$ rpki-client -vvf repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft File: 0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft (raw, json) Hash identifier: GKI0U68YqEpATlKcHSOHkcNc4O5vTTp9PDs+flkRT3Q= Subject key identifier: D2:39:BE:97:F8:57:80:7D:51:22:96:37:DC:22:17:F8:18:26:98:71 Authority key identifier: 09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4 Certificate issuer: /CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4 Certificate serial: 7D61277B05B6162CAD4DA47EF17E021ED67487FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft Manifest number: 04CB Signing time: Mon 28 Apr 2025 11:01:15 +0000 Manifest this update: Mon 28 Apr 2025 10:56:15 +0000 Manifest next update: Thu 01 May 2025 13:15:15 +0000 Files and hashes: 1: 0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl (hash: X3KcRieW1j9boXRKS4yXU4/vsTUhhL/UWUkV+h3rVPs=) 2: 3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa (hash: yL/Qdm4v9k16NDTzNwOWeKXdHvmgrGfDk4CHsHFxzD8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 13:15:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:61:27:7b:05:b6:16:2c:ad:4d:a4:7e:f1:7e:02:1e:d6:74:87:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4 Validity Not Before: Apr 28 10:56:15 2025 GMT Not After : May 1 13:15:15 2025 GMT Subject: CN=D239BE97F857807D51229637DC2217F818269871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4e:13:10:4d:96:db:99:75:60:52:63:d6:d7: 82:36:37:35:9a:90:68:27:94:7f:ba:d2:d1:1c:91: 91:ba:98:fb:84:e6:f3:16:a3:5d:ce:5f:e8:1a:98: dc:7e:70:3a:9d:50:79:a3:14:b2:a7:6e:d3:59:a1: f2:1c:a5:c2:95:b7:85:5a:38:8d:aa:47:71:1b:d5: 0f:77:c5:f6:62:57:4d:48:73:b6:11:07:d5:9e:8f: 2d:5d:79:c9:39:63:0f:4b:0d:a8:05:ea:b1:23:03: b7:bd:6e:4e:5e:f0:98:ba:f8:7a:d7:73:4f:97:d1: 32:52:9f:90:fc:c2:15:3a:dc:d7:b2:14:9b:76:67: bc:5a:bb:3c:28:0d:a7:0b:99:3b:a5:39:3e:ea:ba: b3:50:6b:7e:0a:bd:7c:1c:24:9f:d8:54:95:9b:10: da:a0:a5:7c:7b:89:84:63:4f:96:70:00:51:f9:fa: b7:f8:ba:2b:db:1a:33:8e:a2:76:28:60:14:55:c1: 14:f9:2f:af:9a:8a:10:75:bd:9e:53:b1:ee:f0:1e: 65:1d:e7:ee:79:bb:23:a2:d0:fa:6f:a8:62:9b:0a: 9e:1d:d8:82:c7:5c:e9:21:e5:73:3d:27:dc:88:9b: 4f:5b:62:ad:f8:c9:10:e5:1e:66:3c:64:bc:2d:c3: 30:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:39:BE:97:F8:57:80:7D:51:22:96:37:DC:22:17:F8:18:26:98:71 X509v3 Authority Key Identifier: keyid:09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:c6:71:c5:98:82:9c:a2:ad:a7:81:c0:1a:3c:c8:db:ae:d7: a5:0f:fd:1a:82:4c:10:dd:25:36:3a:80:5d:97:82:e5:28:75: 04:dc:7b:90:2b:6b:48:8a:3a:ec:7c:ae:15:2c:c3:91:ee:65: b3:38:f9:4f:18:1f:d1:ad:ea:2e:66:c1:64:57:00:61:7d:75: 5e:f6:c8:08:b3:78:f4:a3:fc:66:ad:ef:50:d5:9b:df:02:18: d6:03:0a:7e:7f:f2:58:d9:31:a4:90:0e:26:12:82:6f:fd:e7: a4:f5:c2:38:15:23:d9:85:a6:0f:bd:51:90:b6:56:d8:c0:25: 21:30:2e:8c:dd:6d:08:25:29:84:dc:0b:75:ea:39:3e:54:1e: 7d:4a:cc:84:18:a0:a0:74:cd:3b:cb:fa:ea:e1:d2:b0:1c:d4: 01:be:4f:c5:9a:04:db:a4:f5:5c:b5:e2:bb:b8:e6:8d:62:8a: 3e:e1:c7:d9:ee:c5:78:87:4b:ab:11:9f:85:40:f6:ae:4f:42: 27:42:db:42:49:51:ca:c2:15:52:4f:2e:ad:7e:10:e0:2d:d7: 79:80:cd:b7:38:e5:7f:03:9c:68:8b:63:bb:0f:b9:02:ef:af: 7b:f2:d1:74:08:12:45:35:16:ec:c0:30:0a:ea:bc:ed:03:ec: 1d:e7:59:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfWEnewW2FiytTaR+8X4CHtZ0h/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYyMjI4 RTAzQzFFNDAeFw0yNTA0MjgxMDU2MTVaFw0yNTA1MDExMzE1MTVaMDMxMTAvBgNV BAMTKEQyMzlCRTk3Rjg1NzgwN0Q1MTIyOTYzN0RDMjIxN0Y4MTgyNjk4NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbThMQTZbbmXVgUmPW14I2NzWa kGgnlH+60tEckZG6mPuE5vMWo13OX+gamNx+cDqdUHmjFLKnbtNZofIcpcKVt4Va OI2qR3Eb1Q93xfZiV01Ic7YRB9Wejy1deck5Yw9LDagF6rEjA7e9bk5e8Ji6+HrX c0+X0TJSn5D8whU63NeyFJt2Z7xauzwoDacLmTulOT7qurNQa34KvXwcJJ/YVJWb ENqgpXx7iYRjT5ZwAFH5+rf4uivbGjOOonYoYBRVwRT5L6+aihB1vZ5Tse7wHmUd 5+55uyOi0PpvqGKbCp4d2ILHXOkh5XM9J9yIm09bYq34yRDlHmY8ZLwtwzBPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0jm+l/hXgH1RIpY33CIX+BgmmHEwHwYDVR0j BBgwFoAUCRK8Ko0ui/JVPXEG/25iIo4DweQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTY2OTgwNy0wNTBlLTQzYWUtODcwOC1iNDZiODgxNzg0MmMvMC8wOTEyQkMyQThE MkU4QkYyNTUzRDcxMDZGRjZFNjIyMjhFMDNDMUU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYyMjI4RTAz QzFFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU2Njk4MDctMDUwZS00M2FlLTg3 MDgtYjQ2Yjg4MTc4NDJjLzAvMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYy MjI4RTAzQzFFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTGccWYgpyiraeBwBo8yNuu16UP/RqCTBDd JTY6gF2XguUodQTce5Ara0iKOux8rhUsw5HuZbM4+U8YH9Gt6i5mwWRXAGF9dV72 yAizePSj/Gat71DVm98CGNYDCn5/8ljZMaSQDiYSgm/956T1wjgVI9mFpg+9UZC2 VtjAJSEwLozdbQglKYTcC3XqOT5UHn1KzIQYoKB0zTvL+urh0rAc1AG+T8WaBNuk 9Vy14ru45o1iij7hx9nuxXiHS6sRn4VA9q5PQidC20JJUcrCFVJPLq1+EOAt13mA zbc45X8DnGiLY7sPuQLvr3vy0XQIEkU1FuzAMArqvO0D7B3nWQA= -----END CERTIFICATE-----Generated at Tue Apr 29 08:32:03 2025 by rpki-client