$ rpki-client -vvf repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft File: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft (raw, json) Hash identifier: RkHl+UmyxiVle3oxrxKqrqD8nWqrpNSXhQb+/rlOhho= Subject key identifier: 64:38:1B:5B:21:2B:0E:39:51:41:59:7B:79:96:A0:64:45:1E:52:19 Authority key identifier: CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 Certificate issuer: /CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Certificate serial: 47DB7A7F9248CD94AA65FE62A286EBF3946B47DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft Manifest number: 04BD Signing time: Fri 04 Apr 2025 20:01:14 +0000 Manifest this update: Fri 04 Apr 2025 19:56:14 +0000 Manifest next update: Tue 08 Apr 2025 03:16:14 +0000 Files and hashes: 1: 323430343a3630303a3a2f33322d3438203d3e2034383333.roa (hash: XRUL5OC/FVMM95Sr+TgKKKXzxAgbs6oPZwx6ooD6oPE=) 2: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl (hash: Nied0Y6nMDO9pex+E/9B3g2zSYa8Up6Lfy1O1UWjJ/c=) 3: 3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa (hash: 3FQO/GU4KoR2pdteiQTTb2NEDc217LMm+LVE0TfeQnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:db:7a:7f:92:48:cd:94:aa:65:fe:62:a2:86:eb:f3:94:6b:47:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Validity Not Before: Apr 4 19:56:14 2025 GMT Not After : Apr 8 03:16:14 2025 GMT Subject: CN=64381B5B212B0E395141597B7996A064451E5219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:39:47:4c:93:8a:7d:d5:d0:f1:50:df:d7:f2: b9:46:e4:44:d6:1c:66:82:19:ab:8f:7a:c2:75:a9: 8a:c5:87:42:6a:ab:1b:72:4b:56:82:49:3c:fb:5d: 3a:da:2b:a0:8d:95:e9:86:a2:4e:d9:d9:1a:fd:a0: 8a:b9:f1:48:fb:e4:0f:a7:c5:2b:73:27:11:fc:93: 55:2b:8b:65:c6:15:29:29:73:5c:03:25:f6:3a:0a: dd:b4:f5:ed:3e:40:16:4e:e6:a6:de:97:d1:2c:6a: 12:bb:03:f9:c2:a0:13:6f:8f:09:cc:64:80:af:45: 8d:33:6c:ef:b8:d7:f5:49:75:6c:28:4c:c3:f3:ce: b9:90:8d:a2:07:2a:9c:7f:cb:99:de:e6:1a:e2:2a: 90:2a:ec:b2:f9:df:75:ad:c7:1d:0c:9b:e4:5b:4d: 08:a8:48:29:3a:8c:a8:33:68:95:52:d3:a7:2a:bd: c4:80:06:6b:21:41:e5:c3:f0:da:fe:09:0e:f0:a6: 63:a9:30:01:6d:db:bc:d5:31:2b:6a:aa:d1:6f:90: 9b:78:dc:8d:28:87:f7:ce:2e:92:6d:6f:4d:fe:07: 4f:7c:5e:d4:88:52:62:ee:48:86:7f:45:19:04:2d: 62:ac:80:9a:e0:a5:e1:93:91:75:03:d9:29:08:6e: 11:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:38:1B:5B:21:2B:0E:39:51:41:59:7B:79:96:A0:64:45:1E:52:19 X509v3 Authority Key Identifier: keyid:CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:41:c8:cf:de:ff:cb:1c:b7:92:f5:80:a1:92:3d:1b:2f:cd: c2:c8:aa:92:ea:55:45:21:5c:6b:b6:1b:d1:f3:b6:7b:b5:47: 0f:12:19:09:8e:bf:4c:46:d7:46:66:75:a3:43:72:7b:8e:cf: b7:57:ed:6c:2c:44:71:d9:88:20:6a:e4:0b:02:34:11:b0:d7: 80:35:06:18:3e:95:25:3f:0f:96:35:3b:4c:44:df:73:df:cd: 44:43:2a:b8:30:95:02:d2:6e:d5:ca:08:ab:75:9e:bf:c8:38: 34:ae:e4:be:e0:a3:4d:8b:c0:7a:aa:c1:86:6b:54:5c:26:10: 0b:35:33:89:ba:80:92:02:89:df:e7:67:02:66:6e:db:fd:0c: a8:a1:fa:47:9b:6b:5c:b7:fe:4f:b8:ec:c3:ce:a2:5a:24:2c: 35:1a:19:09:d4:07:c8:37:84:85:06:52:ee:f7:90:e7:0e:38: 0c:34:6b:9c:d5:a8:0b:92:5d:9e:37:19:00:0f:f6:68:cd:da: ed:83:d7:54:e8:d0:30:3d:7a:4b:4c:34:20:fd:b9:7b:a5:59: cc:65:8e:8c:82:eb:1d:55:aa:9f:9d:cf:a4:52:e2:09:78:ec: 19:69:b0:fa:c4:a7:bc:df:c5:03:0d:b8:24:fd:1d:b6:d7:01: 6f:d2:86:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR9t6f5JIzZSqZf5ioobr85RrR94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURG NjQ4QzRFOTAeFw0yNTA0MDQxOTU2MTRaFw0yNTA0MDgwMzE2MTRaMDMxMTAvBgNV BAMTKDY0MzgxQjVCMjEyQjBFMzk1MTQxNTk3Qjc5OTZBMDY0NDUxRTUyMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcOUdMk4p91dDxUN/X8rlG5ETW HGaCGauPesJ1qYrFh0JqqxtyS1aCSTz7XTraK6CNlemGok7Z2Rr9oIq58Uj75A+n xStzJxH8k1Uri2XGFSkpc1wDJfY6Ct209e0+QBZO5qbel9EsahK7A/nCoBNvjwnM ZICvRY0zbO+41/VJdWwoTMPzzrmQjaIHKpx/y5ne5hriKpAq7LL533Wtxx0Mm+Rb TQioSCk6jKgzaJVS06cqvcSABmshQeXD8Nr+CQ7wpmOpMAFt27zVMStqqtFvkJt4 3I0oh/fOLpJtb03+B098XtSIUmLuSIZ/RRkELWKsgJrgpeGTkXUD2SkIbhEtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZDgbWyErDjlRQVl7eZagZEUeUhkwHwYDVR0j BBgwFoAUzWgeQG0uzYrKKOTwe5r6nfZIxOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmMxZjUxYS04NjQ1LTRlYjEtYTJmZi1lMjdjMjRjOGUwYzgvMC9DRDY4MUU0MDZE MkVDRDhBQ0EyOEU0RjA3QjlBRkE5REY2NDhDNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURGNjQ4 QzRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZjMWY1MWEtODY0NS00ZWIxLWEy ZmYtZTI3YzI0YzhlMGM4LzAvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZB OURGNjQ4QzRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIpByM/e/8sct5L1gKGSPRsvzcLIqpLqVUUh XGu2G9Hztnu1Rw8SGQmOv0xG10ZmdaNDcnuOz7dX7WwsRHHZiCBq5AsCNBGw14A1 Bhg+lSU/D5Y1O0xE33PfzURDKrgwlQLSbtXKCKt1nr/IODSu5L7go02LwHqqwYZr VFwmEAs1M4m6gJICid/nZwJmbtv9DKih+keba1y3/k+47MPOolokLDUaGQnUB8g3 hIUGUu73kOcOOAw0a5zVqAuSXZ43GQAP9mjN2u2D11To0DA9ektMNCD9uXulWcxl joyC6x1Vqp+dz6RS4gl47BlpsPrEp7zfxQMNuCT9HbbXAW/Shto= -----END CERTIFICATE-----Generated at Sat Apr 5 17:51:01 2025 by rpki-client