$ rpki-client -vvf repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft File: 2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft (raw, json) Hash identifier: t2TS7USgkyHZe0gFm0HCaVyHJB9FQ6pS6/ZXFRtOI9s= Subject key identifier: 09:E4:D4:A8:73:49:A0:A1:F3:B3:92:D1:55:B4:AE:1A:5E:48:2C:8B Authority key identifier: 25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17 Certificate issuer: /CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17 Certificate serial: 2D8968DE0DABF90500C3F7C77B297961771FA265 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft Manifest number: 047A Signing time: Thu 03 Apr 2025 17:21:43 +0000 Manifest this update: Thu 03 Apr 2025 17:16:43 +0000 Manifest next update: Sun 06 Apr 2025 20:49:43 +0000 Files and hashes: 1: 3130332e3134352e31342e302f32332d3234203d3e20313339343338.roa (hash: sGuZ949AervQFXJY8lGdE9UQu3pLwaxX5H+2ASfBYqU=) 2: 3130332e3134352e31352e302f32342d3234203d3e20313339343338.roa (hash: alDRN92tlwgNSOsmGcO4bYs5k2yVLt0hg1F97xm610Y=) 3: 2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl (hash: GdZzzEtrc/SXmBt9n5Q/+sny1G6lHaB7CI//rYrNkAo=) 4: 3130332e3134352e31342e302f32342d3234203d3e20313339343338.roa (hash: igZUGj9WZ1hy1WLn/uUmoBiqqH+6kXF5u53eZj34KGg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 20:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:89:68:de:0d:ab:f9:05:00:c3:f7:c7:7b:29:79:61:77:1f:a2:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17 Validity Not Before: Apr 3 17:16:43 2025 GMT Not After : Apr 6 20:49:43 2025 GMT Subject: CN=09E4D4A87349A0A1F3B392D155B4AE1A5E482C8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b9:ec:0e:aa:78:e9:08:01:14:fd:99:70:ec: 3d:45:0b:cf:d3:45:f5:b8:02:10:e1:0d:f3:98:24: 8e:f6:69:09:af:1b:c8:e7:94:18:82:32:42:ce:22: cf:da:7b:4f:b8:65:c1:eb:18:d8:04:ce:c1:f2:10: aa:80:c1:2f:82:a1:67:9d:a9:4d:02:d3:34:b6:d1: 39:31:ef:2c:31:df:83:eb:75:ce:9f:af:64:f4:86: fe:88:1d:5b:24:0b:33:ea:4f:45:b1:e9:89:29:32: 8a:85:c9:dc:08:06:01:a9:da:64:a0:93:75:34:0a: 42:57:f1:ee:73:51:b6:e2:a4:cf:5a:95:ae:5e:bc: 5c:af:00:8f:99:b7:5b:59:64:24:45:27:ca:a0:b1: 1f:d1:66:0d:39:e9:40:da:c2:c3:c6:26:16:dc:d2: bd:31:e1:b2:2f:fa:ca:dc:18:b1:88:44:c3:76:95: 02:d7:96:4d:57:96:d3:ad:69:e9:6e:a2:5e:ea:7e: 85:69:e9:2b:4a:5c:fd:39:ef:f7:e3:b6:5b:c4:95: 99:4d:94:8c:7d:ee:c2:83:04:aa:d3:53:3f:8b:fb: b9:8a:25:fb:6b:dc:b7:b0:5e:4a:54:fb:81:21:2f: d0:35:22:1d:bf:1d:47:05:2c:2e:0d:b2:40:c1:58: 68:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E4:D4:A8:73:49:A0:A1:F3:B3:92:D1:55:B4:AE:1A:5E:48:2C:8B X509v3 Authority Key Identifier: keyid:25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:17:cc:9c:7f:f6:b9:bd:ea:07:dc:7d:80:48:f1:ad:11:9c: 11:d3:2f:0d:d7:cf:be:d3:f4:59:8b:20:c7:f9:32:04:8e:e5: 15:6e:6a:df:23:06:35:4e:92:6a:ce:f9:6d:1c:8b:71:5d:70: ef:27:8e:3b:e9:4f:43:0a:52:69:7c:a7:40:4b:e3:c8:f1:db: c0:78:ef:5d:bf:50:e5:e4:d4:69:6b:26:45:f9:a8:da:ea:4a: b3:12:c4:bd:ca:7d:eb:52:f0:94:76:ec:8d:ec:b2:aa:8e:1f: c9:26:68:cd:d0:65:6d:73:2d:e8:2d:bb:1e:2e:50:93:b2:69: 33:d9:15:ef:19:37:25:e6:59:e6:4a:77:b7:ca:f8:dc:53:b0: 21:3b:f3:54:c8:15:0f:3c:e8:42:b7:88:83:a2:b4:da:72:bb: c2:a1:80:39:1e:a9:69:96:44:bf:24:e6:a7:e1:89:32:28:7b: 78:44:14:e3:82:24:4d:40:02:ce:04:3a:2b:90:cb:c4:73:8b: 48:2e:57:52:93:4b:1d:93:7b:c1:2f:6f:a4:94:92:40:02:20: d4:a6:76:9d:4c:28:0a:a9:02:98:de:65:ec:a5:7a:dc:b8:d2: 02:32:01:71:67:48:a9:4a:ac:61:d9:01:87:22:27:83:ca:7d: c8:89:f9:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULYlo3g2r+QUAw/fHeyl5YXcfomUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5Mzcy RUJEMkExNzAeFw0yNTA0MDMxNzE2NDNaFw0yNTA0MDYyMDQ5NDNaMDMxMTAvBgNV BAMTKDA5RTRENEE4NzM0OUEwQTFGM0IzOTJEMTU1QjRBRTFBNUU0ODJDOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeuewOqnjpCAEU/Zlw7D1FC8/T RfW4AhDhDfOYJI72aQmvG8jnlBiCMkLOIs/ae0+4ZcHrGNgEzsHyEKqAwS+CoWed qU0C0zS20Tkx7ywx34Prdc6fr2T0hv6IHVskCzPqT0Wx6YkpMoqFydwIBgGp2mSg k3U0CkJX8e5zUbbipM9ala5evFyvAI+Zt1tZZCRFJ8qgsR/RZg056UDawsPGJhbc 0r0x4bIv+srcGLGIRMN2lQLXlk1XltOtaeluol7qfoVp6StKXP057/fjtlvElZlN lIx97sKDBKrTUz+L+7mKJftr3LewXkpU+4EhL9A1Ih2/HUcFLC4NskDBWGi3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCeTUqHNJoKHzs5LRVbSuGl5ILIswHwYDVR0j BBgwFoAUJVIkDv/uL2D1aE3QPt5JNy69KhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDA0MjMzZi1iYjJjLTQ3ZDctOTAxYy1lM2M4MmY4ZDQyM2MvMC8yNTUyMjQwRUZG RUUyRjYwRjU2ODRERDAzRURFNDkzNzJFQkQyQTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5MzcyRUJE MkExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAwNDIzM2YtYmIyYy00N2Q3LTkw MWMtZTNjODJmOGQ0MjNjLzAvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5 MzcyRUJEMkExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIXzJx/9rm96gfcfYBI8a0RnBHTLw3Xz77T 9FmLIMf5MgSO5RVuat8jBjVOkmrO+W0ci3FdcO8njjvpT0MKUml8p0BL48jx28B4 712/UOXk1GlrJkX5qNrqSrMSxL3KfetS8JR27I3ssqqOH8kmaM3QZW1zLegtux4u UJOyaTPZFe8ZNyXmWeZKd7fK+NxTsCE781TIFQ886EK3iIOitNpyu8KhgDkeqWmW RL8k5qfhiTIoe3hEFOOCJE1AAs4EOiuQy8Rzi0guV1KTSx2Te8Evb6SUkkACINSm dp1MKAqpApjeZeylety40gIyAXFnSKlKrGHZAYciJ4PKfciJ+U8= -----END CERTIFICATE-----Generated at Sat Apr 5 16:40:16 2025 by rpki-client