$ rpki-client -vvf repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft File: B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft (raw, json) Hash identifier: +t2bB990e5p3+whghwErzEsp00J/dDLQrbr6H2lavsM= Subject key identifier: 4C:3A:99:A4:77:53:14:73:FE:31:1F:C2:63:3B:41:38:E8:A8:45:3F Authority key identifier: B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA Certificate issuer: /CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Certificate serial: 1B79C4EB0428EA4FCB109EDFE1D279B22181AB24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft Manifest number: 01D7 Signing time: Sun 27 Apr 2025 10:51:07 +0000 Manifest this update: Sun 27 Apr 2025 10:46:07 +0000 Manifest next update: Wed 30 Apr 2025 15:06:07 +0000 Files and hashes: 1: 3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa (hash: fcX6dDB/6jZr5p1excLhOSLezwfpNz/DNvOt6VHyTLo=) 2: B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl (hash: F9vCtX5PP6qAkyKvnfD93bNNO82M1a58Xdim0zLH+F4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 15:06:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:79:c4:eb:04:28:ea:4f:cb:10:9e:df:e1:d2:79:b2:21:81:ab:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Validity Not Before: Apr 27 10:46:07 2025 GMT Not After : Apr 30 15:06:07 2025 GMT Subject: CN=4C3A99A477531473FE311FC2633B4138E8A8453F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5e:68:86:ae:d3:62:44:8f:82:4f:be:1f:49: 78:4a:0c:3d:3d:ce:e9:a9:84:05:b6:95:3c:ab:30: 26:30:d3:83:70:65:fe:42:0a:96:cd:02:63:55:3e: 67:91:e3:ae:da:2b:f0:2c:da:70:f4:a4:eb:47:85: 9c:27:d8:de:54:b7:04:c6:7e:1b:aa:fb:77:45:cd: 4c:ec:d1:a9:ed:ca:f5:ee:f9:9b:57:14:e4:ad:72: 13:63:69:e3:13:3b:c6:67:19:57:fc:2c:08:2c:02: 7b:84:15:98:db:cf:e6:38:bf:27:42:cd:62:72:34: c1:c8:7b:d8:74:8d:1a:2c:f2:ea:79:c1:4f:1f:bf: d0:2e:85:76:66:ce:44:ba:b6:8d:cd:2b:e3:1a:39: d9:4a:09:83:1c:4d:d7:d7:57:aa:a4:99:2c:78:67: 82:a8:82:a6:dc:3b:9c:3c:4f:f1:63:4d:b4:0e:25: ca:04:c0:81:d3:cc:51:6d:be:0d:93:eb:cf:42:05: e5:08:ea:ac:cc:15:51:4a:5a:57:0c:05:52:5d:a7: ed:ce:f1:67:ed:84:9f:2e:2e:f3:ab:82:cb:bc:f2: 91:15:47:80:34:a7:5f:3d:ec:6d:68:28:ee:d7:b2: 15:a2:cf:d2:65:62:20:7e:b2:04:2e:a4:77:01:f4: dc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3A:99:A4:77:53:14:73:FE:31:1F:C2:63:3B:41:38:E8:A8:45:3F X509v3 Authority Key Identifier: keyid:B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:11:a3:a1:fa:cf:52:6e:2d:d2:86:ad:82:1e:ff:65:0a:8d: 7d:80:aa:e9:03:dd:1f:38:7d:99:fb:c5:48:49:de:31:05:ee: ae:24:be:fc:9c:17:a9:fa:fa:85:e2:c9:b2:9a:ae:54:79:f2: 80:c4:10:ef:15:3e:03:8d:59:35:09:73:e4:77:7b:c3:a7:f1: 03:1c:62:7a:4f:1c:9f:70:da:a5:fe:40:7b:51:cb:79:74:5c: 05:1d:22:7b:a2:9d:58:61:ac:d3:e2:25:90:8f:40:10:03:1c: f5:54:61:98:7e:ab:d0:6f:c3:80:a0:12:9c:57:65:61:20:60: c8:b9:03:c5:42:51:ef:e1:fa:5b:85:b6:86:02:b7:30:5f:4d: c6:33:2b:77:c2:5f:0d:d0:0d:02:78:0b:49:10:11:10:81:54: 94:ec:72:21:02:c7:92:46:ae:e9:56:36:7f:ad:c4:46:6d:a7: 41:6a:58:a3:2d:39:e3:d0:79:80:f0:14:6d:96:d1:14:c8:62: fa:91:2a:e2:17:d8:06:b6:6b:cd:c4:9b:5e:ee:c9:84:07:47: 35:76:99:f1:6d:d1:ad:f9:2b:53:a7:77:ad:d4:84:d4:36:a1: fb:03:64:e0:0a:b2:af:07:93:94:bf:f8:cb:19:bb:81:d3:19: 5a:b6:59:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG3nE6wQo6k/LEJ7f4dJ5siGBqyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAx NTA0MTFDQTAeFw0yNTA0MjcxMDQ2MDdaFw0yNTA0MzAxNTA2MDdaMDMxMTAvBgNV BAMTKDRDM0E5OUE0Nzc1MzE0NzNGRTMxMUZDMjYzM0I0MTM4RThBODQ1M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZXmiGrtNiRI+CT74fSXhKDD09 zumphAW2lTyrMCYw04NwZf5CCpbNAmNVPmeR467aK/As2nD0pOtHhZwn2N5UtwTG fhuq+3dFzUzs0antyvXu+ZtXFOStchNjaeMTO8ZnGVf8LAgsAnuEFZjbz+Y4vydC zWJyNMHIe9h0jRos8up5wU8fv9AuhXZmzkS6to3NK+MaOdlKCYMcTdfXV6qkmSx4 Z4KogqbcO5w8T/FjTbQOJcoEwIHTzFFtvg2T689CBeUI6qzMFVFKWlcMBVJdp+3O 8WfthJ8uLvOrgsu88pEVR4A0p1897G1oKO7XshWiz9JlYiB+sgQupHcB9NwhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTDqZpHdTFHP+MR/CYztBOOioRT8wHwYDVR0j BBgwFoAUsHNKMtE6lvyz/fmCwu7FABUEEcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjMwOTdmMC0zOTc4LTQ5Y2UtYjY5Yy00YjIwYjRkY2ZiN2UvMC9CMDczNEEzMkQx M0E5NkZDQjNGREY5ODJDMkVFQzUwMDE1MDQxMUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAxNTA0 MTFDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzMDk3ZjAtMzk3OC00OWNlLWI2 OWMtNGIyMGI0ZGNmYjdlLzAvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1 MDAxNTA0MTFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgRo6H6z1JuLdKGrYIe/2UKjX2AqukD3R84 fZn7xUhJ3jEF7q4kvvycF6n6+oXiybKarlR58oDEEO8VPgONWTUJc+R3e8On8QMc YnpPHJ9w2qX+QHtRy3l0XAUdInuinVhhrNPiJZCPQBADHPVUYZh+q9Bvw4CgEpxX ZWEgYMi5A8VCUe/h+luFtoYCtzBfTcYzK3fCXw3QDQJ4C0kQERCBVJTsciECx5JG rulWNn+txEZtp0FqWKMtOePQeYDwFG2W0RTIYvqRKuIX2Aa2a83Em17uyYQHRzV2 mfFt0a35K1Ond63UhNQ2ofsDZOAKsq8Hk5S/+MsZu4HTGVq2WSQ= -----END CERTIFICATE-----Generated at Tue Apr 29 09:43:59 2025 by rpki-client