$ rpki-client -vvf repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.mft File: 82EE517606C76902159E8886F875EF96B0327C72.mft (raw, json) Hash identifier: 4Atjho2jwCFe6RKAQQycddFn01IcTNLzIbGKQRg153c= Subject key identifier: 52:C8:18:D6:CA:7B:94:FA:B2:59:CE:2E:5D:DA:50:71:1F:BB:70:A2 Authority key identifier: 82:EE:51:76:06:C7:69:02:15:9E:88:86:F8:75:EF:96:B0:32:7C:72 Certificate issuer: /CN=82EE517606C76902159E8886F875EF96B0327C72 Certificate serial: 1CB88A2D2F09E4FB80BFA6BB0288EEFCBFC1CFFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EE517606C76902159E8886F875EF96B0327C72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.mft Manifest number: 0433 Signing time: Fri 18 Apr 2025 04:52:04 +0000 Manifest this update: Fri 18 Apr 2025 04:47:04 +0000 Manifest next update: Mon 21 Apr 2025 07:34:04 +0000 Files and hashes: 1: 3130332e3135372e32342e302f32342d3234203d3e20313431313035.roa (hash: PvGUACm4ijzIPaxD0+PAB/B/JCQ56MWhw9C11hrAztM=) 2: 82EE517606C76902159E8886F875EF96B0327C72.crl (hash: RTJ4QdXgj+1bcyMDByo0IpmiN9PrNkfVD74vqPz6NKM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.crl rsync://repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EE517606C76902159E8886F875EF96B0327C72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 07:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:b8:8a:2d:2f:09:e4:fb:80:bf:a6:bb:02:88:ee:fc:bf:c1:cf:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82EE517606C76902159E8886F875EF96B0327C72 Validity Not Before: Apr 18 04:47:04 2025 GMT Not After : Apr 21 07:34:04 2025 GMT Subject: CN=52C818D6CA7B94FAB259CE2E5DDA50711FBB70A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b2:ea:07:5f:5d:e4:26:8f:9f:79:3c:9f:ad: ab:e3:dd:6b:9f:f5:51:3e:d9:48:ac:72:17:01:a0: 5d:33:c6:8e:4b:c1:e4:d6:07:e9:88:10:19:1e:50: 71:d0:b8:d1:27:d4:58:16:25:f4:20:09:63:c0:dc: b9:fd:92:a1:92:9d:59:eb:33:8f:e2:5a:3c:04:26: 21:26:e7:ab:3e:d1:16:46:5b:d2:ee:67:4b:f1:23: c4:f9:a6:e6:af:d1:d5:7c:2b:e5:67:ef:f9:ea:e8: e4:23:41:e6:78:aa:19:22:7a:df:7f:87:05:e1:f0: b3:da:08:35:a0:86:00:8b:21:eb:66:68:ba:df:b2: 8d:ef:34:18:47:7d:ae:d0:60:55:98:6d:d1:aa:69: 8b:53:58:0f:ee:2f:7a:cc:2b:d0:09:54:21:80:c0: 96:89:77:1c:1d:28:a3:3b:0d:fc:a3:f5:c2:0c:7b: a7:e3:25:b6:4b:73:65:ca:3e:b0:ab:6e:80:f4:79: 89:a6:1f:82:1a:ad:52:93:ef:50:51:09:7b:28:07: 53:24:e2:59:7f:c5:db:0d:00:7a:c2:2d:31:39:76: 7e:90:c9:a3:35:99:2d:dd:72:37:85:d4:0c:07:81: 00:bd:5e:f1:c8:2d:a6:53:f1:fc:f0:32:c6:b4:68: c5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C8:18:D6:CA:7B:94:FA:B2:59:CE:2E:5D:DA:50:71:1F:BB:70:A2 X509v3 Authority Key Identifier: keyid:82:EE:51:76:06:C7:69:02:15:9E:88:86:F8:75:EF:96:B0:32:7C:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EE517606C76902159E8886F875EF96B0327C72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:40:25:19:a2:42:18:a1:0f:9f:39:2a:99:bd:b4:83:6c:81: fb:37:86:74:72:67:8d:4c:aa:e7:74:e6:64:8f:f3:94:37:57: 2c:9f:a5:bf:85:ba:87:be:03:5e:ef:bd:79:e1:a3:93:1e:d0: 9d:85:a8:82:86:15:a6:b7:aa:1e:ff:50:3a:b1:89:a9:1d:8e: 87:34:c0:16:24:79:aa:09:54:4a:28:b6:d3:3d:79:43:09:72: 73:ce:0e:4c:b4:1e:b4:f1:5c:de:04:32:20:f4:37:2e:8e:3d: 80:0a:30:67:f4:e4:a0:f4:70:04:21:f0:c0:8a:23:28:a7:c5: db:8c:32:54:57:ea:22:ec:29:28:c6:72:cf:df:da:6e:82:c7: 46:49:2f:1c:15:67:7c:f9:05:76:cb:19:4c:64:5e:e6:38:49: 2f:b8:ad:14:54:0c:0c:f5:7f:b9:ce:9c:e3:50:4a:a9:5c:4d: bf:fb:3b:2d:f3:53:41:bd:1e:c0:fa:1e:bd:67:a4:26:87:6d: a7:42:07:df:45:fc:49:ef:50:f6:a3:98:f8:d2:de:d1:b4:99: d0:07:f0:df:e3:6d:72:97:87:21:67:85:b6:53:d1:49:c5:92: 23:1d:12:84:33:5b:30:07:7c:d6:b6:a9:76:8a:15:73:23:24: 5b:1a:b4:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHLiKLS8J5PuAv6a7Aoju/L/Bz/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJFRTUxNzYwNkM3NjkwMjE1OUU4ODg2Rjg3NUVGOTZC MDMyN0M3MjAeFw0yNTA0MTgwNDQ3MDRaFw0yNTA0MjEwNzM0MDRaMDMxMTAvBgNV BAMTKDUyQzgxOEQ2Q0E3Qjk0RkFCMjU5Q0UyRTVEREE1MDcxMUZCQjcwQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDssuoHX13kJo+feTyfravj3Wuf 9VE+2UischcBoF0zxo5LweTWB+mIEBkeUHHQuNEn1FgWJfQgCWPA3Ln9kqGSnVnr M4/iWjwEJiEm56s+0RZGW9LuZ0vxI8T5puav0dV8K+Vn7/nq6OQjQeZ4qhkiet9/ hwXh8LPaCDWghgCLIetmaLrfso3vNBhHfa7QYFWYbdGqaYtTWA/uL3rMK9AJVCGA wJaJdxwdKKM7Dfyj9cIMe6fjJbZLc2XKPrCrboD0eYmmH4IarVKT71BRCXsoB1Mk 4ll/xdsNAHrCLTE5dn6QyaM1mS3dcjeF1AwHgQC9XvHILaZT8fzwMsa0aMVlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUsgY1sp7lPqyWc4uXdpQcR+7cKIwHwYDVR0j BBgwFoAUgu5RdgbHaQIVnoiG+HXvlrAyfHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmM2NWI4Yy0zOWU5LTQ3OGQtODc0Mi1jNTM1YjYxYmFlNTkvMC84MkVFNTE3NjA2 Qzc2OTAyMTU5RTg4ODZGODc1RUY5NkIwMzI3QzcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODJFRTUxNzYwNkM3NjkwMjE1OUU4ODg2Rjg3NUVGOTZCMDMy N0M3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJjNjViOGMtMzllOS00NzhkLTg3 NDItYzUzNWI2MWJhZTU5LzAvODJFRTUxNzYwNkM3NjkwMjE1OUU4ODg2Rjg3NUVG OTZCMDMyN0M3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1AJRmiQhihD585Kpm9tINsgfs3hnRyZ41M qud05mSP85Q3Vyyfpb+Fuoe+A17vvXnho5Me0J2FqIKGFaa3qh7/UDqxiakdjoc0 wBYkeaoJVEoottM9eUMJcnPODky0HrTxXN4EMiD0Ny6OPYAKMGf05KD0cAQh8MCK IyinxduMMlRX6iLsKSjGcs/f2m6Cx0ZJLxwVZ3z5BXbLGUxkXuY4SS+4rRRUDAz1 f7nOnONQSqlcTb/7Oy3zU0G9HsD6Hr1npCaHbadCB99F/EnvUPajmPjS3tG0mdAH 8N/jbXKXhyFnhbZT0UnFkiMdEoQzWzAHfNa2qXaKFXMjJFsatCE= -----END CERTIFICATE-----Generated at Fri Apr 18 11:19:46 2025 by rpki-client