$ rpki-client -vvf repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft File: 1472DDF3B8546A8B201733914AFB7036FC6742F3.mft (raw, json) Hash identifier: cqdaLKgobBiHZhf+LtKLVXpV3OR1Ca1LgT6YWSbH2wA= Subject key identifier: D1:3B:76:35:D8:7E:E0:30:D1:AD:0A:FD:F2:4F:78:AE:97:61:6A:84 Authority key identifier: 14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 Certificate issuer: /CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Certificate serial: 1B54ABBB136B146A65675A8FA59CE00CFF94876D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft Manifest number: 033D Signing time: Sat 03 May 2025 12:01:41 +0000 Manifest this update: Sat 03 May 2025 11:56:41 +0000 Manifest next update: Tue 06 May 2025 21:16:41 +0000 Files and hashes: 1: 3130332e3137302e3139362e302f32332d3234203d3e20313338383535.roa (hash: nYdmDrbl4N7U7OFxsxXOGMjKsB4u86wkNh8KISL5Eg0=) 2: 1472DDF3B8546A8B201733914AFB7036FC6742F3.crl (hash: HkWovMGrdX720xkEfOM89OHpPqsNeNhkhQWllt14PLQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 21:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:54:ab:bb:13:6b:14:6a:65:67:5a:8f:a5:9c:e0:0c:ff:94:87:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Validity Not Before: May 3 11:56:41 2025 GMT Not After : May 6 21:16:41 2025 GMT Subject: CN=D13B7635D87EE030D1AD0AFDF24F78AE97616A84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:39:df:60:7f:2a:1d:55:d3:1e:9b:53:76:c5: c3:ef:b9:ac:6b:98:96:ae:55:0d:58:9c:4a:6d:b5: 46:99:f9:58:7c:94:b9:4f:a2:55:22:d0:12:00:ea: 78:fb:69:b2:6b:b7:8c:98:c8:a8:14:e0:f3:26:8e: 27:e9:3f:23:85:33:4a:da:17:20:79:0e:a8:d0:a5: 07:4a:0c:f8:d5:f0:15:8a:f0:a5:37:4f:3f:6e:fc: d4:b9:fd:12:70:20:02:3d:6d:23:71:d4:cf:77:14: a6:92:0a:35:6f:e7:78:7c:13:87:9c:2a:64:23:e7: 20:17:5e:fc:9c:2e:23:fb:d6:3b:5b:66:67:e5:a4: 67:dc:2f:a2:13:bc:e7:de:09:53:23:f7:3b:9e:44: 1f:95:eb:14:64:b9:e5:3a:e9:78:06:c0:08:eb:72: 9e:a6:85:07:40:7a:0b:72:f9:d2:3b:c2:9b:41:08: c8:7f:cc:a8:b8:d6:21:0f:cc:3b:9e:72:05:ab:0b: 69:4b:c1:ab:f0:d5:1b:36:9c:12:8f:ef:b5:20:1f: 4b:68:28:9c:7b:bd:83:39:ea:e1:94:8a:92:90:b9: 7a:b2:51:a1:b3:2e:95:7b:6a:72:c3:85:09:92:3e: 34:c6:5b:82:b9:63:23:27:ef:51:85:e6:81:f1:9f: 04:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3B:76:35:D8:7E:E0:30:D1:AD:0A:FD:F2:4F:78:AE:97:61:6A:84 X509v3 Authority Key Identifier: keyid:14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:67:62:81:35:8c:11:28:67:c1:1f:5c:0e:b5:f3:44:35:61: 9c:9a:81:dc:11:b5:bc:14:52:e1:5f:73:9d:3b:42:95:50:57: d7:76:04:db:8c:b4:1e:83:57:d5:8b:c6:83:ac:cb:12:af:eb: 3f:84:3a:df:a7:d1:ec:14:dc:42:07:43:07:6b:bd:fa:41:53: eb:9c:29:c8:4f:af:90:e0:cb:fb:02:33:1f:1b:88:5b:33:ef: b1:28:34:29:88:61:94:f3:2a:fb:83:a4:98:47:f0:9f:16:7a: f5:73:6b:0a:57:9a:79:b8:2a:4b:25:8f:bf:0f:4a:44:3a:a8: 94:e4:60:aa:0e:0e:ad:4d:c8:53:c0:a4:8c:d1:a4:f7:1d:54: 79:fe:78:34:3f:e3:a0:40:39:5b:02:cd:f0:6c:2d:19:29:2a: 08:32:e0:38:02:3a:2f:8a:d7:2a:d7:59:5c:b7:8f:c2:52:46: ba:b7:f8:d2:fa:bf:0e:a0:5c:2e:81:c6:0b:5c:a8:38:e2:99: b9:fa:68:e7:27:08:34:94:22:84:7c:29:96:d7:27:f6:6d:2f: 6e:09:47:3a:08:72:28:2a:a5:fb:16:81:4b:29:0f:be:55:6a: 40:f5:02:1a:75:cc:34:44:65:4d:16:67:d5:82:4f:32:63:f0: 3b:84:ad:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG1SruxNrFGplZ1qPpZzgDP+Uh20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZG QzY3NDJGMzAeFw0yNTA1MDMxMTU2NDFaFw0yNTA1MDYyMTE2NDFaMDMxMTAvBgNV BAMTKEQxM0I3NjM1RDg3RUUwMzBEMUFEMEFGREYyNEY3OEFFOTc2MTZBODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Od9gfyodVdMem1N2xcPvuaxr mJauVQ1YnEpttUaZ+Vh8lLlPolUi0BIA6nj7abJrt4yYyKgU4PMmjifpPyOFM0ra FyB5DqjQpQdKDPjV8BWK8KU3Tz9u/NS5/RJwIAI9bSNx1M93FKaSCjVv53h8E4ec KmQj5yAXXvycLiP71jtbZmflpGfcL6ITvOfeCVMj9zueRB+V6xRkueU66XgGwAjr cp6mhQdAegty+dI7wptBCMh/zKi41iEPzDuecgWrC2lLwavw1Rs2nBKP77UgH0to KJx7vYM56uGUipKQuXqyUaGzLpV7anLDhQmSPjTGW4K5YyMn71GF5oHxnwTpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Tt2Ndh+4DDRrQr98k94rpdhaoQwHwYDVR0j BBgwFoAUFHLd87hUaosgFzORSvtwNvxnQvMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTFhNzQ2ZS01M2UzLTRjMjMtYjllNS1mNjRmM2VmM2QxMzYvMC8xNDcyRERGM0I4 NTQ2QThCMjAxNzMzOTE0QUZCNzAzNkZDNjc0MkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZGQzY3 NDJGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTExYTc0NmUtNTNlMy00YzIzLWI5 ZTUtZjY0ZjNlZjNkMTM2LzAvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcw MzZGQzY3NDJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVnYoE1jBEoZ8EfXA6180Q1YZyagdwRtbwU UuFfc507QpVQV9d2BNuMtB6DV9WLxoOsyxKv6z+EOt+n0ewU3EIHQwdrvfpBU+uc KchPr5Dgy/sCMx8biFsz77EoNCmIYZTzKvuDpJhH8J8WevVzawpXmnm4Kkslj78P SkQ6qJTkYKoODq1NyFPApIzRpPcdVHn+eDQ/46BAOVsCzfBsLRkpKggy4DgCOi+K 1yrXWVy3j8JSRrq3+NL6vw6gXC6BxgtcqDjimbn6aOcnCDSUIoR8KZbXJ/ZtL24J RzoIcigqpfsWgUspD75VakD1Ahp1zDREZU0WZ9WCTzJj8DuErS0= -----END CERTIFICATE-----Generated at Tue May 6 02:06:13 2025 by rpki-client