$ rpki-client -vvf repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft File: C85C49978E8023F2D58521524D4EC616244CDC14.mft (raw, json) Hash identifier: wYV5CpCo4o85Y3OaYIxQotbu/cJ1naOSykITwpuxlow= Subject key identifier: 9C:92:A6:40:70:D7:14:B1:04:EA:26:AA:18:51:8F:71:D4:D3:A9:7B Authority key identifier: C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 Certificate issuer: /CN=C85C49978E8023F2D58521524D4EC616244CDC14 Certificate serial: 684ED6352591FB8662BA424744C82291A56AE690 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft Manifest number: 019E Signing time: Thu 03 Apr 2025 21:02:10 +0000 Manifest this update: Thu 03 Apr 2025 20:57:10 +0000 Manifest next update: Mon 07 Apr 2025 00:22:10 +0000 Files and hashes: 1: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (hash: Bx1b38fbUxJjhjrxeEuROMcN+gxdeGCZuXwCivK7OCQ=) 2: C85C49978E8023F2D58521524D4EC616244CDC14.crl (hash: 57t0B0IQ8goapd6PkbrYBbUt023t8NJze7dSxP1Nc3E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 00:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:4e:d6:35:25:91:fb:86:62:ba:42:47:44:c8:22:91:a5:6a:e6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C85C49978E8023F2D58521524D4EC616244CDC14 Validity Not Before: Apr 3 20:57:10 2025 GMT Not After : Apr 7 00:22:10 2025 GMT Subject: CN=9C92A64070D714B104EA26AA18518F71D4D3A97B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:10:89:80:fc:04:27:d9:b4:0e:b2:77:a9:af: 89:f5:0e:d1:e6:16:d4:c1:61:bc:a3:a9:46:af:63: 43:e9:88:d7:d3:bc:19:bf:1e:19:34:46:2a:11:e8: ff:be:8e:20:15:34:c0:c9:7c:f8:53:1e:7d:d3:18: 65:15:ce:1e:a3:e9:d9:00:76:2e:d9:70:d8:f9:5d: 9f:21:4c:e6:ad:e3:b3:74:8a:ac:7e:07:f1:9e:3b: 48:bd:23:61:be:01:07:d9:04:91:1a:e1:c5:35:34: f1:cc:e3:2d:3a:5e:13:65:00:2d:c4:d1:5d:7a:ff: d6:00:f4:c2:d5:b8:88:5f:1c:aa:85:cc:c8:88:d3: da:ed:5d:da:ef:9d:62:6d:54:17:66:f7:42:70:f0: 1b:18:d7:c6:06:75:ef:78:46:8e:d8:d8:3e:27:b5: f1:c2:3a:3d:8a:31:5c:f6:24:b6:2f:2e:d5:60:55: f1:77:95:18:b7:19:6f:98:6d:b4:be:45:24:50:fc: d4:99:88:68:c9:65:da:e2:1b:a9:07:07:1b:b4:65: d1:a7:34:43:8c:0d:09:cc:80:6c:29:5a:de:9d:93: 94:b0:3f:85:96:1e:a8:2d:36:fa:7a:00:01:8e:e4: 29:fe:a9:bc:61:de:84:07:42:0e:9a:7c:24:f8:69: a6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:92:A6:40:70:D7:14:B1:04:EA:26:AA:18:51:8F:71:D4:D3:A9:7B X509v3 Authority Key Identifier: keyid:C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:c2:2d:74:2f:9b:70:9e:71:62:39:77:e9:ab:b4:cc:d4:16: 50:74:29:cf:1e:f8:d2:0e:89:ad:dd:a5:c1:48:cd:15:72:8f: 62:ee:6b:56:28:03:76:35:a6:a7:e0:ac:e9:eb:ee:53:95:47: 30:34:64:6e:57:5d:04:46:c9:53:c9:65:bd:db:28:73:38:41: 64:96:05:23:94:fe:af:2e:76:3e:f8:35:73:8e:8c:3f:b5:65: ea:e9:03:bb:34:85:84:d6:7b:6e:9c:bb:1e:bd:94:25:b8:0c: 7b:c1:b3:36:79:46:9b:5a:aa:0e:d3:07:c5:a0:16:58:9f:95: 85:63:1e:36:7d:d2:e6:22:bd:82:9d:5e:13:b6:22:b6:ce:58: a1:4f:c9:c2:67:0c:d1:9c:d6:86:70:9b:ee:66:a9:9a:45:bb: 9b:ee:37:b9:f4:0c:ed:04:a2:87:b1:06:41:83:81:c2:fa:ba: b4:9f:77:ab:83:f9:19:e3:12:18:bc:f2:21:40:89:97:67:b0: f2:57:f9:17:8f:84:c2:55:df:e7:23:db:b5:e2:03:a3:cb:9c: 85:44:0e:17:dd:b1:1b:7d:89:f1:0f:8a:ee:19:8e:6a:92:08: b5:11:5a:9d:92:4e:c8:1a:85:4b:2d:0f:86:60:8a:4d:88:3c: 95:49:9a:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaE7WNSWR+4ZiukJHRMgikaVq5pAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYy NDRDREMxNDAeFw0yNTA0MDMyMDU3MTBaFw0yNTA0MDcwMDIyMTBaMDMxMTAvBgNV BAMTKDlDOTJBNjQwNzBENzE0QjEwNEVBMjZBQTE4NTE4RjcxRDREM0E5N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaEImA/AQn2bQOsnepr4n1DtHm FtTBYbyjqUavY0PpiNfTvBm/Hhk0RioR6P++jiAVNMDJfPhTHn3TGGUVzh6j6dkA di7ZcNj5XZ8hTOat47N0iqx+B/GeO0i9I2G+AQfZBJEa4cU1NPHM4y06XhNlAC3E 0V16/9YA9MLVuIhfHKqFzMiI09rtXdrvnWJtVBdm90Jw8BsY18YGde94Ro7Y2D4n tfHCOj2KMVz2JLYvLtVgVfF3lRi3GW+YbbS+RSRQ/NSZiGjJZdriG6kHBxu0ZdGn NEOMDQnMgGwpWt6dk5SwP4WWHqgtNvp6AAGO5Cn+qbxh3oQHQg6afCT4aabxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnJKmQHDXFLEE6iaqGFGPcdTTqXswHwYDVR0j BBgwFoAUyFxJl46AI/LVhSFSTU7GFiRM3BQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTUxNmU2ZS1jNjc5LTRlNTAtYjdhYi0xZTQwNjc5MTI1Y2QvMC9DODVDNDk5NzhF ODAyM0YyRDU4NTIxNTI0RDRFQzYxNjI0NENEQzE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYyNDRD REMxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U1MTZlNmUtYzY3OS00ZTUwLWI3 YWItMWU0MDY3OTEyNWNkLzAvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2 MTYyNDRDREMxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbCLXQvm3CecWI5d+mrtMzUFlB0Kc8e+NIO ia3dpcFIzRVyj2Lua1YoA3Y1pqfgrOnr7lOVRzA0ZG5XXQRGyVPJZb3bKHM4QWSW BSOU/q8udj74NXOOjD+1ZerpA7s0hYTWe26cux69lCW4DHvBszZ5Rptaqg7TB8Wg FliflYVjHjZ90uYivYKdXhO2IrbOWKFPycJnDNGc1oZwm+5mqZpFu5vuN7n0DO0E ooexBkGDgcL6urSfd6uD+RnjEhi88iFAiZdnsPJX+RePhMJV3+cj27XiA6PLnIVE DhfdsRt9ifEPiu4ZjmqSCLURWp2STsgahUstD4Zgik2IPJVJmkk= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:04 2025 by rpki-client