$ rpki-client -vvf repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft File: 3128E543B078826F9B4F23328CA84782DE7AAE6D.mft (raw, json) Hash identifier: MqqiyOesqMAhVR3YGxSgcVPn+Crt9kASFUPZ9qeEiNE= Subject key identifier: D1:7F:47:E4:58:1E:09:24:9D:B4:DA:5E:72:00:FF:42:03:A8:A5:45 Authority key identifier: 31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D Certificate issuer: /CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Certificate serial: 523F16674735328436C4DC7DF40060A0172F59CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft Manifest number: 04D1 Signing time: Sat 10 May 2025 22:50:02 +0000 Manifest this update: Sat 10 May 2025 22:45:02 +0000 Manifest next update: Wed 14 May 2025 05:49:02 +0000 Files and hashes: 1: 3128E543B078826F9B4F23328CA84782DE7AAE6D.crl (hash: QOpIW9jlly6hUgZ6nPjpwFofdUkTob1QTcJc9ixzlU8=) 2: 3130332e3132342e3131322e302f32342d3234203d3e20313331313131.roa (hash: MkU25bOYPfcV/Bxz8xMngWxZE2qo6ACazJ9VjAX4lQs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 05:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:3f:16:67:47:35:32:84:36:c4:dc:7d:f4:00:60:a0:17:2f:59:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Validity Not Before: May 10 22:45:02 2025 GMT Not After : May 14 05:49:02 2025 GMT Subject: CN=D17F47E4581E09249DB4DA5E7200FF4203A8A545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b6:92:0d:f6:d6:86:f8:07:1d:98:16:d4:df: 65:6d:19:3e:2f:53:5c:bb:66:9a:40:18:74:4a:3f: 1b:64:18:11:7d:9f:c3:a4:ce:15:85:69:57:35:ad: 86:e5:1f:8c:e6:51:14:97:cc:ec:cb:6c:db:17:e2: d8:a6:7c:87:8f:dd:00:42:7e:08:23:34:22:55:ae: ca:52:bf:40:51:34:2a:64:b2:64:f7:3b:ec:4c:9e: 2d:97:00:b5:c8:6e:ed:28:dd:b4:59:b0:d0:94:98: cf:9a:b5:d1:d9:76:6e:83:04:58:e7:68:62:0d:23: fd:0d:28:8c:5a:61:23:21:4b:ec:a7:55:4e:83:60: 6e:8f:70:1c:e7:86:d5:60:67:ed:11:95:0c:a8:f2: 7e:31:e4:2b:7d:1e:32:ce:4d:b9:57:5e:be:70:13: 78:bf:28:fb:f2:27:e1:40:53:ae:d5:71:7e:96:63: bf:2a:cf:98:34:0b:53:48:8d:1a:f2:95:59:38:64: dd:13:93:e9:27:bd:ad:a8:48:09:55:f9:96:08:c6: 74:8b:b7:dc:b3:fd:73:f1:74:74:8e:3b:4b:96:1f: 0f:76:3d:3b:38:b7:35:d8:7d:7a:98:e6:9a:89:6a: d6:e5:43:fb:d2:c5:89:84:ff:10:12:1b:9b:c8:0b: e5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7F:47:E4:58:1E:09:24:9D:B4:DA:5E:72:00:FF:42:03:A8:A5:45 X509v3 Authority Key Identifier: keyid:31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:d5:6a:96:53:18:49:e1:3d:8b:9f:f9:b3:cb:5b:fc:e2:6e: d8:0a:77:e7:8a:be:b2:2b:26:8e:ca:85:ef:bf:ef:54:ca:ec: 77:58:e7:d3:c8:93:a3:97:dd:21:c0:df:fd:98:51:85:3f:97: c1:9c:ab:2c:f2:96:09:31:09:ab:e4:a1:3d:c1:50:b5:b6:c2: 08:d7:e1:ea:5d:2c:bb:42:25:74:cc:c5:3e:d8:38:98:82:02: 5e:00:31:3d:85:0a:85:69:01:99:f3:b6:95:d7:57:23:90:54: 48:bd:f1:c8:db:8b:06:91:b8:38:71:0f:4e:8c:2d:e2:f9:b6: 3d:b4:5e:17:c7:36:16:61:e6:93:50:19:0a:52:da:2d:ed:8d: 99:45:b8:78:ea:19:9d:0c:2a:53:d0:33:55:f4:77:20:57:89: d2:2c:35:30:d2:fe:4e:09:79:54:5e:47:a3:15:5d:ae:11:42: de:0d:0f:8b:4f:3e:48:46:e8:01:88:66:43:9f:3a:dc:63:3a: de:28:f7:18:31:3a:46:5d:c9:95:0b:27:f0:bc:c7:05:9d:49: 1c:2f:18:ff:3f:68:61:69:6a:f9:b3:a2:46:30:8a:21:24:66: 5b:e7:fd:b5:0b:f9:3f:28:2b:64:16:20:1a:f8:1f:21:1f:60: bd:8e:f5:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUj8WZ0c1MoQ2xNx99ABgoBcvWc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJE RTdBQUU2RDAeFw0yNTA1MTAyMjQ1MDJaFw0yNTA1MTQwNTQ5MDJaMDMxMTAvBgNV BAMTKEQxN0Y0N0U0NTgxRTA5MjQ5REI0REE1RTcyMDBGRjQyMDNBOEE1NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6tpIN9taG+AcdmBbU32VtGT4v U1y7ZppAGHRKPxtkGBF9n8OkzhWFaVc1rYblH4zmURSXzOzLbNsX4timfIeP3QBC fggjNCJVrspSv0BRNCpksmT3O+xMni2XALXIbu0o3bRZsNCUmM+atdHZdm6DBFjn aGINI/0NKIxaYSMhS+ynVU6DYG6PcBznhtVgZ+0RlQyo8n4x5Ct9HjLOTblXXr5w E3i/KPvyJ+FAU67VcX6WY78qz5g0C1NIjRrylVk4ZN0Tk+knva2oSAlV+ZYIxnSL t9yz/XPxdHSOO0uWHw92PTs4tzXYfXqY5pqJatblQ/vSxYmE/xASG5vIC+WhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0X9H5FgeCSSdtNpecgD/QgOopUUwHwYDVR0j BBgwFoAUMSjlQ7B4gm+bTyMyjKhHgt56rm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDdmOGY0NC0yNzdkLTQ1ZTEtYjIxMy0wNTExN2ZkZTNjYjAvMC8zMTI4RTU0M0Iw Nzg4MjZGOUI0RjIzMzI4Q0E4NDc4MkRFN0FBRTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJERTdB QUU2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ3ZjhmNDQtMjc3ZC00NWUxLWIy MTMtMDUxMTdmZGUzY2IwLzAvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3 ODJERTdBQUU2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTVapZTGEnhPYuf+bPLW/zibtgKd+eKvrIr Jo7Khe+/71TK7HdY59PIk6OX3SHA3/2YUYU/l8GcqyzylgkxCavkoT3BULW2wgjX 4epdLLtCJXTMxT7YOJiCAl4AMT2FCoVpAZnztpXXVyOQVEi98cjbiwaRuDhxD06M LeL5tj20XhfHNhZh5pNQGQpS2i3tjZlFuHjqGZ0MKlPQM1X0dyBXidIsNTDS/k4J eVReR6MVXa4RQt4ND4tPPkhG6AGIZkOfOtxjOt4o9xgxOkZdyZULJ/C8xwWdSRwv GP8/aGFpavmzokYwiiEkZlvn/bUL+T8oK2QWIBr4HyEfYL2O9XQ= -----END CERTIFICATE-----Generated at Mon May 12 11:13:50 2025 by rpki-client