$ rpki-client -vvf repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft File: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft (raw, json) Hash identifier: kiGE7STbasLTBKrC36XhyfbyqsWBHQts5PmtwdpenI8= Subject key identifier: 08:3A:78:A6:0D:2D:5A:13:79:BE:12:1B:FE:5F:DB:D5:10:95:15:E0 Authority key identifier: CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 Certificate issuer: /CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Certificate serial: 21E5DB5F86DBE152E05D837ADB96CF89C444DB4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft Manifest number: AA Signing time: Thu 17 Apr 2025 10:22:11 +0000 Manifest this update: Thu 17 Apr 2025 10:17:11 +0000 Manifest next update: Sun 20 Apr 2025 21:57:11 +0000 Files and hashes: 1: 3130332e3135342e37372e302f32342d3234203d3e20313430343831.roa (hash: A5SwHDOo7iq6Y1gkaeCc0A/1Pj/X9IMjx0F9yKE6Rqs=) 2: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl (hash: dCKuWS+Lu0yc3G1EoWt6asGEKI5aW0HDkauB2t5Xc9o=) 3: 3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (hash: +r4hk/SZgMTurIzv+fNPFL73b+UlFP07BXG9b2YC2us=) 4: 3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (hash: AokcwqbiC4agd4vuQFD9ZPFGfzBXJyXcGsAxju/Umd8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 21:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e5:db:5f:86:db:e1:52:e0:5d:83:7a:db:96:cf:89:c4:44:db:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Validity Not Before: Apr 17 10:17:11 2025 GMT Not After : Apr 20 21:57:11 2025 GMT Subject: CN=083A78A60D2D5A1379BE121BFE5FDBD5109515E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:14:ab:4e:34:9b:6d:d6:0c:ab:0a:88:65:d2: 99:68:51:50:52:6c:62:95:dc:af:0e:9e:ec:e8:89: ed:57:51:91:2c:e4:9a:54:56:7b:0d:c7:2c:f8:3e: 35:81:5c:63:22:96:28:f5:b6:7b:0b:03:97:e7:de: 47:6e:00:c7:d9:40:61:cc:40:e8:40:d4:8a:05:98: fa:68:0c:99:ca:42:3f:b7:45:13:ba:40:06:3b:50: f5:b8:46:f3:83:ce:d5:5b:bb:70:10:14:90:92:d1: 36:06:35:59:c0:a3:a9:af:36:70:46:49:9c:08:be: b7:eb:d9:2c:11:0d:f8:f9:74:59:cb:e6:99:b7:7b: 1d:f4:5c:9b:35:e4:bb:cf:1f:ec:4f:77:44:8d:30: f0:51:6d:02:69:ec:f4:f0:48:b8:2e:8a:83:31:a0: 84:d9:04:e1:77:26:a6:51:9e:98:23:16:6b:e1:15: 5d:53:2f:ba:cb:c8:b4:e6:de:80:89:3b:a3:b1:2b: 6b:7b:6c:14:82:8c:1a:68:cb:04:6a:98:1b:ea:7b: 70:fb:55:be:61:7b:f8:7d:33:a1:53:d2:b9:40:2e: 19:ee:fc:ca:57:f9:12:8f:a1:b3:40:e0:9c:91:ca: 87:e4:10:33:3a:71:89:2a:e9:15:b8:bb:f7:80:92: 06:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3A:78:A6:0D:2D:5A:13:79:BE:12:1B:FE:5F:DB:D5:10:95:15:E0 X509v3 Authority Key Identifier: keyid:CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:7d:25:92:a8:8d:76:eb:ba:d1:85:f1:66:b7:65:19:e2:13: 6b:70:8b:95:a4:ae:67:00:1d:7d:34:fe:3d:0f:ee:3a:43:60: 7e:1a:10:67:88:9e:59:8a:77:c3:ce:4c:53:14:5c:bb:ec:47: e3:89:74:fe:b5:4e:79:bb:5c:96:10:a5:86:1f:0d:11:c7:00: fd:fa:5a:ca:99:c6:ef:50:69:49:49:8b:f5:e8:c4:37:2c:ba: 22:8f:6c:20:4d:61:28:a0:70:40:9b:99:38:e7:cb:56:0e:7a: 51:33:f4:94:89:b3:5c:a5:d4:af:3a:b9:a1:82:78:50:df:5b: 99:a0:8e:5d:45:ad:6f:8e:15:30:47:1e:c4:b4:ec:27:c3:1e: b5:8b:b7:e9:e3:3f:f2:80:f4:8d:47:41:a1:e3:9d:d1:05:5b: be:26:b8:49:a9:fa:f4:50:e0:c7:90:0c:b0:7e:c8:8a:19:5b: 79:ba:46:b5:27:67:9f:e2:14:dd:94:7f:e3:96:ce:e2:93:d6: 29:46:f8:ea:f5:74:31:52:c2:ca:e7:68:05:9d:c9:43:48:c6: ab:bf:67:bb:47:4d:98:4d:50:39:c2:07:2f:2d:1f:7a:50:4c: 03:a5:74:44:3d:48:1c:ae:b4:b5:3c:7d:a6:81:37:a7:b0:5d: d3:0f:c7:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIeXbX4bb4VLgXYN625bPicRE204wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlC NjVEMTdEMzAeFw0yNTA0MTcxMDE3MTFaFw0yNTA0MjAyMTU3MTFaMDMxMTAvBgNV BAMTKDA4M0E3OEE2MEQyRDVBMTM3OUJFMTIxQkZFNUZEQkQ1MTA5NTE1RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrFKtONJtt1gyrCohl0ploUVBS bGKV3K8Onuzoie1XUZEs5JpUVnsNxyz4PjWBXGMilij1tnsLA5fn3kduAMfZQGHM QOhA1IoFmPpoDJnKQj+3RRO6QAY7UPW4RvODztVbu3AQFJCS0TYGNVnAo6mvNnBG SZwIvrfr2SwRDfj5dFnL5pm3ex30XJs15LvPH+xPd0SNMPBRbQJp7PTwSLguioMx oITZBOF3JqZRnpgjFmvhFV1TL7rLyLTm3oCJO6OxK2t7bBSCjBpoywRqmBvqe3D7 Vb5he/h9M6FT0rlALhnu/MpX+RKPobNA4JyRyofkEDM6cYkq6RW4u/eAkgb9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCDp4pg0tWhN5vhIb/l/b1RCVFeAwHwYDVR0j BBgwFoAUzq5Pd1nuIbplLg+4nQGjCbZdF9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjM1YTQ1MS1jMzA0LTQ1ZjUtYjdkYi01Njg3ZTJiMTA4MDcvMC9DRUFFNEY3NzU5 RUUyMUJBNjUyRTBGQjg5RDAxQTMwOUI2NUQxN0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlCNjVE MTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYzNWE0NTEtYzMwNC00NWY1LWI3 ZGItNTY4N2UyYjEwODA3LzAvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEz MDlCNjVEMTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG99JZKojXbrutGF8Wa3ZRniE2twi5WkrmcA HX00/j0P7jpDYH4aEGeInlmKd8POTFMUXLvsR+OJdP61Tnm7XJYQpYYfDRHHAP36 WsqZxu9QaUlJi/XoxDcsuiKPbCBNYSigcECbmTjny1YOelEz9JSJs1yl1K86uaGC eFDfW5mgjl1FrW+OFTBHHsS07CfDHrWLt+njP/KA9I1HQaHjndEFW74muEmp+vRQ 4MeQDLB+yIoZW3m6RrUnZ5/iFN2Uf+OWzuKT1ilG+Or1dDFSwsrnaAWdyUNIxqu/ Z7tHTZhNUDnCBy8tH3pQTAOldEQ9SByutLU8faaBN6ewXdMPxzU= -----END CERTIFICATE-----Generated at Fri Apr 18 09:50:54 2025 by rpki-client