$ rpki-client -vvf repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft File: B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft (raw, json) Hash identifier: J8gzDMr5wv26aJ3ZqJ0vAFlImU+RYtl7tJmZgiQFnZQ= Subject key identifier: FB:3D:5F:B7:F8:7F:56:9C:F7:A5:02:09:A6:9D:04:03:25:05:47:14 Authority key identifier: B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA Certificate issuer: /CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Certificate serial: 165D71D5705CE608AE3A35C4991670D834FB7C35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft Manifest number: 01DD Signing time: Sun 11 May 2025 00:21:08 +0000 Manifest this update: Sun 11 May 2025 00:16:08 +0000 Manifest next update: Wed 14 May 2025 05:49:08 +0000 Files and hashes: 1: 3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa (hash: fcX6dDB/6jZr5p1excLhOSLezwfpNz/DNvOt6VHyTLo=) 2: B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl (hash: PELyTx4r6IWIMtHdQ+DEqLhWpTLyRsSYIfxLTZ+m5A4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 02:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:5d:71:d5:70:5c:e6:08:ae:3a:35:c4:99:16:70:d8:34:fb:7c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Validity Not Before: May 11 00:16:08 2025 GMT Not After : May 14 05:49:08 2025 GMT Subject: CN=FB3D5FB7F87F569CF7A50209A69D040325054714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fd:24:60:87:df:aa:70:29:d5:0f:48:72:77: 35:8d:74:48:b2:29:bf:c2:6e:9b:2b:8f:c1:a7:cc: 14:7b:2f:93:39:0e:3e:79:f7:0e:b6:5c:f7:12:19: c4:de:05:59:e2:2a:78:80:e2:60:37:97:9e:8a:1a: cd:6e:73:87:c2:9d:43:dd:65:81:8a:bf:79:20:fc: ff:e5:3e:46:ea:79:ef:8e:ad:bf:40:bb:7c:be:37: fe:f3:f4:8b:52:09:33:7c:a7:79:f8:d1:b1:c0:86: 0e:45:c1:56:fa:8d:6e:bc:4e:40:e6:e2:9f:ed:74: 2b:9b:ea:81:cc:73:03:c0:49:b2:c1:21:89:4c:55: c7:7c:af:2d:cc:16:ed:c2:39:ba:44:a5:55:2c:53: c0:bb:20:27:4b:a1:b9:58:b3:8a:1b:12:4e:8f:bc: ec:d6:a8:02:4d:39:4e:a1:8f:00:75:77:a7:8e:f8: 6f:41:e0:c6:b2:27:43:7d:b5:90:30:3d:87:9e:4d: 69:75:ec:51:71:18:74:fa:ec:90:10:a3:b8:03:f3: d2:3a:cc:4d:52:31:19:6e:e5:ab:ea:3d:97:7b:1b: 44:ba:36:86:76:16:ff:15:fb:c8:62:ce:bf:87:80: 5b:e4:91:98:9c:42:1e:6f:4c:cf:7a:09:49:d6:e2: e6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3D:5F:B7:F8:7F:56:9C:F7:A5:02:09:A6:9D:04:03:25:05:47:14 X509v3 Authority Key Identifier: keyid:B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:46:39:99:17:50:3e:1b:38:6a:e2:1c:54:64:8a:5b:0a:ca: ec:a1:bf:c8:4b:6c:98:93:7a:a6:84:ec:fa:a3:0a:84:09:5f: 30:12:32:e9:74:57:9e:1e:84:f8:00:dc:17:16:0a:99:fb:72: 60:1b:6d:a9:68:31:52:0a:46:21:06:38:21:4b:5a:ea:04:9a: ea:8c:6f:31:81:b1:8a:97:14:89:9a:3f:12:e9:f7:61:a9:71: 2d:c7:c5:b8:af:d3:ac:21:a9:86:bb:ca:9a:3d:bd:17:1a:84: 75:1f:55:64:73:ed:60:c2:c9:5b:28:18:76:38:73:5b:86:5e: ae:20:ae:26:69:0d:9c:a5:14:5a:9d:2e:91:1a:31:55:c3:77: 91:39:fa:38:7a:f5:b7:29:8b:4d:d1:c1:f7:36:70:ff:7f:81: fb:1d:53:c1:67:39:26:c5:a4:6a:3f:78:ba:91:3a:f8:ea:88: f6:a9:36:9f:2d:91:6a:c8:19:2a:c2:96:8b:a3:9e:83:57:59: 21:59:cf:cc:d1:50:f3:d2:f8:1b:0b:23:f1:43:9e:e4:64:7f: 28:65:f3:b4:ec:ae:db:00:29:1e:94:5e:8e:4b:ac:fa:49:a4: 89:03:64:02:09:89:16:0e:49:9a:c4:a9:a9:5e:d5:43:44:63: a9:4c:5a:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFl1x1XBc5giuOjXEmRZw2DT7fDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAx NTA0MTFDQTAeFw0yNTA1MTEwMDE2MDhaFw0yNTA1MTQwNTQ5MDhaMDMxMTAvBgNV BAMTKEZCM0Q1RkI3Rjg3RjU2OUNGN0E1MDIwOUE2OUQwNDAzMjUwNTQ3MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr/SRgh9+qcCnVD0hydzWNdEiy Kb/Cbpsrj8GnzBR7L5M5Dj559w62XPcSGcTeBVniKniA4mA3l56KGs1uc4fCnUPd ZYGKv3kg/P/lPkbqee+Orb9Au3y+N/7z9ItSCTN8p3n40bHAhg5FwVb6jW68TkDm 4p/tdCub6oHMcwPASbLBIYlMVcd8ry3MFu3CObpEpVUsU8C7ICdLoblYs4obEk6P vOzWqAJNOU6hjwB1d6eO+G9B4MayJ0N9tZAwPYeeTWl17FFxGHT67JAQo7gD89I6 zE1SMRlu5avqPZd7G0S6NoZ2Fv8V+8hizr+HgFvkkZicQh5vTM96CUnW4uY7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+z1ft/h/Vpz3pQIJpp0EAyUFRxQwHwYDVR0j BBgwFoAUsHNKMtE6lvyz/fmCwu7FABUEEcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjMwOTdmMC0zOTc4LTQ5Y2UtYjY5Yy00YjIwYjRkY2ZiN2UvMC9CMDczNEEzMkQx M0E5NkZDQjNGREY5ODJDMkVFQzUwMDE1MDQxMUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAxNTA0 MTFDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzMDk3ZjAtMzk3OC00OWNlLWI2 OWMtNGIyMGI0ZGNmYjdlLzAvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1 MDAxNTA0MTFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZGOZkXUD4bOGriHFRkilsKyuyhv8hLbJiT eqaE7PqjCoQJXzASMul0V54ehPgA3BcWCpn7cmAbbaloMVIKRiEGOCFLWuoEmuqM bzGBsYqXFImaPxLp92GpcS3Hxbiv06whqYa7ypo9vRcahHUfVWRz7WDCyVsoGHY4 c1uGXq4griZpDZylFFqdLpEaMVXDd5E5+jh69bcpi03Rwfc2cP9/gfsdU8FnOSbF pGo/eLqROvjqiPapNp8tkWrIGSrCloujnoNXWSFZz8zRUPPS+BsLI/FDnuRkfyhl 87TsrtsAKR6UXo5LrPpJpIkDZAIJiRYOSZrEqale1UNEY6lMWug= -----END CERTIFICATE-----Generated at Sun May 11 06:34:15 2025 by rpki-client