$ rpki-client -vvf repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft File: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft (raw, json) Hash identifier: JFc46mV3uHE0GMj5ehyQUWNp3ob1LUELmJlawJWGOhk= Subject key identifier: 4C:12:C9:A0:28:88:FE:B0:A8:6E:2A:FE:30:2C:62:2E:2D:0F:1F:91 Authority key identifier: 0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E Certificate issuer: /CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E Certificate serial: 37AC518B54379899E545AA0D55EE2C4AB7539557 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft Manifest number: 0235 Signing time: Sun 27 Apr 2025 02:51:24 +0000 Manifest this update: Sun 27 Apr 2025 02:46:24 +0000 Manifest next update: Wed 30 Apr 2025 07:58:24 +0000 Files and hashes: 1: 3130332e3137372e3235352e302f32342d3234203d3e20313439333238.roa (hash: YWX6JkhyJIKKQ9YUHXcRrPZ6Zd5X2q+5JRi/csbFgGQ=) 2: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl (hash: T9EnUPGp3Mypl+uXdp1o5o6YNY2jkN4ntyAAYToqyuc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 07:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ac:51:8b:54:37:98:99:e5:45:aa:0d:55:ee:2c:4a:b7:53:95:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E Validity Not Before: Apr 27 02:46:24 2025 GMT Not After : Apr 30 07:58:24 2025 GMT Subject: CN=4C12C9A02888FEB0A86E2AFE302C622E2D0F1F91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:18:92:c5:f3:b1:13:74:da:d0:50:26:19:36: 46:c2:19:02:64:92:85:8c:f6:b3:f3:01:ef:20:39: 28:da:a6:9a:73:e7:58:29:04:8e:0f:89:34:38:85: 96:f5:d2:2e:87:60:6e:a0:97:c0:5e:97:7b:0c:90: ed:99:c1:63:41:b2:2c:6c:7b:62:37:23:69:c1:a9: 8e:1e:f4:6f:be:01:6f:53:41:61:a7:59:a6:c9:d9: d4:2d:54:51:92:be:6b:b4:d9:e1:0a:28:b9:3a:c1: ef:e4:9e:46:dd:5c:6a:95:c2:71:aa:04:e6:6f:9c: 1b:bb:12:8e:e0:1f:98:08:3e:f5:e4:da:04:fa:e2: 4f:7d:f1:c3:7e:46:f1:f6:15:a1:b0:f0:d8:f7:da: 52:ce:39:10:0e:04:29:16:cb:8c:4a:f4:5b:a1:68: f7:93:b2:b3:93:85:1f:79:a2:2d:82:1c:69:e6:55: 0b:2c:b4:35:1e:95:d5:53:a8:44:15:84:3c:fc:d6: df:bd:df:65:a9:4d:88:4c:2d:36:8d:36:79:26:32: f7:58:8f:38:14:62:20:1b:9e:d8:c5:ea:11:bc:81: fc:6b:0f:17:ff:74:a2:fd:86:95:81:c2:9f:b8:13: e5:f4:fd:b5:5e:c7:3d:bc:4f:d6:50:ec:49:65:3a: 92:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:12:C9:A0:28:88:FE:B0:A8:6E:2A:FE:30:2C:62:2E:2D:0F:1F:91 X509v3 Authority Key Identifier: keyid:0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d4:36:75:91:ea:78:52:29:dd:3b:85:4d:8d:37:7c:a3:8a: 05:ff:91:57:36:7e:21:fa:90:12:a2:ad:62:d7:19:69:a9:7c: ea:b1:09:79:01:4d:af:d4:95:e6:1c:20:5f:b6:b8:28:62:5e: 3a:4a:90:f4:8c:18:11:54:0c:a8:e6:e8:99:94:bd:5e:a3:71: 16:4b:f1:58:d6:51:b9:d3:38:86:c4:7b:46:31:79:7d:43:e9: 3e:a1:85:19:cc:18:e2:d7:65:a0:e0:81:54:ee:51:54:34:42: ff:3d:aa:9a:af:84:93:b7:be:2c:b0:37:55:69:c6:7b:d8:92: 9b:b9:7d:0b:3b:40:44:f6:70:64:aa:e4:4a:62:dd:64:04:c2: b8:73:db:dd:ec:bb:13:ab:4b:65:f2:96:3a:f0:6f:57:6d:e7: c4:11:cb:06:42:da:2f:c0:00:9a:53:63:31:a1:3f:de:c1:7e: 02:21:2d:a0:4d:2a:8b:6f:1c:09:c5:4b:09:aa:c4:91:4a:92: 3c:86:61:fe:61:77:b9:d5:1d:dd:42:88:1a:d8:8f:c7:7a:35: 6e:16:54:7f:e5:76:60:eb:50:fa:81:a7:81:2a:62:a0:a5:46: c0:2d:3a:84:23:d8:51:05:64:95:53:4a:05:84:54:eb:45:f5: a6:c5:f0:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN6xRi1Q3mJnlRaoNVe4sSrdTlVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQy ODAwRjkzRTAeFw0yNTA0MjcwMjQ2MjRaFw0yNTA0MzAwNzU4MjRaMDMxMTAvBgNV BAMTKDRDMTJDOUEwMjg4OEZFQjBBODZFMkFGRTMwMkM2MjJFMkQwRjFGOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5GJLF87ETdNrQUCYZNkbCGQJk koWM9rPzAe8gOSjapppz51gpBI4PiTQ4hZb10i6HYG6gl8Bel3sMkO2ZwWNBsixs e2I3I2nBqY4e9G++AW9TQWGnWabJ2dQtVFGSvmu02eEKKLk6we/knkbdXGqVwnGq BOZvnBu7Eo7gH5gIPvXk2gT64k998cN+RvH2FaGw8Nj32lLOORAOBCkWy4xK9Fuh aPeTsrOThR95oi2CHGnmVQsstDUeldVTqEQVhDz81t+932WpTYhMLTaNNnkmMvdY jzgUYiAbntjF6hG8gfxrDxf/dKL9hpWBwp+4E+X0/bVexz28T9ZQ7EllOpJvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTBLJoCiI/rCobir+MCxiLi0PH5EwHwYDVR0j BBgwFoAUCodKTLX4pG30UBtj+lSH9CgA+T4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODAzNWIxMi02Y2EzLTRmZDItYjliMy0yNjBkNTczZTU3YzIvMC8wQTg3NEE0Q0I1 RjhBNDZERjQ1MDFCNjNGQTU0ODdGNDI4MDBGOTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQyODAw RjkzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTgwMzViMTItNmNhMy00ZmQyLWI5 YjMtMjYwZDU3M2U1N2MyLzAvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3 RjQyODAwRjkzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvUNnWR6nhSKd07hU2NN3yjigX/kVc2fiH6 kBKirWLXGWmpfOqxCXkBTa/UleYcIF+2uChiXjpKkPSMGBFUDKjm6JmUvV6jcRZL 8VjWUbnTOIbEe0YxeX1D6T6hhRnMGOLXZaDggVTuUVQ0Qv89qpqvhJO3viywN1Vp xnvYkpu5fQs7QET2cGSq5Epi3WQEwrhz293suxOrS2Xyljrwb1dt58QRywZC2i/A AJpTYzGhP97BfgIhLaBNKotvHAnFSwmqxJFKkjyGYf5hd7nVHd1CiBrYj8d6NW4W VH/ldmDrUPqBp4EqYqClRsAtOoQj2FEFZJVTSgWEVOtF9abF8Bo= -----END CERTIFICATE-----Generated at Tue Apr 29 07:50:07 2025 by rpki-client