$ rpki-client -vvf repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft File: 94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft (raw, json) Hash identifier: bl9FDrt0bLj1Y6/rpHK22g/sIMmWUKTMnfYFpjaAbtE= Subject key identifier: 1C:AE:B6:E6:81:73:0E:69:1D:DE:11:2A:EE:7B:49:BE:88:8C:EB:E7 Authority key identifier: 94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42 Certificate issuer: /CN=94EDA4B2360B47DC65386E3E7EBAE35B997F2A42 Certificate serial: 2F959300E4451689021BCB260EC826B3CCE455EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft Manifest number: 04BE Signing time: Sat 05 Apr 2025 06:30:47 +0000 Manifest this update: Sat 05 Apr 2025 06:25:47 +0000 Manifest next update: Tue 08 Apr 2025 06:50:47 +0000 Files and hashes: 1: 94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl (hash: upfvEvAE5Gc+R45zBbyq34EQ86AiUJagXMhhKLWui3U=) 2: 3130332e3134342e3235302e302f32332d3234203d3e20313339343335.roa (hash: STfLEKupyrLdfwec04UUOZk+NXKX3/j5Qjc3GmJDYn4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 06:50:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:95:93:00:e4:45:16:89:02:1b:cb:26:0e:c8:26:b3:cc:e4:55:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EDA4B2360B47DC65386E3E7EBAE35B997F2A42 Validity Not Before: Apr 5 06:25:47 2025 GMT Not After : Apr 8 06:50:47 2025 GMT Subject: CN=1CAEB6E681730E691DDE112AEE7B49BE888CEBE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a4:de:16:f7:b7:c8:f8:90:5d:3c:fc:97:e2: 92:03:13:27:0d:34:7f:f0:ae:57:69:2e:cd:d0:3e: 12:ed:31:a4:02:f3:83:23:62:74:9d:49:82:1d:f2: fc:37:e7:80:5d:50:36:8e:c2:42:09:c8:d0:d7:5b: 72:2b:47:51:50:c7:83:23:ba:ff:d0:c1:86:af:60: b5:97:cd:7e:0b:e1:70:f4:7a:36:d0:5c:16:2f:bd: dd:63:ab:2a:e9:a7:16:7e:a4:cc:87:ef:e8:c7:51: 38:9e:5b:0e:1f:40:1f:9e:b7:9c:07:4b:54:4e:0c: 81:e9:86:bb:38:73:5d:06:ea:cd:b3:32:29:1b:13: 07:81:fc:ef:c6:05:be:03:03:79:c6:51:66:30:a5: b6:cc:08:fb:0d:11:04:1e:55:60:ba:3f:8b:af:34: 18:58:59:7a:98:ae:9a:b2:ec:db:9e:b2:6b:35:6d: 0a:98:d9:d0:24:7f:b9:07:e0:3e:c9:bf:37:52:a1: db:65:cf:99:ca:e1:66:d4:82:53:a2:ef:92:e2:ad: d5:a6:19:61:23:d0:97:eb:9a:89:b1:d8:8a:d3:d9: 4c:d5:df:8a:d1:fd:ab:fe:7c:c7:bd:c8:7c:c3:71: 6f:b5:d0:2a:c9:76:0f:23:fe:32:3c:75:68:63:af: 64:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AE:B6:E6:81:73:0E:69:1D:DE:11:2A:EE:7B:49:BE:88:8C:EB:E7 X509v3 Authority Key Identifier: keyid:94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ee:f7:dc:24:40:60:3e:47:17:74:c1:38:9c:7b:d6:95:92: eb:c8:d9:02:02:06:da:73:df:57:dd:d5:07:c2:e5:d4:d0:98: d5:7b:1b:33:45:64:cb:61:99:ff:67:b3:18:38:bd:37:46:79: de:a7:af:c5:1b:71:da:e4:97:bd:b0:b7:f3:10:1f:f3:22:6a: 43:e8:14:5f:7c:65:a5:25:ad:45:97:19:20:5b:4c:41:bf:5a: 14:47:55:04:79:26:3e:e6:04:e7:7b:c9:7c:ee:ed:b6:01:62: c9:4a:60:d1:cd:4f:99:85:a4:4e:2a:58:dd:60:35:3e:1d:c7: 8e:da:f0:90:d7:b8:84:48:bf:a3:dd:31:0f:0e:e3:37:0a:fa: c7:e8:20:ae:ca:8f:25:66:ad:7d:d7:d9:d0:e2:22:a9:25:86: 26:34:03:ef:69:bf:27:ac:31:bc:a4:23:55:44:22:7f:97:85: 7e:12:43:07:7e:25:1d:21:4c:6b:23:a0:3e:fb:e8:16:78:e4: c6:17:2a:9b:37:12:17:95:d1:d7:91:5b:dc:41:a9:30:80:81: 47:61:6a:84:f1:e8:1e:1d:a5:42:d8:ee:f0:25:5d:cd:21:3a: 3f:3b:30:20:02:35:c9:02:f7:f4:20:57:ea:b3:77:40:c1:39: 99:e2:b0:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL5WTAORFFokCG8smDsgms8zkVe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUzNUI5 OTdGMkE0MjAeFw0yNTA0MDUwNjI1NDdaFw0yNTA0MDgwNjUwNDdaMDMxMTAvBgNV BAMTKDFDQUVCNkU2ODE3MzBFNjkxRERFMTEyQUVFN0I0OUJFODg4Q0VCRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDApN4W97fI+JBdPPyX4pIDEycN NH/wrldpLs3QPhLtMaQC84MjYnSdSYId8vw354BdUDaOwkIJyNDXW3IrR1FQx4Mj uv/QwYavYLWXzX4L4XD0ejbQXBYvvd1jqyrppxZ+pMyH7+jHUTieWw4fQB+et5wH S1RODIHphrs4c10G6s2zMikbEweB/O/GBb4DA3nGUWYwpbbMCPsNEQQeVWC6P4uv NBhYWXqYrpqy7Nuesms1bQqY2dAkf7kH4D7JvzdSodtlz5nK4WbUglOi75LirdWm GWEj0Jfrmomx2IrT2UzV34rR/av+fMe9yHzDcW+10CrJdg8j/jI8dWhjr2S3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHK625oFzDmkd3hEq7ntJvoiM6+cwHwYDVR0j BBgwFoAUlO2ksjYLR9xlOG4+frrjW5l/KkIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NWJmNzE4ZC05MTFlLTQzZDYtOGUzYy0wZDFiMzY0NmUyNzYvMC85NEVEQTRCMjM2 MEI0N0RDNjUzODZFM0U3RUJBRTM1Qjk5N0YyQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUzNUI5OTdG MkE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTViZjcxOGQtOTExZS00M2Q2LThl M2MtMGQxYjM2NDZlMjc2LzAvOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUz NUI5OTdGMkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3u99wkQGA+Rxd0wTice9aVkuvI2QICBtpz 31fd1QfC5dTQmNV7GzNFZMthmf9nsxg4vTdGed6nr8Ubcdrkl72wt/MQH/MiakPo FF98ZaUlrUWXGSBbTEG/WhRHVQR5Jj7mBOd7yXzu7bYBYslKYNHNT5mFpE4qWN1g NT4dx47a8JDXuIRIv6PdMQ8O4zcK+sfoIK7KjyVmrX3X2dDiIqklhiY0A+9pvyes MbykI1VEIn+XhX4SQwd+JR0hTGsjoD776BZ45MYXKps3EheV0deRW9xBqTCAgUdh aoTx6B4dpULY7vAlXc0hOj87MCACNckC9/QgV+qzd0DBOZnisPI= -----END CERTIFICATE-----Generated at Sun Apr 6 07:09:13 2025 by rpki-client