$ rpki-client -vvf repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft File: 3128E543B078826F9B4F23328CA84782DE7AAE6D.mft (raw, json) Hash identifier: /a8IQU+cfogD8Rv4ZDntTxSwoqSpTMIUoEcgEarZv4Q= Subject key identifier: 3B:4F:6E:30:82:37:E7:64:19:44:63:8F:81:21:4C:61:02:60:85:21 Authority key identifier: 31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D Certificate issuer: /CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Certificate serial: 4761EBF078C7A6B54CA949357C8DCAC0B0B5AC37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft Manifest number: 04CA Signing time: Fri 25 Apr 2025 13:00:02 +0000 Manifest this update: Fri 25 Apr 2025 12:55:02 +0000 Manifest next update: Mon 28 Apr 2025 16:29:02 +0000 Files and hashes: 1: 3128E543B078826F9B4F23328CA84782DE7AAE6D.crl (hash: G7ozmZHrpkqo7D2lnRWld8yf5+3kibsBNyWnaGSw0P0=) 2: 3130332e3132342e3131322e302f32342d3234203d3e20313331313131.roa (hash: MkU25bOYPfcV/Bxz8xMngWxZE2qo6ACazJ9VjAX4lQs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 16:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:61:eb:f0:78:c7:a6:b5:4c:a9:49:35:7c:8d:ca:c0:b0:b5:ac:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3128E543B078826F9B4F23328CA84782DE7AAE6D Validity Not Before: Apr 25 12:55:02 2025 GMT Not After : Apr 28 16:29:02 2025 GMT Subject: CN=3B4F6E308237E7641944638F81214C6102608521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:56:bb:6e:6d:4c:5a:18:67:01:0d:92:85:da: f7:a9:29:b7:4d:a7:be:cb:3e:dd:07:32:33:f6:5d: 02:dd:ca:d3:bf:90:24:75:30:1f:b7:34:8d:ba:b3: 9c:97:66:c1:61:2d:d7:c9:98:cf:74:0d:54:e9:fa: 1e:e0:7b:12:9b:ca:8c:4b:23:30:db:be:60:08:52: 86:1e:21:d5:45:10:62:51:37:51:85:e1:6d:a6:76: da:7a:f2:8d:39:48:47:fc:ea:25:35:03:ba:3c:f7: ec:dd:f8:8b:1a:b0:ae:b0:d9:ef:bc:6c:22:94:35: c2:a1:02:eb:0a:cc:c3:7d:b3:a7:e7:95:ad:40:66: eb:04:68:21:44:7e:e8:ab:99:b7:e6:e2:66:2b:db: d9:25:f9:7a:70:54:3e:e0:7a:8f:e0:f8:43:c8:97: 5f:fb:2f:68:5d:a7:21:c4:76:d2:4b:46:f4:73:da: 26:7c:b7:8a:9d:02:8b:df:9d:98:48:7c:05:a3:98: 2d:02:7f:35:6d:ab:00:97:61:94:3c:f9:77:b5:07: e2:b4:bb:ff:96:0c:9f:d4:ef:18:a5:f9:28:c8:03: e9:71:df:28:58:e3:79:ad:a4:f3:ff:f2:f2:4d:71: 2f:9d:60:d6:80:b4:6a:76:7a:6c:e3:dd:64:24:34: 31:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4F:6E:30:82:37:E7:64:19:44:63:8F:81:21:4C:61:02:60:85:21 X509v3 Authority Key Identifier: keyid:31:28:E5:43:B0:78:82:6F:9B:4F:23:32:8C:A8:47:82:DE:7A:AE:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3128E543B078826F9B4F23328CA84782DE7AAE6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/747f8f44-277d-45e1-b213-05117fde3cb0/0/3128E543B078826F9B4F23328CA84782DE7AAE6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:bb:a0:75:74:56:70:57:46:37:60:5e:ca:99:3b:99:e7:6f: 62:38:00:e6:9f:c3:9e:44:f0:c6:4c:d7:25:47:7e:fe:b2:59: 4e:3a:ce:be:30:9b:b0:49:49:63:bc:7d:73:0d:5b:94:4c:d1: bf:13:47:dc:15:eb:8c:9c:53:e6:f8:48:8c:43:e9:18:9c:a6: 41:34:14:10:e4:39:a8:2f:ee:7a:32:a0:bf:ea:0d:3f:6d:0f: 5d:d3:16:73:b7:49:27:ec:db:73:ff:6e:9f:e6:52:8d:dc:38: 88:78:af:0e:7c:97:ca:5a:83:7c:5c:8b:18:02:59:2b:7f:b9: 33:6a:05:cd:a7:64:b8:28:61:86:2b:62:2e:6e:08:de:58:af: 4b:59:4c:4e:e9:93:6a:cc:cd:3c:bc:be:bc:a7:c5:39:91:8e: 73:3c:9e:8f:36:07:d6:95:ef:74:8a:82:d8:d5:a6:98:21:3d: f8:5d:21:03:27:05:7b:cd:00:f4:6c:f2:c3:78:80:f7:23:1d: 93:c8:d0:ea:b7:fb:02:8b:88:b2:e5:22:db:74:39:2d:ac:78: db:1e:f8:9b:e8:ee:3d:90:d6:b5:fe:3b:01:9f:75:5d:0b:8e: b0:38:b2:fa:ec:dc:e1:65:45:6a:aa:56:fd:b1:9c:b9:76:28: 1c:8d:0f:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR2Hr8HjHprVMqUk1fI3KwLC1rDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJE RTdBQUU2RDAeFw0yNTA0MjUxMjU1MDJaFw0yNTA0MjgxNjI5MDJaMDMxMTAvBgNV BAMTKDNCNEY2RTMwODIzN0U3NjQxOTQ0NjM4RjgxMjE0QzYxMDI2MDg1MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTVrtubUxaGGcBDZKF2vepKbdN p77LPt0HMjP2XQLdytO/kCR1MB+3NI26s5yXZsFhLdfJmM90DVTp+h7gexKbyoxL IzDbvmAIUoYeIdVFEGJRN1GF4W2mdtp68o05SEf86iU1A7o89+zd+IsasK6w2e+8 bCKUNcKhAusKzMN9s6fnla1AZusEaCFEfuirmbfm4mYr29kl+XpwVD7geo/g+EPI l1/7L2hdpyHEdtJLRvRz2iZ8t4qdAovfnZhIfAWjmC0CfzVtqwCXYZQ8+Xe1B+K0 u/+WDJ/U7xil+SjIA+lx3yhY43mtpPP/8vJNcS+dYNaAtGp2emzj3WQkNDGjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO09uMII352QZRGOPgSFMYQJghSEwHwYDVR0j BBgwFoAUMSjlQ7B4gm+bTyMyjKhHgt56rm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDdmOGY0NC0yNzdkLTQ1ZTEtYjIxMy0wNTExN2ZkZTNjYjAvMC8zMTI4RTU0M0Iw Nzg4MjZGOUI0RjIzMzI4Q0E4NDc4MkRFN0FBRTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3ODJERTdB QUU2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ3ZjhmNDQtMjc3ZC00NWUxLWIy MTMtMDUxMTdmZGUzY2IwLzAvMzEyOEU1NDNCMDc4ODI2RjlCNEYyMzMyOENBODQ3 ODJERTdBQUU2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH27oHV0VnBXRjdgXsqZO5nnb2I4AOafw55E 8MZM1yVHfv6yWU46zr4wm7BJSWO8fXMNW5RM0b8TR9wV64ycU+b4SIxD6RicpkE0 FBDkOagv7noyoL/qDT9tD13TFnO3SSfs23P/bp/mUo3cOIh4rw58l8pag3xcixgC WSt/uTNqBc2nZLgoYYYrYi5uCN5Yr0tZTE7pk2rMzTy8vrynxTmRjnM8no82B9aV 73SKgtjVppghPfhdIQMnBXvNAPRs8sN4gPcjHZPI0Oq3+wKLiLLlItt0OS2seNse +Jvo7j2Q1rX+OwGfdV0LjrA4svrs3OFlRWqqVv2xnLl2KByND3g= -----END CERTIFICATE-----Generated at Sat Apr 26 19:57:01 2025 by rpki-client