$ rpki-client -vvf repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft File: 1073C0AF2447C17B85643987B72701D1AE52823D.mft (raw, json) Hash identifier: F0cxIUb95+WM7DiZ+04bhpnxOm30ZK36F0HzED3UGiM= Subject key identifier: F2:36:29:54:84:95:8F:0A:B2:FA:CB:0E:82:FF:01:22:26:66:BE:E9 Authority key identifier: 10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D Certificate issuer: /CN=1073C0AF2447C17B85643987B72701D1AE52823D Certificate serial: 124AB355F7C3FCF32058CC10654BD8FBA8FF00D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft Manifest number: 8D Signing time: Sat 26 Apr 2025 20:20:38 +0000 Manifest this update: Sat 26 Apr 2025 20:15:38 +0000 Manifest next update: Tue 29 Apr 2025 20:40:38 +0000 Files and hashes: 1: 1073C0AF2447C17B85643987B72701D1AE52823D.crl (hash: iFZLJ6PHATuy0bYDWSgLxnPfzSVqSJf/l++SBfBcJBY=) 2: 3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa (hash: pjc/YrdKV/TdiFaIjRayQO8Sqerd8j/hCT2Hki4kTnU=) 3: 3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa (hash: PVzIS0ESkEZ67q03gwRLnYkqKCd0joMIjci7Y3exMbQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 20:40:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:4a:b3:55:f7:c3:fc:f3:20:58:cc:10:65:4b:d8:fb:a8:ff:00:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1073C0AF2447C17B85643987B72701D1AE52823D Validity Not Before: Apr 26 20:15:38 2025 GMT Not After : Apr 29 20:40:38 2025 GMT Subject: CN=F236295484958F0AB2FACB0E82FF01222666BEE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:dd:80:97:75:7f:2c:b0:98:a4:e4:aa:61:2b: 4e:6b:76:e8:e3:68:39:4c:f0:79:93:df:b6:a0:76: 2b:ba:e1:7c:d5:dc:ae:92:e6:45:3f:28:fb:7b:3d: fe:1d:0f:3b:5a:bb:1b:86:01:b9:08:97:85:b7:30: 75:ab:13:82:6f:72:58:fe:8a:1c:e4:2c:9a:36:7a: bd:34:fa:c5:20:b9:64:9e:9a:8d:4b:8c:b1:6e:59: 21:0c:78:ca:6a:b2:d3:b3:10:e4:9c:85:c2:0e:2d: 7e:fe:65:b3:41:87:b7:bc:0a:7a:03:90:f8:cf:62: 04:8a:3d:f0:02:e8:d8:8a:5c:80:b7:cd:57:a4:16: b3:dc:4e:15:f5:d9:fd:f9:d9:29:bc:8a:02:b3:dd: 93:4c:fb:e3:97:7e:41:3a:32:0f:89:b5:2a:68:eb: 23:52:2e:07:c5:9c:ab:db:a6:73:45:91:b0:b8:f3: ef:f7:f4:48:56:d6:92:f9:e6:bd:49:aa:ca:c4:f3: 5f:55:b5:37:0d:69:7f:8f:7f:fb:54:74:08:ec:a8: d7:d2:69:e2:9a:a6:64:17:59:82:2c:66:fa:a6:de: 56:21:06:00:ff:9a:8f:35:21:f4:22:a1:cd:96:89: d3:c8:6b:84:f0:ed:53:c0:33:eb:65:6b:85:93:d7: f8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:36:29:54:84:95:8F:0A:B2:FA:CB:0E:82:FF:01:22:26:66:BE:E9 X509v3 Authority Key Identifier: keyid:10:73:C0:AF:24:47:C1:7B:85:64:39:87:B7:27:01:D1:AE:52:82:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1073C0AF2447C17B85643987B72701D1AE52823D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/1073C0AF2447C17B85643987B72701D1AE52823D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:66:cf:17:66:0f:c8:10:6a:11:a4:b7:a7:6b:85:50:48:b4: cd:8e:24:54:f4:56:7a:3c:7f:0e:b3:cd:a3:c1:07:e4:1c:9c: 6c:01:e0:88:6b:2e:a8:89:c7:49:60:88:fa:45:6a:e6:29:24: 63:7e:75:76:a5:d7:ac:5b:bb:19:af:63:e2:75:08:ad:17:c0: b0:e1:81:56:e9:7b:d2:c9:72:6e:8a:04:3e:ea:01:19:e9:4b: 13:5c:65:63:c6:9e:e0:11:e1:40:c0:25:43:ee:ff:29:92:98: 1f:b2:b9:b4:7c:dc:c4:36:08:33:c4:e9:2f:47:9a:57:43:23: 5e:5c:9b:c3:34:35:ef:a8:7c:16:e5:52:f3:ab:77:9f:f4:16: 5d:ba:ad:0d:90:4e:70:8a:63:b0:d5:f4:44:90:54:bd:b3:ea: 87:03:7a:58:54:48:00:2c:72:a0:fb:fc:80:6f:11:0e:82:cc: 87:d4:60:83:c7:bb:04:8d:ce:9e:65:53:a0:81:35:ee:a0:5b: 92:d8:85:13:fc:62:f0:d4:24:14:4d:d3:46:39:0a:ba:e0:7c: 76:28:dd:c9:49:f1:57:09:b8:f4:8b:2f:8a:cc:ac:df:b0:b3: 2a:19:cd:c0:cb:46:cc:10:51:9c:17:8e:d0:e1:8d:d9:c0:a9: 3e:5d:47:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEkqzVffD/PMgWMwQZUvY+6j/ANgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAxRDFB RTUyODIzRDAeFw0yNTA0MjYyMDE1MzhaFw0yNTA0MjkyMDQwMzhaMDMxMTAvBgNV BAMTKEYyMzYyOTU0ODQ5NThGMEFCMkZBQ0IwRTgyRkYwMTIyMjY2NkJFRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk3YCXdX8ssJik5KphK05rdujj aDlM8HmT37agdiu64XzV3K6S5kU/KPt7Pf4dDztauxuGAbkIl4W3MHWrE4Jvclj+ ihzkLJo2er00+sUguWSemo1LjLFuWSEMeMpqstOzEOSchcIOLX7+ZbNBh7e8CnoD kPjPYgSKPfAC6NiKXIC3zVekFrPcThX12f352Sm8igKz3ZNM++OXfkE6Mg+JtSpo 6yNSLgfFnKvbpnNFkbC48+/39EhW1pL55r1JqsrE819VtTcNaX+Pf/tUdAjsqNfS aeKapmQXWYIsZvqm3lYhBgD/mo81IfQioc2WidPIa4Tw7VPAM+tla4WT1/ilAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8jYpVISVjwqy+ssOgv8BIiZmvukwHwYDVR0j BBgwFoAUEHPAryRHwXuFZDmHtycB0a5Sgj0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmRkMTVlMy05ZWU1LTRkNTItOWVlZS03MTJiYjNiN2JmZmIvMC8xMDczQzBBRjI0 NDdDMTdCODU2NDM5ODdCNzI3MDFEMUFFNTI4MjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAxRDFBRTUy ODIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZkZDE1ZTMtOWVlNS00ZDUyLTll ZWUtNzEyYmIzYjdiZmZiLzAvMTA3M0MwQUYyNDQ3QzE3Qjg1NjQzOTg3QjcyNzAx RDFBRTUyODIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVmzxdmD8gQahGkt6drhVBItM2OJFT0Vno8 fw6zzaPBB+QcnGwB4IhrLqiJx0lgiPpFauYpJGN+dXal16xbuxmvY+J1CK0XwLDh gVbpe9LJcm6KBD7qARnpSxNcZWPGnuAR4UDAJUPu/ymSmB+yubR83MQ2CDPE6S9H mldDI15cm8M0Ne+ofBblUvOrd5/0Fl26rQ2QTnCKY7DV9ESQVL2z6ocDelhUSAAs cqD7/IBvEQ6CzIfUYIPHuwSNzp5lU6CBNe6gW5LYhRP8YvDUJBRN00Y5CrrgfHYo 3clJ8VcJuPSLL4rMrN+wsyoZzcDLRswQUZwXjtDhjdnAqT5dR30= -----END CERTIFICATE-----Generated at Sun Apr 27 18:12:11 2025 by rpki-client