$ rpki-client -vvf repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft File: 2370B87417B78EB4410F4394F29FB327D1401F0D.mft (raw, json) Hash identifier: 0LSnkGCQjTVaYLLI0d3EMTDcCMK7D2ATlCwGOns/5+U= Subject key identifier: F1:7C:9A:25:EF:6D:08:B0:96:86:43:96:4D:3B:AD:F1:24:FB:B1:23 Authority key identifier: 23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D Certificate issuer: /CN=2370B87417B78EB4410F4394F29FB327D1401F0D Certificate serial: 64A208F3601B0FB837A344D3860893940F95CEE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft Manifest number: 018E Signing time: Mon 28 Apr 2025 15:51:46 +0000 Manifest this update: Mon 28 Apr 2025 15:46:46 +0000 Manifest next update: Thu 01 May 2025 21:24:46 +0000 Files and hashes: 1: 2370B87417B78EB4410F4394F29FB327D1401F0D.crl (hash: uuI0cwEWiwTT2+FzVzEoq6HmQj7j5TSxXfoom+2xBoI=) 2: 3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (hash: EuZkuHIlSaj82xE0GWoz4GAtuFIhoF+l9vRSJspBJV0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:a2:08:f3:60:1b:0f:b8:37:a3:44:d3:86:08:93:94:0f:95:ce:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2370B87417B78EB4410F4394F29FB327D1401F0D Validity Not Before: Apr 28 15:46:46 2025 GMT Not After : May 1 21:24:46 2025 GMT Subject: CN=F17C9A25EF6D08B0968643964D3BADF124FBB123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ef:86:3a:71:8e:52:a0:af:23:6f:4b:68:8f: 69:fb:83:c0:a7:2a:a7:56:86:52:9c:0e:f9:90:8a: 1c:d9:7a:a4:96:8b:79:af:18:4d:de:9e:64:77:75: f9:ce:16:00:b0:28:53:68:04:69:ea:0d:80:57:96: 15:6f:ba:2a:1d:63:19:22:e0:c0:d9:08:8d:6d:d6: 01:66:97:09:19:90:a8:43:00:c2:98:22:ee:be:23: 6e:c4:58:7c:70:fc:5d:51:ee:11:a8:12:ca:1b:2a: d3:2a:86:da:96:d9:1d:32:93:c3:f5:0e:53:e4:99: 70:db:85:c9:86:1d:4d:69:ff:41:7d:17:29:b1:b9: 21:f1:d5:32:df:d3:15:a4:02:2b:56:4a:17:54:60: 80:cc:71:2c:0c:d3:77:68:8b:75:36:c8:9b:e7:e4: 4f:cc:2b:bd:44:ad:1e:44:20:92:68:8c:d5:34:92: 59:31:2f:f0:d9:8f:14:eb:8e:21:6e:ee:1c:f9:a8: d9:fb:d2:fc:51:c9:5b:01:a6:9d:4e:40:22:0e:5b: 63:4d:41:ba:2b:ad:c3:c9:04:4e:ca:fd:48:9d:ac: 55:a4:62:1e:1e:f9:e0:e0:e2:b7:68:5f:21:e1:1c: 64:71:c6:ed:dc:68:bf:80:a9:35:42:1c:ef:89:81: 94:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7C:9A:25:EF:6D:08:B0:96:86:43:96:4D:3B:AD:F1:24:FB:B1:23 X509v3 Authority Key Identifier: keyid:23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:99:81:09:7f:73:a2:35:bc:6d:47:2d:57:c7:1d:06:81:bd: 60:fa:3c:d4:5a:57:be:5c:56:63:9c:e6:3c:4d:9e:94:9f:77: 51:39:50:ce:89:eb:b7:fc:a1:2b:7a:96:26:c2:81:8e:00:59: 8b:db:2f:76:20:97:03:dc:c3:9b:49:8b:0f:78:8d:cd:cb:01: c2:0b:c5:61:58:fe:37:58:48:5f:f0:83:95:18:00:8c:1d:93: 66:02:2f:68:ab:68:d5:65:18:a0:83:b3:59:c6:0d:b7:e2:54: 03:14:eb:8d:87:ba:bf:2a:61:ec:a7:9b:d4:87:c2:3c:4c:11: 2b:7d:e9:87:3e:da:92:d9:f9:ae:17:0e:93:5a:ac:dc:7d:39: 1f:19:33:97:fc:a5:d4:9b:15:b1:4e:b9:87:27:82:f5:1b:f4: 30:0c:cc:75:e1:0a:58:0b:94:c8:e1:60:42:95:f7:fc:4c:61: 72:e8:16:41:5b:5e:66:14:84:63:1b:28:0b:6e:d9:d4:d9:14: 41:f8:78:a2:94:24:ea:f1:75:2a:72:39:00:a6:1b:7d:eb:6e: c1:16:23:45:21:69:e7:24:03:3f:d3:be:9e:d4:24:42:70:63: 60:50:f4:00:71:05:73:39:23:e4:c6:95:6d:86:2c:43:47:09: ca:72:5c:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZKII82AbD7g3o0TThgiTlA+VzugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdE MTQwMUYwRDAeFw0yNTA0MjgxNTQ2NDZaFw0yNTA1MDEyMTI0NDZaMDMxMTAvBgNV BAMTKEYxN0M5QTI1RUY2RDA4QjA5Njg2NDM5NjREM0JBREYxMjRGQkIxMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh74Y6cY5SoK8jb0toj2n7g8Cn KqdWhlKcDvmQihzZeqSWi3mvGE3enmR3dfnOFgCwKFNoBGnqDYBXlhVvuiodYxki 4MDZCI1t1gFmlwkZkKhDAMKYIu6+I27EWHxw/F1R7hGoEsobKtMqhtqW2R0yk8P1 DlPkmXDbhcmGHU1p/0F9FymxuSHx1TLf0xWkAitWShdUYIDMcSwM03doi3U2yJvn 5E/MK71ErR5EIJJojNU0klkxL/DZjxTrjiFu7hz5qNn70vxRyVsBpp1OQCIOW2NN QborrcPJBE7K/UidrFWkYh4e+eDg4rdoXyHhHGRxxu3caL+AqTVCHO+JgZRNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8XyaJe9tCLCWhkOWTTut8ST7sSMwHwYDVR0j BBgwFoAUI3C4dBe3jrRBD0OU8p+zJ9FAHw0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzRkMGJmOS1jYzlhLTQyYTMtODMwYS03NmY2ZDMyYjJmNDUvMC8yMzcwQjg3NDE3 Qjc4RUI0NDEwRjQzOTRGMjlGQjMyN0QxNDAxRjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdEMTQw MUYwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc0ZDBiZjktY2M5YS00MmEzLTgz MGEtNzZmNmQzMmIyZjQ1LzAvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIz MjdEMTQwMUYwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2ZgQl/c6I1vG1HLVfHHQaBvWD6PNRaV75c VmOc5jxNnpSfd1E5UM6J67f8oSt6libCgY4AWYvbL3YglwPcw5tJiw94jc3LAcIL xWFY/jdYSF/wg5UYAIwdk2YCL2iraNVlGKCDs1nGDbfiVAMU642Hur8qYeynm9SH wjxMESt96Yc+2pLZ+a4XDpNarNx9OR8ZM5f8pdSbFbFOuYcngvUb9DAMzHXhClgL lMjhYEKV9/xMYXLoFkFbXmYUhGMbKAtu2dTZFEH4eKKUJOrxdSpyOQCmG33rbsEW I0UhaeckAz/Tvp7UJEJwY2BQ9ABxBXM5I+TGlW2GLENHCcpyXFk= -----END CERTIFICATE-----Generated at Wed Apr 30 00:12:44 2025 by rpki-client