$ rpki-client -vvf repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft File: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft (raw, json) Hash identifier: mqb9w8SOZeFTo0EZtERcW8Axzymg/nDntYUMP1+Z9p0= Subject key identifier: 4C:8D:53:EC:E8:84:BF:D1:15:4C:7D:EC:96:6E:D5:5F:43:0B:97:16 Authority key identifier: B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C Certificate issuer: /CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Certificate serial: 1D3AFB6AC1BBD5C0DFD7E6ED8113FE60E0388A86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft Manifest number: 0341 Signing time: Mon 28 Apr 2025 10:11:56 +0000 Manifest this update: Mon 28 Apr 2025 10:06:56 +0000 Manifest next update: Thu 01 May 2025 17:52:56 +0000 Files and hashes: 1: 3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa (hash: 0/uMdmxlRYv0BxLj1kLNukE06046JVFdcxHugW59xeM=) 2: 3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa (hash: neE3zrlksOzJV8H0qe9TgTIuCvuChMBCqnrQKxlvrQU=) 3: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl (hash: 4DwzPUaZERTidOnt0sjhcdx3lhso86cFFdF6oCirorA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:3a:fb:6a:c1:bb:d5:c0:df:d7:e6:ed:81:13:fe:60:e0:38:8a:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Validity Not Before: Apr 28 10:06:56 2025 GMT Not After : May 1 17:52:56 2025 GMT Subject: CN=4C8D53ECE884BFD1154C7DEC966ED55F430B9716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bd:81:96:99:3e:2b:7c:cc:26:b6:e5:73:2b: 72:cc:b9:ce:08:d7:8c:f2:11:ad:83:2a:09:a5:79: 76:2b:5b:3c:63:03:73:af:f3:e5:bf:86:4e:59:71: b6:84:a8:67:12:96:54:c7:55:9e:3b:6d:71:55:c9: 47:d1:31:be:e5:e3:9a:cd:70:94:8b:f2:d0:ee:f8: fd:f6:3d:54:06:15:3b:0b:0d:0f:6d:11:81:bd:29: 46:10:9d:52:e6:68:91:d7:e8:4d:77:af:eb:34:aa: 44:02:10:44:d3:c9:87:5a:b0:4b:a0:51:e6:7b:ea: d6:71:eb:94:cd:d9:cc:27:06:55:b6:75:1a:51:47: 29:01:cb:5e:89:c7:fb:ce:7a:c5:fe:f8:26:29:5b: 4c:45:71:24:78:9c:1c:ca:f6:31:99:fb:af:06:ea: 30:12:0f:d1:03:f7:91:94:13:e0:aa:b3:6f:ce:88: 51:e9:71:e5:b2:ce:c6:31:2c:47:58:ad:b4:9d:85: 73:56:29:86:7e:5a:3e:52:47:14:24:60:d5:5c:2c: 5c:db:8a:c3:47:15:65:77:d0:d0:ee:72:62:cf:d9: bc:8d:13:1c:3c:07:df:73:6b:ef:b2:fb:e8:31:bd: e7:f1:20:46:69:3a:92:96:34:55:c4:da:33:6f:3c: a0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8D:53:EC:E8:84:BF:D1:15:4C:7D:EC:96:6E:D5:5F:43:0B:97:16 X509v3 Authority Key Identifier: keyid:B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:7d:f3:f4:8b:6f:27:26:54:c5:0d:e6:20:4f:95:43:cd:be: 78:7d:63:fb:66:62:df:44:c6:a9:39:ef:5b:65:44:9e:d8:4a: fc:f1:7d:2e:8d:65:85:45:f3:a1:f9:80:ed:c0:19:f6:82:42: 69:d8:d9:2b:46:3a:0a:83:af:44:ac:e1:16:e5:1a:50:e2:c6: 96:26:92:07:7e:64:44:89:65:3d:d5:44:75:8c:a2:02:41:76: ac:b5:f9:6b:97:fd:40:08:f2:f8:b6:3a:b3:b5:ad:47:9b:ac: 9e:6f:f6:a7:3d:d1:79:1d:80:40:ea:f4:0e:07:32:2b:85:88: 9d:9f:33:bd:05:c1:14:5c:44:30:99:7d:29:a8:0d:36:85:49: a9:b8:0c:8e:05:ee:12:7c:1f:16:52:fa:38:4e:56:53:9d:72: b8:bc:a8:2d:f6:04:b3:9b:45:e8:a3:75:ce:32:74:fb:76:1c: 44:c6:9e:6c:b7:48:48:c9:88:6f:a8:f3:f8:c4:be:ea:b4:cc: bd:07:22:33:db:41:ea:69:9c:5b:7f:54:55:c8:ad:90:47:76: 9f:46:f5:dc:09:23:8b:d9:77:66:9c:db:34:19:fd:11:13:fc: a9:cb:5b:34:d7:04:c2:58:dd:1d:fe:74:46:6c:fd:83:3d:25: 55:07:d6:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHTr7asG71cDf1+btgRP+YOA4ioYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZD RUZENkY4QzAeFw0yNTA0MjgxMDA2NTZaFw0yNTA1MDExNzUyNTZaMDMxMTAvBgNV BAMTKDRDOEQ1M0VDRTg4NEJGRDExNTRDN0RFQzk2NkVENTVGNDMwQjk3MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOvYGWmT4rfMwmtuVzK3LMuc4I 14zyEa2DKgmleXYrWzxjA3Ov8+W/hk5ZcbaEqGcSllTHVZ47bXFVyUfRMb7l45rN cJSL8tDu+P32PVQGFTsLDQ9tEYG9KUYQnVLmaJHX6E13r+s0qkQCEETTyYdasEug UeZ76tZx65TN2cwnBlW2dRpRRykBy16Jx/vOesX++CYpW0xFcSR4nBzK9jGZ+68G 6jASD9ED95GUE+Cqs2/OiFHpceWyzsYxLEdYrbSdhXNWKYZ+Wj5SRxQkYNVcLFzb isNHFWV30NDucmLP2byNExw8B99za++y++gxvefxIEZpOpKWNFXE2jNvPKAhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTI1T7OiEv9EVTH3slm7VX0MLlxYwHwYDVR0j BBgwFoAUuXLwc7ivJrhTPpeq+67Bf879b4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDE2MTljYi1jMDFjLTQ2MTQtODYzZS1jZTI4OGQ3YmE3NjUvMC9COTcyRjA3M0I4 QUYyNkI4NTMzRTk3QUFGQkFFQzE3RkNFRkQ2RjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZDRUZE NkY4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQxNjE5Y2ItYzAxYy00NjE0LTg2 M2UtY2UyODhkN2JhNzY1LzAvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMx N0ZDRUZENkY4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFt98/SLbycmVMUN5iBPlUPNvnh9Y/tmYt9E xqk571tlRJ7YSvzxfS6NZYVF86H5gO3AGfaCQmnY2StGOgqDr0Ss4RblGlDixpYm kgd+ZESJZT3VRHWMogJBdqy1+WuX/UAI8vi2OrO1rUebrJ5v9qc90XkdgEDq9A4H MiuFiJ2fM70FwRRcRDCZfSmoDTaFSam4DI4F7hJ8HxZS+jhOVlOdcri8qC32BLOb Reijdc4ydPt2HETGnmy3SEjJiG+o8/jEvuq0zL0HIjPbQeppnFt/VFXIrZBHdp9G 9dwJI4vZd2ac2zQZ/RET/KnLWzTXBMJY3R3+dEZs/YM9JVUH1u0= -----END CERTIFICATE-----Generated at Tue Apr 29 08:12:56 2025 by rpki-client