$ rpki-client -vvf repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft File: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft (raw, json) Hash identifier: iDL9qEZCmtBxr1s0mezdp5rLrd5aqLU2KUO4PM/72hQ= Subject key identifier: C3:D7:0A:29:FF:4C:A3:66:CF:BD:87:E0:F6:62:77:F1:82:46:1D:41 Authority key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 Certificate issuer: /CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Certificate serial: 08DD8E645E612FCF0138C459AB2D440F41E7FC97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft Manifest number: 04CB Signing time: Wed 30 Apr 2025 20:21:33 +0000 Manifest this update: Wed 30 Apr 2025 20:16:33 +0000 Manifest next update: Sun 04 May 2025 07:09:33 +0000 Files and hashes: 1: 3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa (hash: u+wDsuu7AQfdEUKuZBIdzItxLN2INRZbj0tQ8rJ4c30=) 2: 323430353a636163303a3a2f33322d3332203d3e20313339393832.roa (hash: DvQDh4Kkz219rckHWEzkCusXEwHFc00p00m6Uhd4LJY=) 3: 3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa (hash: 4qLNGi/A/2Nusn9fOdkgGQAfH65+C/+F6uRVaqCMnSM=) 4: 3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa (hash: Pvk77Cu313SSMDvMf2Tda7Eo/+XV0HmgEc7n5AmgGCs=) 5: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl (hash: rjvowVJ7Antpiuf5m4kLg694ZnxsEpZ0s4pWS/IhD2M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 07:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:dd:8e:64:5e:61:2f:cf:01:38:c4:59:ab:2d:44:0f:41:e7:fc:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Validity Not Before: Apr 30 20:16:33 2025 GMT Not After : May 4 07:09:33 2025 GMT Subject: CN=C3D70A29FF4CA366CFBD87E0F66277F182461D41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:16:8d:cc:92:8b:04:9a:98:fd:c5:4f:39:c8: 7d:44:55:1c:6e:fd:b2:ae:83:8e:32:33:6e:b7:d9: 22:7e:01:ec:e8:4a:73:68:a4:d7:75:c8:40:3d:48: 2c:1e:2c:e8:43:f2:46:65:49:d9:70:f0:ef:da:c6: dd:9f:64:70:a3:04:1b:13:63:36:49:08:be:a7:1a: 26:ca:12:6c:05:6a:6b:da:18:21:c4:5b:86:61:5d: 64:98:29:f8:15:14:bf:30:7e:0e:cd:37:e4:00:e0: 79:47:a2:a6:5b:08:3d:e7:cf:51:2c:e5:da:e2:94: 5c:d7:43:91:c3:6a:9f:62:4b:2b:73:75:c7:4e:91: fa:49:d3:8c:fc:26:aa:23:a4:04:08:2b:70:4c:c4: 2b:01:5b:16:87:63:e0:e1:3c:f2:b7:52:5c:7f:55: 06:bc:f1:ff:79:c0:97:40:50:48:87:f6:8f:f9:a8: 2f:a5:c3:fc:7c:14:e6:fa:a1:78:42:0c:fa:89:25: ee:53:44:75:6e:3c:bf:62:9c:e6:d9:af:46:c5:68: ff:17:28:65:94:00:e3:ae:a1:c0:fa:5d:82:1a:38: e7:33:e9:8f:d1:65:55:b1:aa:d9:68:e9:98:ad:bf: ca:2e:6c:89:9f:c5:63:2f:59:63:6a:fb:44:59:43: 3e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D7:0A:29:FF:4C:A3:66:CF:BD:87:E0:F6:62:77:F1:82:46:1D:41 X509v3 Authority Key Identifier: keyid:36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:cc:f7:d1:16:f1:9b:a9:2a:b0:f8:28:d6:0b:12:46:6f:c0: dc:ee:9f:29:cc:5d:de:ee:9a:a7:cc:fb:59:93:79:96:93:d1: 93:b6:fc:ae:25:3f:7d:bd:4e:f8:2c:49:71:2d:6f:17:73:6a: 33:c3:57:04:67:1b:75:94:56:46:c3:5b:1e:ed:13:c4:e0:02: cd:f9:c0:78:15:bc:2d:fb:e5:02:ad:4b:71:a4:08:13:33:18: a6:b2:12:34:e4:cf:72:1f:32:75:94:0b:b5:98:24:93:c4:3d: f0:4f:1b:05:0d:3a:8a:b8:30:7c:ad:3c:af:eb:04:bc:8c:20: 81:5d:3a:a1:a3:e5:c4:81:ed:9f:5c:c8:20:2e:c8:62:e5:45: 1e:ab:6b:1c:d8:05:ef:6b:73:1c:d1:0e:cb:12:a1:31:32:d7: 24:9a:82:5d:43:3f:f1:52:2b:fb:12:5a:51:65:c6:3a:7b:a2: 5d:25:f3:2d:33:12:87:db:94:80:85:23:f5:38:a3:93:7a:97: 62:3f:80:85:a4:d4:16:3e:ba:f9:a6:ba:c2:12:8f:63:cc:fe: 55:93:57:33:02:37:55:35:a4:27:87:04:4e:e5:50:58:55:4e: 12:d0:71:91:f4:ee:86:36:7a:e9:64:84:a4:94:43:1c:d5:ff: e2:18:4a:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCN2OZF5hL88BOMRZqy1ED0Hn/JcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4 QTNCQjZENDAeFw0yNTA0MzAyMDE2MzNaFw0yNTA1MDQwNzA5MzNaMDMxMTAvBgNV BAMTKEMzRDcwQTI5RkY0Q0EzNjZDRkJEODdFMEY2NjI3N0YxODI0NjFENDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Fo3MkosEmpj9xU85yH1EVRxu /bKug44yM2632SJ+AezoSnNopNd1yEA9SCweLOhD8kZlSdlw8O/axt2fZHCjBBsT YzZJCL6nGibKEmwFamvaGCHEW4ZhXWSYKfgVFL8wfg7NN+QA4HlHoqZbCD3nz1Es 5drilFzXQ5HDap9iSytzdcdOkfpJ04z8JqojpAQIK3BMxCsBWxaHY+DhPPK3Ulx/ VQa88f95wJdAUEiH9o/5qC+lw/x8FOb6oXhCDPqJJe5TRHVuPL9inObZr0bFaP8X KGWUAOOuocD6XYIaOOcz6Y/RZVWxqtlo6Zitv8oubImfxWMvWWNq+0RZQz7XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw9cKKf9Mo2bPvYfg9mJ38YJGHUEwHwYDVR0j BBgwFoAUNoNp0JbOCYLM8fERAB8qLoo7ttQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWYyNmZiOC03MmM0LTQ5ZDktOWNiZS04MjI2Mzk3MjcxYTIvMC8zNjgzNjlEMDk2 Q0UwOTgyQ0NGMUYxMTEwMDFGMkEyRThBM0JCNkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4QTNC QjZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlmMjZmYjgtNzJjNC00OWQ5LTlj YmUtODIyNjM5NzI3MWEyLzAvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJB MkU4QTNCQjZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/M99EW8ZupKrD4KNYLEkZvwNzunynMXd7u mqfM+1mTeZaT0ZO2/K4lP329TvgsSXEtbxdzajPDVwRnG3WUVkbDWx7tE8TgAs35 wHgVvC375QKtS3GkCBMzGKayEjTkz3IfMnWUC7WYJJPEPfBPGwUNOoq4MHytPK/r BLyMIIFdOqGj5cSB7Z9cyCAuyGLlRR6raxzYBe9rcxzRDssSoTEy1ySagl1DP/FS K/sSWlFlxjp7ol0l8y0zEofblICFI/U4o5N6l2I/gIWk1BY+uvmmusISj2PM/lWT VzMCN1U1pCeHBE7lUFhVThLQcZH07oY2eulkhKSUQxzV/+IYSv8= -----END CERTIFICATE-----Generated at Fri May 2 15:01:50 2025 by rpki-client