$ rpki-client -vvf repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft File: C08E65A250AEDC93967004D660D25DB8293AB419.mft (raw, json) Hash identifier: MH456J9UmNiEY//ne8yFnT/gjxJkEGr2BpK0d4ELhOI= Subject key identifier: BA:5D:58:38:C2:B7:EC:8E:FF:33:EE:C1:B3:EB:80:52:50:2C:30:2D Authority key identifier: C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 Certificate issuer: /CN=C08E65A250AEDC93967004D660D25DB8293AB419 Certificate serial: 40D2165820AF7879A3E959E87514507C1145F055 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft Manifest number: 40 Signing time: Wed 12 Mar 2025 12:21:13 +0000 Manifest this update: Wed 12 Mar 2025 12:16:13 +0000 Manifest next update: Sat 15 Mar 2025 13:44:13 +0000 Files and hashes: 1: 3136302e3138372e3231392e302f32342d3234203d3e20313533313332.roa (hash: TxTC2v3sBGuNzD/7pAwJq8+hVg6iPYD1W71+E9F+XzU=) 2: C08E65A250AEDC93967004D660D25DB8293AB419.crl (hash: c81EVJjki62zkupI6i9/Q+jMrauMBkkjYzhLTRKf67k=) 3: 3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa (hash: sdFf65pWHqDguzQodheeefSyOGT0g0gjcknsFa81ar4=) 4: 3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa (hash: acW7MmyfNG3sUp37/a67TBL3VhsulHr1Ydf1eaVxfYA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 11:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:d2:16:58:20:af:78:79:a3:e9:59:e8:75:14:50:7c:11:45:f0:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C08E65A250AEDC93967004D660D25DB8293AB419 Validity Not Before: Mar 12 12:16:13 2025 GMT Not After : Mar 15 13:44:13 2025 GMT Subject: CN=BA5D5838C2B7EC8EFF33EEC1B3EB8052502C302D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:45:a8:db:99:c7:43:8c:02:4a:63:00:6e:f5: 1c:e8:14:93:9c:a1:7a:39:92:93:06:75:a6:0c:da: ab:75:12:e5:3c:4b:8d:3c:d0:e4:a3:22:09:be:2c: 07:c3:1e:2e:9d:a3:b2:f8:8d:b0:50:6e:19:cc:7f: 50:35:31:4a:2b:da:3b:4e:05:44:f5:ea:ea:21:9d: 3d:60:ec:b4:0f:d2:30:ac:55:4f:d6:c9:67:58:02: 9a:4e:39:d1:4d:b2:77:d7:c4:da:f8:9b:70:f7:67: ec:49:7d:0e:07:12:a5:3f:5d:2e:dc:75:65:08:35: cc:ac:cd:7f:0c:fa:42:62:e9:71:f8:85:c9:b0:80: 53:cb:8d:05:48:00:63:f6:3a:cf:10:82:50:6c:98: db:3a:7d:b8:03:81:5e:26:ec:fa:d6:29:da:62:fe: 47:60:c6:07:57:da:6f:bb:df:f0:ad:05:b7:3c:15: a5:13:2d:6a:88:67:41:2f:69:4a:98:45:61:e1:98: 80:0f:de:13:4e:99:9e:fd:1c:67:92:b7:7d:83:14: 0f:87:29:47:57:92:0c:7d:64:82:2f:90:13:cc:6d: d6:e2:69:af:dc:e9:43:d6:83:23:a5:57:ee:28:ac: 40:c4:f7:83:a2:c1:77:db:ca:df:34:20:6c:1b:d2: 45:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:5D:58:38:C2:B7:EC:8E:FF:33:EE:C1:B3:EB:80:52:50:2C:30:2D X509v3 Authority Key Identifier: keyid:C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:97:c2:62:5e:8d:65:cb:8b:b7:3d:3c:11:6e:33:6a:49:f2: 98:6e:52:ec:d2:ef:e4:69:88:c0:34:e1:a0:a6:c0:bf:1a:f1: 1e:e8:56:09:b7:df:7c:8b:06:19:42:83:be:34:05:64:53:7b: f9:b4:04:11:fa:30:39:72:da:1c:fb:e9:e6:b0:ba:f0:5d:88: 28:69:1d:d7:9e:3a:9c:ab:12:77:c6:de:98:9f:12:f9:77:36: 33:61:a5:c1:87:d3:8b:f8:0f:12:f2:45:e9:fb:1c:55:3e:02: f8:10:c9:f7:d8:8d:03:5a:e2:87:14:72:21:f3:0e:e8:98:4f: 3b:0d:f2:c0:c5:a4:e2:52:d7:67:2e:f5:3b:79:4b:f5:57:cc: 3e:05:1d:3f:af:04:b0:3a:87:1d:2e:97:4f:cd:08:2b:e2:9c: e1:ed:51:ad:2e:f4:3b:69:b6:bf:1b:81:6f:84:8a:05:24:71: 9e:0a:ee:c8:1d:a4:26:d3:30:80:20:97:88:04:f4:9c:bf:07: 89:7b:58:c4:e4:e0:de:c8:26:ce:6d:71:d9:af:3e:5e:e0:0b: 2f:b1:3f:94:a1:b7:0d:91:f3:d2:73:8c:fa:ca:58:81:01:b5: 09:19:9d:e7:88:0d:0d:e1:be:c7:b8:33:35:f8:01:e0:5c:25: 17:a8:e9:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQNIWWCCveHmj6VnodRRQfBFF8FUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgy OTNBQjQxOTAeFw0yNTAzMTIxMjE2MTNaFw0yNTAzMTUxMzQ0MTNaMDMxMTAvBgNV BAMTKEJBNUQ1ODM4QzJCN0VDOEVGRjMzRUVDMUIzRUI4MDUyNTAyQzMwMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3RajbmcdDjAJKYwBu9RzoFJOc oXo5kpMGdaYM2qt1EuU8S4080OSjIgm+LAfDHi6do7L4jbBQbhnMf1A1MUor2jtO BUT16uohnT1g7LQP0jCsVU/WyWdYAppOOdFNsnfXxNr4m3D3Z+xJfQ4HEqU/XS7c dWUINcyszX8M+kJi6XH4hcmwgFPLjQVIAGP2Os8QglBsmNs6fbgDgV4m7PrWKdpi /kdgxgdX2m+73/CtBbc8FaUTLWqIZ0EvaUqYRWHhmIAP3hNOmZ79HGeSt32DFA+H KUdXkgx9ZIIvkBPMbdbiaa/c6UPWgyOlV+4orEDE94OiwXfbyt80IGwb0kVtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUul1YOMK37I7/M+7Bs+uAUlAsMC0wHwYDVR0j BBgwFoAUwI5lolCu3JOWcATWYNJduCk6tBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODFkNTRjYi01N2E5LTRhMTYtYTcwZS1jNWY2MDI0ZTEzOWQvMC9DMDhFNjVBMjUw QUVEQzkzOTY3MDA0RDY2MEQyNURCODI5M0FCNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgyOTNB QjQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDgxZDU0Y2ItNTdhOS00YTE2LWE3 MGUtYzVmNjAyNGUxMzlkLzAvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVE QjgyOTNBQjQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMuXwmJejWXLi7c9PBFuM2pJ8phuUuzS7+Rp iMA04aCmwL8a8R7oVgm333yLBhlCg740BWRTe/m0BBH6MDly2hz76eawuvBdiChp HdeeOpyrEnfG3pifEvl3NjNhpcGH04v4DxLyRen7HFU+AvgQyffYjQNa4ocUciHz DuiYTzsN8sDFpOJS12cu9Tt5S/VXzD4FHT+vBLA6hx0ul0/NCCvinOHtUa0u9Dtp tr8bgW+EigUkcZ4K7sgdpCbTMIAgl4gE9Jy/B4l7WMTk4N7IJs5tcdmvPl7gCy+x P5Shtw2R89JzjPrKWIEBtQkZneeIDQ3hvse4MzX4AeBcJReo6RM= -----END CERTIFICATE-----Generated at Thu Mar 13 21:32:54 2025 by rpki-client