$ rpki-client -vvf repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft File: D34F7D48A07BB8A2DEEDC8C87819771181935231.mft (raw, json) Hash identifier: 9bH1A5mYEHiuG2uUTxJSPuzG8OPJfzEQ73W2c6Mj2Gc= Subject key identifier: 17:72:EA:72:1A:F8:A1:9E:56:C0:CD:F4:B0:16:E1:1F:6F:28:2B:E7 Authority key identifier: D3:4F:7D:48:A0:7B:B8:A2:DE:ED:C8:C8:78:19:77:11:81:93:52:31 Certificate issuer: /CN=D34F7D48A07BB8A2DEEDC8C87819771181935231 Certificate serial: 6808F1E0D64CD3E2AB931A0155E584DF6E1227C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft Manifest number: 01C7 Signing time: Fri 09 May 2025 22:10:00 +0000 Manifest this update: Fri 09 May 2025 22:05:00 +0000 Manifest next update: Tue 13 May 2025 07:17:00 +0000 Files and hashes: 1: D34F7D48A07BB8A2DEEDC8C87819771181935231.crl (hash: SDwCG0hrF/tCrBGRVwGzx/VtqTcCx7oi7AccolT0qUA=) 2: 3130332e3138392e3131342e302f32342d3234203d3e20313439373533.roa (hash: mJRfdF8Fdla37pRzxHiZB6KLj2ueLFTilKfm0V/9nTs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.crl rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 03:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:08:f1:e0:d6:4c:d3:e2:ab:93:1a:01:55:e5:84:df:6e:12:27:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34F7D48A07BB8A2DEEDC8C87819771181935231 Validity Not Before: May 9 22:05:00 2025 GMT Not After : May 13 07:17:00 2025 GMT Subject: CN=1772EA721AF8A19E56C0CDF4B016E11F6F282BE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:83:76:ed:9e:3f:7f:83:b0:48:23:bd:61:43: 92:1c:b4:b3:b7:d2:c0:65:6f:82:4e:e9:8e:69:0e: ea:05:38:b1:e1:29:94:4c:23:83:f1:bb:a1:b5:13: b4:5a:a0:eb:69:5a:c5:91:c1:9c:23:d7:35:72:c7: d2:31:2c:90:67:05:f8:7b:be:44:40:54:3e:1e:97: ee:b9:57:64:87:c6:aa:bb:aa:70:03:dc:ff:b0:5f: 60:d6:eb:6e:fd:16:85:88:af:dc:6a:db:a0:fd:0a: 63:8e:1d:31:06:be:7b:e7:aa:c9:47:72:4d:aa:e9: 95:a3:69:b3:7a:18:9a:60:a7:89:bd:86:a4:01:cb: f9:70:ea:16:84:3b:87:2a:da:91:c5:48:b3:d7:46: 9e:f9:3d:46:9f:88:3c:ab:dd:db:d1:1a:05:12:96: 5b:03:a0:dc:72:20:d9:31:29:1f:30:3c:b6:71:b4: e5:41:1a:d5:93:a6:16:d1:8f:dd:7c:0b:90:9e:76: 40:91:23:1e:1a:74:19:0f:e7:f5:4f:8c:ac:8e:24: f0:30:60:d7:1c:c9:a1:69:17:79:cc:c9:c2:31:6c: 40:18:f3:93:ad:16:a2:a5:55:7c:c1:e0:2c:7b:20: b7:55:19:54:74:26:41:bd:da:29:5d:5e:69:62:0f: aa:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:72:EA:72:1A:F8:A1:9E:56:C0:CD:F4:B0:16:E1:1F:6F:28:2B:E7 X509v3 Authority Key Identifier: keyid:D3:4F:7D:48:A0:7B:B8:A2:DE:ED:C8:C8:78:19:77:11:81:93:52:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D34F7D48A07BB8A2DEEDC8C87819771181935231.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c359b6a3-b74b-4baa-993a-818fb7210722/0/D34F7D48A07BB8A2DEEDC8C87819771181935231.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:23:94:5f:16:c0:46:52:0d:68:a7:63:32:e2:ae:81:5d:5f: f0:75:08:52:c5:0c:48:9f:ba:f8:4a:21:53:2c:4a:76:33:60: 69:15:b0:57:b7:e6:2c:d4:ab:03:c2:49:76:1d:e5:3e:62:2b: 1a:f1:d9:79:76:c5:bc:3c:3d:f4:16:3c:41:73:c3:05:66:5b: 9e:5b:52:f8:3f:06:2d:1c:e1:62:31:57:a8:fb:bf:5e:93:6c: 3f:80:f2:e5:38:fc:4b:e4:b9:f4:c3:8c:0c:52:e8:54:c6:a7: f3:ff:59:69:df:b8:a1:fe:cf:0b:c6:86:f7:78:39:d6:ca:99: 88:b6:b3:2c:4a:05:61:e8:4c:ce:9c:94:46:0f:56:72:e9:77: e7:da:26:12:68:45:b7:ba:94:06:99:15:cb:c0:f1:a5:d4:5d: 1b:99:67:3f:c8:ee:ea:49:bc:b9:e8:95:56:81:5d:c8:b3:f1: a1:60:45:19:a8:a7:dd:81:f1:47:c8:78:b4:7a:4f:b2:4c:6e: 70:3f:13:94:4f:a5:81:ff:1f:f9:3c:5f:f6:0f:54:9a:1e:36: 69:0b:02:bb:02:ee:58:bf:45:1c:86:d1:07:6f:68:c3:10:02: 59:c3:97:6d:07:81:74:05:ec:fe:f9:8f:15:cf:16:7b:18:b8: 34:80:25:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaAjx4NZM0+KrkxoBVeWE324SJ8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3MTE4 MTkzNTIzMTAeFw0yNTA1MDkyMjA1MDBaFw0yNTA1MTMwNzE3MDBaMDMxMTAvBgNV BAMTKDE3NzJFQTcyMUFGOEExOUU1NkMwQ0RGNEIwMTZFMTFGNkYyODJCRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmg3btnj9/g7BII71hQ5IctLO3 0sBlb4JO6Y5pDuoFOLHhKZRMI4Pxu6G1E7RaoOtpWsWRwZwj1zVyx9IxLJBnBfh7 vkRAVD4el+65V2SHxqq7qnAD3P+wX2DW6279FoWIr9xq26D9CmOOHTEGvnvnqslH ck2q6ZWjabN6GJpgp4m9hqQBy/lw6haEO4cq2pHFSLPXRp75PUafiDyr3dvRGgUS llsDoNxyINkxKR8wPLZxtOVBGtWTphbRj918C5CedkCRIx4adBkP5/VPjKyOJPAw YNccyaFpF3nMycIxbEAY85OtFqKlVXzB4Cx7ILdVGVR0JkG92ildXmliD6pVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF3Lqchr4oZ5WwM30sBbhH28oK+cwHwYDVR0j BBgwFoAU0099SKB7uKLe7cjIeBl3EYGTUjEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzU5YjZhMy1iNzRiLTRiYWEtOTkzYS04MThmYjcyMTA3MjIvMC9EMzRGN0Q0OEEw N0JCOEEyREVFREM4Qzg3ODE5NzcxMTgxOTM1MjMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3MTE4MTkz NTIzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM1OWI2YTMtYjc0Yi00YmFhLTk5 M2EtODE4ZmI3MjEwNzIyLzAvRDM0RjdENDhBMDdCQjhBMkRFRURDOEM4NzgxOTc3 MTE4MTkzNTIzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABojlF8WwEZSDWinYzLiroFdX/B1CFLFDEif uvhKIVMsSnYzYGkVsFe35izUqwPCSXYd5T5iKxrx2Xl2xbw8PfQWPEFzwwVmW55b Uvg/Bi0c4WIxV6j7v16TbD+A8uU4/EvkufTDjAxS6FTGp/P/WWnfuKH+zwvGhvd4 OdbKmYi2syxKBWHoTM6clEYPVnLpd+faJhJoRbe6lAaZFcvA8aXUXRuZZz/I7upJ vLnolVaBXciz8aFgRRmop92B8UfIeLR6T7JMbnA/E5RPpYH/H/k8X/YPVJoeNmkL ArsC7li/RRyG0QdvaMMQAlnDl20HgXQF7P75jxXPFnsYuDSAJVE= -----END CERTIFICATE-----Generated at Sat May 10 04:01:51 2025 by rpki-client