$ rpki-client -vvf repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft File: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft (raw, json) Hash identifier: wkrhDHHTSQBUXymxiy0tItM8wyJSzt475QKGSfBA2rk= Subject key identifier: DF:DB:D7:73:62:A2:AC:D5:BF:C7:C9:A1:AB:55:28:EB:7C:6D:82:C0 Authority key identifier: CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB Certificate issuer: /CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Certificate serial: 0B8A48F9B51C60838748F2C87081F6DAE9F27A16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft Manifest number: 04C1 Signing time: Sat 05 Apr 2025 15:01:00 +0000 Manifest this update: Sat 05 Apr 2025 14:56:00 +0000 Manifest next update: Tue 08 Apr 2025 21:57:00 +0000 Files and hashes: 1: 3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa (hash: 39jefImKgJU/LxRCCoDfLN96ifsbffQHndD7ffWdf4g=) 2: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl (hash: hyfGk4Lp1uiz/3c12ffJe5wJLvlVVPtMCRR7ZGqs9R4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:8a:48:f9:b5:1c:60:83:87:48:f2:c8:70:81:f6:da:e9:f2:7a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Validity Not Before: Apr 5 14:56:00 2025 GMT Not After : Apr 8 21:57:00 2025 GMT Subject: CN=DFDBD77362A2ACD5BFC7C9A1AB5528EB7C6D82C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9b:23:e0:02:52:03:85:42:2d:4e:1a:b8:d7: 97:bf:04:c0:29:e0:78:d5:45:0b:d2:32:bb:10:63: 5e:88:56:d0:a7:64:03:0f:be:66:36:a4:d0:01:e4: 29:8e:a4:94:a2:ab:1c:3e:78:72:73:c3:76:89:e8: 89:84:d6:6f:f9:2e:ff:54:a8:f7:1d:c1:d0:51:bf: 6c:f6:f7:ba:d9:fc:01:45:5a:5d:28:c3:24:55:79: 13:8a:84:41:d7:50:a6:aa:a3:3c:25:92:60:00:55: df:25:6e:71:84:d5:d0:9b:6f:be:ea:fe:03:ff:da: 86:ad:c4:05:4f:69:d4:e5:5d:75:1a:a5:14:3e:76: 32:95:24:8b:b4:2c:35:09:5c:6c:65:b9:19:fd:61: f0:ed:0f:83:8b:87:b4:12:3e:ab:10:b5:8c:58:c7: bb:9f:dc:f7:c6:b0:2e:b6:83:4f:49:44:a4:29:e6: 11:e2:03:64:3c:36:0e:bd:fb:fd:5b:4c:7b:38:88: 7f:07:08:0c:78:3a:50:71:44:9d:a8:7f:53:13:15: 9e:66:44:70:d2:35:88:a5:30:e7:34:7d:47:92:63: 9f:b1:3d:8a:2b:bf:89:15:44:3b:5d:fd:32:4f:31: e9:34:e7:d4:c3:94:71:25:1a:88:34:29:57:33:18: d2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DB:D7:73:62:A2:AC:D5:BF:C7:C9:A1:AB:55:28:EB:7C:6D:82:C0 X509v3 Authority Key Identifier: keyid:CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:32:6a:24:92:ed:69:b8:f1:9e:44:f7:57:1d:a8:a5:50:78: 26:31:2e:bc:6f:35:1a:28:d4:c9:b0:17:6e:5a:5f:00:b7:8a: 93:e0:2b:64:b5:09:d3:f5:53:a5:71:09:14:24:ab:68:00:59: 36:7b:fe:24:ba:a0:4c:af:ad:8a:ee:07:1c:92:91:9e:ea:2e: 09:61:b8:ed:62:b4:77:bc:ab:4f:4c:bd:04:9f:a3:56:0f:52: 90:b6:77:81:35:11:94:9f:af:15:1e:c9:75:43:d2:57:5a:6f: ac:0e:c6:94:ec:62:1c:7d:8f:8a:ad:fb:c5:bf:f8:60:9e:f9: 76:d0:0d:29:06:1c:a5:b7:60:8b:2d:dd:38:72:ba:3d:49:5e: d0:72:c6:59:99:43:e2:e0:d9:0c:5f:30:39:ff:48:ee:a4:fe: 1d:88:19:42:b3:b6:a7:ec:a3:76:ca:fd:14:77:48:44:c2:70: ed:e9:f4:15:6a:68:db:17:a0:fd:2a:6b:28:d9:d4:f5:93:e7: 3d:7c:16:b5:7c:d8:1c:4a:01:6c:98:86:34:b3:bc:00:f6:87: 76:c9:3f:3f:f0:5e:19:a9:b3:13:3a:5f:9b:c4:be:bd:88:68: a8:b8:ec:d7:99:ba:a3:42:90:04:27:ac:00:91:fc:9c:e3:a8: 4f:56:78:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC4pI+bUcYIOHSPLIcIH22unyehYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0 OEUxNkVEQjAeFw0yNTA0MDUxNDU2MDBaFw0yNTA0MDgyMTU3MDBaMDMxMTAvBgNV BAMTKERGREJENzczNjJBMkFDRDVCRkM3QzlBMUFCNTUyOEVCN0M2RDgyQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDImyPgAlIDhUItThq415e/BMAp 4HjVRQvSMrsQY16IVtCnZAMPvmY2pNAB5CmOpJSiqxw+eHJzw3aJ6ImE1m/5Lv9U qPcdwdBRv2z297rZ/AFFWl0owyRVeROKhEHXUKaqozwlkmAAVd8lbnGE1dCbb77q /gP/2oatxAVPadTlXXUapRQ+djKVJIu0LDUJXGxluRn9YfDtD4OLh7QSPqsQtYxY x7uf3PfGsC62g09JRKQp5hHiA2Q8Ng69+/1bTHs4iH8HCAx4OlBxRJ2of1MTFZ5m RHDSNYilMOc0fUeSY5+xPYorv4kVRDtd/TJPMek059TDlHElGog0KVczGNI9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU39vXc2KirNW/x8mhq1Uo63xtgsAwHwYDVR0j BBgwFoAUzEMFqgtoSN/Qdmz+e0LStEjhbtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTQ1YzllYi0zYmI2LTQyMDMtOGM4Ni1mMDhiNjRkYTNlYTkvMC9DQzQzMDVBQTBC Njg0OERGRDA3NjZDRkU3QjQyRDJCNDQ4RTE2RURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0OEUx NkVEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU0NWM5ZWItM2JiNi00MjAzLThj ODYtZjA4YjY0ZGEzZWE5LzAvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQy QjQ0OEUxNkVEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMYyaiSS7Wm48Z5E91cdqKVQeCYxLrxvNRoo 1MmwF25aXwC3ipPgK2S1CdP1U6VxCRQkq2gAWTZ7/iS6oEyvrYruBxySkZ7qLglh uO1itHe8q09MvQSfo1YPUpC2d4E1EZSfrxUeyXVD0ldab6wOxpTsYhx9j4qt+8W/ +GCe+XbQDSkGHKW3YIst3Thyuj1JXtByxlmZQ+Lg2QxfMDn/SO6k/h2IGUKztqfs o3bK/RR3SETCcO3p9BVqaNsXoP0qayjZ1PWT5z18FrV82BxKAWyYhjSzvAD2h3bJ Pz/wXhmpsxM6X5vEvr2IaKi47NeZuqNCkAQnrACR/JzjqE9WeEo= -----END CERTIFICATE-----Generated at Sat Apr 5 23:15:29 2025 by rpki-client