$ rpki-client -vvf repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft File: 2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft (raw, json) Hash identifier: Ckfwj4YK90l4xPbQCSp9HjeO/FD4YD9rGbDsa/AlWV0= Subject key identifier: 02:DF:11:DC:B4:3D:59:B0:BB:B2:0F:F5:5D:BA:B2:FD:5C:37:05:35 Authority key identifier: 2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05 Certificate issuer: /CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605 Certificate serial: 1DF21A9450872772B6484C2E20AAD24B004BC108 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft Manifest number: 9A Signing time: Sun 20 Apr 2025 19:40:34 +0000 Manifest this update: Sun 20 Apr 2025 19:35:34 +0000 Manifest next update: Wed 23 Apr 2025 21:17:34 +0000 Files and hashes: 1: 2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl (hash: HhouOJS98CyrI2dC/lyZnyN24kk46pt/56CsNguzeCs=) 2: 32372e3132342e36362e302f32342d3234203d3e20313532303339.roa (hash: Qk1aebZH6HpsmbRtyw6Zbd7LsZDQbi5L/mrlB31+AsU=) 3: 32372e3132342e36372e302f32342d3234203d3e20313532303339.roa (hash: PIB1m7UZc9kcov7LjZoIh/Ol3lgnFrAZfbEkkmZBCd0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 21:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:f2:1a:94:50:87:27:72:b6:48:4c:2e:20:aa:d2:4b:00:4b:c1:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605 Validity Not Before: Apr 20 19:35:34 2025 GMT Not After : Apr 23 21:17:34 2025 GMT Subject: CN=02DF11DCB43D59B0BBB20FF55DBAB2FD5C370535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d5:62:27:ba:87:e8:09:e4:3b:7b:11:75:46: c9:fa:db:a1:6f:d1:2c:b5:8d:fe:e8:7c:fe:a6:ae: f4:ea:3d:dc:ca:20:6b:1e:25:cb:70:e4:fb:5b:6a: c2:70:73:9b:0c:9a:b3:c0:93:88:f9:92:83:8d:2c: 1c:2e:3c:8a:78:be:e5:e1:51:c4:b7:81:da:bb:c0: 21:60:c1:97:2b:28:09:24:2d:d8:1e:e7:7b:68:98: 60:74:1e:67:4c:24:2c:d4:a4:23:e2:2e:6f:9b:da: 91:ad:0e:95:7a:3e:16:05:34:05:a1:72:49:3a:41: ff:93:eb:33:00:ee:84:22:8a:f6:42:1e:07:bd:8c: cf:62:43:97:cf:da:1f:44:62:7e:ce:ef:70:57:f8: 2d:ed:68:ac:79:b3:78:51:8c:82:d9:70:12:98:37: 7f:d1:13:e5:4c:38:8d:c7:18:72:c6:e1:e7:32:43: 79:08:7c:db:4b:bc:64:5d:dd:5c:91:c1:86:6b:09: 2b:0c:42:83:38:cd:a1:46:e1:79:4e:5e:f2:49:ef: f6:fa:62:5c:92:6d:63:0c:28:28:94:21:c7:ab:4c: bc:38:05:23:d7:77:c0:b3:30:bc:0a:15:4f:87:04: d5:89:e9:fd:43:82:b0:b4:5e:70:98:9f:66:b7:9c: 73:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DF:11:DC:B4:3D:59:B0:BB:B2:0F:F5:5D:BA:B2:FD:5C:37:05:35 X509v3 Authority Key Identifier: keyid:2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:e0:64:ef:32:0f:a7:ec:29:b1:a0:49:66:91:df:29:00:bc: d5:f1:48:c2:51:76:d8:3a:01:01:4f:55:94:36:ec:d4:eb:3a: cd:0d:6c:79:81:6f:7b:6c:e2:a0:bb:09:66:c4:b5:96:76:43: c0:a7:33:25:49:08:39:81:e2:6d:12:c3:7c:28:0b:55:e3:46: b2:70:c3:36:36:4b:ce:68:08:ba:8b:99:f2:14:00:81:f5:1d: 5e:9a:15:41:c7:79:e1:bf:13:9b:a9:6d:eb:dc:bd:9e:f4:8b: f7:8e:f6:db:c2:4d:c7:47:4e:28:9d:eb:14:44:e1:b8:76:8c: 74:6a:74:73:48:84:0e:d4:d9:46:6a:68:29:84:6f:2e:71:22: 43:3e:80:36:37:2e:06:f0:6c:02:50:86:9a:d4:52:d5:88:11: 42:2b:d5:1c:cf:55:c7:8a:e9:aa:9f:b0:af:40:17:c2:e1:04: 1d:03:40:61:a7:4d:78:aa:5f:76:10:2d:09:da:2f:e4:e1:17: 2e:c8:5f:06:5b:80:ab:80:4b:cd:71:35:09:b4:6e:9e:3f:7f: bd:40:05:a7:fd:25:87:f8:dd:b9:0a:16:ab:f6:41:07:68:d6: d2:51:81:15:80:6f:6e:f9:76:a4:68:6d:05:53:76:48:c7:74: 98:72:84:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHfIalFCHJ3K2SEwuIKrSSwBLwQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJEN0VF RUUwMTYwNTAeFw0yNTA0MjAxOTM1MzRaFw0yNTA0MjMyMTE3MzRaMDMxMTAvBgNV BAMTKDAyREYxMURDQjQzRDU5QjBCQkIyMEZGNTVEQkFCMkZENUMzNzA1MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA1WInuofoCeQ7exF1Rsn626Fv 0Sy1jf7ofP6mrvTqPdzKIGseJctw5PtbasJwc5sMmrPAk4j5koONLBwuPIp4vuXh UcS3gdq7wCFgwZcrKAkkLdge53tomGB0HmdMJCzUpCPiLm+b2pGtDpV6PhYFNAWh ckk6Qf+T6zMA7oQiivZCHge9jM9iQ5fP2h9EYn7O73BX+C3taKx5s3hRjILZcBKY N3/RE+VMOI3HGHLG4ecyQ3kIfNtLvGRd3VyRwYZrCSsMQoM4zaFG4XlOXvJJ7/b6 YlySbWMMKCiUIcerTLw4BSPXd8CzMLwKFU+HBNWJ6f1DgrC0XnCYn2a3nHNRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAt8R3LQ9WbC7sg/1Xbqy/Vw3BTUwHwYDVR0j BBgwFoAULP1b3dHbptlAKHTWIjq9fu7gFgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjdlMGJjMC03NjFiLTRlYzMtOGY0Mi04Mjk4MWI5MWE5N2EvMC8yQ0ZENUJEREQx REJBNkQ5NDAyODc0RDYyMjNBQkQ3RUVFRTAxNjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJEN0VFRUUw MTYwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI3ZTBiYzAtNzYxYi00ZWMzLThm NDItODI5ODFiOTFhOTdhLzAvMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJE N0VFRUUwMTYwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvgZO8yD6fsKbGgSWaR3ykAvNXxSMJRdtg6 AQFPVZQ27NTrOs0NbHmBb3ts4qC7CWbEtZZ2Q8CnMyVJCDmB4m0Sw3woC1XjRrJw wzY2S85oCLqLmfIUAIH1HV6aFUHHeeG/E5upbevcvZ70i/eO9tvCTcdHTiid6xRE 4bh2jHRqdHNIhA7U2UZqaCmEby5xIkM+gDY3LgbwbAJQhprUUtWIEUIr1RzPVceK 6aqfsK9AF8LhBB0DQGGnTXiqX3YQLQnaL+ThFy7IXwZbgKuAS81xNQm0bp4/f71A Baf9JYf43bkKFqv2QQdo1tJRgRWAb275dqRobQVTdkjHdJhyhDw= -----END CERTIFICATE-----Generated at Mon Apr 21 05:40:53 2025 by rpki-client