$ rpki-client -vvf repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft File: A3969B26389933D7D21F3A8D757CB9C5687740E4.mft (raw, json) Hash identifier: 1D5qRcbifGIPDVIcMA3mCSkym2Bg/J+XoP5GxT+zsOE= Subject key identifier: EA:15:06:76:24:0A:01:AA:4E:17:FD:F4:F7:AB:49:6D:D4:12:55:31 Authority key identifier: A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 Certificate issuer: /CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Certificate serial: 3A28D8F0A45CBB55F9BDE9E2484A2AFFBD4E2808 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft Manifest number: 01DA Signing time: Mon 28 Apr 2025 05:40:03 +0000 Manifest this update: Mon 28 Apr 2025 05:35:03 +0000 Manifest next update: Thu 01 May 2025 12:41:03 +0000 Files and hashes: 1: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: jiRuydxgLg1OP/02jmqu+Ot6iTkSHXNNv7t3+8sDOac=) 2: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: lJH7Gw7GH1VXtUyFr/985P0lmVk8EfI/dJP3CK6rihI=) 3: A3969B26389933D7D21F3A8D757CB9C5687740E4.crl (hash: oNIx65EeqcIWoC1+zKENM/rIwxKVCev7aw/AwVNbFUM=) 4: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: wVefZUkFDr2RBqD4UPWhwrEjzDTX8ZVDe5YAYTdiEdo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 12:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:28:d8:f0:a4:5c:bb:55:f9:bd:e9:e2:48:4a:2a:ff:bd:4e:28:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Validity Not Before: Apr 28 05:35:03 2025 GMT Not After : May 1 12:41:03 2025 GMT Subject: CN=EA150676240A01AA4E17FDF4F7AB496DD4125531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e1:37:e8:04:0f:4f:76:44:c7:c1:0a:45:5b: fc:0b:9e:b5:84:e0:6f:9e:0b:7f:10:2c:52:4b:5d: 1f:fc:e7:8c:56:0b:b9:a8:7a:3b:bb:dc:e1:87:e7: 6d:7c:b2:c9:20:3f:b9:eb:3c:ab:80:ad:a6:ef:a2: 2f:1a:2b:5b:0b:11:50:5c:30:0c:ce:9c:d8:9c:cf: 7a:d7:6d:3e:03:61:e9:9f:8e:88:57:27:60:c2:76: c8:67:1b:40:28:93:d8:79:4c:c8:ec:b8:f4:b8:31: c0:ec:28:33:cb:90:4a:0a:22:05:d6:59:c2:16:c9: 58:62:e1:de:b0:23:ac:07:7b:b9:0c:b9:4f:be:4d: bd:7d:37:d2:d4:86:52:60:9d:52:d8:fe:ad:6f:7c: 16:6f:b8:21:2e:f5:cd:88:bd:41:b8:7c:d8:80:b9: 34:3d:6b:2c:13:ef:97:dd:27:7b:ae:37:60:86:e4: f5:2c:37:3b:de:40:86:f7:77:de:3f:6d:07:79:56: be:46:8d:e2:49:1d:26:31:9c:b6:82:6d:87:1c:5f: 45:66:ea:57:62:37:3d:78:39:8e:b4:2a:6e:ed:4a: ab:fc:7c:9a:63:69:55:d0:05:58:db:56:fa:c6:1e: dd:7f:c6:1b:bd:2f:0f:c0:4a:46:e1:86:f9:89:06: 54:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:15:06:76:24:0A:01:AA:4E:17:FD:F4:F7:AB:49:6D:D4:12:55:31 X509v3 Authority Key Identifier: keyid:A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:5d:a4:76:6f:6b:9b:bd:97:4b:72:4d:3c:5e:0b:a6:31:52: 9a:3a:0d:9f:b7:a5:ac:91:dc:2a:3d:34:13:0d:27:20:b9:0c: 4f:84:31:42:c6:f0:eb:be:a3:c1:be:00:33:1b:6e:c1:ef:ad: 93:cf:5b:d4:a4:0f:09:09:54:d3:64:24:77:4b:a7:eb:63:98: e3:01:94:63:0e:0e:87:f0:86:3a:53:2b:38:34:2d:cf:89:35: f7:2d:f8:84:b1:01:38:21:49:11:08:e6:a1:b7:d7:98:d9:38: a8:a1:c1:60:47:e7:13:3b:0b:2d:6b:96:ef:6c:ff:11:13:51: 30:b1:cb:17:25:eb:5e:f9:4e:be:28:c8:1f:a8:9d:8d:b3:df: d6:23:ee:0c:5c:8f:e3:5e:eb:1e:05:da:c3:82:33:7e:7d:54: a4:3e:42:a4:d2:77:e1:2f:1e:4c:1c:fe:87:7f:fd:9c:41:de: 4b:4d:74:64:6e:a5:1a:41:90:a3:0a:bc:fd:46:02:d6:bc:46: 53:21:49:2e:d2:66:4c:ae:37:25:ee:34:a9:5e:08:79:f9:90: d7:06:54:67:b6:c5:bc:6f:25:2b:f3:1a:99:4d:ae:39:09:80: 49:f0:54:18:7e:1f:c4:d8:bf:77:bd:f6:c1:98:c8:5e:3f:f2: a3:d0:42:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOijY8KRcu1X5veniSEoq/71OKAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2 ODc3NDBFNDAeFw0yNTA0MjgwNTM1MDNaFw0yNTA1MDExMjQxMDNaMDMxMTAvBgNV BAMTKEVBMTUwNjc2MjQwQTAxQUE0RTE3RkRGNEY3QUI0OTZERDQxMjU1MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy4TfoBA9PdkTHwQpFW/wLnrWE 4G+eC38QLFJLXR/854xWC7moeju73OGH5218sskgP7nrPKuArabvoi8aK1sLEVBc MAzOnNicz3rXbT4DYemfjohXJ2DCdshnG0Aok9h5TMjsuPS4McDsKDPLkEoKIgXW WcIWyVhi4d6wI6wHe7kMuU++Tb19N9LUhlJgnVLY/q1vfBZvuCEu9c2IvUG4fNiA uTQ9aywT75fdJ3uuN2CG5PUsNzveQIb3d94/bQd5Vr5GjeJJHSYxnLaCbYccX0Vm 6ldiNz14OY60Km7tSqv8fJpjaVXQBVjbVvrGHt1/xhu9Lw/ASkbhhvmJBlRHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6hUGdiQKAapOF/3096tJbdQSVTEwHwYDVR0j BBgwFoAUo5abJjiZM9fSHzqNdXy5xWh3QOQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDMzMzZmOC1lNTQ2LTQ2MmMtODQxMC1iNzczMmI2YzgwMTUvMC9BMzk2OUIyNjM4 OTkzM0Q3RDIxRjNBOEQ3NTdDQjlDNTY4Nzc0MEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2ODc3 NDBFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzMzM2ZjgtZTU0Ni00NjJjLTg0 MTAtYjc3MzJiNmM4MDE1LzAvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5 QzU2ODc3NDBFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFdpHZva5u9l0tyTTxeC6YxUpo6DZ+3payR 3Co9NBMNJyC5DE+EMULG8Ou+o8G+ADMbbsHvrZPPW9SkDwkJVNNkJHdLp+tjmOMB lGMODofwhjpTKzg0Lc+JNfct+ISxATghSREI5qG315jZOKihwWBH5xM7Cy1rlu9s /xETUTCxyxcl6175Tr4oyB+onY2z39Yj7gxcj+Ne6x4F2sOCM359VKQ+QqTSd+Ev Hkwc/od//ZxB3ktNdGRupRpBkKMKvP1GAta8RlMhSS7SZkyuNyXuNKleCHn5kNcG VGe2xbxvJSvzGplNrjkJgEnwVBh+H8TYv3e99sGYyF4/8qPQQoI= -----END CERTIFICATE-----Generated at Wed Apr 30 08:18:26 2025 by rpki-client