$ rpki-client -vvf repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft File: 2D0745D26E59440CB71FAFE996834493DA753248.mft (raw, json) Hash identifier: rKUKMLgNbBtJQsEY2pjqcDn5HggsX38nU52X5ymyF8o= Subject key identifier: 34:52:A6:5E:34:D3:1E:EB:7C:93:FC:A2:2A:EC:6C:29:00:64:36:2C Authority key identifier: 2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48 Certificate issuer: /CN=2D0745D26E59440CB71FAFE996834493DA753248 Certificate serial: 2C48A9DC13EFC9CB37636DDB22C12AC6D1EA7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft Manifest number: 0199 Signing time: Thu 17 Apr 2025 05:20:48 +0000 Manifest this update: Thu 17 Apr 2025 05:15:48 +0000 Manifest next update: Sun 20 Apr 2025 16:37:48 +0000 Files and hashes: 1: 3130332e37332e3135392e302f32342d3234203d3e20313338383836.roa (hash: 3BxgBY3dX8feRwsm1hvpch2b234JpMx6XR/YBvSI5jE=) 2: 2D0745D26E59440CB71FAFE996834493DA753248.crl (hash: MXv89fRCb/i1OEdY8pootmWzrfdwIwezXAMY5D7O0b4=) 3: 3130332e37332e3135382e302f32342d3234203d3e203234343239.roa (hash: ujITe6uXtdvP5WOayQADk+Rg7asyYqwio86khyT1Nho=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.crl rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 16:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:48:a9:dc:13:ef:c9:cb:37:63:6d:db:22:c1:2a:c6:d1:ea:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0745D26E59440CB71FAFE996834493DA753248 Validity Not Before: Apr 17 05:15:48 2025 GMT Not After : Apr 20 16:37:48 2025 GMT Subject: CN=3452A65E34D31EEB7C93FCA22AEC6C290064362C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a7:b2:fb:a2:94:35:db:50:85:1c:e6:93:f7: 49:e5:dd:4a:fb:ea:97:76:29:3c:e6:a7:b7:8c:87: 0a:54:e6:1c:04:4d:84:a6:85:e3:6b:0a:29:71:bf: f2:7e:3d:3b:ec:41:f1:51:31:d6:17:5a:ba:63:78: ab:00:ce:f9:4f:ea:fc:fa:ab:05:8a:28:6c:41:71: 8f:66:12:75:7a:39:e1:a6:66:ce:69:32:ea:b4:bf: ec:68:b2:fa:b7:a1:a1:f1:1d:05:71:aa:36:b8:a3: e9:33:5f:ef:a3:50:5d:52:a5:02:c3:81:82:78:3d: f4:47:2d:c0:19:f7:6a:37:62:99:e1:6f:5d:a7:2c: 3d:e0:79:a6:2e:78:f6:80:86:9b:3a:3f:66:08:5b: d2:8a:d6:8e:53:80:e0:43:b4:42:0c:e1:5f:10:1d: 0f:29:55:be:80:44:e9:98:9e:0c:bd:b9:39:5d:85: dc:c7:d6:aa:c1:86:ae:32:27:63:70:c0:53:20:8f: 56:bd:8b:01:05:6d:76:70:0a:10:c5:04:f4:9f:88: d6:93:fe:a4:e6:5b:fb:ad:f3:c2:f7:06:f5:66:91: 02:20:fc:67:d6:00:f0:f0:b4:c5:68:23:9b:24:d8: 9c:16:46:c0:88:ac:51:5a:81:d5:bc:3b:d1:76:62: ab:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:52:A6:5E:34:D3:1E:EB:7C:93:FC:A2:2A:EC:6C:29:00:64:36:2C X509v3 Authority Key Identifier: keyid:2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:28:69:9f:46:c2:3c:09:8a:c6:e8:2c:0c:91:d7:35:26:c3: 7b:f4:32:68:41:9e:02:96:58:82:0f:26:43:f1:07:a1:b1:ca: 00:d8:aa:19:fa:8a:27:6a:be:95:c5:25:50:e2:14:64:7b:24: 85:9d:09:5f:1e:39:e0:a1:ca:c7:cb:c7:06:a3:6e:73:0f:26: 9f:cb:45:c3:c9:87:e4:1f:14:85:1d:d9:e4:66:5a:c3:a8:79: 3f:4c:6a:10:b7:1e:db:89:99:b7:23:d4:f2:3b:1d:89:6d:53: bd:41:55:a1:89:be:94:94:91:14:b6:12:20:aa:b8:7f:71:e1: 6c:72:f4:d8:75:bb:f8:73:fd:63:1c:15:12:7d:94:86:91:a2: 87:0b:30:db:f1:a1:5d:94:da:b0:99:54:95:b0:15:b0:cf:e4: b5:16:be:5b:8e:77:b5:fc:57:09:69:55:15:18:d3:2c:84:b4: 35:0d:00:5c:69:5d:39:16:7e:23:90:38:fd:9c:d2:e8:8e:71: 25:c3:9d:ae:7d:97:24:0c:37:d2:30:81:c0:01:22:49:23:06: f9:ad:03:f7:58:9c:e0:d1:16:ec:24:55:c0:99:88:54:45:e8: d1:54:19:32:08:b3:e3:61:c5:49:bb:1d:0b:f2:86:e2:3b:46: ff:cd:31:71 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITLEip3BPvycs3Y23bIsEqxtHqfzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygyRDA3NDVEMjZFNTk0NDBDQjcxRkFGRTk5NjgzNDQ5M0RB NzUzMjQ4MB4XDTI1MDQxNzA1MTU0OFoXDTI1MDQyMDE2Mzc0OFowMzExMC8GA1UE AxMoMzQ1MkE2NUUzNEQzMUVFQjdDOTNGQ0EyMkFFQzZDMjkwMDY0MzYyQzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM6nsvuilDXbUIUc5pP3SeXdSvvq l3YpPOant4yHClTmHARNhKaF42sKKXG/8n49O+xB8VEx1hdaumN4qwDO+U/q/Pqr BYoobEFxj2YSdXo54aZmzmky6rS/7Giy+rehofEdBXGqNrij6TNf76NQXVKlAsOB gng99EctwBn3ajdimeFvXacsPeB5pi549oCGmzo/Zghb0orWjlOA4EO0QgzhXxAd DylVvoBE6ZieDL25OV2F3MfWqsGGrjInY3DAUyCPVr2LAQVtdnAKEMUE9J+I1pP+ pOZb+63zwvcG9WaRAiD8Z9YA8PC0xWgjmyTYnBZGwIisUVqB1bw70XZiq7sCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQ0UqZeNNMe63yT/KIq7GwpAGQ2LDAfBgNVHSME GDAWgBQtB0XSbllEDLcfr+mWg0ST2nUySDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNh NDA2Y2RiLTE3OTEtNDc4ZC05ZDI4LTllMzdhNmY4MDljYy8wLzJEMDc0NUQyNkU1 OTQ0MENCNzFGQUZFOTk2ODM0NDkzREE3NTMyNDguY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi8yRDA3NDVEMjZFNTk0NDBDQjcxRkFGRTk5NjgzNDQ5M0RBNzUz MjQ4LmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8zYTQwNmNkYi0xNzkxLTQ3OGQtOWQy OC05ZTM3YTZmODA5Y2MvMC8yRDA3NDVEMjZFNTk0NDBDQjcxRkFGRTk5NjgzNDQ5 M0RBNzUzMjQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAdShpn0bCPAmKxugsDJHXNSbDe/QyaEGeApZY gg8mQ/EHobHKANiqGfqKJ2q+lcUlUOIUZHskhZ0JXx454KHKx8vHBqNucw8mn8tF w8mH5B8UhR3Z5GZaw6h5P0xqELce24mZtyPU8jsdiW1TvUFVoYm+lJSRFLYSIKq4 f3HhbHL02HW7+HP9YxwVEn2UhpGihwsw2/GhXZTasJlUlbAVsM/ktRa+W453tfxX CWlVFRjTLIS0NQ0AXGldORZ+I5A4/ZzS6I5xJcOdrn2XJAw30jCBwAEiSSMG+a0D 91ic4NEW7CRVwJmIVEXo0VQZMgiz42HFSbsdC/KG4jtG/80xcQ== -----END CERTIFICATE-----Generated at Fri Apr 18 06:48:24 2025 by rpki-client