$ rpki-client -vvf repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft File: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft (raw, json) Hash identifier: YT8qjJrQ4p0uCpdpPejd2JoAkiMTgHFoLJcRTv2asMA= Subject key identifier: C1:61:61:70:BF:58:E1:C9:B7:BA:9D:B7:B9:BE:73:31:09:BD:91:CA Authority key identifier: 35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B Certificate issuer: /CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Certificate serial: 7C2AD67C7A3F9093B1FBB73D17AD7AC9DEF0E9CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft Manifest number: C3 Signing time: Sun 27 Apr 2025 05:01:44 +0000 Manifest this update: Sun 27 Apr 2025 04:56:44 +0000 Manifest next update: Wed 30 Apr 2025 10:59:44 +0000 Files and hashes: 1: 3135372e31352e36372e302f32342d3234203d3e20313532333737.roa (hash: Leol/vvbfwxKpb46l3UhXlQW8pqQFc1dEKod2elwRZQ=) 2: 3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (hash: wEAVk17qBqspOEGxIZUXVHQNaYtQzVxj0+6pyct72Xw=) 3: 350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl (hash: Kf0xkzlyaiKebDrKmafMirRM4qhygXLUGllkH/7+tyQ=) 4: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (hash: DomC3RN9f0bSEeiB1cMyB/L6HAba822ShjW1q2FYGNE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:2a:d6:7c:7a:3f:90:93:b1:fb:b7:3d:17:ad:7a:c9:de:f0:e9:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B Validity Not Before: Apr 27 04:56:44 2025 GMT Not After : Apr 30 10:59:44 2025 GMT Subject: CN=C1616170BF58E1C9B7BA9DB7B9BE733109BD91CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ad:0b:5b:16:b2:91:eb:71:0a:52:99:62:06: 31:3d:e0:f7:6e:11:23:9b:64:9a:7c:ce:ac:03:7d: e8:a9:bb:c3:80:47:f0:2f:3a:a0:da:c4:e5:9a:2e: f3:a7:12:5a:b2:3d:f5:05:f3:7c:8f:ea:0a:6b:2c: e1:4a:2a:3a:58:35:5d:c1:7a:7b:01:2e:68:1d:af: 22:bf:2d:8d:2b:aa:8e:9f:19:7e:8f:cc:b5:a5:1f: 18:2b:ab:3d:aa:a1:f6:14:7e:8e:08:c2:15:30:34: 41:d3:3a:54:79:50:bf:1c:fa:1b:4e:7e:af:26:7f: 66:27:a3:cc:a1:f8:d7:87:6a:72:fb:cf:7e:5b:c3: b7:b8:c2:45:f4:25:24:c8:a9:2b:7a:68:c0:b0:b3: 1c:0d:64:f5:ac:c6:cd:7d:19:1d:26:e8:14:0a:18: 4c:82:41:fc:ce:d4:17:a0:76:48:dc:b1:9b:31:ec: bb:1d:bd:9e:98:d0:e3:1a:62:b0:fa:3e:91:21:dd: 5c:19:86:4f:cb:76:69:e9:04:bd:28:9b:9b:44:a9: c6:af:49:b2:4f:bc:f1:8b:fc:5d:1a:18:9b:14:b8: 23:61:15:a1:c4:1a:60:83:62:22:c0:5c:5d:78:e0: d2:3f:7b:d7:82:20:71:21:09:15:fd:a5:7e:eb:ab: 24:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:61:61:70:BF:58:E1:C9:B7:BA:9D:B7:B9:BE:73:31:09:BD:91:CA X509v3 Authority Key Identifier: keyid:35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:41:33:6a:e0:24:c8:e7:fd:73:4e:85:61:52:b8:a3:e0:3d: bf:78:7b:f7:be:77:a5:4b:61:d5:7c:7b:99:1f:21:27:a8:2e: 99:45:0a:ca:53:41:d4:5d:9e:14:13:66:9d:a0:82:96:0c:6c: c4:36:6e:7a:33:a1:53:a5:8f:20:e2:f1:3d:86:b3:00:f3:b7: 9f:e9:45:fe:c6:ef:72:84:b5:35:f9:bd:97:20:ef:b4:0d:97: 4b:05:72:f3:7f:59:2d:7f:f3:ce:1f:ef:82:07:93:1e:d8:ba: eb:37:8d:50:9a:f2:21:44:57:1d:b0:be:b6:04:9b:65:d9:f3: 12:16:17:5e:83:78:5b:a1:e6:74:a4:db:1d:4e:30:0b:ba:8d: 3f:64:d0:96:dc:d2:ac:36:cd:39:a8:2f:be:75:f2:24:ef:da: 58:60:a5:ed:2b:07:2b:28:ea:87:aa:c7:e9:84:65:30:14:f5: 6b:e7:eb:b0:1a:37:85:aa:40:87:cd:e8:66:7b:18:62:88:bb: 37:b2:41:6c:7f:0f:a4:79:9d:6c:32:95:2d:35:ae:e6:33:21: b2:99:f9:66:ab:8a:d7:e0:8b:97:f8:27:33:d5:a5:3c:4f:88: 32:ff:5c:d3:29:30:32:78:60:f4:a3:a7:34:94:3c:d5:a9:16: b5:76:21:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfCrWfHo/kJOx+7c9F616yd7w6c0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUx NTYzRjY3QjAeFw0yNTA0MjcwNDU2NDRaFw0yNTA0MzAxMDU5NDRaMDMxMTAvBgNV BAMTKEMxNjE2MTcwQkY1OEUxQzlCN0JBOURCN0I5QkU3MzMxMDlCRDkxQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6rQtbFrKR63EKUpliBjE94Pdu ESObZJp8zqwDfeipu8OAR/AvOqDaxOWaLvOnElqyPfUF83yP6gprLOFKKjpYNV3B ensBLmgdryK/LY0rqo6fGX6PzLWlHxgrqz2qofYUfo4IwhUwNEHTOlR5UL8c+htO fq8mf2Yno8yh+NeHanL7z35bw7e4wkX0JSTIqSt6aMCwsxwNZPWsxs19GR0m6BQK GEyCQfzO1BegdkjcsZsx7LsdvZ6Y0OMaYrD6PpEh3VwZhk/LdmnpBL0om5tEqcav SbJPvPGL/F0aGJsUuCNhFaHEGmCDYiLAXF144NI/e9eCIHEhCRX9pX7rqyRJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwWFhcL9Y4cm3up23ub5zMQm9kcowHwYDVR0j BBgwFoAUNQuuhsp7VPG55TrGDuK6pRVj9nswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODRlODc5Zi0zYTU2LTRkOGQtODNlOC0wZTljYzY1NzcwZWEvMC8zNTBCQUU4NkNB N0I1NEYxQjlFNTNBQzYwRUUyQkFBNTE1NjNGNjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUxNTYz RjY3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDg0ZTg3OWYtM2E1Ni00ZDhkLTgz ZTgtMGU5Y2M2NTc3MGVhLzAvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJB QTUxNTYzRjY3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJBM2rgJMjn/XNOhWFSuKPgPb94e/e+d6VL YdV8e5kfISeoLplFCspTQdRdnhQTZp2ggpYMbMQ2bnozoVOljyDi8T2GswDzt5/p Rf7G73KEtTX5vZcg77QNl0sFcvN/WS1/884f74IHkx7Yuus3jVCa8iFEVx2wvrYE m2XZ8xIWF16DeFuh5nSk2x1OMAu6jT9k0Jbc0qw2zTmoL7518iTv2lhgpe0rByso 6oeqx+mEZTAU9Wvn67AaN4WqQIfN6GZ7GGKIuzeyQWx/D6R5nWwylS01ruYzIbKZ +Waritfgi5f4JzPVpTxPiDL/XNMpMDJ4YPSjpzSUPNWpFrV2Ie0= -----END CERTIFICATE-----Generated at Sun Apr 27 06:32:44 2025 by rpki-client