$ rpki-client -vvf repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft File: 307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft (raw, json) Hash identifier: vvLApvI+BpUUdalMJtbQACSare7Y70T8wFD1rljtras= Subject key identifier: 2A:3B:D5:D7:DA:65:7A:CD:58:1D:7B:9C:36:65:E9:64:11:06:6A:96 Authority key identifier: 30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C Certificate issuer: /CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C Certificate serial: 20260540110C66BCDC50844E1AA71CDE57807143 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft Manifest number: 7B Signing time: Mon 28 Apr 2025 20:10:48 +0000 Manifest this update: Mon 28 Apr 2025 20:05:48 +0000 Manifest next update: Fri 02 May 2025 02:46:48 +0000 Files and hashes: 1: 323030313a6466333a346234303a3a2f34382d3438203d3e20313531393932.roa (hash: HGxSfnzBd2iVo1LQ60/VqdqxnwTeZjj60iyXe+FSbdc=) 2: 307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl (hash: 1Z2aG0sqQ0+hS+JzvZstjACVEi7sk1w7J14ucSb1Xbc=) 3: 3130332e34322e3234322e302f32342d3234203d3e20313531393932.roa (hash: vDiMZmUswEHUL+WVg3L0yTAEa3uzYmOkpzVmYwWd3dE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:26:05:40:11:0c:66:bc:dc:50:84:4e:1a:a7:1c:de:57:80:71:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C Validity Not Before: Apr 28 20:05:48 2025 GMT Not After : May 2 02:46:48 2025 GMT Subject: CN=2A3BD5D7DA657ACD581D7B9C3665E96411066A96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5d:f6:19:24:ec:60:3f:de:2d:2d:73:27:cd: 96:be:32:43:91:45:60:7d:e2:42:41:ae:8e:37:67: 63:f5:82:1b:da:a4:02:c5:af:d4:30:66:04:11:0e: 31:36:4d:09:f9:0c:81:a9:0a:3c:17:6c:fe:8e:cb: ee:e8:9c:1e:be:8e:5e:62:e0:ac:d8:a2:bf:ad:53: 12:3b:c3:a1:0e:ab:e5:ff:e8:20:55:27:d6:86:48: 96:9a:5c:84:67:bb:7d:a8:ee:36:de:75:f1:35:27: bd:a0:f5:72:76:7c:ad:c2:fa:2e:70:9c:2a:01:e3: d1:18:80:f7:16:06:17:3d:61:45:21:4c:9f:ac:54: af:9f:72:f0:97:da:7a:06:f4:25:e7:d3:75:13:0a: 3c:2b:29:79:fc:32:e7:fa:11:6d:09:08:b2:6a:d6: 8a:62:e9:12:c7:01:01:18:c5:61:a7:83:c0:49:e4: 3b:e9:43:02:c3:82:56:cc:22:24:3e:72:0c:f5:11: e9:b0:05:88:f5:bc:df:0d:d5:b3:25:41:b5:f7:f6: 84:22:ac:2e:41:40:63:76:d6:08:e7:f6:08:58:48: 6e:1e:56:7b:21:ad:dd:f6:6c:b1:78:cc:0c:9f:fb: c9:b6:8f:a8:5e:db:23:c4:0e:62:2b:f7:29:e5:4c: 57:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3B:D5:D7:DA:65:7A:CD:58:1D:7B:9C:36:65:E9:64:11:06:6A:96 X509v3 Authority Key Identifier: keyid:30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:2d:c3:5f:52:51:9c:eb:45:b7:e2:ee:7a:98:83:65:43:e1: 60:ae:32:97:74:1a:dd:cc:62:27:a8:05:01:e4:ef:5d:0b:aa: cd:b6:fe:dc:c5:ae:31:02:db:fa:50:7a:5b:13:1e:ed:e6:ea: f8:d2:0a:4b:f2:b8:42:61:a8:4c:fd:c6:ba:72:47:aa:c2:d8: 91:95:80:8c:ea:16:8c:f6:64:e1:e5:aa:40:8c:2e:c5:9b:2f: 80:71:ec:01:a5:fe:3d:1b:b4:a6:4c:20:80:63:dc:75:1e:a9: 86:ec:c1:76:60:cf:83:ef:1c:08:1a:b0:17:1c:bf:63:f8:42: 0f:4e:24:97:26:f9:bb:64:e7:f2:c2:4a:a0:39:3b:eb:8e:4a: 4b:47:08:72:22:9d:d7:e6:90:56:38:fb:91:cc:04:36:5b:9e: 74:c2:32:81:73:52:d8:bf:a0:8a:4a:9e:77:34:2f:f5:2e:b6: 95:86:f9:92:ad:c8:e7:fc:f1:8f:37:bc:6f:ed:86:3c:d3:a0: ef:22:d1:7b:a7:4f:f5:76:52:72:d6:b5:be:c9:88:90:87:68: b3:cb:bf:4f:15:3a:85:ef:25:bb:d3:15:ce:7a:66:e2:88:9b: a5:65:51:56:4e:16:9c:f4:50:f1:fc:68:f2:8f:6f:bd:89:63: 2b:80:46:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUICYFQBEMZrzcUIROGqcc3leAcUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0Qzgw NjFBN0IxQzAeFw0yNTA0MjgyMDA1NDhaFw0yNTA1MDIwMjQ2NDhaMDMxMTAvBgNV BAMTKDJBM0JENUQ3REE2NTdBQ0Q1ODFEN0I5QzM2NjVFOTY0MTEwNjZBOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1XfYZJOxgP94tLXMnzZa+MkOR RWB94kJBro43Z2P1ghvapALFr9QwZgQRDjE2TQn5DIGpCjwXbP6Oy+7onB6+jl5i 4KzYor+tUxI7w6EOq+X/6CBVJ9aGSJaaXIRnu32o7jbedfE1J72g9XJ2fK3C+i5w nCoB49EYgPcWBhc9YUUhTJ+sVK+fcvCX2noG9CXn03UTCjwrKXn8Muf6EW0JCLJq 1opi6RLHAQEYxWGng8BJ5DvpQwLDglbMIiQ+cgz1EemwBYj1vN8N1bMlQbX39oQi rC5BQGN21gjn9ghYSG4eVnshrd32bLF4zAyf+8m2j6he2yPEDmIr9ynlTFcxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKjvV19ples1YHXucNmXpZBEGapYwHwYDVR0j BBgwFoAUMHpAjiqoImja025vFF1kyAYaexwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTdmMWY0My1jZTdlLTQ5NzAtYWFkMC03ODJiMDE5YmQwM2UvMC8zMDdBNDA4RTJB QTgyMjY4REFEMzZFNkYxNDVENjRDODA2MUE3QjFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0QzgwNjFB N0IxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU3ZjFmNDMtY2U3ZS00OTcwLWFh ZDAtNzgyYjAxOWJkMDNlLzAvMzA3QTQwOEUyQUE4MjI2OERBRDM2RTZGMTQ1RDY0 QzgwNjFBN0IxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMtw19SUZzrRbfi7nqYg2VD4WCuMpd0Gt3M YieoBQHk710Lqs22/tzFrjEC2/pQelsTHu3m6vjSCkvyuEJhqEz9xrpyR6rC2JGV gIzqFoz2ZOHlqkCMLsWbL4Bx7AGl/j0btKZMIIBj3HUeqYbswXZgz4PvHAgasBcc v2P4Qg9OJJcm+btk5/LCSqA5O+uOSktHCHIindfmkFY4+5HMBDZbnnTCMoFzUti/ oIpKnnc0L/UutpWG+ZKtyOf88Y83vG/thjzToO8i0XunT/V2UnLWtb7JiJCHaLPL v08VOoXvJbvTFc56ZuKIm6VlUVZOFpz0UPH8aPKPb72JYyuARp8= -----END CERTIFICATE-----Generated at Tue Apr 29 01:55:01 2025 by rpki-client