$ rpki-client -vvf repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft File: A708865394D992A01D1736F0AB500E24889B7F34.mft (raw, json) Hash identifier: hZa2VZMBauN24f0oze1pYtVonz4KMRPrFR3i7HwfJsI= Subject key identifier: C4:9D:88:56:D5:14:E7:E0:5D:74:16:58:AC:F9:22:AA:3C:80:4C:72 Authority key identifier: A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 Certificate issuer: /CN=A708865394D992A01D1736F0AB500E24889B7F34 Certificate serial: 430F052AE8B63DFA37BDDBDFAC976D13E6E768C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft Manifest number: 0122 Signing time: Sun 04 May 2025 15:00:47 +0000 Manifest this update: Sun 04 May 2025 14:55:47 +0000 Manifest next update: Thu 08 May 2025 01:27:47 +0000 Files and hashes: 1: A708865394D992A01D1736F0AB500E24889B7F34.crl (hash: 6jl5MWKGGeDEsWJpzKha6UqXlW6CXU/wkmjAH8eWjcg=) 2: 3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa (hash: rgZhMMMnE/8X/ajx3/StMU1scrnbaZrzmmCgG9/im6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 01:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:0f:05:2a:e8:b6:3d:fa:37:bd:db:df:ac:97:6d:13:e6:e7:68:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A708865394D992A01D1736F0AB500E24889B7F34 Validity Not Before: May 4 14:55:47 2025 GMT Not After : May 8 01:27:47 2025 GMT Subject: CN=C49D8856D514E7E05D741658ACF922AA3C804C72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ca:32:27:01:c9:55:c2:6b:1f:cd:b2:9c:f5: f3:e4:34:1c:fd:b4:26:04:f9:dd:4a:6f:7b:3f:4c: 30:f7:f3:21:bc:82:f3:f0:b7:86:d5:88:c6:4c:32: 4b:19:74:1c:92:5f:37:83:33:f9:e2:00:69:e0:13: ae:b1:3e:b5:82:39:bb:b9:64:cb:10:80:50:ea:6a: 64:16:07:01:e8:05:3d:08:99:3e:3d:d9:ae:e6:37: 42:10:48:19:ed:c6:80:46:d2:cc:89:44:80:c3:42: 8f:4f:06:00:db:ed:1e:58:d0:17:e3:fd:b1:e6:be: e3:a9:e6:bc:1b:eb:79:fe:6d:ef:2a:35:23:d6:dd: 25:46:21:d3:2b:bd:d5:5c:e3:be:c7:e1:c2:ab:67: 01:2f:7c:d6:b8:aa:03:ba:db:0c:82:6d:a8:43:95: fc:2f:2a:a4:91:56:11:65:93:6b:77:b4:c3:61:33: 3b:48:f8:f3:c8:5a:d5:1d:ea:bd:8f:3d:86:1d:42: db:eb:2b:76:ff:c9:fc:fb:91:4f:d6:f6:6c:a6:eb: a9:64:3b:14:8b:c3:fe:00:1e:4d:7a:ad:af:96:9d: 8a:0f:44:04:d6:34:1d:95:5f:c7:72:ba:85:79:28: c7:26:55:a8:8b:24:7b:b6:ff:20:ad:f4:10:79:67: f9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9D:88:56:D5:14:E7:E0:5D:74:16:58:AC:F9:22:AA:3C:80:4C:72 X509v3 Authority Key Identifier: keyid:A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:64:d6:0b:d9:b2:d2:ab:44:4c:80:3c:d7:e9:08:97:42:77: 61:bd:45:b7:69:10:79:1c:31:1a:f5:ff:5d:6d:3f:c8:2e:91: 2f:ca:6c:07:4d:45:2a:6b:1e:24:e0:d7:d8:3d:d9:8b:98:41: 74:fe:97:5e:f2:45:a1:6f:6a:8d:bc:ad:d9:23:5e:db:00:40: c2:46:d3:8f:15:b4:71:de:85:21:47:8a:fe:46:41:66:88:d0: 92:6e:3c:95:1a:0e:00:0c:d2:90:0e:0d:c2:f5:73:0e:be:fa: c6:96:92:44:84:e7:26:ab:d9:8c:5c:d2:7c:59:1f:58:16:7a: 4d:da:1e:fd:83:64:83:f8:ee:95:a4:a8:2b:e6:92:32:e0:73: 4c:03:6e:a1:44:63:74:40:ca:39:b0:ac:de:bd:af:86:b0:cc: 40:1b:7f:03:c6:6d:3e:75:5b:54:ee:47:8d:26:a7:97:b8:31: f1:29:01:74:7d:87:aa:47:4b:dd:eb:fd:44:f2:22:a6:97:27: 18:b4:20:10:5e:71:d4:9b:ad:f7:d8:13:69:ce:b5:0e:e0:5a: 01:9b:b5:b7:60:03:e4:a3:a0:97:42:c2:87:49:87:b4:f5:2f: 69:ae:79:d1:ff:cd:4b:63:7e:0e:36:3e:19:60:bd:fa:da:eb: 53:06:69:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQw8FKui2Pfo3vdvfrJdtE+bnaMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4 ODlCN0YzNDAeFw0yNTA1MDQxNDU1NDdaFw0yNTA1MDgwMTI3NDdaMDMxMTAvBgNV BAMTKEM0OUQ4ODU2RDUxNEU3RTA1RDc0MTY1OEFDRjkyMkFBM0M4MDRDNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFyjInAclVwmsfzbKc9fPkNBz9 tCYE+d1Kb3s/TDD38yG8gvPwt4bViMZMMksZdBySXzeDM/niAGngE66xPrWCObu5 ZMsQgFDqamQWBwHoBT0ImT492a7mN0IQSBntxoBG0syJRIDDQo9PBgDb7R5Y0Bfj /bHmvuOp5rwb63n+be8qNSPW3SVGIdMrvdVc477H4cKrZwEvfNa4qgO62wyCbahD lfwvKqSRVhFlk2t3tMNhMztI+PPIWtUd6r2PPYYdQtvrK3b/yfz7kU/W9mym66lk OxSLw/4AHk16ra+WnYoPRATWNB2VX8dyuoV5KMcmVaiLJHu2/yCt9BB5Z/knAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxJ2IVtUU5+BddBZYrPkiqjyATHIwHwYDVR0j BBgwFoAUpwiGU5TZkqAdFzbwq1AOJIibfzQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjBjN2EzNy01ZDE5LTRjNWMtOTMwMS1hMTRhN2YxODVjOTIvMC9BNzA4ODY1Mzk0 RDk5MkEwMUQxNzM2RjBBQjUwMEUyNDg4OUI3RjM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4ODlC N0YzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYwYzdhMzctNWQxOS00YzVjLTkz MDEtYTE0YTdmMTg1YzkyLzAvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBF MjQ4ODlCN0YzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM9k1gvZstKrREyAPNfpCJdCd2G9RbdpEHkc MRr1/11tP8gukS/KbAdNRSprHiTg19g92YuYQXT+l17yRaFvao28rdkjXtsAQMJG 048VtHHehSFHiv5GQWaI0JJuPJUaDgAM0pAODcL1cw6++saWkkSE5yar2Yxc0nxZ H1gWek3aHv2DZIP47pWkqCvmkjLgc0wDbqFEY3RAyjmwrN69r4awzEAbfwPGbT51 W1TuR40mp5e4MfEpAXR9h6pHS93r/UTyIqaXJxi0IBBecdSbrffYE2nOtQ7gWgGb tbdgA+SjoJdCwodJh7T1L2muedH/zUtjfg42Phlgvfra61MGaWo= -----END CERTIFICATE-----Generated at Mon May 5 19:17:44 2025 by rpki-client