$ rpki-client -vvf repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft File: 63003FFDD063104898793061BDB2DB8D0788745D.mft (raw, json) Hash identifier: sAwfxbJbUKkJiRznb19Sk0Y9CXVY3ag8E3eFRnN60BY= Subject key identifier: 9C:5D:3B:BD:CC:CC:31:15:9E:47:CE:2A:97:15:90:7A:00:9E:10:71 Authority key identifier: 63:00:3F:FD:D0:63:10:48:98:79:30:61:BD:B2:DB:8D:07:88:74:5D Certificate issuer: /CN=63003FFDD063104898793061BDB2DB8D0788745D Certificate serial: 11CF4AA4A5DD2DC364636392DCF6ED764E46F3B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft Manifest number: 0492 Signing time: Sun 27 Apr 2025 19:41:44 +0000 Manifest this update: Sun 27 Apr 2025 19:36:44 +0000 Manifest next update: Wed 30 Apr 2025 21:47:44 +0000 Files and hashes: 1: 3230322e3137332e31362e302f32312d3234203d3e203234323130.roa (hash: bE661+O1P4yXvU0DhZoWEyQ/dU6h4QpYxixmc8KzOac=) 2: 3138302e3135302e3233322e302f32312d3234203d3e203234323130.roa (hash: Abkbz+JB96AsAJeWYsjGUVFZ5UI+53UJYjdT2RBIo/8=) 3: 63003FFDD063104898793061BDB2DB8D0788745D.crl (hash: r5wyf7H4a/g7lV64c6fQiEaK+YGEPr4EFwGS+Sb0BLA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.crl rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 21:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:cf:4a:a4:a5:dd:2d:c3:64:63:63:92:dc:f6:ed:76:4e:46:f3:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63003FFDD063104898793061BDB2DB8D0788745D Validity Not Before: Apr 27 19:36:44 2025 GMT Not After : Apr 30 21:47:44 2025 GMT Subject: CN=9C5D3BBDCCCC31159E47CE2A9715907A009E1071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:aa:81:04:36:cc:5c:be:88:13:99:23:37:01: fe:06:5b:8c:28:22:e2:64:a0:c1:25:e3:9c:ca:5e: 13:51:3e:96:93:40:05:26:4a:14:71:90:26:bf:c2: cd:d3:55:15:51:e6:c2:6d:40:4a:8d:a3:85:fc:78: bc:61:c6:48:27:30:ba:f0:d6:a4:6f:1c:31:6b:4b: 0f:0f:73:5f:45:b8:2f:6b:06:de:eb:79:35:f4:5b: ef:dc:02:ff:97:ab:1f:9d:74:03:15:3a:c0:27:15: 31:d5:82:e4:48:07:00:33:d7:f2:02:22:99:b3:74: 10:c3:d6:28:d7:29:72:57:e3:47:a4:42:1a:2b:a8: 5b:7d:f8:86:00:54:00:c8:5b:31:22:30:80:98:c3: 2c:cc:c4:97:d8:77:27:93:0c:16:b2:47:60:06:ba: 31:a9:16:cd:06:98:26:ce:0d:e2:6c:c2:f0:d8:4c: ca:6c:9b:f6:63:9f:0c:e3:ce:bc:f1:85:15:70:1e: 43:10:0f:29:37:7c:58:47:79:12:3a:b7:00:59:a2: 75:6c:e6:a0:75:87:52:6d:a8:7f:74:85:11:3b:bc: 1d:2b:8d:92:ce:58:b8:3d:89:fa:ef:a1:b7:0a:44: 30:50:e3:07:23:f3:70:90:87:ce:20:56:6b:5d:2a: 76:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5D:3B:BD:CC:CC:31:15:9E:47:CE:2A:97:15:90:7A:00:9E:10:71 X509v3 Authority Key Identifier: keyid:63:00:3F:FD:D0:63:10:48:98:79:30:61:BD:B2:DB:8D:07:88:74:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:be:17:cb:9b:ae:5a:72:d6:99:39:f9:9f:07:71:63:21:18: 8f:b4:4f:9c:6d:96:21:b4:77:d8:01:f6:ce:fd:0e:fa:ab:38: 93:3e:05:3d:b1:1a:9a:45:0d:8c:2f:f6:92:d5:70:67:96:a7: 11:c0:4e:b0:80:05:84:9b:d4:af:93:75:63:80:33:f4:68:de: 5b:3f:4f:d5:9e:1b:18:62:6b:3d:14:2e:c7:db:1e:01:af:49: 5b:9b:36:43:c2:67:5b:78:e8:10:d8:4f:eb:7c:94:5a:f2:9d: 5f:7f:a2:a3:20:75:94:f8:ee:23:05:25:84:ef:ca:33:b3:a4: 86:90:02:7e:de:6f:8d:91:f5:c6:40:4b:22:f6:0a:f9:7d:e2: 7b:6a:39:ea:8a:a0:b3:e2:31:7c:db:36:f1:92:2c:86:81:03: d3:43:01:a2:4d:25:e3:50:71:ae:46:37:87:01:d4:84:dc:f8: 77:8c:d4:29:7c:28:63:39:f0:7c:c8:ff:e6:b7:f5:22:b7:21: 36:cd:69:e0:b1:b7:e6:23:83:b7:98:e6:f9:54:3a:b9:cf:a1: 5f:5b:59:40:31:d4:dd:f7:0c:15:f3:68:4d:26:fc:b7:9c:3d: 31:36:ff:eb:9c:38:7d:02:45:83:0c:04:a0:af:37:e6:7e:26: 18:cf:5b:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEc9KpKXdLcNkY2OS3Pbtdk5G87IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMwMDNGRkREMDYzMTA0ODk4NzkzMDYxQkRCMkRCOEQw Nzg4NzQ1RDAeFw0yNTA0MjcxOTM2NDRaFw0yNTA0MzAyMTQ3NDRaMDMxMTAvBgNV BAMTKDlDNUQzQkJEQ0NDQzMxMTU5RTQ3Q0UyQTk3MTU5MDdBMDA5RTEwNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoqoEENsxcvogTmSM3Af4GW4wo IuJkoMEl45zKXhNRPpaTQAUmShRxkCa/ws3TVRVR5sJtQEqNo4X8eLxhxkgnMLrw 1qRvHDFrSw8Pc19FuC9rBt7reTX0W+/cAv+Xqx+ddAMVOsAnFTHVguRIBwAz1/IC IpmzdBDD1ijXKXJX40ekQhorqFt9+IYAVADIWzEiMICYwyzMxJfYdyeTDBayR2AG ujGpFs0GmCbODeJswvDYTMpsm/ZjnwzjzrzxhRVwHkMQDyk3fFhHeRI6twBZonVs 5qB1h1JtqH90hRE7vB0rjZLOWLg9ifrvobcKRDBQ4wcj83CQh84gVmtdKnbhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnF07vczMMRWeR84qlxWQegCeEHEwHwYDVR0j BBgwFoAUYwA//dBjEEiYeTBhvbLbjQeIdF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDE3YjgyOC0xN2ZhLTQ4YTItYTExMy0xNDlmOTQ2N2EzMjgvMC82MzAwM0ZGREQw NjMxMDQ4OTg3OTMwNjFCREIyREI4RDA3ODg3NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjMwMDNGRkREMDYzMTA0ODk4NzkzMDYxQkRCMkRCOEQwNzg4 NzQ1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTAxN2I4MjgtMTdmYS00OGEyLWEx MTMtMTQ5Zjk0NjdhMzI4LzAvNjMwMDNGRkREMDYzMTA0ODk4NzkzMDYxQkRCMkRC OEQwNzg4NzQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKi+F8ubrlpy1pk5+Z8HcWMhGI+0T5xtliG0 d9gB9s79DvqrOJM+BT2xGppFDYwv9pLVcGeWpxHATrCABYSb1K+TdWOAM/Ro3ls/ T9WeGxhiaz0ULsfbHgGvSVubNkPCZ1t46BDYT+t8lFrynV9/oqMgdZT47iMFJYTv yjOzpIaQAn7eb42R9cZASyL2Cvl94ntqOeqKoLPiMXzbNvGSLIaBA9NDAaJNJeNQ ca5GN4cB1ITc+HeM1Cl8KGM58HzI/+a39SK3ITbNaeCxt+Yjg7eY5vlUOrnPoV9b WUAx1N33DBXzaE0m/LecPTE2/+ucOH0CRYMMBKCvN+Z+JhjPW54= -----END CERTIFICATE-----Generated at Tue Apr 29 09:17:43 2025 by rpki-client