$ rpki-client -vvf repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft File: 253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft (raw, json) Hash identifier: ftqnulKauQCY5CLdz7FwamTaYPuHFAlFsuJTqMJcLPM= Subject key identifier: 8A:8D:3F:F0:B3:E7:EF:4E:11:CF:58:08:75:97:D3:A4:30:83:A4:4E Authority key identifier: 25:3E:2B:B4:DE:46:7A:F0:8F:19:1A:F7:63:2E:E3:BD:05:8D:A1:01 Certificate issuer: /CN=253E2BB4DE467AF08F191AF7632EE3BD058DA101 Certificate serial: 35B4570BB0BD833F1AE3C92204671DB10A0F11E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft Manifest number: 04C2 Signing time: Sat 05 Apr 2025 02:01:29 +0000 Manifest this update: Sat 05 Apr 2025 01:56:29 +0000 Manifest next update: Tue 08 Apr 2025 03:40:29 +0000 Files and hashes: 1: 3230322e35312e3232342e302f32302d3234203d3e203338313434.roa (hash: aWbYXoX9asbKX8LtSjMx/jUwcU2UCkmj/h5lE8zqnhk=) 2: 36302e3235332e39362e302f31392d3234203d3e203338313434.roa (hash: Qw+QQXeY4ygHVGUJMQ05GH+K/HnAhSZIrw89V5Vsm4Q=) 3: 253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl (hash: 80i8ESj/7T+V8kTkBWg4cNi1mhLcmWtkrDFq8TxSzQU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:b4:57:0b:b0:bd:83:3f:1a:e3:c9:22:04:67:1d:b1:0a:0f:11:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253E2BB4DE467AF08F191AF7632EE3BD058DA101 Validity Not Before: Apr 5 01:56:29 2025 GMT Not After : Apr 8 03:40:29 2025 GMT Subject: CN=8A8D3FF0B3E7EF4E11CF58087597D3A43083A44E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:56:d2:2b:b0:18:a4:e4:e0:13:d5:7b:39:06: 64:1c:f6:a9:2f:33:fb:3a:3e:e1:08:e3:24:b9:6d: 97:2f:7a:33:b2:97:af:cb:3b:c5:19:9c:71:1e:8f: 41:8a:72:f1:da:ee:92:74:46:ea:e7:a4:ea:9d:21: da:64:e6:b9:95:3a:35:ef:59:8d:74:c9:fd:e1:3d: 54:f8:41:92:e3:fe:92:e1:b3:f6:49:61:cb:df:1d: 0f:48:8b:06:46:a9:e3:e8:25:2b:ae:f5:81:95:a6: bb:d6:56:38:48:6a:9a:c9:9c:6d:95:e0:c3:a6:46: 1e:a3:1a:d0:2d:41:c5:05:bb:8d:db:a5:8e:c9:f4: ac:3d:08:28:2d:58:01:02:b7:98:f5:51:ed:64:a7: 3e:18:e3:02:8b:bd:2f:73:23:dc:03:3b:4d:ad:d5: a1:4f:b5:d9:7d:00:2c:99:e2:a3:1c:2e:cc:3f:d1: f2:de:0d:09:27:66:cd:16:06:d1:62:68:1f:79:7e: bb:b8:c1:d2:91:49:64:a9:8b:e8:b5:c9:80:1d:23: 12:2e:b2:03:30:cc:62:2f:46:42:26:10:4b:3c:0b: 10:80:c4:47:d4:ad:3b:e1:79:a6:d3:bb:c7:d7:5f: 8c:69:03:80:98:0a:3e:ca:ad:24:ec:ec:83:7f:6a: b2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8D:3F:F0:B3:E7:EF:4E:11:CF:58:08:75:97:D3:A4:30:83:A4:4E X509v3 Authority Key Identifier: keyid:25:3E:2B:B4:DE:46:7A:F0:8F:19:1A:F7:63:2E:E3:BD:05:8D:A1:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:47:d1:9d:25:43:64:7e:e5:28:81:8b:94:22:33:1b:e9:01: cf:7b:6b:f3:b6:c6:58:cf:5f:8c:c8:0d:d0:9a:99:c0:08:c8: 42:09:ee:1d:2f:ff:4f:ff:8b:89:26:05:64:46:0f:27:f0:88: 7f:6c:de:38:c8:16:45:01:fb:95:7c:a8:cd:eb:9c:ba:63:60: 7e:2c:0c:ad:3e:30:c8:61:49:e1:f7:fd:1f:4c:56:1a:28:c4: 1c:bd:38:37:72:53:0b:49:59:56:61:7c:53:18:69:9e:b7:e7: 3d:f1:f7:34:6c:2c:b2:c0:c2:17:82:5c:74:be:9d:74:46:46: 10:18:0f:b6:7d:36:2b:e1:50:fd:b6:f6:df:4a:da:80:7e:00: 36:7f:0c:c8:35:9e:7f:08:e8:ef:2b:3d:24:ab:ed:14:7a:6c: 75:85:c9:67:d8:0c:10:d9:56:9a:22:1d:5e:4d:d9:84:2b:d3: 1d:48:a1:35:dc:cb:b3:3e:be:8b:7a:cc:4b:89:b2:91:28:1b: e9:cb:91:6a:68:4c:61:2c:35:e4:29:9f:4a:f4:00:22:2b:fc: ce:d4:d2:5c:7b:c8:3b:71:1f:d8:b1:c8:06:56:0b:3f:9a:33: 97:ca:7a:21:1d:2c:1d:7c:91:5f:ba:e5:d2:cf:92:7a:6f:cf: 17:7a:b3:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNbRXC7C9gz8a48kiBGcdsQoPEeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUzQkQw NThEQTEwMTAeFw0yNTA0MDUwMTU2MjlaFw0yNTA0MDgwMzQwMjlaMDMxMTAvBgNV BAMTKDhBOEQzRkYwQjNFN0VGNEUxMUNGNTgwODc1OTdEM0E0MzA4M0E0NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0VtIrsBik5OAT1Xs5BmQc9qkv M/s6PuEI4yS5bZcvejOyl6/LO8UZnHEej0GKcvHa7pJ0RurnpOqdIdpk5rmVOjXv WY10yf3hPVT4QZLj/pLhs/ZJYcvfHQ9IiwZGqePoJSuu9YGVprvWVjhIaprJnG2V 4MOmRh6jGtAtQcUFu43bpY7J9Kw9CCgtWAECt5j1Ue1kpz4Y4wKLvS9zI9wDO02t 1aFPtdl9ACyZ4qMcLsw/0fLeDQknZs0WBtFiaB95fru4wdKRSWSpi+i1yYAdIxIu sgMwzGIvRkImEEs8CxCAxEfUrTvheabTu8fXX4xpA4CYCj7KrSTs7IN/arIdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUio0/8LPn704Rz1gIdZfTpDCDpE4wHwYDVR0j BBgwFoAUJT4rtN5GevCPGRr3Yy7jvQWNoQEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2Q3NTM2ZC05ZTEwLTRkNDktYjZjYS0wNDFjYzlhNTkxNGUvMC8yNTNFMkJCNERF NDY3QUYwOEYxOTFBRjc2MzJFRTNCRDA1OERBMTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUzQkQwNThE QTEwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNkNzUzNmQtOWUxMC00ZDQ5LWI2 Y2EtMDQxY2M5YTU5MTRlLzAvMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUz QkQwNThEQTEwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxH0Z0lQ2R+5SiBi5QiMxvpAc97a/O2xljP X4zIDdCamcAIyEIJ7h0v/0//i4kmBWRGDyfwiH9s3jjIFkUB+5V8qM3rnLpjYH4s DK0+MMhhSeH3/R9MVhooxBy9ODdyUwtJWVZhfFMYaZ635z3x9zRsLLLAwheCXHS+ nXRGRhAYD7Z9NivhUP229t9K2oB+ADZ/DMg1nn8I6O8rPSSr7RR6bHWFyWfYDBDZ VpoiHV5N2YQr0x1IoTXcy7M+vot6zEuJspEoG+nLkWpoTGEsNeQpn0r0ACIr/M7U 0lx7yDtxH9ixyAZWCz+aM5fKeiEdLB18kV+65dLPknpvzxd6s3o= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:35 2025 by rpki-client