$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft File: C2E1998AC1681A41F68250BFABD05A982E00EA44.mft (raw, json) Hash identifier: hvLTv4+nw5Mc121Wb0Hu2Qcqvu43eh9T8iiseNZ0tQQ= Subject key identifier: A3:C4:C5:D1:9E:82:20:E3:BF:86:8E:CC:EC:7B:8D:3B:C2:03:19:74 Authority key identifier: C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44 Certificate issuer: /CN=C2E1998AC1681A41F68250BFABD05A982E00EA44 Certificate serial: 17394C5A9B25879833C1912CD52B2CAE373C4762 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft Manifest number: 87 Signing time: Sat 05 Apr 2025 13:11:57 +0000 Manifest this update: Sat 05 Apr 2025 13:06:57 +0000 Manifest next update: Tue 08 Apr 2025 15:51:57 +0000 Files and hashes: 1: 323030313a6466333a653034303a3a2f34382d3438203d3e20313532383036.roa (hash: th3Xv42aRE7pNCMbqK8emeLE7s2AiqsmCsXh48rzB6c=) 2: C2E1998AC1681A41F68250BFABD05A982E00EA44.crl (hash: pcAd66OURYQ2vOcmiHWUXpom7GUt2NnLCMxH5zHx8Ro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:39:4c:5a:9b:25:87:98:33:c1:91:2c:d5:2b:2c:ae:37:3c:47:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2E1998AC1681A41F68250BFABD05A982E00EA44 Validity Not Before: Apr 5 13:06:57 2025 GMT Not After : Apr 8 15:51:57 2025 GMT Subject: CN=A3C4C5D19E8220E3BF868ECCEC7B8D3BC2031974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:12:99:4d:1e:f5:b1:08:02:eb:41:58:b9:79: c5:44:d3:b3:71:c4:30:aa:09:04:b4:15:f5:6e:51: d5:b6:1e:0c:41:5e:2c:bf:7f:99:f9:ef:2c:5d:28: a9:60:73:71:bd:0f:a9:32:68:7e:6a:ad:56:c5:c0: 00:65:c5:2b:76:0a:d5:81:14:98:e6:68:7f:02:fc: 1b:79:4d:6c:e5:ca:cb:0b:bd:78:da:4a:22:b1:5d: 8c:a9:32:f3:21:ad:d1:12:d3:af:f4:10:00:36:9a: 42:b4:69:b0:f4:09:6f:e2:2a:5c:c1:54:8d:90:03: a3:fb:4a:a7:ee:20:3e:de:4b:02:e6:4a:a7:de:b1: 63:65:d3:8f:a9:03:f0:45:72:5e:de:93:af:f0:cd: ab:e6:e9:6c:3d:da:31:12:aa:00:83:47:75:e5:d1: df:06:90:55:e0:e5:8e:1d:a0:97:19:7b:c9:44:e8: 86:b2:53:d8:af:6b:ef:65:78:19:47:ea:be:43:07: cd:13:ac:dc:61:68:e3:7f:94:14:46:ea:9c:8f:e2: 51:98:80:4c:9c:1c:74:4f:3f:be:d7:c6:1d:82:a1: 87:64:7b:c8:9f:bb:eb:89:8f:4a:66:05:f4:d0:b1: be:7d:67:94:13:d4:e0:ce:be:9d:d5:b0:4e:3a:8a: b0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C4:C5:D1:9E:82:20:E3:BF:86:8E:CC:EC:7B:8D:3B:C2:03:19:74 X509v3 Authority Key Identifier: keyid:C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:3e:4d:9a:3c:27:4b:cb:93:5e:17:0a:c5:a2:bb:01:f5:86: a5:69:0a:37:13:23:90:3c:58:06:aa:a9:8f:55:3d:61:15:60: 15:14:d5:bf:ba:28:50:95:46:62:c1:94:f7:a1:72:ab:12:05: 92:57:56:ba:4c:c3:8b:3b:e5:4a:2c:7d:47:36:db:19:70:d2: 47:ee:8a:51:42:38:b7:e7:c0:a7:40:1d:02:78:8e:17:fb:61: 7d:4c:4a:9c:36:81:19:2e:42:06:e8:4b:f4:3d:7a:1e:dd:ff: c9:c0:6d:a5:08:3d:f2:1a:34:bf:f6:e3:ef:6a:ee:e0:99:3f: 31:33:05:af:c3:83:cd:4e:b7:c5:4a:5a:1c:b1:e0:92:d1:b7: e5:b3:34:bf:86:a0:f8:b8:f5:5e:e1:35:8c:ae:20:5b:a1:f1: 17:69:dc:b8:9e:d4:1c:a8:90:bd:f7:fc:c4:2b:3e:70:93:a4: 13:83:9e:4b:df:e8:2f:44:09:54:89:2e:9d:ba:25:ea:48:d8: 1f:93:3d:69:aa:91:5e:c8:20:3f:1c:ab:b1:7f:35:b9:49:03: 8a:29:de:4b:a4:eb:a2:91:57:02:44:0c:9c:cf:7c:0c:54:ed: 35:fb:1f:df:05:24:95:8a:8d:9a:e2:cb:32:d6:d6:f8:f4:50: 67:4a:b6:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFzlMWpslh5gzwZEs1Sssrjc8R2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVBOTgy RTAwRUE0NDAeFw0yNTA0MDUxMzA2NTdaFw0yNTA0MDgxNTUxNTdaMDMxMTAvBgNV BAMTKEEzQzRDNUQxOUU4MjIwRTNCRjg2OEVDQ0VDN0I4RDNCQzIwMzE5NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJEplNHvWxCALrQVi5ecVE07Nx xDCqCQS0FfVuUdW2HgxBXiy/f5n57yxdKKlgc3G9D6kyaH5qrVbFwABlxSt2CtWB FJjmaH8C/Bt5TWzlyssLvXjaSiKxXYypMvMhrdES06/0EAA2mkK0abD0CW/iKlzB VI2QA6P7SqfuID7eSwLmSqfesWNl04+pA/BFcl7ek6/wzavm6Ww92jESqgCDR3Xl 0d8GkFXg5Y4doJcZe8lE6IayU9iva+9leBlH6r5DB80TrNxhaON/lBRG6pyP4lGY gEycHHRPP77Xxh2CoYdke8ifu+uJj0pmBfTQsb59Z5QT1ODOvp3VsE46irCfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo8TF0Z6CIOO/ho7M7HuNO8IDGXQwHwYDVR0j BBgwFoAUwuGZisFoGkH2glC/q9BamC4A6kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMS9DMkUxOTk4QUMx NjgxQTQxRjY4MjUwQkZBQkQwNUE5ODJFMDBFQTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVBOTgyRTAw RUE0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzEvQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVB OTgyRTAwRUE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACg+TZo8J0vLk14XCsWiuwH1hqVpCjcTI5A8 WAaqqY9VPWEVYBUU1b+6KFCVRmLBlPehcqsSBZJXVrpMw4s75UosfUc22xlw0kfu ilFCOLfnwKdAHQJ4jhf7YX1MSpw2gRkuQgboS/Q9eh7d/8nAbaUIPfIaNL/24+9q 7uCZPzEzBa/Dg81Ot8VKWhyx4JLRt+WzNL+GoPi49V7hNYyuIFuh8Rdp3Lie1Byo kL33/MQrPnCTpBODnkvf6C9ECVSJLp26JepI2B+TPWmqkV7IID8cq7F/NblJA4op 3kuk66KRVwJEDJzPfAxU7TX7H98FJJWKjZriyzLW1vj0UGdKtiE= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:07 2025 by rpki-client