$ rpki-client -vvf repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft File: 1072AD17A8EDB1513AED95A258088F480ADA492B.mft (raw, json) Hash identifier: fkoSLa0gP12iw01O3KCsx11OCXS0kNyHgO8qy7Qj0TQ= Subject key identifier: 8F:03:9D:D0:19:AF:1A:BF:8F:BF:C3:70:BE:6F:F0:F0:B6:93:16:0B Authority key identifier: 10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B Certificate issuer: /CN=1072AD17A8EDB1513AED95A258088F480ADA492B Certificate serial: 23829553F362D58D654798D8EF69FC1519D8CE42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft Manifest number: 0162 Signing time: Mon 28 Apr 2025 01:30:39 +0000 Manifest this update: Mon 28 Apr 2025 01:25:38 +0000 Manifest next update: Thu 01 May 2025 11:48:38 +0000 Files and hashes: 1: 1072AD17A8EDB1513AED95A258088F480ADA492B.crl (hash: ANRdVf80I4oB+y2lYcDaVT4Yd+4q2f7jBbGWhuBOiAg=) 2: 3130332e3232302e3131342e302f32332d3234203d3e20313335343436.roa (hash: rmtw0G0gq68lr7jcdH8MQxUIP+1AwEpTMYMONzRXapE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.crl rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 11:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:82:95:53:f3:62:d5:8d:65:47:98:d8:ef:69:fc:15:19:d8:ce:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1072AD17A8EDB1513AED95A258088F480ADA492B Validity Not Before: Apr 28 01:25:38 2025 GMT Not After : May 1 11:48:38 2025 GMT Subject: CN=8F039DD019AF1ABF8FBFC370BE6FF0F0B693160B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2e:32:03:0f:76:d0:e1:a1:0a:73:96:3a:bc: f9:78:bb:39:47:3f:5c:1e:34:6a:d5:4c:56:5d:49: d9:52:4b:1f:b9:ac:d2:7f:0d:04:6e:b9:09:10:53: 0c:de:46:a0:1a:fb:9c:b8:d8:23:e4:9e:48:a0:58: bf:0f:b1:47:1e:0b:98:2e:d9:12:3b:f4:fa:91:1a: 7f:1e:9c:ee:e2:c4:81:81:32:88:c9:e2:26:9c:3c: 29:ad:9a:dc:57:11:63:c7:a7:dc:ad:b6:84:93:e6: 51:ce:a5:e3:46:ca:ac:69:ce:ab:70:3b:36:88:e7: 1c:91:a3:4d:61:61:05:ce:ed:68:40:40:41:90:86: 99:de:d3:c3:8b:d9:38:16:ac:64:09:5f:08:ca:b7: 65:b0:87:fa:e3:94:34:e5:5f:17:55:d1:35:67:56: df:a4:f2:91:7c:c7:e5:4d:0c:a2:62:15:86:74:fc: 4d:0d:f1:8b:a4:25:1c:29:be:4d:48:1e:f2:47:17: b2:b6:2e:6b:22:ae:a8:8c:37:ef:24:d0:db:6d:64: 5f:4b:b0:36:78:b0:e0:c0:b0:20:9e:9d:b5:8b:52: 65:e8:3e:db:e5:22:d6:3e:5f:b0:84:18:fc:bb:6d: 10:ec:42:62:84:1e:56:40:86:c1:21:e4:c7:65:99: 06:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:03:9D:D0:19:AF:1A:BF:8F:BF:C3:70:BE:6F:F0:F0:B6:93:16:0B X509v3 Authority Key Identifier: keyid:10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:5b:7d:40:12:00:6d:a0:51:f9:cb:2d:ca:f1:2e:e9:c4:41: 4c:57:26:51:07:a1:72:a3:5b:f7:f7:f8:95:53:66:b2:86:52: e7:5d:36:a1:31:74:2d:ba:a6:73:a9:45:f7:3a:0f:f5:8b:e7: 17:95:21:23:20:eb:5b:f0:42:93:a1:99:e0:72:b7:3c:09:5b: f4:bf:58:58:7a:2c:bb:bd:52:f0:b7:c7:0b:32:bf:9b:9b:ea: 7d:38:4c:e8:9c:cc:72:fd:97:81:1d:69:de:77:1b:4f:3c:c5: 4f:9e:1d:25:cb:8f:a2:f7:0f:60:04:68:05:dd:f6:77:83:27: 2f:9f:7c:f2:3a:9c:4b:5a:95:47:d6:f8:c0:38:b3:a3:f6:83: bf:27:d9:53:41:f3:52:12:9f:21:00:a9:93:3c:31:5d:29:fe: 25:b1:33:9c:ff:45:af:c2:1a:cc:06:f1:3e:aa:c7:37:37:49: 53:fb:62:cd:61:dd:df:22:2e:82:3c:5b:d7:77:41:4b:8f:3d: 87:e9:a9:02:1e:4f:8e:df:c9:7a:dc:6d:bd:ae:d2:75:19:8d: 25:aa:f9:fd:92:d8:fa:95:55:19:44:71:93:80:0e:d5:56:5e: 6f:2f:45:17:17:c4:56:77:37:9f:b8:4f:a0:b2:17:1f:dd:0f: 6e:49:1e:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI4KVU/Ni1Y1lR5jY72n8FRnYzkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhGNDgw QURBNDkyQjAeFw0yNTA0MjgwMTI1MzhaFw0yNTA1MDExMTQ4MzhaMDMxMTAvBgNV BAMTKDhGMDM5REQwMTlBRjFBQkY4RkJGQzM3MEJFNkZGMEYwQjY5MzE2MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0LjIDD3bQ4aEKc5Y6vPl4uzlH P1weNGrVTFZdSdlSSx+5rNJ/DQRuuQkQUwzeRqAa+5y42CPknkigWL8PsUceC5gu 2RI79PqRGn8enO7ixIGBMojJ4iacPCmtmtxXEWPHp9yttoST5lHOpeNGyqxpzqtw OzaI5xyRo01hYQXO7WhAQEGQhpne08OL2TgWrGQJXwjKt2Wwh/rjlDTlXxdV0TVn Vt+k8pF8x+VNDKJiFYZ0/E0N8YukJRwpvk1IHvJHF7K2LmsirqiMN+8k0NttZF9L sDZ4sODAsCCenbWLUmXoPtvlItY+X7CEGPy7bRDsQmKEHlZAhsEh5MdlmQa7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjwOd0BmvGr+Pv8Nwvm/w8LaTFgswHwYDVR0j BBgwFoAUEHKtF6jtsVE67ZWiWAiPSAraSSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTRiOWQzMi0zYzVhLTQwZTItYjc4OC0wNjlkZTBjM2QyZGUvMC8xMDcyQUQxN0E4 RURCMTUxM0FFRDk1QTI1ODA4OEY0ODBBREE0OTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhGNDgwQURB NDkyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU0YjlkMzItM2M1YS00MGUyLWI3 ODgtMDY5ZGUwYzNkMmRlLzAvMTA3MkFEMTdBOEVEQjE1MTNBRUQ5NUEyNTgwODhG NDgwQURBNDkyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJbfUASAG2gUfnLLcrxLunEQUxXJlEHoXKj W/f3+JVTZrKGUuddNqExdC26pnOpRfc6D/WL5xeVISMg61vwQpOhmeBytzwJW/S/ WFh6LLu9UvC3xwsyv5ub6n04TOiczHL9l4Edad53G088xU+eHSXLj6L3D2AEaAXd 9neDJy+ffPI6nEtalUfW+MA4s6P2g78n2VNB81ISnyEAqZM8MV0p/iWxM5z/Ra/C GswG8T6qxzc3SVP7Ys1h3d8iLoI8W9d3QUuPPYfpqQIeT47fyXrcbb2u0nUZjSWq +f2S2PqVVRlEcZOADtVWXm8vRRcXxFZ3N5+4T6CyFx/dD25JHpc= -----END CERTIFICATE-----Generated at Tue Apr 29 09:26:50 2025 by rpki-client