$ rpki-client -vvf repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft File: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft (raw, json) Hash identifier: FI8xcIxX9/aWt5ZvyRY/DgqSqmhta7roj5uHK1pIGBM= Subject key identifier: 13:A8:A5:F6:DC:C7:E8:32:9D:40:A3:A9:3C:EC:31:A9:BD:C3:B0:E5 Authority key identifier: B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C Certificate issuer: /CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Certificate serial: 774779FAD3F322C80483B921C2078016F49508F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft Manifest number: 0344 Signing time: Mon 05 May 2025 06:41:55 +0000 Manifest this update: Mon 05 May 2025 06:36:55 +0000 Manifest next update: Thu 08 May 2025 11:54:55 +0000 Files and hashes: 1: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl (hash: zG0eKYsXWE8j0YHb/Atbcy0/HUEk5rKtxx9Rlt/EK4Y=) 2: 3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa (hash: neE3zrlksOzJV8H0qe9TgTIuCvuChMBCqnrQKxlvrQU=) 3: 3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa (hash: 0/uMdmxlRYv0BxLj1kLNukE06046JVFdcxHugW59xeM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 11:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:47:79:fa:d3:f3:22:c8:04:83:b9:21:c2:07:80:16:f4:95:08:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Validity Not Before: May 5 06:36:55 2025 GMT Not After : May 8 11:54:55 2025 GMT Subject: CN=13A8A5F6DCC7E8329D40A3A93CEC31A9BDC3B0E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:55:5d:1d:dc:21:ff:3e:d3:36:2b:be:46:a8: 53:6a:da:1b:8e:b7:d3:1a:5a:2e:da:db:fe:b7:2a: ca:cc:68:a5:6e:a7:63:ec:2d:8e:c5:8f:58:b2:c3: 37:85:27:31:67:62:83:d6:d3:25:d4:19:07:98:70: f9:dc:63:55:6f:93:c9:dd:c2:80:2e:5f:e7:55:e4: 7d:59:07:23:92:11:5e:d1:b0:0e:99:59:97:40:12: eb:0f:d7:ec:67:4b:09:43:e0:1e:ef:fa:20:f1:7c: 40:3f:0d:e9:58:69:9f:a1:bf:df:52:1d:cc:8c:d9: bf:c5:9f:e5:44:58:e6:b6:64:80:bd:11:5a:a8:21: 4a:2b:55:44:5a:65:b4:50:64:26:86:0d:0c:32:4a: a0:34:cd:61:ff:b9:4b:f3:c7:73:9c:5d:ec:25:1b: ef:ba:88:81:09:6b:73:dd:88:67:1b:ad:c0:00:55: 1a:4f:98:f5:57:af:b0:82:37:ef:58:16:50:2b:b3: b0:e3:ca:55:ef:a7:c3:fe:bd:52:40:b0:ac:5b:69: fb:fc:7c:5d:8e:c8:0a:16:85:db:f6:e7:04:e6:ac: f2:1c:f0:6f:36:c0:9a:cb:52:d6:b8:35:1d:75:be: 8d:63:5f:21:77:3a:d1:ea:65:82:2c:3e:f5:a7:b7: d9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A8:A5:F6:DC:C7:E8:32:9D:40:A3:A9:3C:EC:31:A9:BD:C3:B0:E5 X509v3 Authority Key Identifier: keyid:B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:ef:dd:cc:e0:1b:69:30:16:dd:0f:e2:2d:bd:13:fb:7e:d1: 0e:d6:42:24:ec:d4:10:9c:05:ad:74:a9:d7:2f:d4:b9:32:33: 03:45:b7:b0:da:87:6a:8b:ee:76:2c:00:78:4c:be:05:cd:b4: ce:b5:63:2d:f2:c6:8e:d0:99:d2:66:2a:c8:15:3e:ed:38:cd: 28:ab:26:0f:1c:fe:d9:67:36:00:d9:04:64:e0:cc:1a:a1:8d: 29:23:56:ef:32:a1:89:60:49:41:e5:ec:ff:e7:a9:b1:9e:e9: 6f:e3:c3:3f:92:20:31:af:15:95:49:20:c3:fc:c5:63:a8:e2: 70:de:83:b2:de:2c:de:69:f8:74:bf:55:83:46:56:d6:81:89: e6:f9:27:c5:3c:8d:9a:81:df:91:00:d0:55:59:db:bf:77:61: db:d6:47:36:81:85:a9:45:93:ac:97:a1:6a:5a:86:30:58:97: ac:d5:87:60:04:50:f5:ff:a4:48:18:6a:9f:00:8d:c0:8c:44: 96:b2:73:42:41:b9:d4:55:1b:99:be:30:5c:05:c6:da:04:ea: 6a:f4:94:0a:d0:7e:00:bf:28:20:64:c2:60:2b:25:26:e8:1d: 1a:83:4b:5f:42:83:39:72:64:6a:40:b4:dc:29:8f:dd:56:56: a8:5f:b3:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd0d5+tPzIsgEg7khwgeAFvSVCPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZD RUZENkY4QzAeFw0yNTA1MDUwNjM2NTVaFw0yNTA1MDgxMTU0NTVaMDMxMTAvBgNV BAMTKDEzQThBNUY2RENDN0U4MzI5RDQwQTNBOTNDRUMzMUE5QkRDM0IwRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSVV0d3CH/PtM2K75GqFNq2huO t9MaWi7a2/63KsrMaKVup2PsLY7Fj1iywzeFJzFnYoPW0yXUGQeYcPncY1Vvk8nd woAuX+dV5H1ZByOSEV7RsA6ZWZdAEusP1+xnSwlD4B7v+iDxfEA/DelYaZ+hv99S HcyM2b/Fn+VEWOa2ZIC9EVqoIUorVURaZbRQZCaGDQwySqA0zWH/uUvzx3OcXewl G++6iIEJa3PdiGcbrcAAVRpPmPVXr7CCN+9YFlArs7DjylXvp8P+vVJAsKxbafv8 fF2OyAoWhdv25wTmrPIc8G82wJrLUta4NR11vo1jXyF3OtHqZYIsPvWnt9klAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE6il9tzH6DKdQKOpPOwxqb3DsOUwHwYDVR0j BBgwFoAUuXLwc7ivJrhTPpeq+67Bf879b4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDE2MTljYi1jMDFjLTQ2MTQtODYzZS1jZTI4OGQ3YmE3NjUvMC9COTcyRjA3M0I4 QUYyNkI4NTMzRTk3QUFGQkFFQzE3RkNFRkQ2RjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZDRUZE NkY4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQxNjE5Y2ItYzAxYy00NjE0LTg2 M2UtY2UyODhkN2JhNzY1LzAvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMx N0ZDRUZENkY4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfv3czgG2kwFt0P4i29E/t+0Q7WQiTs1BCc Ba10qdcv1LkyMwNFt7Dah2qL7nYsAHhMvgXNtM61Yy3yxo7QmdJmKsgVPu04zSir Jg8c/tlnNgDZBGTgzBqhjSkjVu8yoYlgSUHl7P/nqbGe6W/jwz+SIDGvFZVJIMP8 xWOo4nDeg7LeLN5p+HS/VYNGVtaBieb5J8U8jZqB35EA0FVZ2793YdvWRzaBhalF k6yXoWpahjBYl6zVh2AEUPX/pEgYap8AjcCMRJayc0JBudRVG5m+MFwFxtoE6mr0 lArQfgC/KCBkwmArJSboHRqDS19CgzlyZGpAtNwpj91WVqhfs3U= -----END CERTIFICATE-----Generated at Tue May 6 12:38:36 2025 by rpki-client