$ rpki-client -vvf repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft File: 04D3D2E060243AD917D4F682922E4A805EDE3300.mft (raw, json) Hash identifier: 4pA6UDk0P6OGA6L3fnIHfG6LUsEv/91JBinfIUhgG6Q= Subject key identifier: E0:8F:14:C3:1E:CC:E7:94:4C:C5:28:DD:DA:02:AD:AD:7C:93:95:C2 Authority key identifier: 04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 Certificate issuer: /CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Certificate serial: 747AE2F3910328A30C6E18614D925A586DF40911 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft Manifest number: 9A Signing time: Sun 27 Apr 2025 07:21:53 +0000 Manifest this update: Sun 27 Apr 2025 07:16:53 +0000 Manifest next update: Wed 30 Apr 2025 15:02:53 +0000 Files and hashes: 1: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: kNnDpqMg+O4Z2WqvzwojI8M7Ug+jBTmc0Ln78wdTfEc=) 2: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: /J4qwElze/bQ2HOvKHKpbauyy3nIBEQmoLrnIDKLWb0=) 3: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: YOfV9l8mIphWSX9GO2VG6QOcO1lYY9wjqJShR8OC/dU=) 4: 04D3D2E060243AD917D4F682922E4A805EDE3300.crl (hash: zeJrclaG285h73yVzTL2XON8+u0Z78VjD6RweGbCU+k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 15:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:7a:e2:f3:91:03:28:a3:0c:6e:18:61:4d:92:5a:58:6d:f4:09:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Validity Not Before: Apr 27 07:16:53 2025 GMT Not After : Apr 30 15:02:53 2025 GMT Subject: CN=E08F14C31ECCE7944CC528DDDA02ADAD7C9395C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:42:f4:35:38:70:3e:10:5a:59:0b:23:fa:1e: da:1f:0d:98:02:f2:bd:b0:2a:43:a4:ec:7c:f5:cd: cc:98:e0:4c:1d:5c:55:02:22:f3:02:4e:8e:52:4a: c1:c3:0c:5f:37:30:40:f2:fd:06:36:2c:cd:9c:1c: 75:f4:99:3b:eb:c7:aa:37:ef:a3:c1:46:07:e1:0e: 78:a3:df:40:5b:a0:e7:e8:09:0b:a9:70:77:47:17: fb:96:a5:34:7b:e8:fe:17:61:db:a6:76:51:55:7d: a1:04:71:e1:94:cf:40:47:d2:f7:f0:46:21:ab:84: 9c:ba:4f:58:18:c5:d2:55:8e:91:d0:32:f0:71:7d: 75:46:50:71:07:d3:25:ba:a0:51:e6:5b:1a:1d:fc: 25:d3:ed:0b:0f:21:92:08:97:7e:b2:dd:36:56:07: 4a:08:33:51:5b:70:5d:bd:31:ec:b2:1b:99:1f:71: cd:42:e3:b8:c9:11:1c:8b:94:fd:79:f3:5e:c8:a0: ca:20:e3:e1:44:4f:63:da:40:d2:d0:4e:60:dc:4f: 3b:ab:cd:61:1f:6d:b1:86:2c:e2:24:f5:16:a3:ab: 47:24:18:db:88:c2:cd:10:8d:f7:74:63:bb:d9:1a: 01:42:c4:ab:41:9c:5b:69:80:6b:36:87:55:99:cf: 83:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8F:14:C3:1E:CC:E7:94:4C:C5:28:DD:DA:02:AD:AD:7C:93:95:C2 X509v3 Authority Key Identifier: keyid:04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:60:9f:be:3b:d5:f9:0c:af:05:a7:e3:c3:13:d6:df:66:5d: e5:6b:a4:3c:04:d4:2a:64:5f:ae:dd:1f:50:2b:41:21:ae:c8: 79:76:9f:46:df:42:c0:0c:25:c6:65:09:17:7b:e7:88:ad:0c: 6e:b4:6f:14:d4:99:89:16:97:e9:55:ac:6e:57:97:69:80:db: d9:ba:39:3e:28:ad:06:37:b2:e9:22:80:a1:26:cd:f4:40:cc: 3d:9a:38:0f:fb:84:18:e9:2a:79:75:4a:14:35:e0:60:e4:d4: c2:ec:9f:08:b1:29:b8:00:ce:66:44:0f:5c:c6:bf:52:fe:65: c0:e2:83:3b:38:83:13:bf:e5:b1:05:26:80:03:dc:f7:c7:5c: e0:2e:d8:8a:a3:f5:f2:3d:b7:b9:b2:32:d9:d8:f0:19:12:85: 20:be:32:36:29:e1:17:55:5e:ab:11:2e:7c:ad:52:90:8e:4f: da:db:ae:5b:35:c9:91:79:c2:ad:4b:cc:85:ef:47:66:9a:ba: e7:7e:6f:c9:7a:66:fd:d7:a5:1b:11:57:dc:a6:45:6b:2f:33: 65:ce:bb:9e:39:96:fe:e5:c7:d1:26:e4:19:64:5d:89:c2:5b: 23:5f:1b:7d:d3:1e:f2:c6:00:e7:b1:cb:48:5f:e5:99:a6:25: 19:ac:fb:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdHri85EDKKMMbhhhTZJaWG30CREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1 RURFMzMwMDAeFw0yNTA0MjcwNzE2NTNaFw0yNTA0MzAxNTAyNTNaMDMxMTAvBgNV BAMTKEUwOEYxNEMzMUVDQ0U3OTQ0Q0M1MjhERERBMDJBREFEN0M5Mzk1QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4QvQ1OHA+EFpZCyP6HtofDZgC 8r2wKkOk7Hz1zcyY4EwdXFUCIvMCTo5SSsHDDF83MEDy/QY2LM2cHHX0mTvrx6o3 76PBRgfhDnij30BboOfoCQupcHdHF/uWpTR76P4XYdumdlFVfaEEceGUz0BH0vfw RiGrhJy6T1gYxdJVjpHQMvBxfXVGUHEH0yW6oFHmWxod/CXT7QsPIZIIl36y3TZW B0oIM1FbcF29MeyyG5kfcc1C47jJERyLlP15817IoMog4+FET2PaQNLQTmDcTzur zWEfbbGGLOIk9Rajq0ckGNuIws0Qjfd0Y7vZGgFCxKtBnFtpgGs2h1WZz4NZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4I8Uwx7M55RMxSjd2gKtrXyTlcIwHwYDVR0j BBgwFoAUBNPS4GAkOtkX1PaCki5KgF7eMwAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZThkNThhOC1lMTk3LTQxNzktYjczYy02MDhlMDQ3ZDA5YTMvMC8wNEQzRDJFMDYw MjQzQUQ5MTdENEY2ODI5MjJFNEE4MDVFREUzMzAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1RURF MzMwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3 M2MtNjA4ZTA0N2QwOWEzLzAvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRB ODA1RURFMzMwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtgn7471fkMrwWn48MT1t9mXeVrpDwE1Cpk X67dH1ArQSGuyHl2n0bfQsAMJcZlCRd754itDG60bxTUmYkWl+lVrG5Xl2mA29m6 OT4orQY3sukigKEmzfRAzD2aOA/7hBjpKnl1ShQ14GDk1MLsnwixKbgAzmZED1zG v1L+ZcDigzs4gxO/5bEFJoAD3PfHXOAu2Iqj9fI9t7myMtnY8BkShSC+MjYp4RdV XqsRLnytUpCOT9rbrls1yZF5wq1LzIXvR2aauud+b8l6Zv3XpRsRV9ymRWsvM2XO u545lv7lx9Em5BlkXYnCWyNfG33THvLGAOexy0hf5ZmmJRms+2E= -----END CERTIFICATE-----Generated at Mon Apr 28 12:41:25 2025 by rpki-client