$ rpki-client -vvf repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft File: 528A271B82B6185862B06F250499140113F6FE20.mft (raw, json) Hash identifier: mBllHOMFKES/iuoEbbp/SacuUbrVfYN0h3IYZ/e/cRA= Subject key identifier: C2:F0:CB:3C:5C:AC:7B:77:08:30:26:CA:21:07:AF:8F:28:3D:77:6F Authority key identifier: 52:8A:27:1B:82:B6:18:58:62:B0:6F:25:04:99:14:01:13:F6:FE:20 Certificate issuer: /CN=528A271B82B6185862B06F250499140113F6FE20 Certificate serial: 75B5A0ED1C5B429158EDD7B2F2647659C760A370 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A271B82B6185862B06F250499140113F6FE20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft Manifest number: 01CE Signing time: Thu 03 Apr 2025 17:10:56 +0000 Manifest this update: Thu 03 Apr 2025 17:05:56 +0000 Manifest next update: Mon 07 Apr 2025 04:10:56 +0000 Files and hashes: 1: 528A271B82B6185862B06F250499140113F6FE20.crl (hash: vbIn1Zx4iDe0DH+T22tor668gmA5S5c2c2kRsqOAK2w=) 2: 3130332e3138392e36302e302f32332d3234203d3e20313439373432.roa (hash: uC/qnArDdSiiufGjxuhvh3127pXhWNHzqVlIjcIb2ME=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.crl rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A271B82B6185862B06F250499140113F6FE20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 04:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:b5:a0:ed:1c:5b:42:91:58:ed:d7:b2:f2:64:76:59:c7:60:a3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528A271B82B6185862B06F250499140113F6FE20 Validity Not Before: Apr 3 17:05:56 2025 GMT Not After : Apr 7 04:10:56 2025 GMT Subject: CN=C2F0CB3C5CAC7B77083026CA2107AF8F283D776F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:63:29:76:14:79:59:3f:09:1d:af:6b:f4:84: e6:bf:30:13:c9:40:db:d2:42:93:ef:b6:7f:f9:26: 63:d4:ec:90:86:ae:91:80:bf:cb:26:e2:d1:eb:2e: 28:7b:28:5e:be:f1:63:98:5c:70:59:39:bb:cb:cc: 10:b4:b4:46:11:01:03:0e:28:62:c7:2c:34:ac:00: d9:3a:9f:de:6a:46:21:83:07:54:9c:58:43:c8:41: 6c:84:11:db:ff:4b:3d:e5:47:52:d1:67:73:ad:f8: a4:44:68:48:12:24:9d:fe:87:36:e7:de:91:42:10: 40:dc:29:0a:88:30:83:2d:57:4e:12:51:a5:34:ae: dd:c6:37:b1:c5:71:57:77:1e:83:7b:3f:86:9f:05: 17:83:3e:2b:7c:d3:2c:16:27:79:54:cd:2e:a3:f6: 62:e9:c8:e9:55:88:a0:fe:c6:fb:96:f6:4b:5f:ba: 9d:07:56:9e:e0:4d:b8:71:b8:d4:bd:46:51:e7:20: f2:f4:f1:77:7a:dd:cd:13:a0:2d:fa:d7:05:c3:d7: d8:67:e2:76:80:a4:27:12:db:b9:75:5c:4c:4a:63: 77:bb:0c:63:79:55:39:05:bd:3b:e6:f5:07:b6:dc: 81:4c:1d:e0:63:f2:ef:90:fa:77:34:7f:5c:d5:93: 5b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F0:CB:3C:5C:AC:7B:77:08:30:26:CA:21:07:AF:8F:28:3D:77:6F X509v3 Authority Key Identifier: keyid:52:8A:27:1B:82:B6:18:58:62:B0:6F:25:04:99:14:01:13:F6:FE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A271B82B6185862B06F250499140113F6FE20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:9c:91:ad:05:68:e6:05:91:28:4e:23:97:07:f2:6c:de:f2: 38:3f:53:95:5f:c7:c3:61:0f:d2:4c:85:11:ad:84:f9:ab:96: d3:c2:c0:c4:07:89:5a:af:cb:f8:5a:19:da:37:76:c2:5c:73: 35:20:24:b3:d9:f7:43:c5:26:b4:fb:34:5a:4f:96:4c:d3:9a: 49:4f:e3:17:f2:a3:e3:ae:62:e0:b2:4a:5b:a6:25:e5:52:70: e4:e8:61:cb:d5:6b:75:ec:ed:24:de:ff:f4:ce:8a:c0:f2:ae: 59:09:b5:c6:0f:92:a8:6b:cd:56:c3:d3:db:11:19:c9:39:58: fb:a4:b7:49:d9:45:cf:0d:9f:76:2a:13:96:a8:2d:1e:1a:e6: 18:a9:56:0a:f1:25:01:57:6b:5b:43:25:4a:2d:05:08:b5:00: 11:4f:5d:0a:ec:b1:e8:06:58:ea:d0:6f:29:d2:51:6f:a3:3e: 81:d7:86:43:d0:a9:78:f8:0f:b7:72:b5:7e:c0:65:dc:93:20: e8:c4:c4:0e:51:d1:f9:02:d7:58:0b:05:99:94:92:af:31:14: 70:8f:14:45:a1:33:48:14:2d:81:11:07:cc:c1:1e:f9:a1:b0: 1e:e9:be:0e:5f:81:9f:67:b7:0f:45:db:ad:e2:98:d6:88:2e: cb:3e:e6:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdbWg7RxbQpFY7dey8mR2Wcdgo3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4QTI3MUI4MkI2MTg1ODYyQjA2RjI1MDQ5OTE0MDEx M0Y2RkUyMDAeFw0yNTA0MDMxNzA1NTZaFw0yNTA0MDcwNDEwNTZaMDMxMTAvBgNV BAMTKEMyRjBDQjNDNUNBQzdCNzcwODMwMjZDQTIxMDdBRjhGMjgzRDc3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMYyl2FHlZPwkdr2v0hOa/MBPJ QNvSQpPvtn/5JmPU7JCGrpGAv8sm4tHrLih7KF6+8WOYXHBZObvLzBC0tEYRAQMO KGLHLDSsANk6n95qRiGDB1ScWEPIQWyEEdv/Sz3lR1LRZ3Ot+KREaEgSJJ3+hzbn 3pFCEEDcKQqIMIMtV04SUaU0rt3GN7HFcVd3HoN7P4afBReDPit80ywWJ3lUzS6j 9mLpyOlViKD+xvuW9ktfup0HVp7gTbhxuNS9RlHnIPL08Xd63c0ToC361wXD19hn 4naApCcS27l1XExKY3e7DGN5VTkFvTvm9Qe23IFMHeBj8u+Q+nc0f1zVk1vvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwvDLPFyse3cIMCbKIQevjyg9d28wHwYDVR0j BBgwFoAUUoonG4K2GFhisG8lBJkUARP2/iAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YWQzY2M4YS05NzM4LTQ1MWItYTc5OC03Yjc2YjA5NDBiNGIvMC81MjhBMjcxQjgy QjYxODU4NjJCMDZGMjUwNDk5MTQwMTEzRjZGRTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTI4QTI3MUI4MkI2MTg1ODYyQjA2RjI1MDQ5OTE0MDExM0Y2 RkUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGFkM2NjOGEtOTczOC00NTFiLWE3 OTgtN2I3NmIwOTQwYjRiLzAvNTI4QTI3MUI4MkI2MTg1ODYyQjA2RjI1MDQ5OTE0 MDExM0Y2RkUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCcka0FaOYFkShOI5cH8mze8jg/U5Vfx8Nh D9JMhRGthPmrltPCwMQHiVqvy/haGdo3dsJcczUgJLPZ90PFJrT7NFpPlkzTmklP 4xfyo+OuYuCySlumJeVScOToYcvVa3Xs7STe//TOisDyrlkJtcYPkqhrzVbD09sR Gck5WPukt0nZRc8Nn3YqE5aoLR4a5hipVgrxJQFXa1tDJUotBQi1ABFPXQrssegG WOrQbynSUW+jPoHXhkPQqXj4D7dytX7AZdyTIOjExA5R0fkC11gLBZmUkq8xFHCP FEWhM0gULYERB8zBHvmhsB7pvg5fgZ9ntw9F263imNaILss+5iY= -----END CERTIFICATE-----Generated at Sat Apr 5 23:15:24 2025 by rpki-client