$ rpki-client -vvf repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft File: 248C652A73F35EA32B7EC526D977784EB15D2C7D.mft (raw, json) Hash identifier: C0VMysjvOFgZJyYl2d+b3flYVdskm8bCyrX+lJiWWnk= Subject key identifier: E3:42:44:60:DB:D6:85:96:6C:0F:80:63:0F:52:D7:EB:29:22:7D:08 Authority key identifier: 24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D Certificate issuer: /CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Certificate serial: 637BF65B77273987AAFC6C3425871A281712B4B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft Manifest number: EB Signing time: Sat 05 Apr 2025 14:51:57 +0000 Manifest this update: Sat 05 Apr 2025 14:46:57 +0000 Manifest next update: Wed 09 Apr 2025 01:44:57 +0000 Files and hashes: 1: 248C652A73F35EA32B7EC526D977784EB15D2C7D.crl (hash: CkdYCYXmi9KyN5HP7WUO2n/DmZsg/j79pXLwYHD4oX0=) 2: 3130332e39312e35352e302f32342d3234203d3e20313530323538.roa (hash: InZb4Svv3A2DHv8YSHBBCPvqo5sWpcXYdxwGVe0a300=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 01:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:7b:f6:5b:77:27:39:87:aa:fc:6c:34:25:87:1a:28:17:12:b4:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Validity Not Before: Apr 5 14:46:57 2025 GMT Not After : Apr 9 01:44:57 2025 GMT Subject: CN=E3424460DBD685966C0F80630F52D7EB29227D08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:65:3a:22:04:0b:91:57:ac:38:38:e2:be:43: c9:49:b2:d8:d1:7d:1e:b8:08:65:d3:65:d7:c5:51: 9a:7f:b9:a8:77:51:83:3e:89:0b:06:1f:6f:25:60: d5:c0:0d:8e:ac:42:78:62:3d:59:54:16:31:36:a9: cc:ce:ed:bd:87:5f:f7:ef:fc:93:f7:a2:98:22:f5: ea:e0:c4:e4:33:f1:16:41:66:b1:87:35:8d:30:8a: 24:0c:cd:c0:75:f1:06:ad:33:a2:56:07:5b:3b:b0: ec:12:15:8f:ac:2e:ca:8e:0c:c8:bc:06:99:3c:6e: 8e:c3:94:0e:0f:06:a9:7e:67:d0:1e:3e:88:fd:3f: b0:9b:e6:9b:12:e2:27:a3:0b:ac:d4:eb:69:ea:34: 41:dd:a4:44:f1:fa:cd:1b:09:c0:3b:96:c5:a9:d3: aa:76:40:82:fa:ad:c9:7e:47:c4:1b:35:a2:48:e2: 9e:57:df:51:4b:66:12:fd:14:ae:b6:9b:77:77:b3: 9f:80:e7:0a:49:a3:b4:b8:2e:3e:23:eb:c5:a0:e1: c8:d0:f0:c3:32:58:88:e3:a1:b9:de:d4:43:d8:d0: 56:9b:e2:56:34:03:b8:fc:b5:a8:b4:d8:6a:87:cd: 37:99:ac:04:be:99:bd:b8:dd:1e:f0:55:2c:19:11: 86:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:42:44:60:DB:D6:85:96:6C:0F:80:63:0F:52:D7:EB:29:22:7D:08 X509v3 Authority Key Identifier: keyid:24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e5:74:c9:fa:c2:13:d8:36:38:1e:ab:16:f5:11:ec:39:de: 39:73:c0:25:bc:5c:78:43:83:50:6c:f5:ea:54:b4:12:93:44: 18:71:7c:fa:fd:a6:a9:ea:31:0f:37:2e:cd:e1:33:ce:ec:38: 94:fb:ca:52:23:c7:89:d8:da:32:42:54:3c:04:df:5f:c7:59: 3d:c3:ad:41:2c:5e:f5:bd:75:61:88:86:47:2f:4a:95:2c:71: 7d:ea:82:b5:bc:f4:b3:48:1a:73:67:e0:18:17:db:b5:45:f5: 6c:8f:77:f3:89:7d:c7:13:58:27:bf:fd:42:5b:2c:44:05:27: 65:20:56:82:5f:e6:a2:d1:5d:be:d0:1f:5b:1e:42:f2:ff:13: 11:90:b7:40:d6:36:81:e8:df:de:b6:91:0a:36:e4:62:d6:0b: fb:58:2d:b4:a0:e9:1c:d1:88:28:b9:34:6d:f7:d5:90:0f:9d: d5:dd:cc:9b:ae:09:43:81:41:a2:83:4f:83:c6:1a:20:87:c0: 7f:5f:1e:17:e1:02:f6:f9:c3:f3:97:d0:0a:cc:da:60:1b:76: f5:3f:eb:94:b9:24:a4:66:d6:1d:9f:b1:2f:01:a5:5e:32:49: e2:17:fa:98:82:9c:a3:c6:e1:7a:77:5d:e4:59:23:f8:58:eb: 90:4e:6e:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY3v2W3cnOYeq/Gw0JYcaKBcStLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVC MTVEMkM3RDAeFw0yNTA0MDUxNDQ2NTdaFw0yNTA0MDkwMTQ0NTdaMDMxMTAvBgNV BAMTKEUzNDI0NDYwREJENjg1OTY2QzBGODA2MzBGNTJEN0VCMjkyMjdEMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ZToiBAuRV6w4OOK+Q8lJstjR fR64CGXTZdfFUZp/uah3UYM+iQsGH28lYNXADY6sQnhiPVlUFjE2qczO7b2HX/fv /JP3opgi9ergxOQz8RZBZrGHNY0wiiQMzcB18QatM6JWB1s7sOwSFY+sLsqODMi8 Bpk8bo7DlA4PBql+Z9AePoj9P7Cb5psS4iejC6zU62nqNEHdpETx+s0bCcA7lsWp 06p2QIL6rcl+R8QbNaJI4p5X31FLZhL9FK62m3d3s5+A5wpJo7S4Lj4j68Wg4cjQ 8MMyWIjjobne1EPY0Fab4lY0A7j8tai02GqHzTeZrAS+mb243R7wVSwZEYbnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU40JEYNvWhZZsD4BjD1LX6ykifQgwHwYDVR0j BBgwFoAUJIxlKnPzXqMrfsUm2Xd4TrFdLH0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmZiYWY3MS0yZDU3LTRlNGEtOTFkMC1jYWM4YWIwYWNlZmUvMC8yNDhDNjUyQTcz RjM1RUEzMkI3RUM1MjZEOTc3Nzg0RUIxNUQyQzdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVCMTVE MkM3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZmYmFmNzEtMmQ1Ny00ZTRhLTkx ZDAtY2FjOGFiMGFjZWZlLzAvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4 NEVCMTVEMkM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzldMn6whPYNjgeqxb1Eew53jlzwCW8XHhD g1Bs9epUtBKTRBhxfPr9pqnqMQ83Ls3hM87sOJT7ylIjx4nY2jJCVDwE31/HWT3D rUEsXvW9dWGIhkcvSpUscX3qgrW89LNIGnNn4BgX27VF9WyPd/OJfccTWCe//UJb LEQFJ2UgVoJf5qLRXb7QH1seQvL/ExGQt0DWNoHo3962kQo25GLWC/tYLbSg6RzR iCi5NG331ZAPndXdzJuuCUOBQaKDT4PGGiCHwH9fHhfhAvb5w/OX0ArM2mAbdvU/ 65S5JKRm1h2fsS8BpV4ySeIX+piCnKPG4Xp3XeRZI/hY65BObro= -----END CERTIFICATE-----Generated at Mon Apr 7 08:12:52 2025 by rpki-client