:4d:73:ed:a9:f4:0b:26:83: f5:91:58:3a:1f:ab:41:4e:c5:fd:3f:7a:aa:fb:b5:3e:df:31: f0:23:9d:33:4e:6d:46:7c:8a:b5:76:bf:aa:62:66:9a:16:e0: f0:57:94:4a:2d:a9:3f:ef:22:1e:b3:f8:9e:09:0b:b8:9f:9c: df:fb:8c:6f:eb:8d:bc:a4:e1:0a:9f:89:1b:77:dd:0e:83:fb: b7:49:9b:e3:1d:5e:62:6b:ef:02:e6:59:ac:09:6f:68:67:c2: 6b:72:3e:81:0c:ed:d5:6e:53:d7:cc:46:92:60:96:b4:85:8e: 30:42:59:c0:e6:9d:34:51:14:ff:e5:2c:0b:73:60:c8:7b:09: fa:ba:b4:d0:7c:ab:83:13:b1:09:97:91:1a:13:75:d9:e0:ac: 78:70:37:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHL1nlnm7nFhUMvpHpfuoBXlcwNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5NEIz MDdCOTIwRDAeFw0yNTA1MDkwODM2NTVaFw0yNTA1MTIxNTEzNTVaMDMxMTAvBgNV BAMTKDE3N0JEMjRCQjAzRDUwNkIzQjRFNTQ2RjlGQTQwNzg2MzIyMjhBOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxrp1WTXVae+OTCDkHIcRLQ7ZW 8VA7PWOT0vMPh5RiyH3ujutQPolgGL6l+BY3v9m7OqlfpzGlJIafJ2VL8tx28KKt O41VJXNoFi9Iynqyul8T0tCxcKzYL9p8RlTeuQLH99+vgvs6gCDptBeWydCf/Fc/ DksXg3d4bNIgk1XUsF6xBu+PP0DldgMnvYi+GBC0qC8aOyAcTjmJB5mTPIoj0WUO j84YXra/krtd5eoTwdZx5ggHfSiBSFxk3zzbG0ZkR70KoOYJFzAwJGiR7gLyvHci 6EVGMQQZ5MdffQWMC5wZLoqbl32OnRwHtfpqAH1f8j3YMw45l2CDfpIaIfRTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF3vSS7A9UGs7TlRvn6QHhjIiipQwHwYDVR0j BBgwFoAUw4CkEePOFcYDNjQbtLCZSzB7kg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWM0MDBkMS05YmJkLTRlMmItOGQ1OC02Zjc0OWRiYzM5MmQvMC9DMzgwQTQxMUUz Q0UxNUM2MDMzNjM0MUJCNEIwOTk0QjMwN0I5MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5NEIzMDdC OTIwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVjNDAwZDEtOWJiZC00ZTJiLThk NTgtNmY3NDlkYmMzOTJkLzAvQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5 NEIzMDdCOTIwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJDIy/j+zRPtk15dwR4I9VLu+6PzX/8g3bIn uPw8yWYBBRoWlQ+nAAED3w6Gh2vA2Y7rMQGH04YVjAONRoDPvYILlO/cIp4nxQWF WB1Ban4/2copZ5HFnOZuF3698+xlGTZtBHNNc+2p9Asmg/WRWDofq0FOxf0/eqr7 tT7fMfAjnTNObUZ8irV2v6piZpoW4PBXlEotqT/vIh6z+J4JC7ifnN/7jG/rjbyk 4QqfiRt33Q6D+7dJm+MdXmJr7wLmWawJb2hnwmtyPoEM7dVuU9fMRpJglrSFjjBC WcDmnTRRFP/lLAtzYMh7Cfq6tNB8q4MTsQmXkRoTddngrHhwN2I= -----END CERTIFICATE-----Generated at Sat May 10 17:48:21 2025 by rpki-client