$ rpki-client -vvf repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft File: B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft (raw, json) Hash identifier: y7DCfBbFZXwwfsNBRmHFk6i/b7SuGav8d/OzKmB7/Pw= Subject key identifier: 46:51:0D:86:1C:20:3F:DA:83:F4:EA:F6:A1:85:F8:02:06:40:AC:C9 Authority key identifier: B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC Certificate issuer: /CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC Certificate serial: 62A8E689BD3875F090037DB0478201DFC0F44779 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft Manifest number: 0434 Signing time: Mon 28 Apr 2025 14:00:35 +0000 Manifest this update: Mon 28 Apr 2025 13:55:35 +0000 Manifest next update: Thu 01 May 2025 18:59:35 +0000 Files and hashes: 1: 323430343a366338303a3a2f33322d3438203d3e20313334363538.roa (hash: q8jtLBKBKQeodF380oFs3a5khPlHgV+mCvTqqN3bIXc=) 2: 3130332e3231302e3132302e302f32322d3234203d3e20313334363538.roa (hash: ekik3SPAnpG4g8MYbyIQd12hwoxoo1uid5VUdoMl00o=) 3: B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl (hash: qz3+BWQ3uJjLJnMCADqtjkk3x+9JmptIcIuGDOMPV+E=) 4: 3130332e3231302e3132322e302f32342d3234203d3e20313334363538.roa (hash: jZ2VCixJokCjVkqlhzv/JzHDhAkV+oo6GioQBGOSoX4=) 5: 3130332e3231302e3132312e302f32342d3234203d3e20313334363538.roa (hash: pbptzbuOalIu4g6EBTk1Hf5iY+nFXqv+7IJZhSllhjA=) 6: 3130332e3231302e3132302e302f32342d3234203d3e20313334363538.roa (hash: RLjDgS7MtF3tPcpoTSb39JP1PHPvNJRDVIHMYjPpYko=) 7: 3130332e3231302e3132332e302f32342d3234203d3e20313334363538.roa (hash: Riw6dcMVfaMH7YcdR5/8rwW9Lvi4KEfM0QRQa87aMxU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:a8:e6:89:bd:38:75:f0:90:03:7d:b0:47:82:01:df:c0:f4:47:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC Validity Not Before: Apr 28 13:55:35 2025 GMT Not After : May 1 18:59:35 2025 GMT Subject: CN=46510D861C203FDA83F4EAF6A185F8020640ACC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:50:41:8b:2a:d3:59:75:66:df:a7:39:b6:91: 1d:ca:ba:41:47:ef:68:e7:cf:ec:f4:48:25:56:bd: ee:66:41:e3:a3:6e:ed:2f:ad:d2:0e:c1:c2:a5:95: 20:a4:3c:2c:66:e2:83:32:ca:0c:1d:9c:57:c5:7e: d2:92:b4:8f:30:d9:c9:a1:7e:07:b3:99:f3:43:cd: 5c:78:0c:a4:84:54:2a:6b:33:3c:a6:fe:f5:8d:e8: f8:3b:be:05:dd:79:95:74:04:c7:8d:ad:3f:4f:d5: dc:29:dc:80:be:07:c7:71:74:c7:b3:fc:d5:9e:1c: 75:14:5d:5c:18:3e:b0:7f:f5:4a:87:50:f5:dd:0d: 8f:44:15:aa:48:36:b6:59:bd:44:1c:ad:b5:fa:0e: 93:82:78:d1:d9:a1:17:7e:6c:a2:cd:5d:3c:49:b0: c2:d3:61:53:58:b7:96:c3:64:b7:4a:8f:b3:5a:36: 63:d7:c2:fe:73:12:d6:bf:ee:1d:28:30:bf:be:66: 84:87:0f:59:0d:14:3b:3b:4b:4c:f6:64:69:5c:30: 12:07:b9:e9:9a:c4:ea:67:31:55:e5:db:31:13:e6: 37:bc:36:d0:8e:74:25:a2:d7:11:92:85:67:82:9d: a2:66:54:fa:43:04:7e:26:30:d7:05:c9:63:7c:3d: 06:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:51:0D:86:1C:20:3F:DA:83:F4:EA:F6:A1:85:F8:02:06:40:AC:C9 X509v3 Authority Key Identifier: keyid:B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:1f:38:b1:7c:03:56:d6:45:ae:31:29:13:8e:b9:ec:63:0c: 9d:60:ea:fb:45:34:2e:94:eb:71:ea:f5:13:37:7b:a8:56:b8: f5:5e:b9:e1:48:1b:c1:03:cf:e9:08:2c:3f:24:f4:2a:0c:31: 18:e1:58:80:67:c2:9c:a1:03:de:50:57:8d:77:e8:5c:1a:4e: 23:30:d7:d5:99:a6:6b:63:37:c2:c3:d5:8d:33:ba:c3:76:42: 9c:8b:ba:6d:1b:c7:4f:51:78:65:c3:8f:5a:06:b2:4f:a2:cd: 24:43:6c:f2:27:5b:4e:9a:61:c9:12:0b:40:04:06:69:8e:75: 71:05:02:3d:81:90:d3:65:e1:3b:3d:58:aa:4c:d1:4f:b2:40: e5:0b:87:44:45:cc:85:a1:57:9e:2c:56:b4:fe:fd:a1:67:95: a9:23:ba:d3:94:de:e4:6f:a9:61:67:82:d5:4d:79:4a:46:2a: 7e:8d:9c:b7:de:f3:17:cf:4a:db:0d:a9:93:d7:95:49:03:15: d1:22:41:17:8f:3e:d7:8b:0b:2c:eb:bd:d9:01:5c:21:6a:b1: 2f:20:4e:11:da:47:f8:2f:ce:f2:5e:14:b4:19:b5:47:20:ed: 4d:10:76:39:8d:53:0d:8a:98:b4:9d:57:cb:22:cc:51:44:35: 84:84:5c:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYqjmib04dfCQA32wR4IB38D0R3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlFQUVG RTY3QzNFQzAeFw0yNTA0MjgxMzU1MzVaFw0yNTA1MDExODU5MzVaMDMxMTAvBgNV BAMTKDQ2NTEwRDg2MUMyMDNGREE4M0Y0RUFGNkExODVGODAyMDY0MEFDQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSUEGLKtNZdWbfpzm2kR3KukFH 72jnz+z0SCVWve5mQeOjbu0vrdIOwcKllSCkPCxm4oMyygwdnFfFftKStI8w2cmh fgezmfNDzVx4DKSEVCprMzym/vWN6Pg7vgXdeZV0BMeNrT9P1dwp3IC+B8dxdMez /NWeHHUUXVwYPrB/9UqHUPXdDY9EFapINrZZvUQcrbX6DpOCeNHZoRd+bKLNXTxJ sMLTYVNYt5bDZLdKj7NaNmPXwv5zEta/7h0oML++ZoSHD1kNFDs7S0z2ZGlcMBIH uemaxOpnMVXl2zET5je8NtCOdCWi1xGShWeCnaJmVPpDBH4mMNcFyWN8PQa1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURlENhhwgP9qD9Or2oYX4AgZArMkwHwYDVR0j BBgwFoAUsR5cm04yJGD9cBOH8luerv5nw+wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDQ4NzM2MC04NzM1LTQxZDctOTdhOC1kYmIzNGQ3OWVmZjQvMC9CMTFFNUM5QjRF MzIyNDYwRkQ3MDEzODdGMjVCOUVBRUZFNjdDM0VDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlFQUVGRTY3 QzNFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ0ODczNjAtODczNS00MWQ3LTk3 YTgtZGJiMzRkNzllZmY0LzAvQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlF QUVGRTY3QzNFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKAfOLF8A1bWRa4xKROOuexjDJ1g6vtFNC6U 63Hq9RM3e6hWuPVeueFIG8EDz+kILD8k9CoMMRjhWIBnwpyhA95QV4136FwaTiMw 19WZpmtjN8LD1Y0zusN2QpyLum0bx09ReGXDj1oGsk+izSRDbPInW06aYckSC0AE BmmOdXEFAj2BkNNl4Ts9WKpM0U+yQOULh0RFzIWhV54sVrT+/aFnlakjutOU3uRv qWFngtVNeUpGKn6NnLfe8xfPStsNqZPXlUkDFdEiQRePPteLCyzrvdkBXCFqsS8g ThHaR/gvzvJeFLQZtUcg7U0QdjmNUw2KmLSdV8sizFFENYSEXAQ= -----END CERTIFICATE-----Generated at Wed Apr 30 03:32:29 2025 by rpki-client