$ rpki-client -vvf repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft File: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft (raw, json) Hash identifier: U/7fjXUxSwDX3rrvr2hh/d5btSRwSvwdcplozPzcxhg= Subject key identifier: CB:4B:4E:87:16:AF:B5:09:55:EA:77:13:D2:A1:24:38:FF:1C:F1:F7 Authority key identifier: A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 Certificate issuer: /CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Certificate serial: 04D949218B264259878C25E08928E71E54B0A2F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft Manifest number: 9B Signing time: Mon 28 Apr 2025 13:52:12 +0000 Manifest this update: Mon 28 Apr 2025 13:47:12 +0000 Manifest next update: Thu 01 May 2025 21:41:12 +0000 Files and hashes: 1: 3136302e32302e3132352e302f32342d3234203d3e20313532373830.roa (hash: 3O/OW1Umefwg6OchQ44jpt1RJGa/f0UGdAnIHZM+ihI=) 2: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl (hash: S8fjJHroJV/GuZwsiBGktyWFqZcxMPOoAk9RdQenRi8=) 3: 3136302e32302e3132342e302f32332d3233203d3e20313532373830.roa (hash: lc89lFRvMQIz7uTqrlcEMfYnshZrWUp2xbVgo2KfUEM=) 4: 3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa (hash: EvJq4OLjEBVOFbG73OwOsPdQAb4z66x1zbfCbpT8orA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 17:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:d9:49:21:8b:26:42:59:87:8c:25:e0:89:28:e7:1e:54:b0:a2:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Validity Not Before: Apr 28 13:47:12 2025 GMT Not After : May 1 21:41:12 2025 GMT Subject: CN=CB4B4E8716AFB50955EA7713D2A12438FF1CF1F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:85:84:1d:c4:db:3c:38:b0:6e:48:26:87:a8: 82:fd:d5:b5:36:99:53:a9:4d:6c:41:f5:79:5c:0e: c0:a3:20:92:e2:fc:dd:8c:c6:82:76:3a:16:4f:cc: 18:d8:c4:92:ba:f7:d1:f9:8c:ae:de:ea:25:32:d7: bf:43:dd:84:00:45:27:64:9e:25:fd:5c:6d:f6:93: 14:99:b0:21:ed:47:3f:16:6c:36:dd:1e:24:10:e7: 27:4e:a3:de:81:1d:cd:7d:32:be:15:e6:6c:90:14: 17:65:6d:c8:42:9e:ea:e0:29:c3:35:d4:c8:f0:5c: 88:1e:35:fd:6e:fe:c4:70:a8:6e:f1:b7:36:0f:c2: e5:d1:ac:dd:6d:d8:bb:ff:ca:c9:f4:b1:c5:01:18: 37:c5:1c:bd:9f:ba:30:14:03:40:15:a8:26:3f:f5: bd:c9:a1:d6:b7:34:80:e2:56:7a:b7:c3:63:61:39: 77:ea:bf:34:0f:b5:1e:e9:27:81:8a:c1:62:15:01: 14:36:1b:59:9f:86:8c:bf:d9:68:1f:5e:dc:74:b6: be:05:76:15:f0:72:d5:ca:aa:b7:06:21:92:46:03: a4:92:87:43:13:c4:95:fd:88:5d:1b:0e:53:c6:0c: 98:bc:33:24:9d:31:9a:96:81:66:20:77:e1:0e:8c: 67:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:4B:4E:87:16:AF:B5:09:55:EA:77:13:D2:A1:24:38:FF:1C:F1:F7 X509v3 Authority Key Identifier: keyid:A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:33:97:7b:b2:8c:5c:a8:a5:9c:a6:d8:0b:db:d1:e3:82:08: 51:30:e8:83:76:3d:92:bd:25:b0:d2:74:d7:d0:50:31:f2:56: 2d:ce:ad:cf:83:5c:83:9a:36:5f:af:a9:5f:a0:55:10:d5:c8: 6b:90:04:55:3e:81:6a:32:5a:b8:80:b2:4d:54:08:0e:6f:f6: 38:d7:55:31:4b:24:f4:20:46:35:81:66:7d:d5:a6:1a:12:49: f8:09:c0:94:e7:ca:62:b5:d1:ae:73:4b:02:19:06:58:7b:82: 00:16:d0:f2:fd:b7:10:15:e4:6c:0f:af:b6:26:ef:f8:00:aa: 5e:fe:c6:8d:46:e1:35:c8:e9:90:4d:cf:80:f9:1c:4e:97:80: 2f:d9:3f:5d:bb:b2:83:b4:18:ac:07:71:ea:18:64:1c:b8:e5: 3f:3b:64:72:b2:df:42:e5:8f:3b:61:d1:fd:f9:dd:7d:3f:61: 39:49:89:80:6f:03:3b:7b:f2:a5:e1:d8:07:23:40:74:6a:c8: 04:77:31:08:78:cb:85:e6:80:2e:aa:82:ce:8d:b8:53:84:4f: 4c:95:57:ee:12:73:41:4d:71:ed:87:88:a8:44:f5:a8:ae:54: 99:a3:f4:0f:15:a3:64:65:4b:71:ec:fe:01:90:04:f4:e6:0d: a7:c0:bd:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBNlJIYsmQlmHjCXgiSjnHlSwovIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRC MDgyRDgxOTAeFw0yNTA0MjgxMzQ3MTJaFw0yNTA1MDEyMTQxMTJaMDMxMTAvBgNV BAMTKENCNEI0RTg3MTZBRkI1MDk1NUVBNzcxM0QyQTEyNDM4RkYxQ0YxRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9hYQdxNs8OLBuSCaHqIL91bU2 mVOpTWxB9XlcDsCjIJLi/N2MxoJ2OhZPzBjYxJK699H5jK7e6iUy179D3YQARSdk niX9XG32kxSZsCHtRz8WbDbdHiQQ5ydOo96BHc19Mr4V5myQFBdlbchCnurgKcM1 1MjwXIgeNf1u/sRwqG7xtzYPwuXRrN1t2Lv/ysn0scUBGDfFHL2fujAUA0AVqCY/ 9b3Joda3NIDiVnq3w2NhOXfqvzQPtR7pJ4GKwWIVARQ2G1mfhoy/2WgfXtx0tr4F dhXwctXKqrcGIZJGA6SSh0MTxJX9iF0bDlPGDJi8MySdMZqWgWYgd+EOjGfzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy0tOhxavtQlV6ncT0qEkOP8c8fcwHwYDVR0j BBgwFoAUo9dHZcHxePcsPNDeC2KH9LCC2BkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzU3OTIxZC1lZTE4LTQzNWMtOGI2ZS1lYmEyMjQxYjgzYWIvMC9BM0Q3NDc2NUMx RjE3OEY3MkMzQ0QwREUwQjYyODdGNEIwODJEODE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRCMDgy RDgxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM1NzkyMWQtZWUxOC00MzVjLThi NmUtZWJhMjI0MWI4M2FiLzAvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3 RjRCMDgyRDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIzl3uyjFyopZym2Avb0eOCCFEw6IN2PZK9 JbDSdNfQUDHyVi3Orc+DXIOaNl+vqV+gVRDVyGuQBFU+gWoyWriAsk1UCA5v9jjX VTFLJPQgRjWBZn3VphoSSfgJwJTnymK10a5zSwIZBlh7ggAW0PL9txAV5GwPr7Ym 7/gAql7+xo1G4TXI6ZBNz4D5HE6XgC/ZP127soO0GKwHceoYZBy45T87ZHKy30Ll jzth0f353X0/YTlJiYBvAzt78qXh2AcjQHRqyAR3MQh4y4XmgC6qgs6NuFOET0yV V+4Sc0FNce2HiKhE9aiuVJmj9A8Vo2RlS3Hs/gGQBPTmDafAvTs= -----END CERTIFICATE-----Generated at Tue Apr 29 08:00:22 2025 by rpki-client