$ rpki-client -vvf repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft File: 082F7822D1C63E1ED5DA833913215FE68925FF6E.mft (raw, json) Hash identifier: NKWaD+KcP7Au2nuA+LyiOmeXpcki1pC/aHZcLRsZXsY= Subject key identifier: C9:2A:BA:FC:0A:F9:6B:50:32:92:61:D1:DA:B5:C0:F3:0B:BB:F7:2C Authority key identifier: 08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E Certificate issuer: /CN=082F7822D1C63E1ED5DA833913215FE68925FF6E Certificate serial: 38CDF34B7688D202FF3081E5A444E1F20ABC00ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft Manifest number: 0304 Signing time: Mon 28 Apr 2025 02:00:35 +0000 Manifest this update: Mon 28 Apr 2025 01:55:35 +0000 Manifest next update: Thu 01 May 2025 13:36:35 +0000 Files and hashes: 1: 082F7822D1C63E1ED5DA833913215FE68925FF6E.crl (hash: sGz8Lb/cBOu3c4sbyAmyApyEsq7u01Vaa8epgtF1IGA=) 2: 3130332e3137322e3131382e302f32342d3234203d3e20313432333935.roa (hash: 0t0e2dlzNcSNOxgzqAzFKq2/WhHtKwH2MrCSPrjZMeQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 13:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:cd:f3:4b:76:88:d2:02:ff:30:81:e5:a4:44:e1:f2:0a:bc:00:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082F7822D1C63E1ED5DA833913215FE68925FF6E Validity Not Before: Apr 28 01:55:35 2025 GMT Not After : May 1 13:36:35 2025 GMT Subject: CN=C92ABAFC0AF96B50329261D1DAB5C0F30BBBF72C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7f:38:7b:67:4b:a6:50:d2:c7:ae:d3:c6:ac: 0d:3e:20:3e:7c:8c:a1:0d:3f:59:f5:57:68:c1:10: 9b:fe:25:77:5f:75:98:94:5f:12:95:11:cd:5a:8e: ee:56:a0:11:45:aa:60:b5:ab:d6:1f:e0:03:5f:86: 43:0d:a9:12:95:4b:e3:15:60:5b:76:d9:21:5b:98: 44:03:93:39:b5:4d:43:06:90:f5:a7:25:b1:87:27: 60:86:02:44:a8:f5:3c:b4:a6:81:aa:98:7a:68:9e: d2:36:ec:42:94:95:1e:5c:4e:60:34:45:33:01:ce: b3:85:7b:55:3e:96:ca:6d:a9:ed:5c:a8:6e:2b:7a: c9:b4:9d:6e:6b:58:7e:c4:0f:5f:a0:10:7c:6a:6f: 1c:15:a7:3a:be:c1:b7:bc:7d:77:85:d2:d8:d0:d1: db:c1:1e:1a:f9:84:d0:ce:22:37:89:bb:43:12:89: 14:a6:23:f8:7b:1c:d2:79:19:53:4e:83:59:90:ed: f5:db:3d:3c:02:89:28:62:18:a1:da:d5:6e:3c:5e: 0b:22:35:f7:95:b7:2c:08:bb:bd:9e:1c:26:c4:b0: b8:36:de:72:82:79:93:93:86:96:7c:68:d2:d7:d0: ff:68:50:ef:d2:19:10:d2:9a:c9:b3:68:87:83:d6: b0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2A:BA:FC:0A:F9:6B:50:32:92:61:D1:DA:B5:C0:F3:0B:BB:F7:2C X509v3 Authority Key Identifier: keyid:08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:65:66:93:ae:84:3e:37:c8:21:7b:fa:1b:cd:3b:83:8e:d3: 0c:49:cd:3e:6e:a8:58:9f:a7:f4:0b:f4:7e:04:bd:57:de:e2: 2f:b1:0b:02:2c:43:53:e8:52:bb:db:d3:2d:e4:20:68:a3:02: f3:c3:d6:8b:a4:e8:cb:79:36:79:8a:fb:11:b7:60:35:cd:6f: 1e:69:1c:fe:98:10:7a:59:7e:e3:96:f4:48:13:41:c4:c9:f9: 49:b9:17:ed:bb:49:62:df:b2:08:b0:88:4f:12:49:53:03:7a: 4e:43:9f:55:ef:b5:60:67:85:e2:ef:e4:52:a0:96:d9:d8:3d: 4e:30:82:fc:d1:93:31:48:a0:ce:28:f9:1a:ca:24:93:37:79: 64:2d:e3:dc:63:76:e5:fc:89:8c:b2:24:de:50:5d:ff:70:3c: c0:9f:c9:03:29:c5:a6:05:f6:c6:02:19:58:1d:b2:e9:97:73: 70:ad:d7:4e:bd:32:9b:f3:89:03:5e:aa:cc:e3:4d:c8:df:0e: 40:43:7a:35:49:d6:13:d0:e9:72:6f:ae:85:9f:a5:60:a9:59: 27:72:a6:54:4c:42:6c:57:68:9c:ee:bf:2b:10:fa:69:3c:69: 94:bb:23:b3:3a:07:d5:ce:bb:39:49:64:79:9e:a8:5d:e4:ec: f9:03:f6:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOM3zS3aI0gL/MIHlpETh8gq8AO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVGRTY4 OTI1RkY2RTAeFw0yNTA0MjgwMTU1MzVaFw0yNTA1MDExMzM2MzVaMDMxMTAvBgNV BAMTKEM5MkFCQUZDMEFGOTZCNTAzMjkyNjFEMURBQjVDMEYzMEJCQkY3MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdfzh7Z0umUNLHrtPGrA0+ID58 jKENP1n1V2jBEJv+JXdfdZiUXxKVEc1aju5WoBFFqmC1q9Yf4ANfhkMNqRKVS+MV YFt22SFbmEQDkzm1TUMGkPWnJbGHJ2CGAkSo9Ty0poGqmHpontI27EKUlR5cTmA0 RTMBzrOFe1U+lsptqe1cqG4resm0nW5rWH7ED1+gEHxqbxwVpzq+wbe8fXeF0tjQ 0dvBHhr5hNDOIjeJu0MSiRSmI/h7HNJ5GVNOg1mQ7fXbPTwCiShiGKHa1W48Xgsi NfeVtywIu72eHCbEsLg23nKCeZOThpZ8aNLX0P9oUO/SGRDSmsmzaIeD1rDLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUySq6/Ar5a1AykmHR2rXA8wu79ywwHwYDVR0j BBgwFoAUCC94ItHGPh7V2oM5EyFf5okl/24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDRlOTdkMy03MWMzLTRkMGEtOGIwNC03MDg4ZmUzODJiYzMvMC8wODJGNzgyMkQx QzYzRTFFRDVEQTgzMzkxMzIxNUZFNjg5MjVGRjZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVGRTY4OTI1 RkY2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA0ZTk3ZDMtNzFjMy00ZDBhLThi MDQtNzA4OGZlMzgyYmMzLzAvMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVG RTY4OTI1RkY2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExlZpOuhD43yCF7+hvNO4OO0wxJzT5uqFif p/QL9H4EvVfe4i+xCwIsQ1PoUrvb0y3kIGijAvPD1ouk6Mt5NnmK+xG3YDXNbx5p HP6YEHpZfuOW9EgTQcTJ+Um5F+27SWLfsgiwiE8SSVMDek5Dn1XvtWBnheLv5FKg ltnYPU4wgvzRkzFIoM4o+RrKJJM3eWQt49xjduX8iYyyJN5QXf9wPMCfyQMpxaYF 9sYCGVgdsumXc3Ct1069MpvziQNeqszjTcjfDkBDejVJ1hPQ6XJvroWfpWCpWSdy plRMQmxXaJzuvysQ+mk8aZS7I7M6B9XOuzlJZHmeqF3k7PkD9vQ= -----END CERTIFICATE-----Generated at Wed Apr 30 03:43:02 2025 by rpki-client