$ rpki-client -vvf repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft File: 020EA2304929066809CA6F723574798639D77438.mft (raw, json) Hash identifier: +utyL35P2H0lUrkN5hGLyZSSWXpm+k3m0RAzgL273pE= Subject key identifier: A2:1F:0E:78:A2:CA:3B:3B:F4:9A:5F:E6:73:76:86:C3:F0:7E:B3:03 Authority key identifier: 02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 Certificate issuer: /CN=020EA2304929066809CA6F723574798639D77438 Certificate serial: 3BB4555ED6C710128E850F510C1E6CA3F2D1F59D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft Manifest number: 98 Signing time: Mon 28 Apr 2025 06:00:38 +0000 Manifest this update: Mon 28 Apr 2025 05:55:38 +0000 Manifest next update: Thu 01 May 2025 06:57:38 +0000 Files and hashes: 1: 3136302e32352e35352e302f32342d3234203d3e20313533303630.roa (hash: e1/ZISiUaEqFgEoOZNhif4u64Oi3EdH2IOJ0spV1FKE=) 2: 3136302e32352e35342e302f32332d3233203d3e20313533303630.roa (hash: xGNAaG0xNMk64EfdvvCGeHAonw6BrwsqvBD5BwQLiBI=) 3: 3136302e32352e35342e302f32342d3234203d3e20313533303630.roa (hash: vKG2Q2FQRs4DS7NN4/lYH+GoEGCznEIbbOzchLmAsO4=) 4: 020EA2304929066809CA6F723574798639D77438.crl (hash: GCg8VhT8Svp/wb80dkSLS4QC9vNYI4CGCuhTpMoBDF4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 06:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b4:55:5e:d6:c7:10:12:8e:85:0f:51:0c:1e:6c:a3:f2:d1:f5:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020EA2304929066809CA6F723574798639D77438 Validity Not Before: Apr 28 05:55:38 2025 GMT Not After : May 1 06:57:38 2025 GMT Subject: CN=A21F0E78A2CA3B3BF49A5FE6737686C3F07EB303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6e:32:f7:98:1e:15:2e:e0:b8:10:be:b4:60: 2a:61:e0:da:ab:f6:bd:81:5d:1f:2e:68:2b:09:ab: 3e:68:c5:0c:cc:1a:69:2c:b0:8c:11:f0:e9:f6:0f: f1:da:48:e8:76:da:7c:8f:cf:89:81:08:e7:d5:2d: a9:da:8c:c4:58:66:7d:b2:a4:e2:68:bc:59:bd:02: 76:91:1b:81:09:fe:9a:fa:25:63:f1:b6:ac:fb:1a: 48:2c:17:85:6d:9a:a2:9b:a6:d9:8a:70:e2:62:c5: a0:fd:6e:18:a6:14:60:c1:b1:ea:1b:80:47:3f:e2: 98:fb:7d:e7:84:c6:1a:88:37:2d:34:87:e9:e5:26: 22:16:07:bb:63:db:66:1c:4c:04:c1:dc:e1:77:25: 17:50:96:14:1d:72:86:85:99:15:7b:f6:3d:c5:47: 88:9c:f1:0b:5a:1c:29:16:c1:ba:44:c7:f6:eb:08: 68:d8:62:e9:72:2a:5b:c7:48:74:ec:47:ab:ef:64: c2:da:c5:21:b8:c3:e8:03:0f:01:d4:c5:6f:26:ba: d1:2c:fb:e9:93:e7:ff:a0:d6:6e:df:c0:1a:8a:f6: e5:fd:80:de:f1:16:e6:a4:ae:1f:a6:17:6e:88:51: 6e:90:6b:d1:59:ed:72:1d:b5:7d:89:41:b3:4b:45: ff:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1F:0E:78:A2:CA:3B:3B:F4:9A:5F:E6:73:76:86:C3:F0:7E:B3:03 X509v3 Authority Key Identifier: keyid:02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:eb:fd:b4:25:25:0c:fc:fb:76:5e:7d:ef:fc:a5:57:e6:80: 89:34:ae:50:06:1a:66:b0:e9:1a:e8:5c:ac:6e:29:3b:d2:d4: c8:f1:c1:3c:8d:20:a3:e5:d1:fa:db:6f:77:7b:fb:a3:9d:8f: 2b:6c:0c:bd:a7:b8:74:8c:2e:83:ef:d6:7c:6b:9f:57:0d:b0: 6c:92:e8:46:6c:38:70:9b:61:d7:3f:19:fb:1a:02:8b:7b:a5: 42:b7:50:ca:db:a7:6f:76:2d:11:8f:d5:e7:7f:07:45:23:34: a6:10:0e:f1:4c:f4:9d:cb:78:2f:75:dd:0b:e1:a6:d3:d3:b5: 2e:80:1c:b9:f5:93:9a:29:80:35:99:22:ac:b6:a5:82:86:8b: 27:e4:c4:2c:4b:55:17:b9:86:fd:18:31:a0:af:9f:37:ec:90: 52:28:3f:22:2c:8a:9f:39:0f:4d:21:30:4d:f9:c2:9b:a2:0f: 76:c8:9c:3c:7a:9e:dc:b3:ff:19:fb:4c:7f:81:79:3c:cf:8e: a7:46:c9:ae:97:2a:d7:ac:90:5a:0b:e9:5e:80:71:a0:a6:8a: 65:1a:95:c9:cc:bb:0c:1f:30:0b:ed:5f:c0:f8:65:bd:67:d3: 7e:2f:05:cb:86:b4:54:c8:bb:18:da:27:96:c8:f7:b6:51:3b: 22:e6:82:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO7RVXtbHEBKOhQ9RDB5so/LR9Z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5ODYz OUQ3NzQzODAeFw0yNTA0MjgwNTU1MzhaFw0yNTA1MDEwNjU3MzhaMDMxMTAvBgNV BAMTKEEyMUYwRTc4QTJDQTNCM0JGNDlBNUZFNjczNzY4NkMzRjA3RUIzMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJbjL3mB4VLuC4EL60YCph4Nqr 9r2BXR8uaCsJqz5oxQzMGmkssIwR8On2D/HaSOh22nyPz4mBCOfVLanajMRYZn2y pOJovFm9AnaRG4EJ/pr6JWPxtqz7GkgsF4VtmqKbptmKcOJixaD9bhimFGDBseob gEc/4pj7feeExhqINy00h+nlJiIWB7tj22YcTATB3OF3JRdQlhQdcoaFmRV79j3F R4ic8QtaHCkWwbpEx/brCGjYYulyKlvHSHTsR6vvZMLaxSG4w+gDDwHUxW8mutEs ++mT5/+g1m7fwBqK9uX9gN7xFuakrh+mF26IUW6Qa9FZ7XIdtX2JQbNLRf/vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoh8OeKLKOzv0ml/mc3aGw/B+swMwHwYDVR0j BBgwFoAUAg6iMEkpBmgJym9yNXR5hjnXdDgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWEyNmExMC01OGU4LTQzYzctOTQ3ZS03MjIxNzNkNjY2MTQvMC8wMjBFQTIzMDQ5 MjkwNjY4MDlDQTZGNzIzNTc0Nzk4NjM5RDc3NDM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5ODYzOUQ3 NzQzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVhMjZhMTAtNThlOC00M2M3LTk0 N2UtNzIyMTczZDY2NjE0LzAvMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5 ODYzOUQ3NzQzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjr/bQlJQz8+3Zefe/8pVfmgIk0rlAGGmaw 6RroXKxuKTvS1MjxwTyNIKPl0frbb3d7+6OdjytsDL2nuHSMLoPv1nxrn1cNsGyS 6EZsOHCbYdc/GfsaAot7pUK3UMrbp292LRGP1ed/B0UjNKYQDvFM9J3LeC913Qvh ptPTtS6AHLn1k5opgDWZIqy2pYKGiyfkxCxLVRe5hv0YMaCvnzfskFIoPyIsip85 D00hME35wpuiD3bInDx6ntyz/xn7TH+BeTzPjqdGya6XKteskFoL6V6AcaCmimUa lcnMuwwfMAvtX8D4Zb1n034vBcuGtFTIuxjaJ5bI97ZROyLmgjY= -----END CERTIFICATE-----Generated at Wed Apr 30 02:54:44 2025 by rpki-client