$ rpki-client -vvf repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft File: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft (raw, json) Hash identifier: SA7E5GUhDow8hq2ZB7JGj5zq50BqA4WxOU9+y7gbkB4= Subject key identifier: 67:6F:A9:1B:3B:A2:45:A1:40:EE:BB:C9:1E:95:CF:6E:21:DC:03:76 Authority key identifier: B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 Certificate issuer: /CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Certificate serial: 3F7E32F075818348C92E6EF265B98FA553540CF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft Manifest number: 0145 Signing time: Sun 27 Apr 2025 05:02:12 +0000 Manifest this update: Sun 27 Apr 2025 04:57:12 +0000 Manifest next update: Wed 30 Apr 2025 15:42:12 +0000 Files and hashes: 1: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl (hash: xAtB4pUJM/kvavvysOh6Epo0qXKDiw93Jr1gzVpykZU=) 2: 3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa (hash: Mwvu/CaE5deApG/isN7cjUZhnbfHoZ3qdsbJEM4tty0=) 3: 3131372e3130332e3131362e302f32342d3234203d3e20313338303737.roa (hash: OXNX1WpnGEvTtG2QVsXYBr1o3UirT2JM9Lg+MbGiddU=) 4: 3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa (hash: Khtj9hE0U7S7GxsTQLAztRkAFMW84uHyWmMZ0EjXpnw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 15:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:7e:32:f0:75:81:83:48:c9:2e:6e:f2:65:b9:8f:a5:53:54:0c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Validity Not Before: Apr 27 04:57:12 2025 GMT Not After : Apr 30 15:42:12 2025 GMT Subject: CN=676FA91B3BA245A140EEBBC91E95CF6E21DC0376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:70:c4:b7:06:d3:9e:2f:a6:e1:cd:68:4e:d3: 7e:83:0a:e9:a7:32:a6:72:be:33:ef:38:b4:2b:c4: 08:18:6b:14:68:03:4e:8d:a9:d2:a1:4e:c7:06:57: d5:06:8d:9b:38:b1:41:d4:04:2f:ab:8a:2f:a8:6b: 43:55:83:fa:52:26:d2:68:f7:0b:a3:8c:02:ef:a3: 82:7d:47:26:75:5d:3a:6d:20:f5:64:db:dd:1b:52: a2:b2:2b:53:11:af:bd:9a:9e:a1:bb:b6:8e:00:c6: a5:2e:2d:80:ea:72:0a:85:67:f9:39:b0:bb:f2:79: d3:2b:28:d8:af:d3:dc:e7:a0:8d:bd:51:f4:e0:4f: 71:3a:82:c2:a1:e9:2e:01:62:81:cf:c8:1b:c0:32: b0:b2:f4:34:61:e5:ab:be:86:ed:db:6f:f7:e8:92: ae:a9:a1:9b:e6:26:99:98:94:96:08:9d:10:d1:03: a6:dd:e2:80:32:59:80:0f:05:da:67:e9:1d:a5:4c: 1e:a7:2d:48:a5:a0:58:ab:ff:d6:00:1a:00:6a:44: 48:8e:ef:d2:80:59:ff:16:4b:8d:ff:c7:da:0b:d1: 83:bf:ac:86:2a:8d:f3:1c:9d:52:4d:8c:e9:bb:8c: fc:c0:ee:d9:c2:fa:f1:6c:90:27:b2:f2:2a:86:94: 5d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6F:A9:1B:3B:A2:45:A1:40:EE:BB:C9:1E:95:CF:6E:21:DC:03:76 X509v3 Authority Key Identifier: keyid:B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:f2:99:36:fc:99:ea:f8:f6:05:2a:db:4f:5c:d7:d7:2f:5f: 63:55:be:77:e3:ac:42:01:32:95:4f:15:bf:3e:72:3c:09:99: af:80:68:72:2e:b2:5c:3f:cc:ed:44:4f:8b:db:fe:e9:1c:8b: 8f:d7:52:b7:9c:a9:e2:a9:15:fb:33:1b:3d:25:c4:d3:23:45: 2a:73:3f:1f:ed:b5:69:f6:4b:ec:20:90:36:08:5d:14:e1:d8: ee:8c:26:60:6e:13:5c:a4:b2:40:d4:12:30:33:62:48:ac:62: 83:a0:e0:ee:38:55:51:49:9a:36:8c:9e:15:af:3a:d8:59:69: 42:f6:07:46:68:d7:7d:a4:55:19:b6:c1:9e:71:3f:16:df:44: 2c:3b:12:14:49:33:e0:a1:a8:57:85:e0:f7:d0:45:56:15:32: e4:39:bb:62:2a:f7:a6:09:c8:6c:b3:3f:39:a1:44:70:15:45: 2e:c7:01:f4:78:66:69:c1:2e:54:88:8b:d2:e5:3d:7c:b7:4f: 14:6b:96:a0:73:a0:5d:ef:c8:2b:b0:86:e7:38:bf:58:e5:1f: c8:b9:c6:dd:b7:79:d8:bd:4b:a9:b2:b2:76:49:eb:e8:22:11: f4:93:45:35:6c:24:43:b3:ca:d6:05:62:44:8d:46:14:3c:b5: 10:d6:fd:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP34y8HWBg0jJLm7yZbmPpVNUDPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlCODU3 RTkzNzZFNDAeFw0yNTA0MjcwNDU3MTJaFw0yNTA0MzAxNTQyMTJaMDMxMTAvBgNV BAMTKDY3NkZBOTFCM0JBMjQ1QTE0MEVFQkJDOTFFOTVDRjZFMjFEQzAzNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7cMS3BtOeL6bhzWhO036DCumn MqZyvjPvOLQrxAgYaxRoA06NqdKhTscGV9UGjZs4sUHUBC+rii+oa0NVg/pSJtJo 9wujjALvo4J9RyZ1XTptIPVk290bUqKyK1MRr72anqG7to4AxqUuLYDqcgqFZ/k5 sLvyedMrKNiv09znoI29UfTgT3E6gsKh6S4BYoHPyBvAMrCy9DRh5au+hu3bb/fo kq6poZvmJpmYlJYInRDRA6bd4oAyWYAPBdpn6R2lTB6nLUiloFir/9YAGgBqREiO 79KAWf8WS43/x9oL0YO/rIYqjfMcnVJNjOm7jPzA7tnC+vFskCey8iqGlF2ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ2+pGzuiRaFA7rvJHpXPbiHcA3YwHwYDVR0j BBgwFoAUuHfNHFQsPeLLuO8VHxebhX6TduQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjZkMTg1ZS1kNGY0LTQ4MjAtYjRiNi03OThjMzA3YWQ3ZTUvMC9CODc3Q0QxQzU0 MkMzREUyQ0JCOEVGMTUxRjE3OUI4NTdFOTM3NkU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlCODU3RTkz NzZFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY2ZDE4NWUtZDRmNC00ODIwLWI0 YjYtNzk4YzMwN2FkN2U1LzAvQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlC ODU3RTkzNzZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrymTb8mer49gUq209c19cvX2NVvnfjrEIB MpVPFb8+cjwJma+AaHIuslw/zO1ET4vb/ukci4/XUrecqeKpFfszGz0lxNMjRSpz Px/ttWn2S+wgkDYIXRTh2O6MJmBuE1ykskDUEjAzYkisYoOg4O44VVFJmjaMnhWv OthZaUL2B0Zo132kVRm2wZ5xPxbfRCw7EhRJM+ChqFeF4PfQRVYVMuQ5u2Iq96YJ yGyzPzmhRHAVRS7HAfR4ZmnBLlSIi9LlPXy3TxRrlqBzoF3vyCuwhuc4v1jlH8i5 xt23edi9S6mysnZJ6+giEfSTRTVsJEOzytYFYkSNRhQ8tRDW/RU= -----END CERTIFICATE-----Generated at Sun Apr 27 23:57:16 2025 by rpki-client