$ rpki-client -vvf repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft File: 1472DDF3B8546A8B201733914AFB7036FC6742F3.mft (raw, json) Hash identifier: nIYEcXmRddzshV1F74t9WOg8W5MjcFhCRl05O1dzU7c= Subject key identifier: C6:53:FA:DB:36:05:1B:67:DE:9F:B9:15:A3:F2:5E:E1:07:5D:A8:5B Authority key identifier: 14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 Certificate issuer: /CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Certificate serial: 4B23D0A5F34EF5B17370BA1D11FE915E0D7AC170 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft Manifest number: 033B Signing time: Tue 29 Apr 2025 03:51:42 +0000 Manifest this update: Tue 29 Apr 2025 03:46:42 +0000 Manifest next update: Fri 02 May 2025 11:22:42 +0000 Files and hashes: 1: 3130332e3137302e3139362e302f32332d3234203d3e20313338383535.roa (hash: nYdmDrbl4N7U7OFxsxXOGMjKsB4u86wkNh8KISL5Eg0=) 2: 1472DDF3B8546A8B201733914AFB7036FC6742F3.crl (hash: W7Rq3grHp8pevM0JMVmxBRHUZIo8S76nGkTRZrIGW54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 11:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:23:d0:a5:f3:4e:f5:b1:73:70:ba:1d:11:fe:91:5e:0d:7a:c1:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Validity Not Before: Apr 29 03:46:42 2025 GMT Not After : May 2 11:22:42 2025 GMT Subject: CN=C653FADB36051B67DE9FB915A3F25EE1075DA85B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0b:cf:16:4c:02:f5:1c:12:b8:50:8d:7b:bc: 48:13:41:74:f3:ad:47:60:05:ff:b6:9e:bd:a0:50: 66:37:1e:21:e3:98:43:03:e7:34:49:2c:c5:12:46: cf:21:fb:12:d1:90:13:20:8f:ec:ba:f5:61:68:da: 98:92:fa:d8:69:1b:87:54:8c:2c:84:6a:10:59:52: 6d:86:40:db:b9:85:08:6e:a4:c3:0c:4b:7c:8b:c2: a3:3c:4c:cf:03:94:55:d0:7f:58:60:6c:96:b1:e9: 26:47:9b:a3:44:9e:de:db:61:d3:1b:c4:74:e5:45: 4c:aa:28:4f:80:4a:3a:99:df:05:e3:9d:75:82:76: dd:36:f8:e4:98:44:d0:da:9d:de:4d:ed:16:b6:be: e7:fa:30:af:77:f6:74:01:8f:37:7d:df:20:33:f2: 5f:41:9f:ea:92:9b:69:b7:6a:7f:4d:9e:f6:c9:61: ba:a3:3a:69:56:d2:b6:1f:d0:62:40:1f:7c:a4:e2: 3e:41:ad:21:4d:64:4b:54:1c:d3:cf:12:13:5b:eb: aa:0f:6f:d0:e3:01:dc:57:ed:e5:b0:fd:47:cb:a7: 9c:54:e9:7d:9c:59:a5:db:1f:c9:83:6c:a0:40:b7: 50:33:1c:e9:e9:e9:72:8c:b7:09:34:9c:72:1a:16: e0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:53:FA:DB:36:05:1B:67:DE:9F:B9:15:A3:F2:5E:E1:07:5D:A8:5B X509v3 Authority Key Identifier: keyid:14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:d3:b3:9c:70:d9:e9:31:45:a6:01:a3:06:64:26:43:01:ff: 27:2c:1a:02:c7:e6:8a:93:9b:7e:4d:9a:33:e4:4e:f7:63:fd: 1a:2b:54:5a:d8:9e:79:1a:a3:e6:76:b7:66:23:75:3f:aa:9d: 36:da:37:cb:7a:04:7a:fe:0e:5f:9b:79:c4:76:a1:ce:fd:bf: d8:0d:5c:d1:1f:a0:0a:4f:51:00:3b:a9:2b:b3:14:38:9c:ae: 60:69:a5:b5:4a:bc:16:e8:68:55:56:3e:4a:66:cd:5d:dd:52: ae:f6:84:5f:a3:95:3d:6d:1a:74:72:ef:63:fa:4f:ce:c0:fb: 75:50:68:65:93:b7:c4:2c:61:7c:9a:f2:f7:5b:40:a9:7a:d3: 6c:cc:88:09:a5:1f:1e:9f:0f:70:bd:e2:5a:dc:38:f6:86:1a: bf:19:6b:04:27:54:df:22:d0:0d:f4:df:7b:4c:49:cc:c5:ca: 41:96:3f:f3:e2:86:a7:9b:c2:72:a4:dc:81:6d:4e:24:4a:30: 68:c5:b7:ee:57:81:6f:3e:df:57:da:a7:54:d5:54:b4:e8:35: 9d:39:4a:f6:f1:22:b8:89:88:94:68:e1:fd:ae:71:25:82:22: ab:9e:f0:da:6c:6c:2a:90:44:c7:fd:35:43:99:23:a0:cd:a0: bb:f0:da:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSyPQpfNO9bFzcLodEf6RXg16wXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZG QzY3NDJGMzAeFw0yNTA0MjkwMzQ2NDJaFw0yNTA1MDIxMTIyNDJaMDMxMTAvBgNV BAMTKEM2NTNGQURCMzYwNTFCNjdERTlGQjkxNUEzRjI1RUUxMDc1REE4NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdC88WTAL1HBK4UI17vEgTQXTz rUdgBf+2nr2gUGY3HiHjmEMD5zRJLMUSRs8h+xLRkBMgj+y69WFo2piS+thpG4dU jCyEahBZUm2GQNu5hQhupMMMS3yLwqM8TM8DlFXQf1hgbJax6SZHm6NEnt7bYdMb xHTlRUyqKE+ASjqZ3wXjnXWCdt02+OSYRNDand5N7Ra2vuf6MK939nQBjzd93yAz 8l9Bn+qSm2m3an9NnvbJYbqjOmlW0rYf0GJAH3yk4j5BrSFNZEtUHNPPEhNb66oP b9DjAdxX7eWw/UfLp5xU6X2cWaXbH8mDbKBAt1AzHOnp6XKMtwk0nHIaFuDnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxlP62zYFG2fen7kVo/Je4QddqFswHwYDVR0j BBgwFoAUFHLd87hUaosgFzORSvtwNvxnQvMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTFhNzQ2ZS01M2UzLTRjMjMtYjllNS1mNjRmM2VmM2QxMzYvMC8xNDcyRERGM0I4 NTQ2QThCMjAxNzMzOTE0QUZCNzAzNkZDNjc0MkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZGQzY3 NDJGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTExYTc0NmUtNTNlMy00YzIzLWI5 ZTUtZjY0ZjNlZjNkMTM2LzAvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcw MzZGQzY3NDJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjTs5xw2ekxRaYBowZkJkMB/ycsGgLH5oqT m35NmjPkTvdj/RorVFrYnnkao+Z2t2YjdT+qnTbaN8t6BHr+Dl+becR2oc79v9gN XNEfoApPUQA7qSuzFDicrmBppbVKvBboaFVWPkpmzV3dUq72hF+jlT1tGnRy72P6 T87A+3VQaGWTt8QsYXya8vdbQKl602zMiAmlHx6fD3C94lrcOPaGGr8ZawQnVN8i 0A3033tMSczFykGWP/PihqebwnKk3IFtTiRKMGjFt+5XgW8+31fap1TVVLToNZ05 SvbxIriJiJRo4f2ucSWCIque8NpsbCqQRMf9NUOZI6DNoLvw2oM= -----END CERTIFICATE-----Generated at Wed Apr 30 05:25:08 2025 by rpki-client