$ rpki-client -vvf repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft File: 08435803278DC5796EE67697996454D656195D4C.mft (raw, json) Hash identifier: zqHCK2oMCQRaiiccI4mbk2rzcbBD7DaLVOmZXQ18k7c= Subject key identifier: B2:5B:B9:ED:5A:43:28:B6:22:37:5D:5B:68:41:DA:4F:EF:12:D4:98 Authority key identifier: 08:43:58:03:27:8D:C5:79:6E:E6:76:97:99:64:54:D6:56:19:5D:4C Certificate issuer: /CN=08435803278DC5796EE67697996454D656195D4C Certificate serial: 3BAEE24B3618D2CB6B41F00939EF2339958D84E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft Manifest number: B9 Signing time: Thu 01 May 2025 03:50:42 +0000 Manifest this update: Thu 01 May 2025 03:45:42 +0000 Manifest next update: Sun 04 May 2025 06:36:42 +0000 Files and hashes: 1: 08435803278DC5796EE67697996454D656195D4C.crl (hash: j9P7YEzrfsoK3KoBGLOfT8Jmzega2KPwJefiu6M/aXk=) 2: 3130332e3233302e3234362e302f32342d3234203d3e20313331373735.roa (hash: jTbfZ/3Hx6CL4SSiGlERkjd7H5tKmVCxpeA0RfZsKRg=) 3: 3130332e3138302e3136322e302f32342d3234203d3e20313439333737.roa (hash: 9RpvEpb4MDeR7vKuO5QULV5yAgtCcQbQomTWzkC1nrk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.crl rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 06:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ae:e2:4b:36:18:d2:cb:6b:41:f0:09:39:ef:23:39:95:8d:84:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08435803278DC5796EE67697996454D656195D4C Validity Not Before: May 1 03:45:42 2025 GMT Not After : May 4 06:36:42 2025 GMT Subject: CN=B25BB9ED5A4328B622375D5B6841DA4FEF12D498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0c:47:17:c4:f1:80:b3:ed:55:8b:8e:a6:76: 1c:d2:ab:87:54:d1:80:e3:de:b4:0f:03:cc:48:85: 7e:ed:c9:f1:a9:6a:a1:0f:e1:4b:e5:32:18:5c:85: 5c:bc:19:92:fe:e6:0b:93:52:91:9e:fd:78:83:aa: 76:79:89:36:87:59:ce:4e:64:9f:f2:c5:64:3c:34: 3b:60:5c:27:1c:b1:2f:a2:3f:d9:70:cf:f6:0a:7e: bc:13:7a:66:22:eb:43:2d:96:55:e3:e2:f2:e5:3a: 3f:cf:16:86:0d:2d:51:28:56:d9:5a:da:de:c4:6a: 3c:02:41:80:09:b9:9d:f1:a1:87:a7:c1:54:15:62: c0:fa:77:8d:de:df:1b:45:e8:ac:ea:3c:62:fb:16: 93:4d:80:65:2a:5f:b8:da:97:f6:c7:b9:b8:c4:6f: 18:51:5e:c5:15:27:fd:eb:63:ec:cd:8a:e2:17:6f: cf:53:86:74:cc:76:66:3e:ef:60:de:f7:e9:a6:08: fc:04:f9:2f:de:bd:a9:ac:74:97:71:c3:57:88:6b: 5e:a5:f1:8d:1b:a3:8f:a3:0e:d1:53:c5:56:30:1f: 9c:4c:53:ea:b9:20:ae:c1:03:a5:ea:84:ed:8f:36: 9a:6f:58:c1:84:05:1e:d8:83:b2:a3:09:de:e6:63: da:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5B:B9:ED:5A:43:28:B6:22:37:5D:5B:68:41:DA:4F:EF:12:D4:98 X509v3 Authority Key Identifier: keyid:08:43:58:03:27:8D:C5:79:6E:E6:76:97:99:64:54:D6:56:19:5D:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:14:32:ad:17:b2:46:65:d7:08:b7:f0:b0:00:d1:85:6e:e7: e9:87:d4:15:f3:54:25:2e:20:65:25:97:02:eb:fc:09:ba:00: 55:40:ac:c5:b7:3c:aa:71:cb:3a:f2:cd:14:33:5b:6b:61:ba: 77:80:20:e2:d4:20:88:ec:f5:dc:e4:ae:1e:71:85:6a:da:d5: a7:9c:05:5d:14:28:8e:ac:b4:55:55:c4:18:8e:49:c7:35:47: 22:a9:28:70:88:4c:b1:47:4d:38:4e:14:21:85:75:4a:58:9e: 34:15:cf:4a:8c:d3:19:ff:4c:ea:34:5d:2f:af:eb:43:1e:74: 11:68:4f:af:a6:1b:1c:74:39:3c:8d:ea:05:17:50:34:3e:30: 96:29:87:d1:01:6d:12:fb:57:09:a9:f0:f6:25:ba:1a:ab:3e: e8:5a:46:3b:af:44:d0:4d:fe:9d:2b:bd:8e:ce:3b:77:45:cd: c5:04:0e:6f:58:c1:c6:19:1f:14:e9:6b:8c:ac:ca:db:fb:0e: 77:5b:7e:49:f3:b2:2a:96:16:ce:50:b6:68:24:6c:78:37:11: 6b:09:58:9a:33:5e:3e:a0:b8:6c:45:07:d3:6a:c8:6b:a8:0b: 5a:7f:e8:c6:0d:ea:9f:c2:07:93:1f:98:82:ca:12:ce:ab:29: 0c:9c:e6:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO67iSzYY0strQfAJOe8jOZWNhOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg0MzU4MDMyNzhEQzU3OTZFRTY3Njk3OTk2NDU0RDY1 NjE5NUQ0QzAeFw0yNTA1MDEwMzQ1NDJaFw0yNTA1MDQwNjM2NDJaMDMxMTAvBgNV BAMTKEIyNUJCOUVENUE0MzI4QjYyMjM3NUQ1QjY4NDFEQTRGRUYxMkQ0OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvDEcXxPGAs+1Vi46mdhzSq4dU 0YDj3rQPA8xIhX7tyfGpaqEP4UvlMhhchVy8GZL+5guTUpGe/XiDqnZ5iTaHWc5O ZJ/yxWQ8NDtgXCccsS+iP9lwz/YKfrwTemYi60MtllXj4vLlOj/PFoYNLVEoVtla 2t7EajwCQYAJuZ3xoYenwVQVYsD6d43e3xtF6KzqPGL7FpNNgGUqX7jal/bHubjE bxhRXsUVJ/3rY+zNiuIXb89ThnTMdmY+72De9+mmCPwE+S/evamsdJdxw1eIa16l 8Y0bo4+jDtFTxVYwH5xMU+q5IK7BA6XqhO2PNppvWMGEBR7Yg7KjCd7mY9rXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUslu57VpDKLYiN11baEHaT+8S1JgwHwYDVR0j BBgwFoAUCENYAyeNxXlu5naXmWRU1lYZXUwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzBkNjI5YS05NmVkLTQ1MWEtODc4Ny0zNDEyMjI4MmE3MDYvMC8wODQzNTgwMzI3 OERDNTc5NkVFNjc2OTc5OTY0NTRENjU2MTk1RDRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg0MzU4MDMyNzhEQzU3OTZFRTY3Njk3OTk2NDU0RDY1NjE5 NUQ0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcwZDYyOWEtOTZlZC00NTFhLTg3 ODctMzQxMjIyODJhNzA2LzAvMDg0MzU4MDMyNzhEQzU3OTZFRTY3Njk3OTk2NDU0 RDY1NjE5NUQ0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAUMq0XskZl1wi38LAA0YVu5+mH1BXzVCUu IGUllwLr/Am6AFVArMW3PKpxyzryzRQzW2thuneAIOLUIIjs9dzkrh5xhWra1aec BV0UKI6stFVVxBiOScc1RyKpKHCITLFHTThOFCGFdUpYnjQVz0qM0xn/TOo0XS+v 60MedBFoT6+mGxx0OTyN6gUXUDQ+MJYph9EBbRL7Vwmp8PYluhqrPuhaRjuvRNBN /p0rvY7OO3dFzcUEDm9YwcYZHxTpa4ysytv7DndbfknzsiqWFs5QtmgkbHg3EWsJ WJozXj6guGxFB9NqyGuoC1p/6MYN6p/CB5MfmILKEs6rKQyc5m4= -----END CERTIFICATE-----Generated at Fri May 2 03:38:00 2025 by rpki-client