$ rpki-client -vvf repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft File: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft (raw, json) Hash identifier: 8jDarrcfMWr2EykwEOJd9j+Z2zHdOPUuh/WmSekFlDw= Subject key identifier: D9:49:BC:90:14:F1:71:B0:97:64:83:09:C0:62:E5:12:E0:48:B5:EA Authority key identifier: 4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD Certificate issuer: /CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Certificate serial: 3EC186086754BCD4BD495936A7239E398048E140 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft Manifest number: AF Signing time: Mon 28 Apr 2025 08:41:34 +0000 Manifest this update: Mon 28 Apr 2025 08:36:34 +0000 Manifest next update: Thu 01 May 2025 16:17:34 +0000 Files and hashes: 1: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl (hash: uQvRsqV5PYx9GCZbiwZXsqy3YG1+QOIYX3PolQhkfnQ=) 2: 3135372e31302e36332e302f32342d3234203d3e20313532303835.roa (hash: 9mpAVpAO+aHJhHpBlGcLDx3eGU5On+hoBdAGOhixT1Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:c1:86:08:67:54:bc:d4:bd:49:59:36:a7:23:9e:39:80:48:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Validity Not Before: Apr 28 08:36:34 2025 GMT Not After : May 1 16:17:34 2025 GMT Subject: CN=D949BC9014F171B097648309C062E512E048B5EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c6:9e:2f:01:bb:bc:e0:87:4e:fa:80:2e:9c: 81:a5:50:6c:3c:c6:b2:c1:5c:f7:4c:c7:ad:0a:88: fc:94:74:0f:15:1d:81:2f:69:fa:81:53:25:8d:c7: a1:e8:47:7c:4e:eb:bc:28:ec:81:eb:e7:79:88:f9: c6:50:21:14:de:7d:28:0d:14:47:6a:e6:4f:f3:d9: 3f:1a:ba:2c:08:71:8e:a5:14:f2:87:93:af:1a:15: c9:ff:ea:10:b4:40:e9:8c:aa:b7:a8:b3:7c:3a:04: 5c:3c:c3:1f:a1:b2:56:36:b9:8b:be:f9:24:90:28: f8:dc:0d:40:98:a0:c2:10:90:30:8d:55:fb:2a:d0: 8f:b1:ff:e2:85:dd:0a:0c:14:1f:af:de:43:7d:fa: c3:f3:39:b1:c1:69:15:be:2b:ef:91:88:6d:70:f4: 0f:fb:d7:15:13:7e:64:2b:ae:d8:4e:4d:58:e6:aa: 58:30:50:98:8a:d7:2b:2d:8b:a1:d2:34:5e:ad:4c: 23:32:7d:32:78:02:33:04:de:73:6f:fc:7a:0a:f5: b4:7d:6f:44:65:4d:6f:df:c0:9b:ea:b5:a4:77:22: 1f:8e:b4:38:2d:55:00:ec:ff:0f:6e:a2:7c:a9:e6: 15:6b:5f:cf:14:15:e9:87:75:9b:68:80:e2:ec:7e: 59:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:49:BC:90:14:F1:71:B0:97:64:83:09:C0:62:E5:12:E0:48:B5:EA X509v3 Authority Key Identifier: keyid:4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:2c:4a:ff:fa:99:82:91:e8:b5:d0:a0:78:45:41:ae:a5:af: 4f:e4:a0:ca:a9:d8:3a:64:03:18:70:c0:9e:12:9c:22:f8:3b: eb:28:f8:ea:67:43:89:fe:40:40:55:75:00:56:4e:5c:6b:d2: a3:a2:1c:ef:e9:ce:e8:b4:90:de:34:d0:3f:fd:3b:67:22:d9: ca:36:0f:41:b1:17:3a:93:51:1f:9e:53:8d:a8:7c:ea:0f:33: 9e:92:cd:74:70:9b:d8:23:54:d7:b6:44:33:b8:c0:8a:8e:a1: 15:b5:7c:f1:3c:94:6b:6d:17:d6:a4:b7:2a:e7:c5:ef:cc:c3: 25:51:ec:67:28:8c:68:56:f3:a6:81:25:13:bf:07:a1:65:19: 36:59:e8:ba:af:07:48:01:0c:00:7d:97:2f:3b:08:79:df:6c: fa:81:d8:c2:0d:b3:15:6e:c8:a8:f4:0f:06:3e:b7:ec:51:0a: 15:24:0d:97:18:f2:38:20:70:8a:6c:6d:d0:d9:10:ee:6d:73: 8a:0f:73:dc:3f:47:2c:16:6f:4a:29:25:ea:fd:e8:55:d1:d4: 5c:25:93:1e:72:8b:05:ae:29:6d:ba:9a:4c:a2:d1:e4:78:78: 36:4b:86:4d:3e:40:85:31:4a:64:ed:4e:a9:9d:6e:ac:8e:5c: 8b:0d:e4:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPsGGCGdUvNS9SVk2pyOeOYBI4UAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUw QkU1MkNCRDAeFw0yNTA0MjgwODM2MzRaFw0yNTA1MDExNjE3MzRaMDMxMTAvBgNV BAMTKEQ5NDlCQzkwMTRGMTcxQjA5NzY0ODMwOUMwNjJFNTEyRTA0OEI1RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4xp4vAbu84IdO+oAunIGlUGw8 xrLBXPdMx60KiPyUdA8VHYEvafqBUyWNx6HoR3xO67wo7IHr53mI+cZQIRTefSgN FEdq5k/z2T8auiwIcY6lFPKHk68aFcn/6hC0QOmMqreos3w6BFw8wx+hslY2uYu+ +SSQKPjcDUCYoMIQkDCNVfsq0I+x/+KF3QoMFB+v3kN9+sPzObHBaRW+K++RiG1w 9A/71xUTfmQrrthOTVjmqlgwUJiK1ysti6HSNF6tTCMyfTJ4AjME3nNv/HoK9bR9 b0RlTW/fwJvqtaR3Ih+OtDgtVQDs/w9uonyp5hVrX88UFemHdZtogOLsfllvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Um8kBTxcbCXZIMJwGLlEuBIteowHwYDVR0j BBgwFoAUSjd2TMgNG4poGeDw8UVGbgvlLL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDNhMmZkZi1iY2JhLTQ3NTctYjM2Ni1lMWEwYWQyZDM3NGEvMC80QTM3NzY0Q0M4 MEQxQjhBNjgxOUUwRjBGMTQ1NDY2RTBCRTUyQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUwQkU1 MkNCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQzYTJmZGYtYmNiYS00NzU3LWIz NjYtZTFhMGFkMmQzNzRhLzAvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2 NkUwQkU1MkNCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJksSv/6mYKR6LXQoHhFQa6lr0/koMqp2Dpk AxhwwJ4SnCL4O+so+OpnQ4n+QEBVdQBWTlxr0qOiHO/pzui0kN400D/9O2ci2co2 D0GxFzqTUR+eU42ofOoPM56SzXRwm9gjVNe2RDO4wIqOoRW1fPE8lGttF9aktyrn xe/MwyVR7GcojGhW86aBJRO/B6FlGTZZ6LqvB0gBDAB9ly87CHnfbPqB2MINsxVu yKj0DwY+t+xRChUkDZcY8jggcIpsbdDZEO5tc4oPc9w/RywWb0opJer96FXR1Fwl kx5yiwWuKW26mkyi0eR4eDZLhk0+QIUxSmTtTqmdbqyOXIsN5Ac= -----END CERTIFICATE-----Generated at Wed Apr 30 10:03:40 2025 by rpki-client