$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft File: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft (raw, json) Hash identifier: YaGPzvDLtwuX1LJKtKfXDiiDwSLN7OztEFUOWdQdXqU= Subject key identifier: BE:6D:67:B5:4C:29:60:2D:4E:30:30:04:91:36:DC:BA:5B:A4:47:2B Authority key identifier: CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C Certificate issuer: /CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Certificate serial: 76808E4313CBFC01FA72CCDF31230D576827DB4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft Manifest number: 5C Signing time: Thu 03 Apr 2025 17:20:47 +0000 Manifest this update: Thu 03 Apr 2025 17:15:47 +0000 Manifest next update: Mon 07 Apr 2025 04:52:47 +0000 Files and hashes: 1: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl (hash: PQmnqNuZoUESfW4WVK2vo/jOpCai8ovgQ1FczTzmzMY=) 2: 323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa (hash: dDmCVVYb9HZ/Ddemxknj4E267gWucRzWDlYywaLyJ1w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 04:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:80:8e:43:13:cb:fc:01:fa:72:cc:df:31:23:0d:57:68:27:db:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Validity Not Before: Apr 3 17:15:47 2025 GMT Not After : Apr 7 04:52:47 2025 GMT Subject: CN=BE6D67B54C29602D4E3030049136DCBA5BA4472B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:35:fb:d2:9d:7c:f1:05:4e:41:df:19:c6:55: ea:db:03:6c:5a:05:6f:d6:4c:95:99:da:6c:27:c2: 0e:40:c8:03:e2:56:58:7a:a5:2b:fa:5a:b5:80:a3: 08:6f:d3:f8:1f:cc:f0:3b:2b:7b:d2:ff:bf:72:60: 1b:14:75:79:dc:2a:8e:1f:ab:d9:71:28:fc:f6:03: 21:58:51:c9:b3:43:62:7a:24:80:75:1d:74:c5:9d: 57:e8:89:f2:37:74:5c:77:8b:a2:d3:58:4e:96:e4: e5:95:a0:99:7d:91:9f:7c:bc:92:1a:f4:7d:98:68: bc:e6:0b:84:f6:97:41:f8:3b:65:da:06:6c:49:c3: 85:03:c8:e4:c1:be:f4:e6:55:dc:0b:ec:f2:49:2d: 17:22:b2:7a:fd:37:05:bd:09:d6:93:b6:76:36:9e: a6:a8:60:6b:b7:df:44:2f:85:c0:91:f9:35:d5:4f: 94:cd:4d:89:45:80:2b:54:01:b6:c0:23:22:88:29: 89:e4:b3:12:84:de:60:30:cc:3b:2d:86:ae:d6:39: 52:c7:05:d9:43:eb:6e:21:a7:87:b7:82:25:50:e6: 58:21:f5:20:de:5c:be:b0:c2:02:15:1a:ed:a7:d2: da:d0:98:e4:e4:88:18:98:01:ab:05:05:e5:33:6a: fa:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:6D:67:B5:4C:29:60:2D:4E:30:30:04:91:36:DC:BA:5B:A4:47:2B X509v3 Authority Key Identifier: keyid:CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:82:9d:94:33:a7:99:fc:dc:f5:2d:53:c6:75:51:54:a1:1a: 45:90:3e:a6:4a:7d:b6:be:74:2c:7d:33:d1:47:dc:0b:88:1c: 67:47:37:8f:00:ff:36:1c:1c:73:e6:cc:ee:ef:27:4a:84:40: 7b:82:7b:f4:ed:f0:9a:74:05:0b:ca:29:b7:31:4d:2b:45:3a: c6:9d:58:78:21:73:46:23:e4:c3:d7:29:ab:76:97:2c:0a:c9: aa:d7:36:c1:35:49:73:06:7d:e2:8f:a7:d5:fa:d5:c1:15:06: f9:00:26:15:fb:90:69:47:ec:35:7f:9e:13:2c:73:19:86:3f: d6:ae:e5:2b:3b:0b:f0:99:e9:85:8b:16:8e:5b:16:ca:c4:27: ea:51:b1:be:72:be:3c:2f:a2:01:cb:0e:88:c5:9e:54:98:73: a2:ee:5a:41:25:53:22:27:cf:01:d3:29:f3:7c:7b:85:29:15: ed:b2:af:e7:57:ee:fc:c4:f4:57:a1:56:ce:f6:cc:45:cd:98: 06:68:c9:0c:be:32:96:15:9c:30:8c:2b:82:a9:41:47:d4:dd: 8e:8a:34:c7:df:05:6f:f6:b5:c6:f6:57:87:51:fd:93:ae:74: ba:57:d1:a5:be:9d:5e:c4:00:8b:d2:9a:a3:77:63:55:82:26: 94:a6:c7:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdoCOQxPL/AH6cszfMSMNV2gn20wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5 OUE2MzA2QzAeFw0yNTA0MDMxNzE1NDdaFw0yNTA0MDcwNDUyNDdaMDMxMTAvBgNV BAMTKEJFNkQ2N0I1NEMyOTYwMkQ0RTMwMzAwNDkxMzZEQ0JBNUJBNDQ3MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhNfvSnXzxBU5B3xnGVerbA2xa BW/WTJWZ2mwnwg5AyAPiVlh6pSv6WrWAowhv0/gfzPA7K3vS/79yYBsUdXncKo4f q9lxKPz2AyFYUcmzQ2J6JIB1HXTFnVfoifI3dFx3i6LTWE6W5OWVoJl9kZ98vJIa 9H2YaLzmC4T2l0H4O2XaBmxJw4UDyOTBvvTmVdwL7PJJLRcisnr9NwW9CdaTtnY2 nqaoYGu330QvhcCR+TXVT5TNTYlFgCtUAbbAIyKIKYnksxKE3mAwzDsthq7WOVLH BdlD624hp4e3giVQ5lgh9SDeXL6wwgIVGu2n0trQmOTkiBiYAasFBeUzavprAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvm1ntUwpYC1OMDAEkTbculukRyswHwYDVR0j BBgwFoAUz6Sbjl2aCLegF+Ww+Ifoj5mmMGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMS9DRkE0OUI4RTVE OUEwOEI3QTAxN0U1QjBGODg3RTg4Rjk5QTYzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5OUE2 MzA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzEvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4 OEY5OUE2MzA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWCnZQzp5n83PUtU8Z1UVShGkWQPqZKfba+ dCx9M9FH3AuIHGdHN48A/zYcHHPmzO7vJ0qEQHuCe/Tt8Jp0BQvKKbcxTStFOsad WHghc0Yj5MPXKat2lywKyarXNsE1SXMGfeKPp9X61cEVBvkAJhX7kGlH7DV/nhMs cxmGP9au5Ss7C/CZ6YWLFo5bFsrEJ+pRsb5yvjwvogHLDojFnlSYc6LuWkElUyIn zwHTKfN8e4UpFe2yr+dX7vzE9FehVs72zEXNmAZoyQy+MpYVnDCMK4KpQUfU3Y6K NMffBW/2tcb2V4dR/ZOudLpX0aW+nV7EAIvSmqN3Y1WCJpSmx2E= -----END CERTIFICATE-----Generated at Sat Apr 5 19:11:15 2025 by rpki-client