$ rpki-client -vvf repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft File: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft (raw, json) Hash identifier: L++nyfU7ulz+pPfYNBOMiiSHq/uR6SKINoQjbXqPlp0= Subject key identifier: AF:5A:17:6C:47:E2:8A:BF:34:FC:E2:9D:2F:5D:9F:49:68:1D:7D:84 Authority key identifier: 37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 Certificate issuer: /CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Certificate serial: 31FCBCFC223E7F4128A9478D18A3AC78806BA812 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft Manifest number: 02F5 Signing time: Sat 03 May 2025 16:51:44 +0000 Manifest this update: Sat 03 May 2025 16:46:44 +0000 Manifest next update: Wed 07 May 2025 02:53:44 +0000 Files and hashes: 1: 3230322e382e32382e302f32342d3234203d3e203435373234.roa (hash: TGxuSO9FhQBkLIc4jzv5QfgoJ8WtxbBE2A0wVyFxCQ8=) 2: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl (hash: 2X2WnpQISDIDuGMMcYDPiiY7aBExAGrx40Y1Zax2Gos=) 3: 3130332e3233312e3131322e302f32322d3234203d3e203435373234.roa (hash: nUVinFsoY0w+ulYAvUeNGakliI15G1kEe5kQEWg5wpI=) 4: 3230322e382e32392e302f32342d3234203d3e203435373234.roa (hash: 07rhNtW/Y5m4M95o6Mh9hHoZo9bTd6uBptdm1OPHIUg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 02:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:fc:bc:fc:22:3e:7f:41:28:a9:47:8d:18:a3:ac:78:80:6b:a8:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Validity Not Before: May 3 16:46:44 2025 GMT Not After : May 7 02:53:44 2025 GMT Subject: CN=AF5A176C47E28ABF34FCE29D2F5D9F49681D7D84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:73:2e:de:8e:87:39:26:82:25:e3:2c:36:ae: c0:ef:d9:31:83:3a:6c:d3:24:78:e5:51:63:99:a0: e7:62:26:0c:49:cc:75:2c:3e:d2:1b:2a:d0:b5:a7: 12:a8:2a:cc:0e:2d:6c:10:34:8d:36:a0:6b:94:07: c2:c0:5e:89:e9:c6:62:29:8a:06:cf:03:f3:00:f5: f4:e7:d9:66:29:5e:c0:b1:06:13:06:c1:97:be:cb: 8f:69:06:dd:1a:ea:20:77:30:4c:c2:77:53:de:5d: 3b:fa:32:85:20:4e:26:f5:1e:8d:9d:28:dc:8a:7a: 0a:8d:30:95:96:93:4f:77:04:b4:92:9f:88:e0:4e: 1e:15:83:1c:3e:16:f1:14:0a:63:8c:ca:fc:27:8c: 8b:0a:c6:27:95:08:6a:c3:f4:8c:b0:6f:bf:4d:b7: fc:be:e9:f9:03:30:93:34:3e:ce:d0:17:c3:5c:05: 2a:a4:cb:52:a8:3b:24:f1:79:bd:91:dc:5c:df:aa: 54:85:33:e0:cf:03:e4:9e:64:98:70:54:d5:04:74: 82:40:f0:0e:87:a3:aa:cb:c7:6f:93:6b:56:d1:6c: 86:69:2a:49:85:8a:78:2f:4f:63:e6:f4:38:a2:51: 88:54:af:d0:7f:04:78:2f:1b:48:89:ba:c1:63:bc: 91:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5A:17:6C:47:E2:8A:BF:34:FC:E2:9D:2F:5D:9F:49:68:1D:7D:84 X509v3 Authority Key Identifier: keyid:37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:15:f8:ad:f1:7d:82:9b:83:be:a6:bd:fe:40:86:f0:36:3e: d1:48:e5:0e:20:f5:fd:7e:e5:1e:ac:7c:21:48:be:e0:f5:f3: 5f:06:59:15:6a:eb:5b:54:81:4c:eb:1e:29:f4:c9:fd:97:2f: f2:ec:67:b4:17:d8:de:da:da:a0:e0:6f:df:3e:13:21:8c:71: c0:e0:8d:21:fe:bc:f0:0e:b7:0f:34:9a:83:85:5d:4c:4d:26: d3:b1:6d:08:e6:ba:d5:33:2b:e5:8a:68:1e:90:b8:55:ea:f8: 31:73:b7:0c:c5:a1:73:5c:b3:b9:42:e1:ea:aa:d0:ce:42:3a: 35:7f:4b:28:d9:f4:f6:ef:ee:72:d5:4f:e7:1d:fd:32:00:4f: 91:46:73:29:76:e2:1c:87:b3:ac:db:13:1a:d7:f3:44:17:ec: d2:18:e1:6a:dd:a6:95:03:43:b3:eb:7b:ea:eb:85:ba:04:52: 86:4c:14:1c:d7:6d:a1:f9:0c:00:70:80:3a:23:19:65:5f:5a: 32:84:be:6a:ce:f3:41:ea:31:ea:b9:ed:5a:fe:63:99:be:2c: be:fb:b3:70:b2:fd:92:62:42:9a:70:1e:e3:84:03:18:35:19: 01:3b:a6:f4:ae:e1:f6:fb:2d:fd:80:50:c4:65:8e:96:a4:6a: 8c:b9:27:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMfy8/CI+f0EoqUeNGKOseIBrqBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBD ODhFNEJBOTAeFw0yNTA1MDMxNjQ2NDRaFw0yNTA1MDcwMjUzNDRaMDMxMTAvBgNV BAMTKEFGNUExNzZDNDdFMjhBQkYzNEZDRTI5RDJGNUQ5RjQ5NjgxRDdEODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOcy7ejoc5JoIl4yw2rsDv2TGD OmzTJHjlUWOZoOdiJgxJzHUsPtIbKtC1pxKoKswOLWwQNI02oGuUB8LAXonpxmIp igbPA/MA9fTn2WYpXsCxBhMGwZe+y49pBt0a6iB3MEzCd1PeXTv6MoUgTib1Ho2d KNyKegqNMJWWk093BLSSn4jgTh4Vgxw+FvEUCmOMyvwnjIsKxieVCGrD9Iywb79N t/y+6fkDMJM0Ps7QF8NcBSqky1KoOyTxeb2R3FzfqlSFM+DPA+SeZJhwVNUEdIJA 8A6Ho6rLx2+Ta1bRbIZpKkmFingvT2Pm9DiiUYhUr9B/BHgvG0iJusFjvJE1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr1oXbEfiir80/OKdL12fSWgdfYQwHwYDVR0j BBgwFoAUNxln370gOi/UToj3htnw8MiOS6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWI4Yjg4OS0zYjNkLTRlZjUtYWQ3MC01YjEwNDVlZmYzOTMvMC8zNzE5NjdERkJE MjAzQTJGRDQ0RTg4Rjc4NkQ5RjBGMEM4OEU0QkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBDODhF NEJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGViOGI4ODktM2IzZC00ZWY1LWFk NzAtNWIxMDQ1ZWZmMzkzLzAvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYw RjBDODhFNEJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUV+K3xfYKbg76mvf5AhvA2PtFI5Q4g9f1+ 5R6sfCFIvuD1818GWRVq61tUgUzrHin0yf2XL/LsZ7QX2N7a2qDgb98+EyGMccDg jSH+vPAOtw80moOFXUxNJtOxbQjmutUzK+WKaB6QuFXq+DFztwzFoXNcs7lC4eqq 0M5COjV/SyjZ9Pbv7nLVT+cd/TIAT5FGcyl24hyHs6zbExrX80QX7NIY4WrdppUD Q7Pre+rrhboEUoZMFBzXbaH5DABwgDojGWVfWjKEvmrO80HqMeq57Vr+Y5m+LL77 s3Cy/ZJiQppwHuOEAxg1GQE7pvSu4fb7Lf2AUMRljpakaoy5JwI= -----END CERTIFICATE-----Generated at Tue May 6 11:28:30 2025 by rpki-client