$ rpki-client -vvf repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft File: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft (raw, json) Hash identifier: 7y8XTNiul0Lyth8YWjbP91pNbYu2s1r/lg6pgoDx2/s= Subject key identifier: AA:DA:E9:A7:0A:A5:A1:A7:21:4D:EB:42:B6:FE:A0:2D:17:F5:B7:CC Authority key identifier: 0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD Certificate issuer: /CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Certificate serial: 5620CE2644D67D444EF2B46F731163833FE1C148 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft Manifest number: 018F Signing time: Wed 07 May 2025 11:01:28 +0000 Manifest this update: Wed 07 May 2025 10:56:28 +0000 Manifest next update: Sat 10 May 2025 19:01:28 +0000 Files and hashes: 1: 3130332e3134372e3134342e302f32332d3234203d3e203137373639.roa (hash: k4bVgZQwwhwXyEq21/fgsjgZLJvFrNFPkmTEg/UKHTM=) 2: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl (hash: A+ijMsA+sH7Bc7gk+1NPA5xG9lwpOi2xM7Ga6ikHDjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 19:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:20:ce:26:44:d6:7d:44:4e:f2:b4:6f:73:11:63:83:3f:e1:c1:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Validity Not Before: May 7 10:56:28 2025 GMT Not After : May 10 19:01:28 2025 GMT Subject: CN=AADAE9A70AA5A1A7214DEB42B6FEA02D17F5B7CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:20:49:e3:2d:06:b7:a5:84:6d:9c:a9:e4:95: 82:f5:eb:f6:28:d6:64:81:eb:a0:d0:06:3d:5d:c7: 33:f6:ce:d6:b5:6f:7a:a1:07:4d:88:5b:ae:7b:23: ca:8e:b0:a6:71:11:96:0d:0d:9f:b9:0c:d0:d2:b1: 37:26:b5:13:b8:9d:84:45:37:6f:84:3b:70:08:07: 7a:fa:eb:00:ee:69:a3:d7:27:94:7e:40:2a:a3:e6: 6e:69:74:09:72:07:41:50:c0:f3:b6:75:30:a4:bc: 02:7c:3d:5c:be:4f:b8:20:b2:b7:1a:2e:77:93:d9: 71:56:15:ec:18:3f:b2:16:a8:d0:56:cb:75:0f:44: 73:b7:85:a3:74:e7:32:1c:8f:82:5b:8e:47:02:83: af:d1:2f:b8:25:b7:c9:dd:68:d0:cd:fe:4e:3f:24: d8:18:a7:ce:4a:3d:6e:cf:49:05:a4:f5:3b:81:6b: 6e:c3:bf:3b:bc:a1:0f:56:77:c5:b2:17:ba:64:d7: 83:8a:8a:34:36:91:97:cc:14:65:af:d0:f7:03:7c: fc:23:3d:03:14:ff:56:4d:07:b8:dc:e3:0a:6e:11: fa:a0:a9:9e:9e:6a:08:68:24:68:6b:5e:f5:e5:ee: 6f:a4:13:8c:c1:25:3e:2a:b6:91:24:41:c1:81:de: 74:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DA:E9:A7:0A:A5:A1:A7:21:4D:EB:42:B6:FE:A0:2D:17:F5:B7:CC X509v3 Authority Key Identifier: keyid:0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:f6:4e:e0:8c:d3:1c:f3:e7:dd:3b:be:aa:23:d9:76:6c:2f: 8d:bf:56:9d:83:8c:a1:4f:8c:8a:74:ec:f1:3b:a5:91:dc:74: de:23:9c:9d:83:29:51:ca:a7:66:40:96:d9:a7:9d:2c:63:cb: e9:89:30:83:cb:a9:e8:c3:b5:30:d2:75:b6:f3:da:9b:cc:17: 61:ec:0c:66:42:b8:f3:30:70:96:bc:c3:61:cf:f1:0d:72:e1: 7d:6e:e8:a1:fc:b4:0d:4b:f6:17:4d:d9:e1:e3:1d:a2:ef:10: c7:2f:90:00:59:6c:ab:e4:8c:9e:33:82:c2:ab:a7:4c:a0:63: db:e3:46:a2:96:d4:34:ab:08:d0:c0:d5:24:03:26:90:92:c3: 7e:d2:e5:34:24:d6:8d:c2:cf:29:52:53:7e:5b:12:0c:b7:28: bc:ad:83:e4:47:3b:ab:bd:f4:58:8e:0f:37:7f:aa:6d:c0:96: 08:37:d9:94:2a:40:54:4d:fe:4d:4c:c4:56:5e:a9:1a:81:ed: de:8a:4b:49:63:92:3e:08:bb:fa:10:32:38:7f:b3:12:1d:21: 92:20:5f:c8:8c:9d:d9:e7:6d:5c:28:68:18:ab:7b:99:b2:ed: 9d:7b:b2:8c:27:d0:7e:db:eb:1e:16:c7:b6:03:9d:8a:a4:12: 16:4d:e9:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUViDOJkTWfURO8rRvcxFjgz/hwUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4 NUJGQURGRDAeFw0yNTA1MDcxMDU2MjhaFw0yNTA1MTAxOTAxMjhaMDMxMTAvBgNV BAMTKEFBREFFOUE3MEFBNUExQTcyMTRERUI0MkI2RkVBMDJEMTdGNUI3Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5IEnjLQa3pYRtnKnklYL16/Yo 1mSB66DQBj1dxzP2zta1b3qhB02IW657I8qOsKZxEZYNDZ+5DNDSsTcmtRO4nYRF N2+EO3AIB3r66wDuaaPXJ5R+QCqj5m5pdAlyB0FQwPO2dTCkvAJ8PVy+T7ggsrca LneT2XFWFewYP7IWqNBWy3UPRHO3haN05zIcj4JbjkcCg6/RL7glt8ndaNDN/k4/ JNgYp85KPW7PSQWk9TuBa27Dvzu8oQ9Wd8WyF7pk14OKijQ2kZfMFGWv0PcDfPwj PQMU/1ZNB7jc4wpuEfqgqZ6eaghoJGhrXvXl7m+kE4zBJT4qtpEkQcGB3nTrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqtrppwqloachTetCtv6gLRf1t8wwHwYDVR0j BBgwFoAUCh38tKQ4YeSnG81kV5IAVIW/rf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODVjYmQ5NS01NzRmLTQwNWItOGJkZS0wZGRiOWM5YmRkYmEvMC8wQTFERkNCNEE0 Mzg2MUU0QTcxQkNENjQ1NzkyMDA1NDg1QkZBREZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4NUJG QURGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg1Y2JkOTUtNTc0Zi00MDViLThi ZGUtMGRkYjljOWJkZGJhLzAvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAw NTQ4NUJGQURGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKT2TuCM0xzz5907vqoj2XZsL42/Vp2DjKFP jIp07PE7pZHcdN4jnJ2DKVHKp2ZAltmnnSxjy+mJMIPLqejDtTDSdbbz2pvMF2Hs DGZCuPMwcJa8w2HP8Q1y4X1u6KH8tA1L9hdN2eHjHaLvEMcvkABZbKvkjJ4zgsKr p0ygY9vjRqKW1DSrCNDA1SQDJpCSw37S5TQk1o3CzylSU35bEgy3KLytg+RHO6u9 9FiODzd/qm3Algg32ZQqQFRN/k1MxFZeqRqB7d6KS0ljkj4Iu/oQMjh/sxIdIZIg X8iMndnnbVwoaBire5my7Z17sown0H7b6x4Wx7YDnYqkEhZN6YQ= -----END CERTIFICATE-----Generated at Thu May 8 03:57:23 2025 by rpki-client