$ rpki-client -vvf repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft File: 037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft (raw, json) Hash identifier: y36KumjeU0VkYU2hoOZR1ns0gICueYK23BzoRZU1W1c= Subject key identifier: 16:FA:32:F7:CE:8E:21:51:6D:41:09:A3:8B:EE:45:08:07:48:95:8B Authority key identifier: 03:7A:1E:47:FB:1C:CE:3B:6E:6A:93:69:ED:DD:87:0D:AE:80:D6:65 Certificate issuer: /CN=037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665 Certificate serial: 4673747DF245083217545D6D4126988C23287053 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft Manifest number: FF Signing time: Wed 07 May 2025 21:00:49 +0000 Manifest this update: Wed 07 May 2025 20:55:49 +0000 Manifest next update: Sun 11 May 2025 08:53:49 +0000 Files and hashes: 1: 037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.crl (hash: KylcQxBFZIB15Jzcd2bExlnZVt3T3JgwUePQevwPUF0=) 2: 3130332e3233392e34312e302f32342d3234203d3e20313531353331.roa (hash: XSreqIJljknfOIObygSCrMVbPXNgjuTPQtrsZby6wgM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.crl rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 08:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:73:74:7d:f2:45:08:32:17:54:5d:6d:41:26:98:8c:23:28:70:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665 Validity Not Before: May 7 20:55:49 2025 GMT Not After : May 11 08:53:49 2025 GMT Subject: CN=16FA32F7CE8E21516D4109A38BEE45080748958B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d1:ef:5d:4b:66:47:6e:b2:0f:e2:05:22:75: 4b:93:54:d2:49:86:f0:a7:2a:44:5c:03:b1:83:ed: cd:bd:f9:62:f9:eb:b6:8e:9d:be:ab:6c:cc:94:02: 36:3d:25:d3:37:85:8f:86:1c:f8:78:c0:95:cb:00: 84:f6:89:ae:c5:0b:9d:c5:c7:35:0f:ba:fd:e9:3c: 92:14:6a:d0:20:a6:9e:d3:fa:d3:0b:58:67:2c:46: d7:b6:4d:9d:c7:3e:35:ea:79:e8:df:c9:7e:dc:b9: e2:a8:96:9d:f0:05:46:3a:7a:27:a3:bd:fa:d4:d8: 18:93:2c:85:2e:f4:4f:2f:c1:75:23:1e:a7:2f:02: 94:d8:8c:2f:33:51:f0:41:34:76:c7:f3:45:80:30: 21:e5:2e:fa:5a:0b:e4:7f:11:c2:ce:e3:d3:a5:5d: 06:82:4c:f2:8d:7d:44:77:06:4a:f7:81:60:96:73: fd:ff:a8:e4:d4:77:b7:0a:2e:f4:06:23:c5:6d:2f: b6:61:2c:10:b3:c5:51:29:d9:79:47:b1:16:5d:f9: b1:44:4a:ef:b0:53:cd:4a:7c:bc:6f:32:c2:36:0b: a1:3e:d1:2c:ef:8c:42:84:69:d1:20:6f:67:11:5f: 8b:7b:2d:74:d6:07:23:3e:2a:bf:ff:5a:27:16:c6: 14:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FA:32:F7:CE:8E:21:51:6D:41:09:A3:8B:EE:45:08:07:48:95:8B X509v3 Authority Key Identifier: keyid:03:7A:1E:47:FB:1C:CE:3B:6E:6A:93:69:ED:DD:87:0D:AE:80:D6:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4bfc5c3-c39c-45ed-ae87-384a6dcb7938/0/037A1E47FB1CCE3B6E6A9369EDDD870DAE80D665.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:31:c5:87:8b:f0:fe:d2:69:37:5e:0c:57:a6:be:31:4e:d2: 8c:84:a6:21:01:51:95:cd:f6:57:63:4a:a8:a0:84:e2:68:16: 81:31:04:14:4d:dc:ac:4f:8a:07:f7:7b:72:60:d5:57:87:55: d3:29:8b:5f:3a:37:3f:f4:a0:c5:8c:ae:fb:64:2b:58:ab:de: 8b:14:0c:82:fc:6e:56:c6:0d:b9:78:44:51:fd:6f:f7:13:df: bc:72:ea:34:75:4f:af:50:a1:47:7f:a4:79:d6:28:0e:ea:a1: fa:66:44:af:d1:17:61:f7:7f:ec:68:d9:29:71:7b:d3:b0:68: ef:70:88:2a:20:49:9f:97:3a:7f:b4:5b:b8:70:03:e5:c1:c8: b4:d1:e4:0c:22:63:5a:8a:4c:93:bc:91:ce:49:85:f4:4e:c7: 6c:f4:c4:43:d7:cd:83:02:28:e3:bf:30:95:5a:de:63:13:f7: 0f:93:75:3d:9f:73:4c:96:f8:0f:45:c6:47:91:b4:e3:ee:cb: f6:36:c8:56:9c:fc:69:4e:c4:66:de:5e:55:05:3f:bc:74:71: 4e:24:a6:72:97:b4:f9:a8:1b:71:f9:b3:ae:1e:e8:2f:b6:c1: fd:54:8a:47:cf:2f:8e:b2:24:68:11:a4:40:18:e0:5d:89:80: f8:a4:23:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURnN0ffJFCDIXVF1tQSaYjCMocFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM3QTFFNDdGQjFDQ0UzQjZFNkE5MzY5RURERDg3MERB RTgwRDY2NTAeFw0yNTA1MDcyMDU1NDlaFw0yNTA1MTEwODUzNDlaMDMxMTAvBgNV BAMTKDE2RkEzMkY3Q0U4RTIxNTE2RDQxMDlBMzhCRUU0NTA4MDc0ODk1OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz0e9dS2ZHbrIP4gUidUuTVNJJ hvCnKkRcA7GD7c29+WL567aOnb6rbMyUAjY9JdM3hY+GHPh4wJXLAIT2ia7FC53F xzUPuv3pPJIUatAgpp7T+tMLWGcsRte2TZ3HPjXqeejfyX7cueKolp3wBUY6eiej vfrU2BiTLIUu9E8vwXUjHqcvApTYjC8zUfBBNHbH80WAMCHlLvpaC+R/EcLO49Ol XQaCTPKNfUR3Bkr3gWCWc/3/qOTUd7cKLvQGI8VtL7ZhLBCzxVEp2XlHsRZd+bFE Su+wU81KfLxvMsI2C6E+0SzvjEKEadEgb2cRX4t7LXTWByM+Kr//WicWxhR1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFvoy986OIVFtQQmji+5FCAdIlYswHwYDVR0j BBgwFoAUA3oeR/sczjtuapNp7d2HDa6A1mUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGJmYzVjMy1jMzljLTQ1ZWQtYWU4Ny0zODRhNmRjYjc5MzgvMC8wMzdBMUU0N0ZC MUNDRTNCNkU2QTkzNjlFREREODcwREFFODBENjY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM3QTFFNDdGQjFDQ0UzQjZFNkE5MzY5RURERDg3MERBRTgw RDY2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRiZmM1YzMtYzM5Yy00NWVkLWFl ODctMzg0YTZkY2I3OTM4LzAvMDM3QTFFNDdGQjFDQ0UzQjZFNkE5MzY5RURERDg3 MERBRTgwRDY2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJUxxYeL8P7SaTdeDFemvjFO0oyEpiEBUZXN 9ldjSqighOJoFoExBBRN3KxPigf3e3Jg1VeHVdMpi186Nz/0oMWMrvtkK1ir3osU DIL8blbGDbl4RFH9b/cT37xy6jR1T69QoUd/pHnWKA7qofpmRK/RF2H3f+xo2Slx e9OwaO9wiCogSZ+XOn+0W7hwA+XByLTR5AwiY1qKTJO8kc5JhfROx2z0xEPXzYMC KOO/MJVa3mMT9w+TdT2fc0yW+A9FxkeRtOPuy/Y2yFac/GlOxGbeXlUFP7x0cU4k pnKXtPmoG3H5s64e6C+2wf1UikfPL46yJGgRpEAY4F2JgPikIzY= -----END CERTIFICATE-----Generated at Thu May 8 19:26:15 2025 by rpki-client