$ rpki-client -vvf repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft File: D3BDA2123144839640DA280D6B971C12D0C9C929.mft (raw, json) Hash identifier: WmaGbpP5WE2+X4jDPGukvRyUgsfalAkbZfpEzDzorZo= Subject key identifier: 29:F5:72:35:E3:3E:E4:C2:7F:81:EA:E4:E3:2C:DF:BD:B2:4A:62:73 Authority key identifier: D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 Certificate issuer: /CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Certificate serial: 4B5D8D22C28CA4AACC00CCE3E76085B074F03BEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft Manifest number: 0194 Signing time: Mon 28 Apr 2025 13:21:40 +0000 Manifest this update: Mon 28 Apr 2025 13:16:40 +0000 Manifest next update: Thu 01 May 2025 21:21:40 +0000 Files and hashes: 1: 3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa (hash: LgwwS+fgDKg25QWDtuUlSa123O0j3oTaPddVCPibVQw=) 2: D3BDA2123144839640DA280D6B971C12D0C9C929.crl (hash: 20LgV/uczjHJGKO4OO/eXJp6RzLLunCubclElIPhcdI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:5d:8d:22:c2:8c:a4:aa:cc:00:cc:e3:e7:60:85:b0:74:f0:3b:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Validity Not Before: Apr 28 13:16:40 2025 GMT Not After : May 1 21:21:40 2025 GMT Subject: CN=29F57235E33EE4C27F81EAE4E32CDFBDB24A6273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e0:12:a3:06:64:c6:dd:4f:ba:a4:01:d7:23: 72:d6:fc:d0:d3:fb:f0:36:27:8f:e4:2d:cb:85:8a: 1d:c8:a8:54:1b:40:91:d4:cd:8b:22:ed:6b:37:83: 71:3f:99:cd:9b:f3:37:e0:ea:c0:05:8a:8e:a5:36: cd:65:56:5a:8b:49:d3:a9:07:80:4f:6f:c4:57:8e: aa:80:5f:63:4c:10:48:b2:fb:fc:3e:be:4d:e1:d2: 52:c5:2f:c3:cf:c8:45:ab:83:75:7c:a4:61:14:97: 1f:b8:aa:44:13:6b:a1:7a:bf:d5:f4:86:68:10:5a: db:e1:d2:56:a5:8c:c7:93:57:6b:66:39:4b:7e:8f: 41:95:e7:a1:e0:c5:b5:a7:5a:aa:b8:b8:4c:36:18: ae:c3:5e:db:2f:a5:70:8c:d2:c3:35:8d:ea:fe:fa: 1c:4f:20:a4:48:e8:d7:d7:25:86:17:17:21:a9:4f: 54:62:fc:11:8c:50:f4:3c:c0:0d:9a:fb:ef:5d:cf: 9e:4a:8c:22:98:01:76:5b:a8:ef:c5:e5:90:56:f4: 79:ec:30:38:15:a7:91:9e:d5:b0:60:b0:b0:9c:05: de:0c:6f:d9:8d:50:0d:bc:be:89:15:8c:7e:01:23: e6:2c:65:48:69:e5:1c:f7:1e:4b:fd:f0:6c:78:b9: 87:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F5:72:35:E3:3E:E4:C2:7F:81:EA:E4:E3:2C:DF:BD:B2:4A:62:73 X509v3 Authority Key Identifier: keyid:D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:ac:68:3c:50:d4:01:5e:e4:59:4f:e1:bc:55:a1:8e:7d:ce: da:b8:7d:9a:a6:36:77:36:eb:d5:38:37:9a:f7:b8:7d:27:8e: 61:67:da:8f:31:a6:51:d2:47:2f:a7:05:00:82:3e:e8:aa:24: ba:8e:83:a0:8e:9e:b8:c3:4b:cf:5c:85:24:2f:4f:bc:d5:d7: 80:72:fd:44:68:85:3b:39:9a:86:1e:22:73:b2:67:11:c5:d4: a3:db:bc:5c:82:b5:21:5b:45:15:14:e8:90:bd:96:20:e9:20: e4:64:64:4c:2d:71:86:5d:39:12:46:df:f9:ba:39:1b:12:5c: 89:13:b4:e1:d3:4d:a9:34:4f:73:7e:e5:44:84:89:ef:60:35: 1c:88:bd:e1:26:94:74:65:ee:63:79:da:c2:f6:f1:50:91:b2: 45:61:71:d8:56:e4:ee:55:1d:33:40:67:91:dd:c8:ff:6a:b8: 9d:ff:f6:db:a7:29:95:30:00:93:3d:fc:a8:74:a8:72:32:6f: 89:db:7f:1a:57:8b:23:9f:7b:01:40:fd:4f:7f:57:02:09:a8: ed:f7:a0:48:66:38:21:23:52:8c:99:50:ce:40:a6:bd:e6:d7: fe:bc:00:e6:e7:f0:be:79:27:cb:54:ee:61:1d:b6:15:66:d0: 2f:86:41:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS12NIsKMpKrMAMzj52CFsHTwO+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJE MEM5QzkyOTAeFw0yNTA0MjgxMzE2NDBaFw0yNTA1MDEyMTIxNDBaMDMxMTAvBgNV BAMTKDI5RjU3MjM1RTMzRUU0QzI3RjgxRUFFNEUzMkNERkJEQjI0QTYyNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp4BKjBmTG3U+6pAHXI3LW/NDT +/A2J4/kLcuFih3IqFQbQJHUzYsi7Ws3g3E/mc2b8zfg6sAFio6lNs1lVlqLSdOp B4BPb8RXjqqAX2NMEEiy+/w+vk3h0lLFL8PPyEWrg3V8pGEUlx+4qkQTa6F6v9X0 hmgQWtvh0laljMeTV2tmOUt+j0GV56HgxbWnWqq4uEw2GK7DXtsvpXCM0sM1jer+ +hxPIKRI6NfXJYYXFyGpT1Ri/BGMUPQ8wA2a++9dz55KjCKYAXZbqO/F5ZBW9Hns MDgVp5Ge1bBgsLCcBd4Mb9mNUA28vokVjH4BI+YsZUhp5Rz3Hkv98Gx4uYfvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKfVyNeM+5MJ/gerk4yzfvbJKYnMwHwYDVR0j BBgwFoAU072iEjFEg5ZA2igNa5ccEtDJySkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjA3NDRiMS0yNTI5LTRhZTItYjVkNS01ZDQ5OWQzZjUyYzIvMC9EM0JEQTIxMjMx NDQ4Mzk2NDBEQTI4MEQ2Qjk3MUMxMkQwQzlDOTI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJEMEM5 QzkyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwNzQ0YjEtMjUyOS00YWUyLWI1 ZDUtNWQ0OTlkM2Y1MmMyLzAvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFD MTJEMEM5QzkyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEesaDxQ1AFe5FlP4bxVoY59ztq4fZqmNnc2 69U4N5r3uH0njmFn2o8xplHSRy+nBQCCPuiqJLqOg6COnrjDS89chSQvT7zV14By /URohTs5moYeInOyZxHF1KPbvFyCtSFbRRUU6JC9liDpIORkZEwtcYZdORJG3/m6 ORsSXIkTtOHTTak0T3N+5USEie9gNRyIveEmlHRl7mN52sL28VCRskVhcdhW5O5V HTNAZ5HdyP9quJ3/9tunKZUwAJM9/Kh0qHIyb4nbfxpXiyOfewFA/U9/VwIJqO33 oEhmOCEjUoyZUM5Apr3m1/68AObn8L55J8tU7mEdthVm0C+GQZU= -----END CERTIFICATE-----Generated at Wed Apr 30 02:44:26 2025 by rpki-client