$ rpki-client -vvf repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft File: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft (raw, json) Hash identifier: OSjFsMXEjpQCMJBwinmpRgJpg3a+KItnXjvieYZRHtU= Subject key identifier: 42:19:21:4F:CE:1D:C1:38:84:10:BE:E8:5D:09:1B:3E:CA:C0:F4:2D Authority key identifier: 29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 Certificate issuer: /CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Certificate serial: 27DB6BFCB68AF8A6C5833708E8E130C24BFF810F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft Manifest number: 85 Signing time: Mon 28 Apr 2025 10:50:53 +0000 Manifest this update: Mon 28 Apr 2025 10:45:53 +0000 Manifest next update: Thu 01 May 2025 21:52:53 +0000 Files and hashes: 1: 3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa (hash: I9nwed3s5J9MWCC1UAp67S/MVhHR3W/rsqME52e0/a0=) 2: 3136302e32352e3137382e302f32342d3234203d3e20313533303735.roa (hash: Ws7wk8GBBz6uaKUyE3UI35E9XGkDiFZKCxUfK3/rPNE=) 3: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl (hash: eWU2J+Ew3zjpM/3elVw6kEoh1QVsw/pPg6XePABpiKw=) 4: 3136302e32352e3137392e302f32342d3234203d3e20313533303735.roa (hash: GhxR22sRqPsgSQoLpKAI7yTQVizLaGLPWzCytQ0r9cY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:52:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:db:6b:fc:b6:8a:f8:a6:c5:83:37:08:e8:e1:30:c2:4b:ff:81:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Validity Not Before: Apr 28 10:45:53 2025 GMT Not After : May 1 21:52:53 2025 GMT Subject: CN=4219214FCE1DC1388410BEE85D091B3ECAC0F42D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c3:bf:e3:a1:0c:8d:83:2a:a8:3c:c4:c0:03: 4b:2f:34:9b:2b:8c:6a:c6:ee:b4:b7:4d:f4:e1:40: e6:5a:79:f9:c0:36:bb:a2:0d:f2:40:87:f3:f6:31: 41:2b:09:22:49:18:c7:e6:4f:21:a2:49:87:b8:9e: d7:62:c0:ca:c8:f6:b8:93:66:1e:72:78:92:9f:2a: e7:97:20:2b:72:b2:18:33:00:47:bb:16:27:b5:80: 81:b9:98:3e:28:8c:5d:92:df:02:a1:cb:d9:9d:b8: 2d:19:ad:c3:88:ab:c9:24:63:2d:f2:08:ad:e1:6f: 01:eb:91:1c:84:47:1f:45:5b:0b:46:2c:0c:cc:ee: 39:27:ae:47:61:84:74:19:e9:13:c4:39:30:2f:31: 02:f7:bf:0b:b0:dc:f8:05:cd:14:be:82:78:32:b7: cc:2a:cb:4a:fc:11:b1:03:07:71:b9:c1:57:51:1d: 6f:e1:14:ef:79:20:c9:ae:a1:48:34:01:88:f1:71: 72:69:de:18:61:c7:8e:dc:39:2f:44:e3:7a:b4:13: cd:02:3e:2b:24:53:55:c3:d2:ff:14:87:40:09:2a: 06:bc:f5:dd:2b:1d:24:7d:b2:9d:e9:52:1a:6b:ad: ad:bf:8e:28:c9:14:c6:fb:ee:83:3f:7a:1e:f4:5a: 58:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:19:21:4F:CE:1D:C1:38:84:10:BE:E8:5D:09:1B:3E:CA:C0:F4:2D X509v3 Authority Key Identifier: keyid:29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a2:ac:9e:ff:38:f4:09:e9:33:d5:55:89:a7:eb:eb:c8:b7: 0b:3e:79:44:88:1a:57:f8:6e:d2:c9:ed:89:de:6e:d6:85:24: d8:1b:58:aa:b1:f0:18:58:49:da:31:55:a2:83:80:52:ae:0f: ac:f6:e0:5b:15:12:f9:0c:a5:fd:e9:85:76:00:e5:ca:f5:10: b3:fa:86:93:37:56:6c:19:40:f4:03:9a:fd:57:90:51:31:2d: 95:45:1c:a0:37:d8:8a:85:3c:2c:51:5d:c9:71:fb:7d:30:ab: 3c:ce:f3:b9:f9:a3:d4:44:89:10:82:03:8b:09:c5:9e:36:60: e5:86:03:15:9e:a5:ff:6b:19:87:53:75:a4:65:b9:f2:e3:9f: 5d:88:be:16:da:77:de:4a:ad:e9:0e:2b:3f:b5:34:b3:01:de: 27:05:09:87:9f:14:14:f7:c1:82:79:b4:ae:a3:04:03:b2:8f: 90:28:ef:2e:7a:51:5f:cc:49:26:a0:5a:3c:e3:0c:c6:0c:c7: 1b:ca:b6:cb:b9:e6:6f:ad:08:2d:7f:3e:f0:31:06:f0:ee:06: 62:c6:f8:99:15:63:1d:12:35:95:fc:ed:d4:4c:af:49:9b:02: 43:c9:a7:86:51:96:4a:c2:e6:62:b7:82:af:21:15:e1:6f:ee: a0:38:d4:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ9tr/LaK+KbFgzcI6OEwwkv/gQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBG OTVGMkI0NTAeFw0yNTA0MjgxMDQ1NTNaFw0yNTA1MDEyMTUyNTNaMDMxMTAvBgNV BAMTKDQyMTkyMTRGQ0UxREMxMzg4NDEwQkVFODVEMDkxQjNFQ0FDMEY0MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGw7/joQyNgyqoPMTAA0svNJsr jGrG7rS3TfThQOZaefnANruiDfJAh/P2MUErCSJJGMfmTyGiSYe4ntdiwMrI9riT Zh5yeJKfKueXICtyshgzAEe7Fie1gIG5mD4ojF2S3wKhy9mduC0ZrcOIq8kkYy3y CK3hbwHrkRyERx9FWwtGLAzM7jknrkdhhHQZ6RPEOTAvMQL3vwuw3PgFzRS+gngy t8wqy0r8EbEDB3G5wVdRHW/hFO95IMmuoUg0AYjxcXJp3hhhx47cOS9E43q0E80C PiskU1XD0v8Uh0AJKga89d0rHSR9sp3pUhprra2/jijJFMb77oM/eh70Wlg1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQhkhT84dwTiEEL7oXQkbPsrA9C0wHwYDVR0j BBgwFoAUKXatx0SL8MqbV9zXiEmh4PlfK0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2M0MzJlMC1kYzNlLTQyY2MtYmNjMC02MjliMTYyMDZjOWEvMC8yOTc2QURDNzQ0 OEJGMENBOUI1N0RDRDc4ODQ5QTFFMEY5NUYyQjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBGOTVG MkI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODdjNDMyZTAtZGMzZS00MmNjLWJj YzAtNjI5YjE2MjA2YzlhLzAvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUEx RTBGOTVGMkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2irJ7/OPQJ6TPVVYmn6+vItws+eUSIGlf4 btLJ7YnebtaFJNgbWKqx8BhYSdoxVaKDgFKuD6z24FsVEvkMpf3phXYA5cr1ELP6 hpM3VmwZQPQDmv1XkFExLZVFHKA32IqFPCxRXclx+30wqzzO87n5o9REiRCCA4sJ xZ42YOWGAxWepf9rGYdTdaRlufLjn12Ivhbad95KrekOKz+1NLMB3icFCYefFBT3 wYJ5tK6jBAOyj5Ao7y56UV/MSSagWjzjDMYMxxvKtsu55m+tCC1/PvAxBvDuBmLG +JkVYx0SNZX87dRMr0mbAkPJp4ZRlkrC5mK3gq8hFeFv7qA41MM= -----END CERTIFICATE-----Generated at Wed Apr 30 14:48:34 2025 by rpki-client