$ rpki-client -vvf repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft File: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft (raw, json) Hash identifier: TkZK3KLzoGOAF4cba+oETi9jp+nkwEz7KmUtlsd0iCA= Subject key identifier: F4:D4:58:B0:CF:0F:B4:D4:2A:FB:86:AD:0F:8B:7F:9F:CE:96:D6:EB Authority key identifier: 73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3 Certificate issuer: /CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3 Certificate serial: 654C4E7A6FC5FA2B1467B8D74BE3D72FE1F313E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft Manifest number: 024A Signing time: Mon 28 Apr 2025 11:21:01 +0000 Manifest this update: Mon 28 Apr 2025 11:16:01 +0000 Manifest next update: Thu 01 May 2025 22:19:01 +0000 Files and hashes: 1: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl (hash: HW6rrLU2SV8iVSeWf21rnO0lDZ4SruSKxFJKOID/9Og=) 2: 3230322e3138332e302e302f31392d3139203d3e203338313630.roa (hash: MEztuZqZgD3unDvE9UbT7j2miLRVC0ZWnvrCm6yOt54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:4c:4e:7a:6f:c5:fa:2b:14:67:b8:d7:4b:e3:d7:2f:e1:f3:13:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3 Validity Not Before: Apr 28 11:16:01 2025 GMT Not After : May 1 22:19:01 2025 GMT Subject: CN=F4D458B0CF0FB4D42AFB86AD0F8B7F9FCE96D6EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7b:51:78:b2:30:42:e0:2f:97:29:1a:10:e4: 6e:ba:14:79:4d:80:7f:e6:d2:cd:29:53:25:b9:c0: 62:c9:a6:05:63:fa:a2:07:e9:03:23:dd:4d:32:75: b3:9c:7a:d9:ea:8b:78:e0:f3:53:92:45:57:1c:63: 77:02:27:f9:74:1a:fa:9a:31:e2:f9:4b:ea:a9:63: a2:8a:84:c3:11:5d:a4:2e:91:54:d7:25:6d:42:81: d6:d6:ef:60:ec:3b:76:18:da:2c:16:86:12:40:0e: 21:dd:ce:53:d0:3f:2b:62:d4:b5:01:1a:ae:f9:ac: 11:4f:0b:e2:90:04:a0:4f:e1:9f:d9:65:1d:6a:22: 68:70:1d:ca:84:87:b8:a9:b3:1e:77:ee:69:17:8c: 31:e3:e0:6a:c4:71:88:0f:a3:73:b2:34:35:97:6c: a2:f4:3a:02:fb:15:a1:60:cf:07:78:58:ad:60:ff: 07:a5:f6:5b:73:5d:56:0a:fe:ed:f0:bc:63:1f:ee: 78:80:35:2e:ab:78:b8:d6:fb:b1:e2:14:5d:b8:31: 1e:94:81:eb:e5:32:d7:24:49:87:4a:13:67:6e:36: e2:1e:8a:c6:25:22:7f:a0:e1:91:7f:05:a8:f6:a1: 15:a5:c5:7a:9f:10:74:62:4b:4f:79:1c:d7:ff:60: fb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D4:58:B0:CF:0F:B4:D4:2A:FB:86:AD:0F:8B:7F:9F:CE:96:D6:EB X509v3 Authority Key Identifier: keyid:73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:2f:89:cc:b6:41:a5:65:e0:47:16:e0:70:9e:ac:45:9c:e1: ef:c1:9c:8b:f1:58:0e:50:f9:c7:7e:80:13:e1:85:21:58:db: c6:8c:44:1f:92:0d:c2:88:47:b8:e7:ac:ff:9b:0b:82:9b:93: 7c:49:b3:50:5b:40:11:14:34:5d:c1:25:23:82:6b:5c:9f:81: 0c:c7:19:23:60:01:de:87:51:da:b0:3e:7f:c6:01:de:e8:24: 0f:9b:cf:4e:99:5c:7c:9d:ab:84:68:a2:c7:5a:f0:3f:c0:b8: b8:fc:8e:b5:1a:6e:a2:62:3d:6c:85:94:50:7b:9f:30:17:c3: 24:d6:be:2a:1d:ce:c0:52:9b:5d:4e:49:e0:90:68:1d:4b:df: 98:6c:54:81:1f:e1:65:6f:ce:64:a7:e8:c9:48:b2:e5:ac:f4: d9:2c:46:07:7e:9f:cb:d0:f9:90:50:d0:61:53:6d:17:a7:ae: 8e:4e:83:8f:5d:56:1d:ba:91:e9:16:12:f5:e6:65:8b:21:d4: 75:2f:c3:f1:c5:a3:2c:fc:71:72:e1:d5:94:ff:15:9a:b4:b7: 84:2e:e8:72:99:07:3b:1a:09:70:e2:eb:29:0d:d5:68:76:28: 27:3b:cc:bf:fd:f4:47:44:6c:2c:81:3a:15:0a:f2:03:ba:92: 49:c1:3d:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZUxOem/F+isUZ7jXS+PXL+HzE+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYzQTA5 RUZFOTZBMzAeFw0yNTA0MjgxMTE2MDFaFw0yNTA1MDEyMjE5MDFaMDMxMTAvBgNV BAMTKEY0RDQ1OEIwQ0YwRkI0RDQyQUZCODZBRDBGOEI3RjlGQ0U5NkQ2RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRe1F4sjBC4C+XKRoQ5G66FHlN gH/m0s0pUyW5wGLJpgVj+qIH6QMj3U0ydbOcetnqi3jg81OSRVccY3cCJ/l0Gvqa MeL5S+qpY6KKhMMRXaQukVTXJW1CgdbW72DsO3YY2iwWhhJADiHdzlPQPyti1LUB Gq75rBFPC+KQBKBP4Z/ZZR1qImhwHcqEh7ipsx537mkXjDHj4GrEcYgPo3OyNDWX bKL0OgL7FaFgzwd4WK1g/wel9ltzXVYK/u3wvGMf7niANS6reLjW+7HiFF24MR6U gevlMtckSYdKE2duNuIeisYlIn+g4ZF/Baj2oRWlxXqfEHRiS095HNf/YPs1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9NRYsM8PtNQq+4atD4t/n86W1uswHwYDVR0j BBgwFoAUcy9G10x6jF2IinCRpwbzoJ7+lqMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTBkMWFhMS00YzdmLTQ0OGItYjJiYi0wMmM1NzE1MWYyMTAvMC83MzJGNDZENzRD N0E4QzVEODg4QTcwOTFBNzA2RjNBMDlFRkU5NkEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYzQTA5RUZF OTZBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUwZDFhYTEtNGM3Zi00NDhiLWIy YmItMDJjNTcxNTFmMjEwLzAvNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYz QTA5RUZFOTZBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALkvicy2QaVl4EcW4HCerEWc4e/BnIvxWA5Q +cd+gBPhhSFY28aMRB+SDcKIR7jnrP+bC4Kbk3xJs1BbQBEUNF3BJSOCa1yfgQzH GSNgAd6HUdqwPn/GAd7oJA+bz06ZXHydq4Roosda8D/AuLj8jrUabqJiPWyFlFB7 nzAXwyTWviodzsBSm11OSeCQaB1L35hsVIEf4WVvzmSn6MlIsuWs9NksRgd+n8vQ +ZBQ0GFTbRenro5Og49dVh26kekWEvXmZYsh1HUvw/HFoyz8cXLh1ZT/FZq0t4Qu 6HKZBzsaCXDi6ykN1Wh2KCc7zL/99EdEbCyBOhUK8gO6kknBPVg= -----END CERTIFICATE-----Generated at Wed Apr 30 05:28:44 2025 by rpki-client