$ rpki-client -vvf repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft File: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft (raw, json) Hash identifier: Bke6WDs6spx6vHRETQ5JF0G7BkrIXCy38eVXNcN7Fj8= Subject key identifier: C4:39:20:08:E8:1E:1A:56:F8:DD:C5:A3:D9:DB:19:A1:A8:C2:E5:62 Authority key identifier: A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 Certificate issuer: /CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Certificate serial: 5A47849F92BB49BC4BD242AD59F33FF5BBAB9682 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft Manifest number: A1 Signing time: Mon 12 May 2025 16:52:14 +0000 Manifest this update: Mon 12 May 2025 16:47:14 +0000 Manifest next update: Fri 16 May 2025 02:49:14 +0000 Files and hashes: 1: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl (hash: JDL4sZ9UVXaEHEPnUjh7d1AG/7R5mnPrUMQcprqGbrI=) 2: 3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa (hash: EvJq4OLjEBVOFbG73OwOsPdQAb4z66x1zbfCbpT8orA=) 3: 3136302e32302e3132342e302f32332d3233203d3e20313532373830.roa (hash: lc89lFRvMQIz7uTqrlcEMfYnshZrWUp2xbVgo2KfUEM=) 4: 3136302e32302e3132352e302f32342d3234203d3e20313532373830.roa (hash: 3O/OW1Umefwg6OchQ44jpt1RJGa/f0UGdAnIHZM+ihI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 02:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:47:84:9f:92:bb:49:bc:4b:d2:42:ad:59:f3:3f:f5:bb:ab:96:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Validity Not Before: May 12 16:47:14 2025 GMT Not After : May 16 02:49:14 2025 GMT Subject: CN=C4392008E81E1A56F8DDC5A3D9DB19A1A8C2E562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d1:06:2b:ad:51:88:e6:c5:d2:ee:36:64:f5: 85:74:0a:5e:4d:67:0b:bc:15:36:b6:a1:97:71:86: e7:ad:d4:d0:78:40:06:c8:fb:ca:5a:88:90:5f:50: 3d:f1:b1:70:4d:08:f5:dd:9c:8c:d2:a0:3b:ab:df: c7:d3:3f:8d:f2:f4:4f:ac:44:13:f2:74:e1:08:5f: 56:65:c7:72:2e:cd:37:d9:bc:fe:97:5a:58:3b:f6: 5d:0e:eb:5c:4e:43:74:8f:98:25:d5:9f:81:fc:15: 9d:36:df:44:f9:5b:38:61:e3:9f:65:8b:84:99:41: 3f:6f:16:af:6a:ad:32:c5:75:1c:7b:f0:0f:36:19: 62:13:50:b8:51:53:f2:71:8a:89:75:1c:b2:b9:31: 6a:f4:ed:56:41:6d:ff:f1:25:f2:04:49:71:ab:5b: 9d:73:77:91:66:d5:cb:e2:ca:60:99:6b:73:37:77: f4:11:f1:70:14:cf:9e:ce:6c:22:07:f0:e9:95:47: 77:03:b2:bd:56:fa:5e:78:db:33:3b:ab:d4:37:8d: 3d:f2:7e:3c:22:55:a5:19:01:c1:c4:3c:59:cf:5d: 89:53:4a:eb:6c:6f:1b:43:a2:ae:f5:12:a2:2c:d0: 01:c4:d7:ee:92:5a:fd:76:ca:be:14:9f:ec:85:dd: a7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:39:20:08:E8:1E:1A:56:F8:DD:C5:A3:D9:DB:19:A1:A8:C2:E5:62 X509v3 Authority Key Identifier: keyid:A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:fb:e8:39:88:b3:d5:89:27:32:8e:ad:d6:4c:6d:95:90:c4: 69:4b:1e:fb:49:f5:05:46:ed:ed:40:f7:d5:bc:00:53:e6:45: e7:f4:4e:88:ac:43:7b:59:91:97:f1:71:88:93:78:04:a3:35: e7:6a:5d:15:c1:02:02:57:c5:b6:f7:75:8b:68:7a:a0:28:30: 5d:58:7e:20:ac:89:0e:33:56:12:b5:54:86:9c:70:85:92:b5: 11:12:0a:89:00:35:62:36:69:88:32:9b:28:1b:0e:07:2a:4e: 83:ca:ce:6d:7c:e3:0e:4d:d3:ff:03:6c:f2:9b:6e:23:69:9e: 27:d3:6a:82:4c:90:96:24:ce:5c:f4:ae:ce:3b:b8:9f:86:30: 4c:e7:d3:bb:32:6c:73:0f:da:00:87:63:dd:9e:a4:0b:48:f6: 54:e4:fe:a5:ef:b2:8d:5e:03:aa:81:b6:1f:9b:08:4a:bd:2e: 49:e3:8a:ec:30:14:04:49:21:bc:2a:c2:21:78:fa:53:46:09: 51:41:78:b4:1e:7e:cc:22:14:27:f5:0a:91:8b:79:24:bc:eb: 53:5d:0e:07:ad:7a:17:a5:34:93:f9:2d:0b:55:52:f6:7b:03: 4e:53:69:41:68:ee:ca:4c:3c:cd:40:e9:f6:ee:ec:2b:2f:46: f0:46:df:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWkeEn5K7SbxL0kKtWfM/9burloIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRC MDgyRDgxOTAeFw0yNTA1MTIxNjQ3MTRaFw0yNTA1MTYwMjQ5MTRaMDMxMTAvBgNV BAMTKEM0MzkyMDA4RTgxRTFBNTZGOEREQzVBM0Q5REIxOUExQThDMkU1NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB0QYrrVGI5sXS7jZk9YV0Cl5N Zwu8FTa2oZdxhuet1NB4QAbI+8paiJBfUD3xsXBNCPXdnIzSoDur38fTP43y9E+s RBPydOEIX1Zlx3IuzTfZvP6XWlg79l0O61xOQ3SPmCXVn4H8FZ0230T5Wzhh459l i4SZQT9vFq9qrTLFdRx78A82GWITULhRU/Jxiol1HLK5MWr07VZBbf/xJfIESXGr W51zd5Fm1cviymCZa3M3d/QR8XAUz57ObCIH8OmVR3cDsr1W+l542zM7q9Q3jT3y fjwiVaUZAcHEPFnPXYlTSutsbxtDoq71EqIs0AHE1+6SWv12yr4Un+yF3adpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxDkgCOgeGlb43cWj2dsZoajC5WIwHwYDVR0j BBgwFoAUo9dHZcHxePcsPNDeC2KH9LCC2BkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzU3OTIxZC1lZTE4LTQzNWMtOGI2ZS1lYmEyMjQxYjgzYWIvMC9BM0Q3NDc2NUMx RjE3OEY3MkMzQ0QwREUwQjYyODdGNEIwODJEODE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRCMDgy RDgxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM1NzkyMWQtZWUxOC00MzVjLThi NmUtZWJhMjI0MWI4M2FiLzAvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3 RjRCMDgyRDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHD76DmIs9WJJzKOrdZMbZWQxGlLHvtJ9QVG 7e1A99W8AFPmRef0ToisQ3tZkZfxcYiTeASjNedqXRXBAgJXxbb3dYtoeqAoMF1Y fiCsiQ4zVhK1VIaccIWStRESCokANWI2aYgymygbDgcqToPKzm184w5N0/8DbPKb biNpnifTaoJMkJYkzlz0rs47uJ+GMEzn07sybHMP2gCHY92epAtI9lTk/qXvso1e A6qBth+bCEq9LknjiuwwFARJIbwqwiF4+lNGCVFBeLQefswiFCf1CpGLeSS861Nd DgetehelNJP5LQtVUvZ7A05TaUFo7spMPM1A6fbu7CsvRvBG32c= -----END CERTIFICATE-----Generated at Wed May 14 12:30:37 2025 by rpki-client