$ rpki-client -vvf repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft File: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft (raw, json) Hash identifier: h2aRDNkgRS9qciFXSB3AaH7goPXC8DgFXgwQC9kqmQw= Subject key identifier: 71:03:2A:1F:E8:7E:1A:A4:8F:34:C5:9D:F0:58:95:13:4E:EF:F9:90 Authority key identifier: 39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 Certificate issuer: /CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Certificate serial: 52CA3D5020CE6BE86E997F0C3D5F387D4077DC2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft Manifest number: 01B2 Signing time: Fri 25 Apr 2025 05:10:50 +0000 Manifest this update: Fri 25 Apr 2025 05:05:50 +0000 Manifest next update: Mon 28 Apr 2025 14:53:50 +0000 Files and hashes: 1: 399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl (hash: 7qG3fn9gtpgH0wY/WtUO+nefYxRXj6Z37OJ3ZbKAqow=) 2: 3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (hash: mJLB2tKLnYbB9zMLRYUfW0oiNzOSUGzCunMjTLsdgdw=) 3: 3130332e3133372e3138382e302f32342d3234203d3e2039333431.roa (hash: /vuj/h7kUZTjO1XHx69jnMNmoF3w0RvV89UjxypFeHI=) 4: 3130332e3133372e3138392e302f32342d3234203d3e2039333431.roa (hash: ns+3re2xjf2DCHP0O34XWP3LLYLuHBfKDvdHrJkc5xc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:ca:3d:50:20:ce:6b:e8:6e:99:7f:0c:3d:5f:38:7d:40:77:dc:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30 Validity Not Before: Apr 25 05:05:50 2025 GMT Not After : Apr 28 14:53:50 2025 GMT Subject: CN=71032A1FE87E1AA48F34C59DF05895134EEFF990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:99:43:5c:5e:a1:fc:a3:a0:9e:68:86:9f:78: 60:6b:e2:69:7f:99:89:35:d3:0d:94:39:be:da:14: be:00:1e:67:f0:0f:e2:96:af:33:bc:c3:20:89:1f: 67:80:45:b3:9e:a4:e2:99:3e:ba:8c:07:46:22:3d: 81:7e:b7:ee:0a:2a:72:a7:74:e5:3c:c4:a9:82:53: 6e:0f:16:44:40:24:2c:05:aa:37:43:f8:a5:6f:1e: f8:34:d1:2e:17:4d:d2:01:fe:e4:c2:d5:44:73:2f: 9c:f2:5a:a6:0b:79:15:bf:b6:34:31:da:f8:b1:a9: 4f:2e:02:da:56:6d:59:23:dc:0f:ef:bd:85:7e:6a: 88:96:fc:ec:8f:c1:5e:ad:30:08:d6:a4:43:32:63: ca:f8:a5:cc:17:16:f5:a2:a9:bb:18:95:20:ac:1d: fb:85:30:8f:70:5b:60:81:14:05:97:dc:5b:3e:5a: 16:80:d3:8e:a9:79:dc:b7:03:f8:cc:84:9c:fd:26: be:80:3e:5e:79:1b:ce:75:dd:18:c3:31:5b:57:24: 61:79:c6:22:34:16:38:fb:46:c4:30:c0:00:fc:b4: f1:3a:b8:51:56:06:e1:84:d1:30:b2:1e:d5:65:2d: ed:91:11:c4:4d:c3:c6:d8:ba:b1:d2:13:4c:e3:f5: e5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:03:2A:1F:E8:7E:1A:A4:8F:34:C5:9D:F0:58:95:13:4E:EF:F9:90 X509v3 Authority Key Identifier: keyid:39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a9:2d:aa:0a:2f:ae:a3:81:3c:1a:53:80:dc:be:db:7d:27: e3:7c:bc:56:63:25:9f:80:1a:2f:d5:d2:dc:b6:dd:a5:95:7a: 70:51:39:be:c0:66:b3:8d:d0:72:86:38:3d:b1:c7:8e:98:68: 8d:e8:3e:c6:a4:51:05:06:ec:ec:d4:6e:fd:8e:84:c8:4f:36: 3b:87:c2:22:6b:98:4b:c8:a7:47:42:b2:32:c8:cc:32:ba:02: 2e:c7:b5:9f:de:c5:7d:75:61:55:94:8f:d4:04:6d:e2:6c:23: 65:06:f3:25:74:27:c8:20:a5:a1:2a:82:05:1f:a5:49:21:f6: f5:44:97:fa:58:0a:40:31:f0:a5:4a:7d:56:6b:a7:d6:ec:4f: 4f:03:fe:6d:da:77:47:d1:82:c3:40:c3:d3:2b:90:52:47:e9: 37:c9:06:02:3a:7c:d7:49:31:cc:af:5a:43:2d:50:96:ad:98: 42:0b:ed:35:64:a7:f3:4d:8d:b4:5e:75:dc:45:41:d3:c7:7a: f5:18:8d:6f:17:da:3d:d7:2c:3e:a0:ae:01:85:24:3c:d6:30: a5:89:30:eb:1e:83:f5:9f:b8:74:48:b1:e9:a7:90:b3:db:30: ec:78:23:0c:c1:b1:56:81:eb:9d:37:7e:ae:48:4e:17:bf:e6: 9e:e0:11:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUso9UCDOa+humX8MPV84fUB33CwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1 NTA1RUQzMDAeFw0yNTA0MjUwNTA1NTBaFw0yNTA0MjgxNDUzNTBaMDMxMTAvBgNV BAMTKDcxMDMyQTFGRTg3RTFBQTQ4RjM0QzU5REYwNTg5NTEzNEVFRkY5OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwmUNcXqH8o6CeaIafeGBr4ml/ mYk10w2UOb7aFL4AHmfwD+KWrzO8wyCJH2eARbOepOKZPrqMB0YiPYF+t+4KKnKn dOU8xKmCU24PFkRAJCwFqjdD+KVvHvg00S4XTdIB/uTC1URzL5zyWqYLeRW/tjQx 2vixqU8uAtpWbVkj3A/vvYV+aoiW/OyPwV6tMAjWpEMyY8r4pcwXFvWiqbsYlSCs HfuFMI9wW2CBFAWX3Fs+WhaA046pedy3A/jMhJz9Jr6APl55G8513RjDMVtXJGF5 xiI0Fjj7RsQwwAD8tPE6uFFWBuGE0TCyHtVlLe2REcRNw8bYurHSE0zj9eXdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcQMqH+h+GqSPNMWd8FiVE07v+ZAwHwYDVR0j BBgwFoAUOZ+EEY7e+q1d2TZzv9Ybn1UF7TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmMxMjcwMy1mMWY3LTQzYzktYTIyMC05MmVkZDg2ZWZlNWUvMC8zOTlGODQxMThF REVGQUFENUREOTM2NzNCRkQ2MUI5RjU1MDVFRDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1NTA1 RUQzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZjMTI3MDMtZjFmNy00M2M5LWEy MjAtOTJlZGQ4NmVmZTVlLzAvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFC OUY1NTA1RUQzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFypLaoKL66jgTwaU4Dcvtt9J+N8vFZjJZ+A Gi/V0ty23aWVenBROb7AZrON0HKGOD2xx46YaI3oPsakUQUG7OzUbv2OhMhPNjuH wiJrmEvIp0dCsjLIzDK6Ai7HtZ/exX11YVWUj9QEbeJsI2UG8yV0J8ggpaEqggUf pUkh9vVEl/pYCkAx8KVKfVZrp9bsT08D/m3ad0fRgsNAw9MrkFJH6TfJBgI6fNdJ McyvWkMtUJatmEIL7TVkp/NNjbReddxFQdPHevUYjW8X2j3XLD6grgGFJDzWMKWJ MOseg/WfuHRIsemnkLPbMOx4IwzBsVaB6503fq5IThe/5p7gEfU= -----END CERTIFICATE-----Generated at Sat Apr 26 16:21:27 2025 by rpki-client