$ rpki-client -vvf repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft File: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft (raw, json) Hash identifier: 64U2h8n0ObqDZvoR1mzlwljLkKCMEtoGu+uC+TU0UW8= Subject key identifier: C2:88:74:9C:39:6E:35:65:97:EC:81:B4:40:9F:5A:5E:E2:47:BC:D8 Authority key identifier: CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 Certificate issuer: /CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Certificate serial: 4BB3BDFA50A09882F9FB0AC7ABD43E892A4C19A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft Manifest number: 01B0 Signing time: Fri 04 Apr 2025 06:12:12 +0000 Manifest this update: Fri 04 Apr 2025 06:07:12 +0000 Manifest next update: Mon 07 Apr 2025 14:33:12 +0000 Files and hashes: 1: 3130332e3134372e3131342e302f32332d3234203d3e20313439393732.roa (hash: rgFJ98/EqnKQuT7uOMG6CZkoBkNIU5ZfYz7pmO03ZPE=) 2: 3130332e3134372e3131342e302f32342d3234203d3e203438343635.roa (hash: 9CXlJMGB7RbCSbz4yAVHg0gxAoOKIuDCGk9V2ZNRStQ=) 3: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl (hash: BpkSvn6uDVUOxZhAj+Gn8WS+jU1D5zsQiXqEaRaPBzI=) 4: 3130332e3134372e3131352e302f32342d3234203d3e203438343635.roa (hash: w2tRSLiLgHJy1W/6XsyVINn6a4HucZp7ol94fDbTiO8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 14:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b3:bd:fa:50:a0:98:82:f9:fb:0a:c7:ab:d4:3e:89:2a:4c:19:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Validity Not Before: Apr 4 06:07:12 2025 GMT Not After : Apr 7 14:33:12 2025 GMT Subject: CN=C288749C396E356597EC81B4409F5A5EE247BCD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:10:fc:80:96:81:93:b0:87:53:70:7e:57:26: 79:10:59:aa:00:2c:a7:04:10:57:f4:f1:c8:e4:70: c9:1f:c8:73:5c:e4:13:42:10:9e:b2:eb:b7:93:c4: e9:58:8b:fa:7a:12:40:c0:ed:e5:bb:ff:14:d8:09: 6e:7f:8b:0b:dc:fe:f8:a4:d0:f0:49:22:c9:86:d7: 29:46:9c:d9:d1:35:f3:39:5d:0f:75:4a:e3:77:c2: db:8b:ea:a9:28:7e:7e:2c:09:da:18:b4:0b:44:f4: e3:70:76:6b:13:ba:7e:98:f8:47:23:9e:f3:d1:98: 2f:a6:ec:fc:12:30:a0:26:31:e7:48:10:c4:08:8a: 56:85:e5:4e:b2:13:16:21:4d:65:bd:21:76:72:04: 06:6a:82:4d:97:92:38:87:f1:d1:af:e1:d5:95:cb: 6f:7a:94:f5:e9:2f:d2:bd:14:e6:ed:2b:47:12:96: 7d:07:48:cb:29:10:7c:95:9f:3e:e5:6e:43:7c:d7: 0d:a1:2c:5b:b0:61:fe:08:3f:ea:7c:a7:89:5c:44: 0d:1d:c1:52:85:de:21:42:d5:72:f2:23:b9:45:72: da:a4:b3:60:10:ab:ab:44:fd:22:59:db:d1:4b:f1: 64:87:36:86:c0:ad:05:0d:de:33:1b:4d:93:3e:a8: dc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:88:74:9C:39:6E:35:65:97:EC:81:B4:40:9F:5A:5E:E2:47:BC:D8 X509v3 Authority Key Identifier: keyid:CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b9:50:d7:bb:54:16:e3:d6:18:c8:14:f3:2d:56:a7:5b:54: c0:8d:8c:92:70:02:11:33:f3:d6:57:a1:ff:51:56:b0:86:cf: fd:f2:30:0b:b4:c7:d0:79:ec:e7:69:2f:59:1b:f9:ef:89:f8: c8:15:6f:fd:64:ac:ed:ff:67:74:1a:04:c3:3f:34:c4:10:64: 3e:f6:ab:ad:b8:cc:a5:fd:fd:28:c3:1b:8d:31:e3:6e:56:7b: c9:34:85:f3:ef:53:10:6c:6d:67:1d:70:50:c7:ca:30:2b:33: 86:86:02:43:c3:ee:47:97:b4:57:05:96:9f:23:0d:c8:b6:36: 14:42:fe:c2:77:f4:ff:82:c2:6f:d4:68:67:19:f9:e3:0a:f2: 32:3e:70:b6:06:a7:55:43:b9:6e:3d:27:26:9c:62:24:7c:bd: da:7c:95:d3:6f:23:cb:9c:eb:bf:41:52:16:da:bb:21:a5:19: 45:1f:f3:02:f0:98:d9:1f:9b:f0:64:e3:49:78:f4:99:39:af: 2f:d5:ac:85:c8:8f:82:2d:0c:9f:b8:7a:6d:80:0f:83:8a:e0: 7f:4b:dc:cf:07:23:6c:12:e5:3d:23:c9:58:5e:93:3f:6d:ba: 87:27:b6:b1:d2:89:be:79:51:64:3b:7d:9a:83:ca:6d:43:59: 77:1b:ee:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS7O9+lCgmIL5+wrHq9Q+iSpMGakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFE NUIyM0E3NDAeFw0yNTA0MDQwNjA3MTJaFw0yNTA0MDcxNDMzMTJaMDMxMTAvBgNV BAMTKEMyODg3NDlDMzk2RTM1NjU5N0VDODFCNDQwOUY1QTVFRTI0N0JDRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHEPyAloGTsIdTcH5XJnkQWaoA LKcEEFf08cjkcMkfyHNc5BNCEJ6y67eTxOlYi/p6EkDA7eW7/xTYCW5/iwvc/vik 0PBJIsmG1ylGnNnRNfM5XQ91SuN3wtuL6qkofn4sCdoYtAtE9ONwdmsTun6Y+Ecj nvPRmC+m7PwSMKAmMedIEMQIilaF5U6yExYhTWW9IXZyBAZqgk2XkjiH8dGv4dWV y296lPXpL9K9FObtK0cSln0HSMspEHyVnz7lbkN81w2hLFuwYf4IP+p8p4lcRA0d wVKF3iFC1XLyI7lFctqks2AQq6tE/SJZ29FL8WSHNobArQUN3jMbTZM+qNxhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwoh0nDluNWWX7IG0QJ9aXuJHvNgwHwYDVR0j BBgwFoAUzTKB/Idajdln5+g81A8QatWyOnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjhjYzA1OS01ZTZjLTQ1MDEtYjg5NC0xNGE4MmQxOGQyMWUvMC9DRDMyODFGQzg3 NUE4REQ5NjdFN0U4M0NENDBGMTA2QUQ1QjIzQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFENUIy M0E3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY4Y2MwNTktNWU2Yy00NTAxLWI4 OTQtMTRhODJkMThkMjFlLzAvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEw NkFENUIyM0E3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEm5UNe7VBbj1hjIFPMtVqdbVMCNjJJwAhEz 89ZXof9RVrCGz/3yMAu0x9B57OdpL1kb+e+J+MgVb/1krO3/Z3QaBMM/NMQQZD72 q624zKX9/SjDG40x425We8k0hfPvUxBsbWcdcFDHyjArM4aGAkPD7keXtFcFlp8j Dci2NhRC/sJ39P+Cwm/UaGcZ+eMK8jI+cLYGp1VDuW49JyacYiR8vdp8ldNvI8uc 679BUhbauyGlGUUf8wLwmNkfm/Bk40l49Jk5ry/VrIXIj4ItDJ+4em2AD4OK4H9L 3M8HI2wS5T0jyVhekz9tuocntrHSib55UWQ7fZqDym1DWXcb7r4= -----END CERTIFICATE-----Generated at Sat Apr 5 17:55:53 2025 by rpki-client