$ rpki-client -vvf repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft File: C43D9C91D389ADDD2039882757F731CAFAAC740F.mft (raw, json) Hash identifier: Nx+bSbBwjA1TLx/5juXvXZ59u/KmgEKFxzaD+2YJYBI= Subject key identifier: D4:1E:DC:71:A2:69:85:6D:E6:88:84:8D:1F:2C:62:42:00:9D:1D:B0 Authority key identifier: C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F Certificate issuer: /CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Certificate serial: 1C7FB259BCDC9FDC20212B1738E72E0F94CA7554 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft Manifest number: 01E3 Signing time: Sun 04 May 2025 04:40:49 +0000 Manifest this update: Sun 04 May 2025 04:35:49 +0000 Manifest next update: Wed 07 May 2025 15:43:49 +0000 Files and hashes: 1: 3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa (hash: yRanOZGnih6RR4ZAoNL3Hr2Kj0Og2jieWRKzIVb/EXs=) 2: 3130332e3134322e3139352e302f32342d3234203d3e20313339333737.roa (hash: +/f3QiszY3XbrdRJyoIxW8G+STpu2ntK0BASvPpvFYs=) 3: 323030313a6466313a353438303a3a2f34382d3438203d3e20313339333737.roa (hash: UhZmsK1JV2dvdlJPQwAkZ3FUoREjtD3PWxnZnEWW6L0=) 4: C43D9C91D389ADDD2039882757F731CAFAAC740F.crl (hash: ziKOoXaMdo5v0uXJyk1W72tQ8mNuuTkHBoMsBx9WAk8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 15:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:7f:b2:59:bc:dc:9f:dc:20:21:2b:17:38:e7:2e:0f:94:ca:75:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Validity Not Before: May 4 04:35:49 2025 GMT Not After : May 7 15:43:49 2025 GMT Subject: CN=D41EDC71A269856DE688848D1F2C6242009D1DB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:c5:f8:94:d1:69:25:17:b5:59:f8:6f:e5:0c: aa:c6:65:c8:4a:72:a7:c5:3d:52:ca:1d:fc:81:5a: 1d:19:6a:10:24:93:c6:e4:7a:c5:5a:8b:37:33:16: 2d:cd:c7:28:70:25:75:10:7d:10:e2:fb:71:5f:e3: 09:12:f1:b3:d6:2f:f2:a6:dc:90:82:a7:6c:59:2b: f0:27:3e:d0:cc:05:83:93:91:3f:21:c4:2d:29:eb: 8e:88:62:92:e6:44:28:0c:65:fb:93:a5:a4:35:41: 9a:6b:20:0b:50:cc:2e:2e:a7:b7:ef:3b:76:91:f6: d0:13:98:22:30:33:fe:6c:56:9c:2c:8b:75:f1:5c: 7e:33:0a:fb:1d:da:6c:49:ea:a1:58:8b:38:00:72: 35:ab:72:d8:53:a4:0f:3e:5e:1b:2f:bf:a2:63:5f: ef:0d:12:e2:39:15:27:e3:cb:50:80:4d:17:7a:35: 3e:d6:55:13:92:8b:67:43:f4:07:a3:15:bb:f0:be: bb:93:17:3d:27:82:0a:56:5f:21:f3:82:ea:b1:8b: eb:85:35:15:a8:42:01:92:4d:83:e5:eb:16:0c:d8: d5:0b:cf:94:30:f4:01:aa:c1:4c:a7:50:6d:70:70: 60:8b:6d:c5:ff:25:14:1f:67:83:8e:fe:af:44:92: ec:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:1E:DC:71:A2:69:85:6D:E6:88:84:8D:1F:2C:62:42:00:9D:1D:B0 X509v3 Authority Key Identifier: keyid:C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:3a:cb:c4:6b:32:73:1f:2a:9a:55:07:cb:a3:e5:1f:de:d8: 53:58:96:d6:cd:76:6c:43:1a:32:6d:9b:0d:b6:ed:0d:ab:e2: 3e:16:00:28:8b:da:1e:d2:60:ba:71:48:20:41:2c:f9:fb:66: 14:0e:cc:8c:cc:34:a7:7c:eb:45:61:e7:cb:a9:32:c6:42:88: 77:a0:4e:4a:e0:cb:84:aa:e7:6d:90:2a:4d:64:3d:64:07:55: 0d:85:8b:1e:a5:da:a0:8c:12:6a:46:8e:86:61:8d:b0:e8:5c: d7:9c:e5:a3:d5:52:9f:ea:d9:a7:ea:47:04:7e:6e:0f:d1:5c: d6:c1:d5:f2:e1:dc:36:ed:42:c2:6a:42:58:4a:76:6d:f9:9f: 7b:84:6f:0e:e6:62:ad:e6:19:cb:4c:26:ed:57:cc:9c:25:7c: 62:9e:c1:dd:b5:dc:4c:10:5f:ed:02:9b:88:45:41:0b:0b:ec: 1a:9c:ab:2e:6c:6c:6d:9e:7b:76:bd:ff:5f:17:3b:1d:1d:85: dc:1c:fb:dd:18:5b:d7:35:a8:00:e5:d4:8f:bd:01:9b:e1:d5: 6d:22:e1:fd:73:25:93:66:79:19:fe:87:ad:05:2f:14:8f:d3: 97:e8:0a:b6:14:4f:d2:3f:41:0e:b7:7f:85:72:22:93:0f:ac: 1f:20:6f:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHH+yWbzcn9wgISsXOOcuD5TKdVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FG QUFDNzQwRjAeFw0yNTA1MDQwNDM1NDlaFw0yNTA1MDcxNTQzNDlaMDMxMTAvBgNV BAMTKEQ0MUVEQzcxQTI2OTg1NkRFNjg4ODQ4RDFGMkM2MjQyMDA5RDFEQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3xfiU0WklF7VZ+G/lDKrGZchK cqfFPVLKHfyBWh0ZahAkk8bkesVaizczFi3NxyhwJXUQfRDi+3Ff4wkS8bPWL/Km 3JCCp2xZK/AnPtDMBYOTkT8hxC0p646IYpLmRCgMZfuTpaQ1QZprIAtQzC4up7fv O3aR9tATmCIwM/5sVpwsi3XxXH4zCvsd2mxJ6qFYizgAcjWrcthTpA8+Xhsvv6Jj X+8NEuI5FSfjy1CATRd6NT7WVROSi2dD9AejFbvwvruTFz0nggpWXyHzguqxi+uF NRWoQgGSTYPl6xYM2NULz5Qw9AGqwUynUG1wcGCLbcX/JRQfZ4OO/q9Ekuy9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1B7ccaJphW3miISNHyxiQgCdHbAwHwYDVR0j BBgwFoAUxD2ckdOJrd0gOYgnV/cxyvqsdA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmFhMmQxMC0zZmFhLTQyNzItYmUxZi04MTAyOTU3YjY1ZTYvMC9DNDNEOUM5MUQz ODlBREREMjAzOTg4Mjc1N0Y3MzFDQUZBQUM3NDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FGQUFD NzQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJhYTJkMTAtM2ZhYS00MjcyLWJl MWYtODEwMjk1N2I2NWU2LzAvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMx Q0FGQUFDNzQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANA6y8RrMnMfKppVB8uj5R/e2FNYltbNdmxD GjJtmw227Q2r4j4WACiL2h7SYLpxSCBBLPn7ZhQOzIzMNKd860Vh58upMsZCiHeg Tkrgy4Sq522QKk1kPWQHVQ2Fix6l2qCMEmpGjoZhjbDoXNec5aPVUp/q2afqRwR+ bg/RXNbB1fLh3DbtQsJqQlhKdm35n3uEbw7mYq3mGctMJu1XzJwlfGKewd213EwQ X+0Cm4hFQQsL7Bqcqy5sbG2ee3a9/18XOx0dhdwc+90YW9c1qADl1I+9AZvh1W0i 4f1zJZNmeRn+h60FLxSP05foCrYUT9I/QQ63f4VyIpMPrB8gbzA= -----END CERTIFICATE-----Generated at Wed May 7 01:26:45 2025 by rpki-client