$ rpki-client -vvf repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft File: 42CB30013F9704EFBDCF784FCD60289C7620A373.mft (raw, json) Hash identifier: JIxCI/Eiv6ytmWBwZTAmv9k4qARP55d2AYYtol682FQ= Subject key identifier: 96:C0:69:FC:DE:B8:49:AD:8C:F3:4F:3F:68:4E:3C:C6:88:E9:3C:D5 Authority key identifier: 42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73 Certificate issuer: /CN=42CB30013F9704EFBDCF784FCD60289C7620A373 Certificate serial: 4D6961985BAF0CB169AAEE5B97059F9D681D8291 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft Manifest number: 0349 Signing time: Sun 11 May 2025 05:51:08 +0000 Manifest this update: Sun 11 May 2025 05:46:08 +0000 Manifest next update: Wed 14 May 2025 11:23:08 +0000 Files and hashes: 1: 3130332e3136392e3133352e302f32342d3234203d3e20313432333338.roa (hash: tZygjXNqZieNjL+HqAvvCVSbJQiTp3/pMsS78j175rQ=) 2: 42CB30013F9704EFBDCF784FCD60289C7620A373.crl (hash: R9eTmkXAPVtZgNfSPttbhhpZFff0a0a7+jkT7okh33A=) 3: 3130332e3136392e3133342e302f32342d3234203d3e20313432333338.roa (hash: hMyDLqAom528DiTqwsKMUbv/O7C6Y2ZAhArZmLvzcpE=) 4: 3130332e3136392e3133342e302f32332d3233203d3e20313432333338.roa (hash: PLelRX92KnqBZTiq93z7FJFIC0ok4NpLF8ErJ3rGKfw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 11:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:69:61:98:5b:af:0c:b1:69:aa:ee:5b:97:05:9f:9d:68:1d:82:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42CB30013F9704EFBDCF784FCD60289C7620A373 Validity Not Before: May 11 05:46:08 2025 GMT Not After : May 14 11:23:08 2025 GMT Subject: CN=96C069FCDEB849AD8CF34F3F684E3CC688E93CD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:da:0c:8b:38:50:55:f7:07:20:ef:c5:b2:6e: 69:1b:57:10:9a:e1:75:c6:f0:ed:a7:b9:e0:da:6c: 5b:86:ee:9e:c1:21:0d:b3:58:7f:38:82:a6:5f:0a: de:4b:dc:d1:d6:a1:a0:51:f3:f0:be:1d:25:a4:fd: 11:cd:87:e7:cf:d3:f4:80:2f:61:cd:c9:8b:c8:c0: 29:21:e7:af:fc:0a:85:57:94:28:c5:60:2b:1a:de: 20:d6:9f:19:02:1c:53:a8:ac:69:0e:e7:e1:83:9f: 37:dd:bf:6b:9a:3c:59:5f:99:bb:f0:10:1f:30:b1: 2c:7d:90:93:65:f0:12:b0:17:69:ca:a4:77:f0:b6: 03:a5:c4:31:e7:dc:03:cb:55:26:e6:3b:8c:f5:09: 5e:82:8e:5c:02:63:8f:60:f8:8b:94:36:b1:98:f8: 22:0c:49:48:ab:f2:54:cb:8d:9b:0b:1a:57:dc:29: 60:d3:89:c0:24:2f:90:f8:87:07:17:8b:dc:f7:e5: 01:e4:15:fc:8a:67:cd:ae:cf:ed:ae:fe:ca:67:0e: 9b:c0:a1:7a:36:e7:9b:1c:3c:2a:f3:32:12:76:64: bd:75:50:05:ad:e4:6b:53:a0:e5:f3:88:35:de:be: c6:33:fb:40:30:75:33:f6:ab:4f:a4:72:52:5f:e9: 2a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C0:69:FC:DE:B8:49:AD:8C:F3:4F:3F:68:4E:3C:C6:88:E9:3C:D5 X509v3 Authority Key Identifier: keyid:42:CB:30:01:3F:97:04:EF:BD:CF:78:4F:CD:60:28:9C:76:20:A3:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42CB30013F9704EFBDCF784FCD60289C7620A373.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9003d6c-95f1-47a4-9d5d-f7b48caaa7f4/0/42CB30013F9704EFBDCF784FCD60289C7620A373.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:9d:3b:7d:94:cc:2a:c7:5c:a3:b7:f4:aa:61:6f:f7:2f:53: 4b:a1:7f:f2:57:cc:27:d3:19:15:4f:42:4b:de:da:43:4c:e2: 38:f6:e5:ef:ba:69:bd:33:64:9e:7c:db:2b:1f:95:c9:e4:f5: 27:b8:83:d1:ff:9f:ed:0d:73:1c:f4:db:41:52:92:49:c5:14: 63:50:68:21:5c:6a:1d:78:d2:90:4c:d5:89:b3:34:20:9a:a3: 12:b8:a7:2f:fd:60:4a:0b:a2:73:a5:14:cc:14:4f:34:b2:46: 4f:17:be:d1:0f:21:5c:36:10:63:7b:12:7d:02:14:4a:e4:80: 65:02:f2:a6:d2:7f:d1:c9:73:ef:6f:40:1a:2f:dc:ef:d6:a4: d5:3e:36:11:38:d8:09:60:2b:1c:bd:68:f0:99:66:ac:87:a0: 47:6e:cd:5a:46:e2:f2:ea:b5:32:36:52:ec:67:0a:73:a8:b2: 2a:ac:53:9a:64:56:ac:45:1a:ce:e8:fe:dc:36:e7:b6:ef:a8: d6:61:e7:e0:5d:8c:4e:15:75:96:52:e2:9e:77:4d:8b:cd:49: aa:59:9c:f5:c9:16:69:dc:e4:57:ff:ec:9f:41:c1:01:6c:eb: d2:b5:f8:58:72:80:ae:01:8e:f6:c4:83:9c:2b:f0:67:ef:14: b5:52:92:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTWlhmFuvDLFpqu5blwWfnWgdgpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4OUM3 NjIwQTM3MzAeFw0yNTA1MTEwNTQ2MDhaFw0yNTA1MTQxMTIzMDhaMDMxMTAvBgNV BAMTKDk2QzA2OUZDREVCODQ5QUQ4Q0YzNEYzRjY4NEUzQ0M2ODhFOTNDRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd2gyLOFBV9wcg78WybmkbVxCa 4XXG8O2nueDabFuG7p7BIQ2zWH84gqZfCt5L3NHWoaBR8/C+HSWk/RHNh+fP0/SA L2HNyYvIwCkh56/8CoVXlCjFYCsa3iDWnxkCHFOorGkO5+GDnzfdv2uaPFlfmbvw EB8wsSx9kJNl8BKwF2nKpHfwtgOlxDHn3APLVSbmO4z1CV6CjlwCY49g+IuUNrGY +CIMSUir8lTLjZsLGlfcKWDTicAkL5D4hwcXi9z35QHkFfyKZ82uz+2u/spnDpvA oXo255scPCrzMhJ2ZL11UAWt5GtToOXziDXevsYz+0AwdTP2q0+kclJf6Sp5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlsBp/N64Sa2M808/aE48xojpPNUwHwYDVR0j BBgwFoAUQsswAT+XBO+9z3hPzWAonHYgo3MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTAwM2Q2Yy05NWYxLTQ3YTQtOWQ1ZC1mN2I0OGNhYWE3ZjQvMC80MkNCMzAwMTNG OTcwNEVGQkRDRjc4NEZDRDYwMjg5Qzc2MjBBMzczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4OUM3NjIw QTM3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjkwMDNkNmMtOTVmMS00N2E0LTlk NWQtZjdiNDhjYWFhN2Y0LzAvNDJDQjMwMDEzRjk3MDRFRkJEQ0Y3ODRGQ0Q2MDI4 OUM3NjIwQTM3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESdO32UzCrHXKO39Kphb/cvU0uhf/JXzCfT GRVPQkve2kNM4jj25e+6ab0zZJ582ysflcnk9Se4g9H/n+0Ncxz020FSkknFFGNQ aCFcah140pBM1YmzNCCaoxK4py/9YEoLonOlFMwUTzSyRk8XvtEPIVw2EGN7En0C FErkgGUC8qbSf9HJc+9vQBov3O/WpNU+NhE42AlgKxy9aPCZZqyHoEduzVpG4vLq tTI2UuxnCnOosiqsU5pkVqxFGs7o/tw257bvqNZh5+BdjE4VdZZS4p53TYvNSapZ nPXJFmnc5Ff/7J9BwQFs69K1+FhygK4BjvbEg5wr8GfvFLVSko4= -----END CERTIFICATE-----Generated at Mon May 12 10:35:20 2025 by rpki-client