$ rpki-client -vvf repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft File: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft (raw, json) Hash identifier: gEq4xRLYLHM2kCjCBFteosSlSxGc6xPIOO4GYUd/3Jo= Subject key identifier: 43:B3:F2:48:8A:AC:18:32:BB:16:C4:D7:4A:96:17:19:F0:66:DD:8C Authority key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 Certificate issuer: /CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Certificate serial: 08CB1390C06E1D39CA2792441A860B084C09699A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft Manifest number: 04CF Signing time: Fri 09 May 2025 20:41:35 +0000 Manifest this update: Fri 09 May 2025 20:36:35 +0000 Manifest next update: Tue 13 May 2025 07:20:35 +0000 Files and hashes: 1: 3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa (hash: Pvk77Cu313SSMDvMf2Tda7Eo/+XV0HmgEc7n5AmgGCs=) 2: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl (hash: 4swr3oRmuicr37fkurjFaf3nJ5UiRWcJI3v4T18Iu7o=) 3: 3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa (hash: u+wDsuu7AQfdEUKuZBIdzItxLN2INRZbj0tQ8rJ4c30=) 4: 323430353a636163303a3a2f33322d3332203d3e20313339393832.roa (hash: DvQDh4Kkz219rckHWEzkCusXEwHFc00p00m6Uhd4LJY=) 5: 3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa (hash: 4qLNGi/A/2Nusn9fOdkgGQAfH65+C/+F6uRVaqCMnSM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 07:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:cb:13:90:c0:6e:1d:39:ca:27:92:44:1a:86:0b:08:4c:09:69:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Validity Not Before: May 9 20:36:35 2025 GMT Not After : May 13 07:20:35 2025 GMT Subject: CN=43B3F2488AAC1832BB16C4D74A961719F066DD8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6a:05:e9:09:aa:a2:2d:8a:21:08:c1:c5:5a: c8:20:38:6a:b9:fb:89:d8:45:51:19:e0:fa:8b:07: b9:13:9a:b0:8d:dc:84:af:75:3f:0e:07:c4:18:ea: f9:a4:79:0d:e9:92:12:22:0b:f5:24:ee:87:b0:04: be:40:b2:42:03:67:dc:18:e8:b0:d4:5e:ae:17:91: 4e:48:9a:65:e6:61:c2:72:da:3d:31:ce:97:43:cb: bd:72:9a:88:1b:71:f2:ed:7c:c2:bf:50:b4:19:4f: 35:70:ef:dc:33:a6:a5:ae:3f:f9:15:ab:c9:f7:66: bf:31:74:25:04:5a:b9:7e:6d:6e:d1:fe:ad:b9:61: 37:7d:b0:a4:b5:da:4f:5a:3c:e3:c5:84:51:ec:99: 14:14:b2:26:8d:4c:ca:58:2f:5a:dd:fe:f2:0a:b9: ff:bb:c0:5e:e7:db:a4:10:76:39:93:33:ca:1e:6c: 84:1e:a3:76:9d:76:df:62:ca:63:d0:01:a9:8a:8f: 84:40:b6:8c:a2:49:5d:eb:71:04:9c:c3:93:c2:2e: 1a:ac:a4:6c:da:b7:8b:1a:9d:5b:43:c4:4c:ad:48: e3:37:b9:15:e9:a1:e3:66:1a:39:a7:58:a1:18:24: 97:43:9e:4a:01:e9:69:7e:3e:59:f9:b7:e2:08:11: 26:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B3:F2:48:8A:AC:18:32:BB:16:C4:D7:4A:96:17:19:F0:66:DD:8C X509v3 Authority Key Identifier: keyid:36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:08:17:4e:41:73:ef:a5:5f:4a:b9:83:a2:8f:21:e5:4d:07: 7f:72:f3:e4:ca:38:1c:ca:42:0b:a0:36:ad:fa:2c:91:2d:dc: 0e:51:c0:84:c6:3b:14:ce:f6:43:75:f2:0c:dd:66:1f:e3:8f: 0c:04:83:6f:89:cf:93:b1:4c:e0:e9:ee:17:46:bd:b6:08:b0: b3:a1:04:e2:a1:dc:fd:cd:4d:a1:ed:53:da:d0:ff:f9:0f:12: dd:26:67:f5:0b:16:01:f6:7f:9c:d8:12:92:0c:95:8c:da:bf: f3:f1:bf:e4:0b:f5:73:c3:1e:05:58:18:e5:17:60:68:30:a2: db:78:9e:9b:04:89:f3:56:c7:33:6e:5e:ab:7f:40:85:d4:cf: 35:dd:fa:bb:09:3d:9c:5b:0d:d5:53:34:6b:ff:ee:29:98:20: ac:2d:42:7e:2b:70:23:b1:4a:04:bf:e0:cb:67:0b:b6:d8:5e: 69:b2:35:4e:75:41:5a:f2:77:df:ae:cc:ae:9e:e9:b6:d9:eb: df:09:49:d4:d3:90:be:e2:62:3e:39:3f:94:b1:d1:07:8e:5d: 73:90:ad:90:7b:3f:ad:8f:bd:a5:f3:89:33:14:5e:52:84:71: 93:79:97:9d:11:07:57:26:25:6b:29:52:d8:1d:21:0b:bf:8b: 72:99:7c:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCMsTkMBuHTnKJ5JEGoYLCEwJaZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4 QTNCQjZENDAeFw0yNTA1MDkyMDM2MzVaFw0yNTA1MTMwNzIwMzVaMDMxMTAvBgNV BAMTKDQzQjNGMjQ4OEFBQzE4MzJCQjE2QzRENzRBOTYxNzE5RjA2NkREOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeagXpCaqiLYohCMHFWsggOGq5 +4nYRVEZ4PqLB7kTmrCN3ISvdT8OB8QY6vmkeQ3pkhIiC/Uk7oewBL5AskIDZ9wY 6LDUXq4XkU5ImmXmYcJy2j0xzpdDy71ymogbcfLtfMK/ULQZTzVw79wzpqWuP/kV q8n3Zr8xdCUEWrl+bW7R/q25YTd9sKS12k9aPOPFhFHsmRQUsiaNTMpYL1rd/vIK uf+7wF7n26QQdjmTM8oebIQeo3addt9iymPQAamKj4RAtoyiSV3rcQScw5PCLhqs pGzat4sanVtDxEytSOM3uRXpoeNmGjmnWKEYJJdDnkoB6Wl+Pln5t+IIESbPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ7PySIqsGDK7FsTXSpYXGfBm3YwwHwYDVR0j BBgwFoAUNoNp0JbOCYLM8fERAB8qLoo7ttQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWYyNmZiOC03MmM0LTQ5ZDktOWNiZS04MjI2Mzk3MjcxYTIvMC8zNjgzNjlEMDk2 Q0UwOTgyQ0NGMUYxMTEwMDFGMkEyRThBM0JCNkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4QTNC QjZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlmMjZmYjgtNzJjNC00OWQ5LTlj YmUtODIyNjM5NzI3MWEyLzAvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJB MkU4QTNCQjZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAIF05Bc++lX0q5g6KPIeVNB39y8+TKOBzK QgugNq36LJEt3A5RwITGOxTO9kN18gzdZh/jjwwEg2+Jz5OxTODp7hdGvbYIsLOh BOKh3P3NTaHtU9rQ//kPEt0mZ/ULFgH2f5zYEpIMlYzav/Pxv+QL9XPDHgVYGOUX YGgwott4npsEifNWxzNuXqt/QIXUzzXd+rsJPZxbDdVTNGv/7imYIKwtQn4rcCOx SgS/4MtnC7bYXmmyNU51QVryd9+uzK6e6bbZ698JSdTTkL7iYj45P5Sx0QeOXXOQ rZB7P62PvaXziTMUXlKEcZN5l50RB1cmJWspUtgdIQu/i3KZfIY= -----END CERTIFICATE-----Generated at Sat May 10 18:59:38 2025 by rpki-client