$ rpki-client -vvf repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft File: 064A8F9FBD487AB04370A31B7D603B27E6674937.mft (raw, json) Hash identifier: Dlk3MM7vglGIuc61O/PKEGB6h03fp4isVHux+lQ3Qzc= Subject key identifier: 9A:65:BA:F0:7C:F4:C3:18:80:DD:FC:FB:57:F9:02:82:70:9A:EB:9C Authority key identifier: 06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 Certificate issuer: /CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Certificate serial: 73254BD64EBB26191E2733750E372B38C69A70BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject info access: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft Manifest number: 0140 Signing time: Mon 28 Apr 2025 08:31:53 +0000 Manifest this update: Mon 28 Apr 2025 08:26:53 +0000 Manifest next update: Thu 01 May 2025 13:31:53 +0000 Files and hashes: 1: 064A8F9FBD487AB04370A31B7D603B27E6674937.crl (hash: hv/g3tzhQbsu1qvoUR9cjHXwBqD1DsSNFAOGD4DDc9g=) 2: 3130332e3134342e32312e302f32342d3234203d3e20313339343233.roa (hash: +C1/uvN7CYXfdE0s0cHFFQ7douw+zlPNc8mJpTG123o=) 3: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (hash: sFMVy7dDJJRHWvtmqbp2frseo5smPIhlhNP2pmcRkE8=) 4: 3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa (hash: eS4FjrViWLyiilxg1RkpEK5h3em7xO1B2/rM7GMa+rk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 13:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:25:4b:d6:4e:bb:26:19:1e:27:33:75:0e:37:2b:38:c6:9a:70:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Validity Not Before: Apr 28 08:26:53 2025 GMT Not After : May 1 13:31:53 2025 GMT Subject: CN=9A65BAF07CF4C31880DDFCFB57F90282709AEB9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7b:9c:ac:90:e9:40:e7:5d:b2:2a:54:70:b2: c5:30:29:7f:77:65:b9:3b:bc:6d:c0:47:88:ef:f4: a3:18:96:6b:91:4c:86:05:6a:f2:0d:89:98:44:7d: 5a:68:7b:f9:bb:58:03:93:6d:f5:b6:28:2d:f2:0a: eb:b3:2e:9f:a0:07:00:e8:ee:64:77:a8:5f:6d:b7: 00:97:c0:23:2e:2a:80:cc:ec:8f:e9:bb:04:fc:6e: 9d:43:cf:50:55:f9:b2:73:0d:ca:b9:0b:61:53:82: 04:ac:d5:98:d6:aa:d3:ca:e0:3e:bd:95:3a:fc:b4: 94:d4:85:b8:05:3a:56:54:3b:18:3c:5a:77:6e:d0: 80:bf:e0:97:b0:dc:3a:5c:bb:ed:20:fa:00:fd:45: eb:66:71:cb:ae:c6:ff:26:81:e5:2b:80:c3:66:23: 4d:58:4e:c3:3a:d2:24:21:76:a5:38:d7:e2:95:71: 34:cc:fe:04:fd:30:9f:54:7b:49:c0:42:15:bf:f0: 1f:a3:ff:7f:b3:e3:d7:d0:0d:90:15:3e:98:a6:8d: 5d:e7:12:e2:d1:a0:e9:40:51:56:0e:ae:9e:b1:bb: 5e:f8:3b:91:a4:76:fc:81:0b:40:dc:a2:af:63:e9: 9c:a3:c4:fc:60:fa:8e:27:01:2d:4a:1e:e0:8a:58: 46:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:65:BA:F0:7C:F4:C3:18:80:DD:FC:FB:57:F9:02:82:70:9A:EB:9C X509v3 Authority Key Identifier: keyid:06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:35:c2:5b:b5:1c:0a:d9:f2:f3:b1:27:9e:02:84:6e:aa:7f: 4a:2c:58:55:7c:9a:e4:66:48:15:44:04:b4:33:8d:68:57:56: 0f:be:75:0a:c7:71:e6:15:08:39:4b:37:37:7e:c0:68:7c:d5: 7d:89:c4:76:9a:60:34:4c:1d:74:e6:8f:ad:3e:62:13:8b:e3: 02:83:40:2d:93:d1:92:a6:1a:ba:17:09:53:1c:fc:b2:b4:b6: 70:40:96:7a:be:67:26:af:df:fd:14:f5:22:94:da:b3:8f:1f: f1:be:dd:0a:a2:0a:51:77:c1:9a:3a:9a:ec:34:00:d4:b0:fa: d6:85:ef:41:c7:3d:43:b4:11:3f:95:83:3b:72:cd:0f:88:28: fb:2a:da:40:ff:8b:68:40:fe:57:2a:6b:02:45:51:76:f5:9e: 6f:15:32:08:ed:c7:86:24:19:7c:2b:69:6d:53:c3:1b:a7:73: 40:a2:2c:54:41:66:69:51:b4:7e:28:27:35:60:33:eb:3a:67: af:6e:b7:cf:68:63:3b:c8:89:94:d0:94:51:43:0f:b7:b0:5c: cb:4c:7e:c2:c0:30:af:e7:1f:da:66:17:7f:c6:f5:dc:b1:b7: 81:f0:d8:dc:30:75:8d:85:db:8c:9d:fb:db:0d:92:dc:b3:e9: 6c:98:5c:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcyVL1k67JhkeJzN1DjcrOMaacL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdF NjY3NDkzNzAeFw0yNTA0MjgwODI2NTNaFw0yNTA1MDExMzMxNTNaMDMxMTAvBgNV BAMTKDlBNjVCQUYwN0NGNEMzMTg4MERERkNGQjU3RjkwMjgyNzA5QUVCOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNe5yskOlA512yKlRwssUwKX93 Zbk7vG3AR4jv9KMYlmuRTIYFavINiZhEfVpoe/m7WAOTbfW2KC3yCuuzLp+gBwDo 7mR3qF9ttwCXwCMuKoDM7I/puwT8bp1Dz1BV+bJzDcq5C2FTggSs1ZjWqtPK4D69 lTr8tJTUhbgFOlZUOxg8Wndu0IC/4Jew3Dpcu+0g+gD9Retmccuuxv8mgeUrgMNm I01YTsM60iQhdqU41+KVcTTM/gT9MJ9Ue0nAQhW/8B+j/3+z49fQDZAVPpimjV3n EuLRoOlAUVYOrp6xu174O5GkdvyBC0Dcoq9j6ZyjxPxg+o4nAS1KHuCKWEabAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmmW68Hz0wxiA3fz7V/kCgnCa65wwHwYDVR0j BBgwFoAUBkqPn71IerBDcKMbfWA7J+ZnSTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDFmZjNlMi03NmI2LTQ4MzMtODZiNS04MmYzZmE0ZWJjYjcvMC8wNjRBOEY5RkJE NDg3QUIwNDM3MEEzMUI3RDYwM0IyN0U2Njc0OTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdFNjY3 NDkzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQxZmYzZTItNzZiNi00ODMzLTg2 YjUtODJmM2ZhNGViY2I3LzAvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNC MjdFNjY3NDkzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABk1wlu1HArZ8vOxJ54ChG6qf0osWFV8muRm SBVEBLQzjWhXVg++dQrHceYVCDlLNzd+wGh81X2JxHaaYDRMHXTmj60+YhOL4wKD QC2T0ZKmGroXCVMc/LK0tnBAlnq+Zyav3/0U9SKU2rOPH/G+3QqiClF3wZo6muw0 ANSw+taF70HHPUO0ET+VgztyzQ+IKPsq2kD/i2hA/lcqawJFUXb1nm8VMgjtx4Yk GXwraW1Twxunc0CiLFRBZmlRtH4oJzVgM+s6Z69ut89oYzvIiZTQlFFDD7ewXMtM fsLAMK/nH9pmF3/G9dyxt4Hw2NwwdY2F24yd+9sNktyz6WyYXEE= -----END CERTIFICATE-----Generated at Tue Apr 29 17:04:59 2025 by rpki-client