$ rpki-client -vvf repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft File: C2E929DFB05F81B91880BC808154365AECAC27D2.mft (raw, json) Hash identifier: csfxwrXopy1A5a6X/tyg0XdL9zkQGjuvBDWx1swYhcM= Subject key identifier: B3:DD:0E:1D:80:D8:94:06:F6:78:43:56:DF:2F:60:56:3C:36:84:F4 Authority key identifier: C2:E9:29:DF:B0:5F:81:B9:18:80:BC:80:81:54:36:5A:EC:AC:27:D2 Certificate issuer: /CN=C2E929DFB05F81B91880BC808154365AECAC27D2 Certificate serial: 0C7EF097896717FF016BB0AACD8EFDEA70914294 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft Manifest number: DF Signing time: Thu 03 Apr 2025 23:31:38 +0000 Manifest this update: Thu 03 Apr 2025 23:26:38 +0000 Manifest next update: Mon 07 Apr 2025 01:04:38 +0000 Files and hashes: 1: C2E929DFB05F81B91880BC808154365AECAC27D2.crl (hash: Mscnccl2DmGNpiP18XFwGPGxVllhJk4dYMceEXIm74M=) 2: 3230322e34372e3138362e302f32342d3234203d3e20313532303234.roa (hash: 0amdlqtrcYJjDto4OJYklzgZ1YTSYlkdFSOoVx3OhSE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.crl rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 01:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:7e:f0:97:89:67:17:ff:01:6b:b0:aa:cd:8e:fd:ea:70:91:42:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2E929DFB05F81B91880BC808154365AECAC27D2 Validity Not Before: Apr 3 23:26:38 2025 GMT Not After : Apr 7 01:04:38 2025 GMT Subject: CN=B3DD0E1D80D89406F6784356DF2F60563C3684F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a1:09:ff:2a:a5:9b:24:56:fc:8e:62:48:73: f5:63:a0:6f:f8:8c:53:ae:87:a7:9b:1c:06:e9:bb: ca:f2:00:83:e1:14:51:85:f3:1e:cd:71:d6:6e:06: bb:bf:ea:ff:2a:c3:cb:8c:fe:2a:70:c6:62:49:53: 97:74:ce:61:69:ec:52:fd:c6:36:26:32:ea:83:4a: 58:70:6e:9f:68:f0:57:7b:5b:29:d1:65:97:c0:3d: ee:33:68:73:29:ad:38:12:de:09:74:65:ef:bc:55: 14:55:9b:63:66:56:aa:19:9d:6c:d0:3d:e0:57:54: e1:96:4b:25:64:79:b1:11:6f:bb:98:ac:89:07:f3: 24:73:71:4e:25:99:96:56:fe:ef:2b:1f:ee:12:a2: 45:f9:9f:6c:bc:41:2f:c6:37:1e:6c:07:b3:41:6e: d3:a3:d9:1e:19:cf:e6:23:c0:b6:e6:89:6d:bd:81: 6d:3b:44:c7:40:58:9d:15:6d:bd:5d:24:4a:2e:2c: 79:3f:94:07:c6:53:61:47:b2:6b:c1:bc:0d:9d:44: 42:62:7d:a0:40:77:d4:6d:5e:37:fd:37:1a:ce:bc: 35:a6:3a:b4:1f:d5:0b:e3:3e:3b:f6:79:1f:b7:ba: 79:2d:39:ce:c8:6a:c9:af:96:9a:da:18:fe:2a:6d: 73:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:DD:0E:1D:80:D8:94:06:F6:78:43:56:DF:2F:60:56:3C:36:84:F4 X509v3 Authority Key Identifier: keyid:C2:E9:29:DF:B0:5F:81:B9:18:80:BC:80:81:54:36:5A:EC:AC:27:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c8:97:99:f8:de:4c:85:9e:3b:72:90:58:b4:af:a5:7f:ec: 52:66:d7:3a:d2:69:83:87:85:40:a7:8c:41:ba:3e:9d:06:1a: 22:c1:cb:07:94:8c:66:d4:2f:cf:bf:5e:a0:ea:79:62:97:d5: e3:53:76:19:b9:06:c2:07:3f:0c:70:51:95:1d:4b:1e:31:65: c9:b3:90:c7:3e:9e:af:e6:ee:95:ba:24:0c:23:70:94:1c:aa: be:5b:66:78:b2:40:77:10:17:69:52:0a:b9:23:03:77:a7:bd: ac:22:b7:a6:08:76:92:ee:1f:1f:fe:3d:d3:7d:eb:cb:d2:a9: f7:08:3d:fd:25:af:5d:7d:b9:3e:ef:b9:83:91:f7:b2:eb:89: 96:12:7b:a0:c4:62:ef:84:1c:71:8a:e3:8c:9f:32:7c:4a:f4: 89:b9:09:10:92:79:04:06:d3:9f:58:0c:fd:d8:d4:8b:17:8d: ad:b3:14:dd:a6:4b:56:4c:a5:43:8e:9a:38:5a:38:06:66:94: b6:16:74:e9:af:10:89:f8:ce:70:fc:0d:c3:99:58:23:51:31: b2:77:3d:94:a7:b2:89:9a:d6:b6:ae:c5:d7:19:99:66:9a:f5: d7:07:90:72:f1:a0:46:b0:73:3e:a6:b5:b4:23:ce:66:d7:16: 2e:3c:e9:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDH7wl4lnF/8Ba7CqzY796nCRQpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJFOTI5REZCMDVGODFCOTE4ODBCQzgwODE1NDM2NUFF Q0FDMjdEMjAeFw0yNTA0MDMyMzI2MzhaFw0yNTA0MDcwMTA0MzhaMDMxMTAvBgNV BAMTKEIzREQwRTFEODBEODk0MDZGNjc4NDM1NkRGMkY2MDU2M0MzNjg0RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPoQn/KqWbJFb8jmJIc/VjoG/4 jFOuh6ebHAbpu8ryAIPhFFGF8x7NcdZuBru/6v8qw8uM/ipwxmJJU5d0zmFp7FL9 xjYmMuqDSlhwbp9o8Fd7WynRZZfAPe4zaHMprTgS3gl0Ze+8VRRVm2NmVqoZnWzQ PeBXVOGWSyVkebERb7uYrIkH8yRzcU4lmZZW/u8rH+4SokX5n2y8QS/GNx5sB7NB btOj2R4Zz+YjwLbmiW29gW07RMdAWJ0Vbb1dJEouLHk/lAfGU2FHsmvBvA2dREJi faBAd9RtXjf9NxrOvDWmOrQf1QvjPjv2eR+3unktOc7IasmvlpraGP4qbXOPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs90OHYDYlAb2eENW3y9gVjw2hPQwHwYDVR0j BBgwFoAUwukp37BfgbkYgLyAgVQ2WuysJ9IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDZmZmFkMi0yMGJjLTQyNDYtODI5My00NDY2NmNlMWNmZTAvMC9DMkU5MjlERkIw NUY4MUI5MTg4MEJDODA4MTU0MzY1QUVDQUMyN0QyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJFOTI5REZCMDVGODFCOTE4ODBCQzgwODE1NDM2NUFFQ0FD MjdEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ2ZmZhZDItMjBiYy00MjQ2LTgy OTMtNDQ2NjZjZTFjZmUwLzAvQzJFOTI5REZCMDVGODFCOTE4ODBCQzgwODE1NDM2 NUFFQ0FDMjdEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/Il5n43kyFnjtykFi0r6V/7FJm1zrSaYOH hUCnjEG6Pp0GGiLByweUjGbUL8+/XqDqeWKX1eNTdhm5BsIHPwxwUZUdSx4xZcmz kMc+nq/m7pW6JAwjcJQcqr5bZniyQHcQF2lSCrkjA3envawit6YIdpLuHx/+PdN9 68vSqfcIPf0lr119uT7vuYOR97LriZYSe6DEYu+EHHGK44yfMnxK9Im5CRCSeQQG 059YDP3Y1IsXja2zFN2mS1ZMpUOOmjhaOAZmlLYWdOmvEIn4znD8DcOZWCNRMbJ3 PZSnsoma1rauxdcZmWaa9dcHkHLxoEawcz6mtbQjzmbXFi486TU= -----END CERTIFICATE-----Generated at Sat Apr 5 17:51:57 2025 by rpki-client