$ rpki-client -vvf repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft File: C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft (raw, json) Hash identifier: HtOhjp3e08Dpz2BI27KsrMUsDIn03K2B5C1KUXigVNg= Subject key identifier: E5:EA:A3:10:24:4A:4B:10:A2:32:55:28:5B:9C:8C:CE:39:07:92:7C Authority key identifier: C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36 Certificate issuer: /CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336 Certificate serial: 0D3BFD6C66C0CD9CF3B38A7CA64BDC39A417000E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft Manifest number: B5 Signing time: Thu 03 Apr 2025 11:10:48 +0000 Manifest this update: Thu 03 Apr 2025 11:05:48 +0000 Manifest next update: Sun 06 Apr 2025 23:05:48 +0000 Files and hashes: 1: 3230332e3134352e35382e302f32332d3234203d3e20313432333735.roa (hash: lPAaUMCnmORN0lcIkL1SdTQ//TRobbXWIgBrv9ai9Yc=) 2: C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl (hash: Ua8TjIKvAY/sG18oj1iXdCyuDzq28Ka8n+3hL894qV4=) 3: 3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa (hash: XQ5YOO3QMAmUiXXyDyAvfXAeHqliwoa7oF/Rg8qefuw=) 4: 3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa (hash: bBnfqhprKZxO7GNHi6JFSi7ubIWOVMTy7/ydlUAr+qE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 23:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:3b:fd:6c:66:c0:cd:9c:f3:b3:8a:7c:a6:4b:dc:39:a4:17:00:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336 Validity Not Before: Apr 3 11:05:48 2025 GMT Not After : Apr 6 23:05:48 2025 GMT Subject: CN=E5EAA310244A4B10A23255285B9C8CCE3907927C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:36:8f:a1:60:5b:eb:5d:b5:5b:7e:0a:c2:b2: f5:a2:b4:2e:69:89:0b:a7:ca:d1:83:8e:04:d6:c0: f0:2c:5a:6c:a9:d8:b4:4d:f0:bf:b5:e2:5e:23:75: 5f:22:4f:75:e7:69:91:9e:ec:06:73:02:21:77:a4: fe:d9:c6:56:18:b5:00:cf:91:bf:9a:70:27:46:f2: 00:dc:ac:8e:25:98:8d:c1:29:42:8b:e8:91:ea:c3: 47:9a:f6:ee:be:f3:18:b2:80:cb:1a:4c:dd:f6:9a: 97:e3:05:0d:26:e9:f2:96:48:0b:44:5c:8f:f9:53: 18:19:d9:81:df:66:fa:ab:c4:f3:11:60:ed:a8:89: 8d:c8:a9:be:46:84:a7:2e:26:4f:7f:f6:8d:30:3b: 81:d4:11:3f:3f:de:41:b7:1f:52:3f:08:73:d9:89: 2e:66:6e:75:0c:de:29:9c:ec:cb:c6:3b:19:04:00: 5a:b8:7e:33:df:ef:26:66:05:cb:2f:a6:16:c3:a5: 57:91:97:bf:20:84:6c:ed:c5:4d:25:ee:42:7f:f6: d9:03:1e:83:3b:72:4f:cc:83:fa:4d:84:35:c1:2b: 2f:5c:65:1d:dd:2d:4e:65:0f:7c:e9:dc:5e:0e:48: 48:37:9b:79:ef:e7:9f:ba:ce:b0:eb:c7:f2:28:ea: 79:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:EA:A3:10:24:4A:4B:10:A2:32:55:28:5B:9C:8C:CE:39:07:92:7C X509v3 Authority Key Identifier: keyid:C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:ee:53:0c:4f:75:93:ba:14:25:79:e5:b9:f3:7e:4b:a7:1a: 24:ad:a2:c7:d4:52:fb:8e:e1:e4:05:bb:b3:de:b1:9e:76:5d: 2c:3f:1b:8d:5e:ea:e2:71:ef:8d:6b:e9:fa:51:22:34:7f:fd: a2:7e:1f:ae:4c:6f:8c:ab:ed:89:f3:2d:a3:9a:8c:21:9a:b8: 3d:8e:bc:1b:00:99:60:1f:0b:4e:bb:03:86:59:98:8d:9d:f9: 62:46:7b:06:13:fc:1b:4a:40:31:ee:30:3d:b4:53:a0:52:45: 38:17:0c:5a:84:c6:fe:e5:20:fe:f9:c0:59:ee:0e:c2:b6:68: fa:b2:81:9a:c1:67:ba:cd:2b:b1:75:23:bc:df:94:7f:a5:ee: 8c:e4:fd:bb:3f:81:26:ac:a6:be:75:a9:57:77:33:db:f4:40: db:cc:b3:06:a0:7a:bd:e1:2e:c2:1d:9e:7f:25:90:86:76:49: c4:75:06:07:33:e3:7e:18:86:5e:b4:7e:62:4e:16:e5:91:e7: 24:00:10:02:2c:57:0d:43:55:8a:aa:5d:f0:13:ed:a2:55:a2: 86:e0:87:0e:dd:06:57:9a:f7:df:85:6d:3e:25:f8:6f:13:c1: 0d:f1:96:c7:5c:5b:3b:74:6a:cb:1f:de:13:d1:13:5b:a8:c5: a4:9a:ce:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDTv9bGbAzZzzs4p8pkvcOaQXAA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMzRTFC NTMwNjMzNjAeFw0yNTA0MDMxMTA1NDhaFw0yNTA0MDYyMzA1NDhaMDMxMTAvBgNV BAMTKEU1RUFBMzEwMjQ0QTRCMTBBMjMyNTUyODVCOUM4Q0NFMzkwNzkyN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPNo+hYFvrXbVbfgrCsvWitC5p iQunytGDjgTWwPAsWmyp2LRN8L+14l4jdV8iT3XnaZGe7AZzAiF3pP7ZxlYYtQDP kb+acCdG8gDcrI4lmI3BKUKL6JHqw0ea9u6+8xiygMsaTN32mpfjBQ0m6fKWSAtE XI/5UxgZ2YHfZvqrxPMRYO2oiY3Iqb5GhKcuJk9/9o0wO4HUET8/3kG3H1I/CHPZ iS5mbnUM3imc7MvGOxkEAFq4fjPf7yZmBcsvphbDpVeRl78ghGztxU0l7kJ/9tkD HoM7ck/Mg/pNhDXBKy9cZR3dLU5lD3zp3F4OSEg3m3nv55+6zrDrx/Io6nkvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5eqjECRKSxCiMlUoW5yMzjkHknwwHwYDVR0j BBgwFoAUwvlWsSaIS179jdrc6w4z4bUwYzYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmFhM2JlYi01NzYxLTRjMzQtODhkMy0wMTVjY2M2NDAwMmYvMC9DMkY5NTZCMTI2 ODg0QjVFRkQ4RERBRENFQjBFMzNFMUI1MzA2MzM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMzRTFCNTMw NjMzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZhYTNiZWItNTc2MS00YzM0LTg4 ZDMtMDE1Y2NjNjQwMDJmLzAvQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMz RTFCNTMwNjMzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjuUwxPdZO6FCV55bnzfkunGiStosfUUvuO 4eQFu7PesZ52XSw/G41e6uJx741r6fpRIjR//aJ+H65Mb4yr7YnzLaOajCGauD2O vBsAmWAfC067A4ZZmI2d+WJGewYT/BtKQDHuMD20U6BSRTgXDFqExv7lIP75wFnu DsK2aPqygZrBZ7rNK7F1I7zflH+l7ozk/bs/gSaspr51qVd3M9v0QNvMswager3h LsIdnn8lkIZ2ScR1Bgcz434Yhl60fmJOFuWR5yQAEAIsVw1DVYqqXfAT7aJVoobg hw7dBlea99+FbT4l+G8TwQ3xlsdcWzt0assf3hPRE1uoxaSazgo= -----END CERTIFICATE-----Generated at Sun Apr 6 00:50:16 2025 by rpki-client