$ rpki-client -vvf repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft File: 3053FFA7A0123B032FC9458281063C89F007FA98.mft (raw, json) Hash identifier: Q8ncN4jMfTPomZxtPno7ico45H+vV/+1Rz/WrBvL2Y4= Subject key identifier: C4:EB:AC:29:2C:0A:29:B2:7F:91:31:2F:F6:11:DA:F0:71:C6:60:14 Authority key identifier: 30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98 Certificate issuer: /CN=3053FFA7A0123B032FC9458281063C89F007FA98 Certificate serial: 35EC31C8B9CABE19148BA1DEC582EA5408759460 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft Manifest number: 034A Signing time: Sat 03 May 2025 23:21:23 +0000 Manifest this update: Sat 03 May 2025 23:16:23 +0000 Manifest next update: Wed 07 May 2025 09:47:23 +0000 Files and hashes: 1: 3053FFA7A0123B032FC9458281063C89F007FA98.crl (hash: QYJCj3n0o/+uXIlMmta8lH2Ais7lWkl2MIWUKAEPGlo=) 2: 3130332e3136382e3138382e302f32332d3234203d3e203137393935.roa (hash: RaWAC4T1fmxsZsTfduRWIKsU4O9nN+6aPnnPPTHOi8o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 09:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ec:31:c8:b9:ca:be:19:14:8b:a1:de:c5:82:ea:54:08:75:94:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3053FFA7A0123B032FC9458281063C89F007FA98 Validity Not Before: May 3 23:16:23 2025 GMT Not After : May 7 09:47:23 2025 GMT Subject: CN=C4EBAC292C0A29B27F91312FF611DAF071C66014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:80:d1:44:0d:11:d9:c7:81:8f:b5:c0:9a:3e: ac:73:e4:ca:da:d5:c1:59:6a:29:21:25:3e:e7:4f: 5b:ee:1c:73:5a:38:5f:0d:8b:c3:f4:e0:6e:ec:a1: fa:9a:71:b9:f9:55:8c:6a:94:fc:ad:cd:be:c3:38: 7f:04:75:64:4e:7d:9b:77:9c:14:96:58:e2:bb:e9: f8:02:78:73:ee:60:1d:35:96:2d:a0:bd:d0:41:b1: c4:6f:32:86:a4:30:f6:d6:1d:d5:05:2b:d3:89:09: 9d:7c:dc:13:d0:03:ee:7e:5c:a3:27:ca:e8:d1:10: 12:02:0b:ab:c6:ca:8d:56:7f:9e:b0:6a:b2:f1:fe: 4e:ea:df:c3:d4:66:b3:97:9f:c1:ff:7e:39:a1:0e: 09:96:bc:91:6c:31:fe:de:e5:4a:b3:80:f2:dd:ef: 7f:de:30:88:9d:b9:88:c6:c0:3b:65:76:e9:b8:e3: 50:8e:99:7e:19:b1:58:8d:a5:eb:63:f6:8c:cc:96: df:ca:de:d7:87:76:df:f9:e9:2f:d1:20:58:94:17: bb:b3:52:f7:1f:57:ea:63:89:da:04:3a:ab:77:4d: b2:4a:3e:8e:13:f4:b8:46:52:58:da:3a:58:b8:1d: ec:d2:ea:93:a6:a6:6f:40:c3:e5:03:0b:f4:36:56: 0a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EB:AC:29:2C:0A:29:B2:7F:91:31:2F:F6:11:DA:F0:71:C6:60:14 X509v3 Authority Key Identifier: keyid:30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:4d:5a:a9:b6:42:b5:45:a1:48:25:e5:59:97:a9:5a:6e:dd: 56:6f:a4:bd:67:bb:4d:11:74:63:5e:90:79:44:ad:23:9f:15: e4:c1:9e:6d:6b:f0:b0:52:db:b6:f5:ff:75:71:28:2c:c7:2a: 37:79:db:b9:9b:73:4f:0d:71:7b:d3:d9:ac:1e:7d:55:b6:bb: fc:3f:ba:fa:a5:21:30:5b:24:bd:af:22:28:2e:bc:56:6a:9b: d1:37:a2:9a:34:94:da:b6:c9:0e:09:67:96:dd:cb:a6:98:3c: 9b:c5:04:ce:da:8b:19:19:6b:b2:b9:1f:6e:83:b7:70:9c:ba: e6:9f:49:16:e9:ef:f8:20:31:18:5c:8b:06:68:06:e4:d8:9b: 76:fa:2f:75:23:3d:4f:53:af:d0:cd:fc:97:c1:17:c0:e0:01: 0e:3f:53:73:9d:95:d8:8d:9f:7c:ee:90:3d:f1:ba:a5:fe:e0: ba:63:a9:22:64:33:50:d3:f7:36:6d:50:1f:02:ba:10:3c:fa: fe:30:fd:47:8b:82:68:54:9b:a4:35:6d:14:86:cb:e7:55:7a: 73:15:d7:c4:74:8f:fd:85:97:bb:f1:7a:2a:9d:6b:73:c0:77: 86:69:f4:ab:2b:c3:50:2b:cb:89:06:d7:32:1a:2d:07:68:99: 46:fb:31:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNewxyLnKvhkUi6HexYLqVAh1lGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA1M0ZGQTdBMDEyM0IwMzJGQzk0NTgyODEwNjNDODlG MDA3RkE5ODAeFw0yNTA1MDMyMzE2MjNaFw0yNTA1MDcwOTQ3MjNaMDMxMTAvBgNV BAMTKEM0RUJBQzI5MkMwQTI5QjI3RjkxMzEyRkY2MTFEQUYwNzFDNjYwMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3gNFEDRHZx4GPtcCaPqxz5Mra 1cFZaikhJT7nT1vuHHNaOF8Ni8P04G7sofqacbn5VYxqlPytzb7DOH8EdWROfZt3 nBSWWOK76fgCeHPuYB01li2gvdBBscRvMoakMPbWHdUFK9OJCZ183BPQA+5+XKMn yujREBICC6vGyo1Wf56warLx/k7q38PUZrOXn8H/fjmhDgmWvJFsMf7e5UqzgPLd 73/eMIiduYjGwDtldum441COmX4ZsViNpetj9ozMlt/K3teHdt/56S/RIFiUF7uz UvcfV+pjidoEOqt3TbJKPo4T9LhGUljaOli4HezS6pOmpm9Aw+UDC/Q2Vgp1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxOusKSwKKbJ/kTEv9hHa8HHGYBQwHwYDVR0j BBgwFoAUMFP/p6ASOwMvyUWCgQY8ifAH+pgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmRiNGNiOC1mYWVhLTQ1MzAtYjI5ZS0wYjdhNGFmZmMzMTYvMC8zMDUzRkZBN0Ew MTIzQjAzMkZDOTQ1ODI4MTA2M0M4OUYwMDdGQTk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzA1M0ZGQTdBMDEyM0IwMzJGQzk0NTgyODEwNjNDODlGMDA3 RkE5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkYjRjYjgtZmFlYS00NTMwLWIy OWUtMGI3YTRhZmZjMzE2LzAvMzA1M0ZGQTdBMDEyM0IwMzJGQzk0NTgyODEwNjND ODlGMDA3RkE5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZNWqm2QrVFoUgl5VmXqVpu3VZvpL1nu00R dGNekHlErSOfFeTBnm1r8LBS27b1/3VxKCzHKjd527mbc08NcXvT2awefVW2u/w/ uvqlITBbJL2vIiguvFZqm9E3opo0lNq2yQ4JZ5bdy6aYPJvFBM7aixkZa7K5H26D t3CcuuafSRbp7/ggMRhciwZoBuTYm3b6L3UjPU9Tr9DN/JfBF8DgAQ4/U3OdldiN n3zukD3xuqX+4LpjqSJkM1DT9zZtUB8CuhA8+v4w/UeLgmhUm6Q1bRSGy+dVenMV 18R0j/2Fl7vxeiqda3PAd4Zp9Ksrw1Ary4kG1zIaLQdomUb7MVo= -----END CERTIFICATE-----Generated at Tue May 6 23:26:32 2025 by rpki-client