$ rpki-client -vvf repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft File: CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft (raw, json) Hash identifier: dC3+DP9e7JN2UjgfAhc/RRElJMJSyoWFBidWcdEvKE8= Subject key identifier: B1:34:E1:FC:C4:52:3E:66:9B:7B:B4:41:F2:3D:19:C9:F8:34:F3:71 Authority key identifier: CF:23:62:E9:21:69:BC:7C:5B:93:E1:CA:38:A3:BF:90:98:79:C0:5A Certificate issuer: /CN=CF2362E92169BC7C5B93E1CA38A3BF909879C05A Certificate serial: 4325395A1F5A65AD705C4731DD90DE0876AEAC7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft Manifest number: 0154 Signing time: Sat 05 Apr 2025 08:32:18 +0000 Manifest this update: Sat 05 Apr 2025 08:27:18 +0000 Manifest next update: Tue 08 Apr 2025 18:18:18 +0000 Files and hashes: 1: 3130332e3134372e31302e302f32332d3234203d3e20313339393435.roa (hash: ZhCBetiRM0oV1qkwFwKfVyjWnDYRVpaxO6Ref6QtN4w=) 2: CF2362E92169BC7C5B93E1CA38A3BF909879C05A.crl (hash: VlkcqMxq7UJBIXWwJKYcmfn+mYgVJiZQWdyC3OxZQBU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.crl rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:25:39:5a:1f:5a:65:ad:70:5c:47:31:dd:90:de:08:76:ae:ac:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF2362E92169BC7C5B93E1CA38A3BF909879C05A Validity Not Before: Apr 5 08:27:18 2025 GMT Not After : Apr 8 18:18:18 2025 GMT Subject: CN=B134E1FCC4523E669B7BB441F23D19C9F834F371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:70:19:e4:b4:4c:b5:0f:5f:79:c6:e7:49:59: 80:21:65:3a:8b:63:c9:f3:2f:55:eb:cb:a3:b0:ad: 33:0d:d9:42:bc:e2:58:c6:9b:df:e7:f4:d1:00:dc: b9:57:40:a9:9e:9d:99:b1:ab:9f:0e:5f:89:13:bb: 68:20:2d:13:6d:2b:76:48:b2:32:40:d5:52:b0:a0: 66:3d:fd:20:4e:81:74:f3:08:87:f2:87:99:71:ff: 04:ff:a2:06:a3:2a:d4:dd:9d:d8:b1:88:e2:71:e6: a6:a6:e5:74:c4:60:42:51:98:08:d6:df:76:ae:d3: c7:df:e2:74:25:73:a4:3d:1a:fc:fd:ec:12:6e:ac: 20:a5:f9:f0:f6:3c:50:4c:dd:57:bb:5f:25:62:05: 45:ab:e8:49:6e:1a:f0:35:68:b5:42:4d:6a:3f:1c: 83:4f:d1:c4:22:f9:e6:fd:b8:77:1e:aa:cf:39:52: bd:2f:ab:49:1c:db:04:1d:88:94:5c:0a:d5:36:f2: 74:03:1e:f0:9c:27:3d:cd:57:22:5c:15:c2:22:1d: c6:0e:88:b9:87:b9:c8:07:51:0a:fb:80:bc:f3:2a: e9:16:29:e4:9a:9f:fa:5d:c6:0b:03:8f:15:72:93: a5:6b:44:92:7b:96:79:e4:cd:e0:64:4c:21:3d:a9: 77:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:34:E1:FC:C4:52:3E:66:9B:7B:B4:41:F2:3D:19:C9:F8:34:F3:71 X509v3 Authority Key Identifier: keyid:CF:23:62:E9:21:69:BC:7C:5B:93:E1:CA:38:A3:BF:90:98:79:C0:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:7f:b6:26:68:81:96:9a:63:0e:e8:a9:31:76:d1:89:04:64: 49:1f:55:6d:db:73:95:44:6e:4e:11:63:64:19:ae:dc:ed:b1: 3b:9b:1c:2a:9c:7c:59:b2:52:f4:ec:f4:1d:b0:94:25:97:f6: 6a:56:2a:7e:6b:5b:53:ad:bb:bf:b2:9c:cd:ea:26:60:90:53: bc:0a:e6:02:8c:73:2e:ef:14:82:93:cb:f4:05:5d:49:34:cc: 29:a9:86:fb:3b:93:3c:a4:d6:b1:bc:69:3d:e0:9c:24:c1:67: 9c:2f:a3:9f:b5:4c:a5:bd:31:09:79:49:e2:fd:ee:79:c9:fb: a6:42:00:84:ce:d7:85:2f:1e:ad:9c:f1:60:09:0f:14:2c:4f: 37:f9:3b:33:ce:2a:0b:03:2c:7a:d5:a7:d8:a9:09:61:cb:1b: 27:e9:e9:17:b0:81:31:7c:9a:0b:64:86:8b:13:42:5b:11:e0: 67:18:22:1c:95:82:c3:a6:bc:fd:61:75:48:d4:60:df:2d:d8: 09:5c:59:75:15:1c:be:dd:b9:4f:07:d5:0e:c7:ec:c2:46:08: b9:e6:77:3a:7d:7b:8a:98:3b:78:4c:a5:40:f8:8e:91:7f:ba: 98:66:cc:c0:15:5e:0e:1e:dc:3a:40:eb:ad:15:f2:99:97:f5: da:d8:55:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQyU5Wh9aZa1wXEcx3ZDeCHaurHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMzYyRTkyMTY5QkM3QzVCOTNFMUNBMzhBM0JGOTA5 ODc5QzA1QTAeFw0yNTA0MDUwODI3MThaFw0yNTA0MDgxODE4MThaMDMxMTAvBgNV BAMTKEIxMzRFMUZDQzQ1MjNFNjY5QjdCQjQ0MUYyM0QxOUM5RjgzNEYzNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1cBnktEy1D195xudJWYAhZTqL Y8nzL1Xry6OwrTMN2UK84ljGm9/n9NEA3LlXQKmenZmxq58OX4kTu2ggLRNtK3ZI sjJA1VKwoGY9/SBOgXTzCIfyh5lx/wT/ogajKtTdndixiOJx5qam5XTEYEJRmAjW 33au08ff4nQlc6Q9Gvz97BJurCCl+fD2PFBM3Ve7XyViBUWr6EluGvA1aLVCTWo/ HINP0cQi+eb9uHceqs85Ur0vq0kc2wQdiJRcCtU28nQDHvCcJz3NVyJcFcIiHcYO iLmHucgHUQr7gLzzKukWKeSan/pdxgsDjxVyk6VrRJJ7lnnkzeBkTCE9qXcvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsTTh/MRSPmabe7RB8j0Zyfg083EwHwYDVR0j BBgwFoAUzyNi6SFpvHxbk+HKOKO/kJh5wFowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTYyY2YzZC1kOWY3LTQ4YTktOTE1OS05ZjBkN2E0NzY3OTAvMC9DRjIzNjJFOTIx NjlCQzdDNUI5M0UxQ0EzOEEzQkY5MDk4NzlDMDVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YyMzYyRTkyMTY5QkM3QzVCOTNFMUNBMzhBM0JGOTA5ODc5 QzA1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU2MmNmM2QtZDlmNy00OGE5LTkx NTktOWYwZDdhNDc2NzkwLzAvQ0YyMzYyRTkyMTY5QkM3QzVCOTNFMUNBMzhBM0JG OTA5ODc5QzA1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADd/tiZogZaaYw7oqTF20YkEZEkfVW3bc5VE bk4RY2QZrtztsTubHCqcfFmyUvTs9B2wlCWX9mpWKn5rW1Otu7+ynM3qJmCQU7wK 5gKMcy7vFIKTy/QFXUk0zCmphvs7kzyk1rG8aT3gnCTBZ5wvo5+1TKW9MQl5SeL9 7nnJ+6ZCAITO14UvHq2c8WAJDxQsTzf5OzPOKgsDLHrVp9ipCWHLGyfp6RewgTF8 mgtkhosTQlsR4GcYIhyVgsOmvP1hdUjUYN8t2AlcWXUVHL7duU8H1Q7H7MJGCLnm dzp9e4qYO3hMpUD4jpF/uphmzMAVXg4e3DpA660V8pmX9drYVfY= -----END CERTIFICATE-----Generated at Sat Apr 5 16:47:09 2025 by rpki-client