$ rpki-client -vvf repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft File: 3008AF948C4742A525201F3FDA7EFB1800D52D64.mft (raw, json) Hash identifier: 9nKEACO6cyydRwI8tKP8+lYLDFeoHzHMkWoLzKHTO5E= Subject key identifier: C1:78:FF:C8:DC:72:F9:D3:53:08:FA:7A:E1:DF:13:B8:47:F6:15:7E Authority key identifier: 30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 Certificate issuer: /CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Certificate serial: 0C4EB8FD7B5F82E067FF90F5160A42B320FBEE2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft Manifest number: C7 Signing time: Sun 27 Apr 2025 00:01:54 +0000 Manifest this update: Sat 26 Apr 2025 23:56:54 +0000 Manifest next update: Wed 30 Apr 2025 03:40:54 +0000 Files and hashes: 1: 3135372e31352e34362e302f32332d3234203d3e20313532333936.roa (hash: G0a1IDIDp/6OW+B4SPVbcSdJGPsXh5ci397pwO85gSY=) 2: 3008AF948C4742A525201F3FDA7EFB1800D52D64.crl (hash: 3Ju5AX6VC+J7xtvHkFMo4uZCgAoxSM7S1aAb3CYAVcE=) 3: 3135372e31352e34362e302f32342d3234203d3e20313532333936.roa (hash: mMVF2hYAKg0sTXxaBuy+2bvelwvkw1QteJi5RAQF2oo=) 4: 3135372e31352e34372e302f32342d3234203d3e20313532333936.roa (hash: 2sgMNPvdPKPmSXukXACjrwvtdQ3QHDjRcB3RK3DeklA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:4e:b8:fd:7b:5f:82:e0:67:ff:90:f5:16:0a:42:b3:20:fb:ee:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Validity Not Before: Apr 26 23:56:54 2025 GMT Not After : Apr 30 03:40:54 2025 GMT Subject: CN=C178FFC8DC72F9D35308FA7AE1DF13B847F6157E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a1:73:73:18:4b:be:5a:21:c9:ee:1a:18:10: 86:79:7b:aa:aa:83:53:65:fd:c5:dc:15:e1:a8:40: 61:9b:b7:de:42:6d:b2:59:b9:18:79:28:f5:02:60: 4d:22:2c:01:b0:94:76:22:4c:bb:3e:88:03:7f:08: 6b:92:8e:63:c3:50:0c:40:5a:3f:09:c1:9a:f6:20: 9a:64:a6:8d:4b:36:eb:78:54:3e:d8:3c:96:7a:3d: df:b9:d8:c6:16:e9:1f:39:af:c7:99:c3:21:1f:da: ad:0f:d0:ee:46:10:6a:01:12:b7:3c:6b:62:1c:ea: 49:de:41:a2:13:81:42:f6:4d:81:28:a2:47:1a:94: 9e:0e:36:24:0f:0a:75:54:bf:7c:a8:30:d5:1d:83: 43:a6:73:45:be:bf:3b:b4:a4:56:2d:33:92:f8:a4: 38:8b:7b:91:4b:7a:9c:05:f7:e2:f0:81:ed:41:f4: f4:40:48:e2:04:12:ec:2f:06:3c:f1:01:5e:76:b2: 00:b0:9e:3d:0c:7c:b8:7e:61:ed:e8:fa:82:ee:1f: 14:0a:7b:83:6b:f4:a5:81:62:6f:e2:ba:f1:55:6b: 07:dd:72:fb:5f:45:ef:e5:36:57:5e:a4:42:45:83: fe:b8:25:d9:46:b2:37:ba:3b:94:09:6e:10:fc:30: 91:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:78:FF:C8:DC:72:F9:D3:53:08:FA:7A:E1:DF:13:B8:47:F6:15:7E X509v3 Authority Key Identifier: keyid:30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:c1:c4:50:f7:07:7c:e9:a4:27:2a:da:82:9a:48:ac:22:07: bc:37:93:10:96:b2:60:81:b7:87:c0:f8:5c:f3:54:60:61:85: bb:47:06:3b:ee:62:19:1f:8c:37:37:9b:dd:2e:d9:74:64:7c: 07:f5:81:43:90:f9:d0:2a:08:d4:c1:b4:b2:8c:23:64:0f:bb: c3:63:c3:5c:0c:ff:f9:da:ef:27:bf:6e:c4:c1:1e:30:8b:d1: e1:2a:2e:75:4f:d4:36:2b:a4:09:08:31:72:bc:07:93:e7:0c: ee:85:a4:3e:ed:83:ef:d7:f7:a9:24:0f:9b:c5:d1:12:89:9e: f4:65:f2:b9:01:e9:82:d7:79:d3:7b:3d:74:06:73:9a:ba:c4: 1e:fa:a2:11:4d:11:d4:2c:6a:2d:8f:5d:19:7c:ba:fb:2f:8a: d3:3f:9c:41:be:cc:c1:d6:9d:4b:b3:18:a9:0c:44:bc:95:28: 5c:70:04:bb:c3:c2:45:61:a0:b0:7b:75:11:ff:2c:c5:a3:0f: 15:78:af:29:f3:d9:ab:6d:77:9b:65:3a:fb:4f:45:55:da:a3: 0e:9f:b4:56:e8:a5:2e:34:2a:99:1f:44:0f:17:b2:f8:91:6e: de:61:43:14:4f:c5:6c:b4:8b:4a:25:22:dc:9f:ee:fb:c5:c3: fa:03:05:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDE64/XtfguBn/5D1FgpCsyD77iswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgw MEQ1MkQ2NDAeFw0yNTA0MjYyMzU2NTRaFw0yNTA0MzAwMzQwNTRaMDMxMTAvBgNV BAMTKEMxNzhGRkM4REM3MkY5RDM1MzA4RkE3QUUxREYxM0I4NDdGNjE1N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHoXNzGEu+WiHJ7hoYEIZ5e6qq g1Nl/cXcFeGoQGGbt95CbbJZuRh5KPUCYE0iLAGwlHYiTLs+iAN/CGuSjmPDUAxA Wj8JwZr2IJpkpo1LNut4VD7YPJZ6Pd+52MYW6R85r8eZwyEf2q0P0O5GEGoBErc8 a2Ic6kneQaITgUL2TYEookcalJ4ONiQPCnVUv3yoMNUdg0Omc0W+vzu0pFYtM5L4 pDiLe5FLepwF9+Lwge1B9PRASOIEEuwvBjzxAV52sgCwnj0MfLh+Ye3o+oLuHxQK e4Nr9KWBYm/iuvFVawfdcvtfRe/lNldepEJFg/64JdlGsje6O5QJbhD8MJH9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwXj/yNxy+dNTCPp64d8TuEf2FX4wHwYDVR0j BBgwFoAUMAivlIxHQqUlIB8/2n77GADVLWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzM0ZWVkOS0xODdlLTRmNDYtYTViYi0wZWE4ZjY2OWFlOTAvMC8zMDA4QUY5NDhD NDc0MkE1MjUyMDFGM0ZEQTdFRkIxODAwRDUyRDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgwMEQ1 MkQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGMzNGVlZDktMTg3ZS00ZjQ2LWE1 YmItMGVhOGY2NjlhZTkwLzAvMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZC MTgwMEQ1MkQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLBxFD3B3zppCcq2oKaSKwiB7w3kxCWsmCB t4fA+FzzVGBhhbtHBjvuYhkfjDc3m90u2XRkfAf1gUOQ+dAqCNTBtLKMI2QPu8Nj w1wM//na7ye/bsTBHjCL0eEqLnVP1DYrpAkIMXK8B5PnDO6FpD7tg+/X96kkD5vF 0RKJnvRl8rkB6YLXedN7PXQGc5q6xB76ohFNEdQsai2PXRl8uvsvitM/nEG+zMHW nUuzGKkMRLyVKFxwBLvDwkVhoLB7dRH/LMWjDxV4rynz2attd5tlOvtPRVXaow6f tFbopS40KpkfRA8XsviRbt5hQxRPxWy0i0olItyf7vvFw/oDBUQ= -----END CERTIFICATE-----Generated at Sun Apr 27 10:10:53 2025 by rpki-client