$ rpki-client -vvf repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft File: 3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft (raw, json) Hash identifier: rxWC8643Drtc026jChzdb7GGsh/DPp3gtvtP7Y/0+ts= Subject key identifier: CB:69:04:D2:E6:EC:46:1C:BF:BA:06:B6:A0:D3:52:92:8B:49:FC:2B Authority key identifier: 31:94:DF:D6:64:57:35:9A:F7:BF:3B:F0:9E:A7:66:AD:EF:13:29:B5 Certificate issuer: /CN=3194DFD66457359AF7BF3BF09EA766ADEF1329B5 Certificate serial: 383AA539E47787AD7C1F426A51E62FDE747A24DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft Manifest number: 36 Signing time: Mon 28 Apr 2025 08:00:46 +0000 Manifest this update: Mon 28 Apr 2025 07:55:46 +0000 Manifest next update: Thu 01 May 2025 17:17:46 +0000 Files and hashes: 1: 3130332e3136322e33352e302f32342d3234203d3e20313431363535.roa (hash: 2q+rh+u7xtZBbh00UB11LmVHu3mC0doj4usif/1P0SE=) 2: 3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl (hash: G3v3X7CISOcUVMiWcjwoL/ppWTCnwQgGV7ghHgCvPjk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:3a:a5:39:e4:77:87:ad:7c:1f:42:6a:51:e6:2f:de:74:7a:24:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3194DFD66457359AF7BF3BF09EA766ADEF1329B5 Validity Not Before: Apr 28 07:55:46 2025 GMT Not After : May 1 17:17:46 2025 GMT Subject: CN=CB6904D2E6EC461CBFBA06B6A0D352928B49FC2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c3:b1:85:1a:54:7b:7e:d6:e8:80:ef:a0:42: 01:6f:06:3d:da:01:ed:d8:98:77:32:1e:24:c5:19: f8:ec:d2:77:77:6b:01:e2:8c:66:80:d3:1d:8f:0a: df:6b:4f:50:c6:91:3e:c4:b6:4f:29:6e:dc:ef:09: e9:3c:55:69:10:a3:cf:dc:00:95:3a:cb:7f:f6:a0: 82:88:90:e3:84:4d:d8:5b:71:72:11:87:0e:21:fc: 32:39:37:6c:04:a8:70:18:5e:7f:b7:bf:aa:9b:3e: ee:79:b6:4a:cf:e1:cc:ef:29:41:c7:d1:e2:8e:e8: 37:9b:81:e3:94:5f:63:5d:6d:f8:4c:b3:01:7c:35: 74:72:b9:0c:cb:eb:8c:74:56:d4:3d:19:17:03:14: 79:7b:b7:2b:71:37:94:d3:29:2b:4c:60:7f:a5:f7: ed:e9:73:00:61:73:bb:f8:ac:7e:80:4d:ee:c9:6a: 07:ad:2b:81:81:48:76:99:6b:07:76:55:d7:b1:c2: 0b:99:a4:5c:8d:11:60:60:a8:c1:e6:4c:e7:b4:0d: 44:dc:cf:37:ae:65:d8:22:dc:29:f7:57:71:b0:6f: 6e:ce:73:8c:cf:cc:b3:f2:d6:4c:dd:6d:99:87:de: b2:67:9e:6b:93:ed:46:e6:73:28:91:a6:e4:2c:6a: ea:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:69:04:D2:E6:EC:46:1C:BF:BA:06:B6:A0:D3:52:92:8B:49:FC:2B X509v3 Authority Key Identifier: keyid:31:94:DF:D6:64:57:35:9A:F7:BF:3B:F0:9E:A7:66:AD:EF:13:29:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/23ba024b-87f2-4edd-89ff-a4fca7008c36/0/3194DFD66457359AF7BF3BF09EA766ADEF1329B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:5c:6a:15:a3:8b:c6:5f:98:c5:98:03:42:0d:7f:5e:10:cd: cb:b3:e8:15:cb:56:e9:c5:2c:1a:f4:52:51:de:c9:31:ac:88: 06:88:7f:2b:96:bf:dd:ab:e4:b6:7d:6c:4d:ef:37:a1:2f:a5: ce:df:1d:a5:5b:73:0f:4c:c8:3d:b4:d5:ec:44:fa:7c:85:9d: 0b:50:85:83:1a:95:bb:ad:ac:30:fe:78:86:23:31:54:c1:dc: 45:4b:c9:f6:de:37:70:75:8a:45:54:d2:47:1d:ac:4c:aa:f7: 74:bd:5e:5c:d2:fe:a3:c3:d1:12:38:81:86:a5:51:c1:0e:b3: d9:86:ce:26:66:8d:27:f6:2d:59:13:84:17:33:25:ca:69:b0: 70:ad:43:58:23:71:e4:89:f2:bf:70:2b:2a:ae:e7:3c:3e:8e: 89:f9:ff:ef:57:c4:b8:aa:1e:04:72:4f:67:ad:a2:1a:82:98: 10:70:11:5a:ae:53:44:59:58:a7:22:66:df:f7:0c:77:84:b9: 98:70:f4:6b:26:10:f0:87:7e:70:6c:54:2d:1a:d6:7e:58:59: e6:92:9e:60:4b:51:60:1f:47:7f:4e:4e:bf:0e:b1:56:5a:53: 0d:13:f8:e1:96:c0:cd:d7:9c:15:17:7d:7f:6e:e6:4b:b7:8b: 18:b6:1d:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUODqlOeR3h618H0JqUeYv3nR6JNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2QURF RjEzMjlCNTAeFw0yNTA0MjgwNzU1NDZaFw0yNTA1MDExNzE3NDZaMDMxMTAvBgNV BAMTKENCNjkwNEQyRTZFQzQ2MUNCRkJBMDZCNkEwRDM1MjkyOEI0OUZDMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiw7GFGlR7ftbogO+gQgFvBj3a Ae3YmHcyHiTFGfjs0nd3awHijGaA0x2PCt9rT1DGkT7Etk8pbtzvCek8VWkQo8/c AJU6y3/2oIKIkOOETdhbcXIRhw4h/DI5N2wEqHAYXn+3v6qbPu55tkrP4czvKUHH 0eKO6DebgeOUX2NdbfhMswF8NXRyuQzL64x0VtQ9GRcDFHl7tytxN5TTKStMYH+l 9+3pcwBhc7v4rH6ATe7JagetK4GBSHaZawd2VdexwguZpFyNEWBgqMHmTOe0DUTc zzeuZdgi3Cn3V3Gwb27Oc4zPzLPy1kzdbZmH3rJnnmuT7UbmcyiRpuQsauo7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy2kE0ubsRhy/uga2oNNSkotJ/CswHwYDVR0j BBgwFoAUMZTf1mRXNZr3vzvwnqdmre8TKbUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y M2JhMDI0Yi04N2YyLTRlZGQtODlmZi1hNGZjYTcwMDhjMzYvMC8zMTk0REZENjY0 NTczNTlBRjdCRjNCRjA5RUE3NjZBREVGMTMyOUI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2QURFRjEz MjlCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjNiYTAyNGItODdmMi00ZWRkLTg5 ZmYtYTRmY2E3MDA4YzM2LzAvMzE5NERGRDY2NDU3MzU5QUY3QkYzQkYwOUVBNzY2 QURFRjEzMjlCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABcahWji8ZfmMWYA0INf14Qzcuz6BXLVunF LBr0UlHeyTGsiAaIfyuWv92r5LZ9bE3vN6Evpc7fHaVbcw9MyD201exE+nyFnQtQ hYMalbutrDD+eIYjMVTB3EVLyfbeN3B1ikVU0kcdrEyq93S9XlzS/qPD0RI4gYal UcEOs9mGziZmjSf2LVkThBczJcppsHCtQ1gjceSJ8r9wKyqu5zw+jon5/+9XxLiq HgRyT2etohqCmBBwEVquU0RZWKciZt/3DHeEuZhw9GsmEPCHfnBsVC0a1n5YWeaS nmBLUWAfR39OTr8OsVZaUw0T+OGWwM3XnBUXfX9u5ku3ixi2Hec= -----END CERTIFICATE-----Generated at Tue Apr 29 19:37:39 2025 by rpki-client