$ rpki-client -vvf repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft File: 14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft (raw, json) Hash identifier: Y8koe0t5wtEfkM//6XIX9PcQvfRO2ZxOGgpV4Q5EHtY= Subject key identifier: 41:A5:CB:1C:3C:50:B0:90:06:70:D0:FF:91:23:BA:5B:D5:B3:29:9A Authority key identifier: 14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61 Certificate issuer: /CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61 Certificate serial: 10D4B5D254AAF018F97A4F277F6CBF2F01E72B02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft Manifest number: 0138 Signing time: Mon 28 Apr 2025 21:41:17 +0000 Manifest this update: Mon 28 Apr 2025 21:36:17 +0000 Manifest next update: Fri 02 May 2025 08:10:17 +0000 Files and hashes: 1: 14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl (hash: 2M8U8Jpg5GozUZB0CpN2r1Q9X/+Vfc9bt5JmENFy+8E=) 2: 3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa (hash: u880hi+D7DiVMZTtM0R2zluDGsZisp33kG58HiXq4yE=) 3: 3130332e3136322e3135302e302f32342d3234203d3e20313431363536.roa (hash: Ra4kBxyKq0eMRR5T+q214TFxoVWgjk/J53dcHzjeFD8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 08:10:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d4:b5:d2:54:aa:f0:18:f9:7a:4f:27:7f:6c:bf:2f:01:e7:2b:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61 Validity Not Before: Apr 28 21:36:17 2025 GMT Not After : May 2 08:10:17 2025 GMT Subject: CN=41A5CB1C3C50B0900670D0FF9123BA5BD5B3299A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d9:bb:b1:d4:fb:e0:00:f7:47:c0:dd:15:92: 3b:6e:6d:e7:97:f9:b4:98:08:3e:df:58:9a:6a:09: 4a:9e:b4:7c:b4:dc:69:f9:88:d3:ca:b3:a2:89:9e: 0e:3b:c5:42:9d:6d:22:7f:b5:21:63:45:d9:66:b8: 0c:be:5a:64:3f:f2:e7:06:e4:95:76:cd:02:8d:01: 6a:29:c2:9c:4c:d1:4f:50:8c:e9:e8:68:c5:4a:f2: 2a:85:ae:6a:eb:c1:48:b0:6b:29:d5:c4:80:28:9f: 48:41:a7:3c:c2:06:5e:2e:73:b0:70:d5:60:34:f3: 20:b6:75:16:b4:85:82:7d:97:6f:da:ab:0c:61:e4: 19:e1:30:e8:92:9c:b3:86:ef:90:81:b5:40:25:15: 13:12:53:78:27:d6:32:67:2f:b1:79:c4:1d:0b:7b: 23:10:cb:08:28:2f:9c:51:91:b6:f6:59:c2:60:93: 91:c0:fc:e8:b3:14:3a:ce:6f:be:88:48:12:fa:b4: c8:5b:bc:15:21:8c:59:4c:6c:42:46:0c:c2:40:28: 36:5a:a6:68:55:50:bc:9f:b1:a6:75:15:4a:ed:31: 23:ed:c4:c3:41:cc:fc:a4:0c:be:78:a5:1a:b1:14: 6a:de:7a:44:3c:ef:a8:76:0f:2e:b8:03:be:a9:54: d9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A5:CB:1C:3C:50:B0:90:06:70:D0:FF:91:23:BA:5B:D5:B3:29:9A X509v3 Authority Key Identifier: keyid:14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:c4:76:18:52:8d:76:6c:bb:eb:9c:06:b4:5d:58:d0:03:92: 1f:18:a2:44:ea:81:5d:89:21:27:97:78:e0:b0:f0:dd:2e:15: e9:17:43:c8:73:bf:79:1e:18:3e:1b:94:c3:e2:f0:e3:50:e6: 8d:a0:8d:b7:73:66:52:91:cf:fd:51:e2:4d:77:74:be:38:22: d1:3c:ce:14:15:39:c8:c4:33:b8:68:88:a0:7b:86:0c:d7:79: e1:85:7f:11:e7:df:f6:68:30:71:1d:0e:a5:56:be:b6:a9:33: ec:c6:84:21:8e:a5:47:ea:a6:ca:29:42:18:17:3c:73:e4:81: c3:29:22:26:a5:01:e0:63:be:04:f2:73:b3:b4:98:66:c6:52: c0:c5:10:ec:eb:6a:97:32:0f:7a:4c:e1:e1:8b:eb:ee:02:44: b1:50:6d:95:4c:5e:c0:3b:27:d3:9b:32:08:bd:62:1e:94:c9: fb:2d:b2:97:7a:af:a7:72:27:df:e4:62:4b:bd:32:75:e2:81: d9:49:ed:02:78:89:0c:1e:32:49:e8:ee:de:79:62:3d:2b:a0: 3f:03:b5:a7:4f:0b:0f:37:4f:c8:84:a7:a5:76:9a:e5:29:2d: 4b:70:21:2d:e1:4d:aa:43:c2:44:b9:95:e0:36:05:50:56:06: 71:62:9f:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUENS10lSq8Bj5ek8nf2y/LwHnKwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3QTBE RUVDMUU2MTAeFw0yNTA0MjgyMTM2MTdaFw0yNTA1MDIwODEwMTdaMDMxMTAvBgNV BAMTKDQxQTVDQjFDM0M1MEIwOTAwNjcwRDBGRjkxMjNCQTVCRDVCMzI5OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr2bux1PvgAPdHwN0VkjtubeeX +bSYCD7fWJpqCUqetHy03Gn5iNPKs6KJng47xUKdbSJ/tSFjRdlmuAy+WmQ/8ucG 5JV2zQKNAWopwpxM0U9QjOnoaMVK8iqFrmrrwUiwaynVxIAon0hBpzzCBl4uc7Bw 1WA08yC2dRa0hYJ9l2/aqwxh5BnhMOiSnLOG75CBtUAlFRMSU3gn1jJnL7F5xB0L eyMQywgoL5xRkbb2WcJgk5HA/OizFDrOb76ISBL6tMhbvBUhjFlMbEJGDMJAKDZa pmhVULyfsaZ1FUrtMSPtxMNBzPykDL54pRqxFGreekQ876h2Dy64A76pVNkZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQaXLHDxQsJAGcND/kSO6W9WzKZowHwYDVR0j BBgwFoAUFAQxY6i/9QYA8WQQ3ie3oN7sHmEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWQ5ZWEyMC0zNDNkLTRhY2ItOTU4MS04MWY5ZDdlYTkyZmUvMC8xNDA0MzE2M0E4 QkZGNTA2MDBGMTY0MTBERTI3QjdBMERFRUMxRTYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3QTBERUVD MUU2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVkOWVhMjAtMzQzZC00YWNiLTk1 ODEtODFmOWQ3ZWE5MmZlLzAvMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3 QTBERUVDMUU2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/EdhhSjXZsu+ucBrRdWNADkh8YokTqgV2J ISeXeOCw8N0uFekXQ8hzv3keGD4blMPi8ONQ5o2gjbdzZlKRz/1R4k13dL44ItE8 zhQVOcjEM7hoiKB7hgzXeeGFfxHn3/ZoMHEdDqVWvrapM+zGhCGOpUfqpsopQhgX PHPkgcMpIialAeBjvgTyc7O0mGbGUsDFEOzrapcyD3pM4eGL6+4CRLFQbZVMXsA7 J9ObMgi9Yh6Uyfstspd6r6dyJ9/kYku9MnXigdlJ7QJ4iQweMkno7t55Yj0roD8D tadPCw83T8iEp6V2muUpLUtwIS3hTapDwkS5leA2BVBWBnFin4U= -----END CERTIFICATE-----Generated at Wed Apr 30 03:44:54 2025 by rpki-client