$ rpki-client -vvf repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft File: 73238FE50473DF8F457921BE1B0C04764209BBF1.mft (raw, json) Hash identifier: t8YNkSakl1IE0/IM1PyVmK8fmrqWi39r1xW1bhqwxdM= Subject key identifier: FB:FD:10:5A:34:E5:8D:6F:78:D3:07:D0:34:36:85:9C:AE:57:57:ED Authority key identifier: 73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 Certificate issuer: /CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Certificate serial: 2407B41E74C461A3C1307D6B1325664A173C6181 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft Manifest number: 81 Signing time: Sun 04 May 2025 16:51:01 +0000 Manifest this update: Sun 04 May 2025 16:46:01 +0000 Manifest next update: Wed 07 May 2025 19:03:01 +0000 Files and hashes: 1: 3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa (hash: xeHbC/VCkuQ0ewa0mKT4AWB4+3P9LD9U12PZtoBDe2A=) 2: 73238FE50473DF8F457921BE1B0C04764209BBF1.crl (hash: nE2bI8qgkHbwe6TzwWiITH1OyzPLxwD3ePipdtNVFbQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 19:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:07:b4:1e:74:c4:61:a3:c1:30:7d:6b:13:25:66:4a:17:3c:61:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Validity Not Before: May 4 16:46:01 2025 GMT Not After : May 7 19:03:01 2025 GMT Subject: CN=FBFD105A34E58D6F78D307D03436859CAE5757ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:11:3e:f7:a6:f5:55:ab:07:d8:cd:5b:03:4b: 55:1a:f7:37:2c:28:d2:12:ce:37:2b:bc:db:62:d8: e4:0a:47:4b:6d:29:af:3a:f2:5f:e7:c8:7d:59:3d: 18:5b:34:ec:51:a5:1f:98:2f:d2:6c:aa:b7:76:85: f0:84:77:72:ce:0e:22:66:91:f2:d5:09:ab:5e:d2: dd:4c:79:e0:3f:89:d4:96:c1:8c:37:56:05:d8:8b: 99:cf:4b:76:3c:c8:90:72:28:1b:01:f2:21:55:14: c7:66:22:31:61:4b:7a:92:55:0a:e2:b5:f1:ca:97: 89:98:0b:68:d1:c4:15:56:41:53:28:a0:68:fd:7f: a8:5e:bc:8e:5e:3b:1c:6c:81:fe:ea:f2:d3:d3:56: 85:ab:63:b4:b7:16:b7:49:36:b7:c5:80:91:91:40: ef:e0:eb:f2:df:54:4b:a1:e7:9d:24:08:3c:44:c0: df:b4:42:e1:5a:eb:04:4f:65:42:b3:93:23:1c:6c: 45:81:5b:22:da:01:93:35:3b:43:35:be:0e:54:b7: ac:a1:7a:09:3b:f6:66:ad:0a:4b:3c:7d:6c:4f:af: ea:a4:b2:5c:55:cf:dc:01:40:5b:39:02:38:ba:75: b9:23:d9:6d:96:8b:a0:6e:be:64:36:ae:45:8c:6b: b9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:FD:10:5A:34:E5:8D:6F:78:D3:07:D0:34:36:85:9C:AE:57:57:ED X509v3 Authority Key Identifier: keyid:73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:cb:78:c2:1d:74:22:f0:ae:91:ea:e3:33:08:a5:8d:60:38: 57:49:ad:11:8a:b1:ef:37:9f:82:39:ed:24:54:03:2b:78:27: 57:9d:28:e1:6e:9e:fd:44:b7:5d:93:3d:a0:fb:5e:d3:05:39: 5c:41:5c:bf:4a:1c:d6:a3:74:9c:6e:62:a3:7b:25:f2:6b:ec: 24:87:3f:d8:65:2b:a2:a2:1e:36:7c:95:d8:5d:6e:f2:e2:43: 55:14:b7:c9:41:f2:0a:04:6d:72:cf:1a:64:ae:b4:dc:7a:cd: 85:ad:78:9f:be:84:8f:51:2d:aa:d9:57:cf:85:05:b8:c8:68: 75:86:60:df:55:55:fb:28:33:a8:2e:7f:62:19:96:1f:9d:28: 33:dc:5f:67:f7:24:df:d9:bb:8d:e5:d1:16:b4:a4:92:cb:4e: f9:e7:82:cb:9a:dc:df:d9:af:d8:17:06:30:c4:74:7d:be:87: bf:5c:e3:7d:1d:8b:88:e8:d2:dd:dc:85:bd:96:c6:42:98:06: 21:9b:ae:89:f0:9a:c5:40:16:ca:49:b7:21:34:83:06:eb:ff: de:71:f4:27:5e:4f:cb:1c:15:fa:88:ce:34:d1:ef:35:93:19: ba:1c:31:a3:00:b6:06:03:f3:87:3e:25:80:5d:9d:b0:3d:7f: 3c:90:8b:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJAe0HnTEYaPBMH1rEyVmShc8YYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0 MjA5QkJGMTAeFw0yNTA1MDQxNjQ2MDFaFw0yNTA1MDcxOTAzMDFaMDMxMTAvBgNV BAMTKEZCRkQxMDVBMzRFNThENkY3OEQzMDdEMDM0MzY4NTlDQUU1NzU3RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRET73pvVVqwfYzVsDS1Ua9zcs KNISzjcrvNti2OQKR0ttKa868l/nyH1ZPRhbNOxRpR+YL9Jsqrd2hfCEd3LODiJm kfLVCate0t1MeeA/idSWwYw3VgXYi5nPS3Y8yJByKBsB8iFVFMdmIjFhS3qSVQri tfHKl4mYC2jRxBVWQVMooGj9f6hevI5eOxxsgf7q8tPTVoWrY7S3FrdJNrfFgJGR QO/g6/LfVEuh550kCDxEwN+0QuFa6wRPZUKzkyMcbEWBWyLaAZM1O0M1vg5Ut6yh egk79matCks8fWxPr+qkslxVz9wBQFs5Aji6dbkj2W2Wi6BuvmQ2rkWMa7knAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+/0QWjTljW940wfQNDaFnK5XV+0wHwYDVR0j BBgwFoAUcyOP5QRz349FeSG+GwwEdkIJu/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MGE4Y2U2Yy04MjkwLTRiOWQtOWFlZC0wNzU0ZDNmZDhkMzIvMC83MzIzOEZFNTA0 NzNERjhGNDU3OTIxQkUxQjBDMDQ3NjQyMDlCQkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0MjA5 QkJGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDBhOGNlNmMtODI5MC00YjlkLTlh ZWQtMDc1NGQzZmQ4ZDMyLzAvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0 NzY0MjA5QkJGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvLeMIddCLwrpHq4zMIpY1gOFdJrRGKse83 n4I57SRUAyt4J1edKOFunv1Et12TPaD7XtMFOVxBXL9KHNajdJxuYqN7JfJr7CSH P9hlK6KiHjZ8ldhdbvLiQ1UUt8lB8goEbXLPGmSutNx6zYWteJ++hI9RLarZV8+F BbjIaHWGYN9VVfsoM6guf2IZlh+dKDPcX2f3JN/Zu43l0Ra0pJLLTvnngsua3N/Z r9gXBjDEdH2+h79c430di4jo0t3chb2WxkKYBiGbronwmsVAFspJtyE0gwbr/95x 9CdeT8scFfqIzjTR7zWTGbocMaMAtgYD84c+JYBdnbA9fzyQi/E= -----END CERTIFICATE-----Generated at Wed May 7 07:11:33 2025 by rpki-client