$ rpki-client -vvf repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft File: CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft (raw, json) Hash identifier: fs4BEoCfERjtB5RG8qJDg/lj5aiv0qIWC0j1nzbVBNg= Subject key identifier: 82:21:2C:5B:79:76:50:C3:8B:17:B3:CA:9F:FA:90:06:24:7E:DF:D1 Authority key identifier: CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA Certificate issuer: /CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA Certificate serial: 235A42207D05DCB44166464F894AD0C2B5B2F060 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft Manifest number: 04BF Signing time: Sat 05 Apr 2025 05:42:14 +0000 Manifest this update: Sat 05 Apr 2025 05:37:14 +0000 Manifest next update: Tue 08 Apr 2025 13:03:14 +0000 Files and hashes: 1: 34332e3235342e3132342e302f32322d3234203d3e203538343832.roa (hash: tcS0/4g/bvz81xpbYZwH5c3HOtuAVxXo5nqpsqEa1Dc=) 2: CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl (hash: UD7OhWcL2vtw6q8C27w73zrdZkrC/SElTXqBLFpQeP4=) 3: 323430343a663930303a3a2f33322d3438203d3e203538343832.roa (hash: P1hzEQwjHdVhS7I0LLckp0JkbGZXIWU/KqIoWLVRQrY=) 4: 3130332e32382e3232342e302f32322d3234203d3e203538343832.roa (hash: rlplgg3r+rxIXNon2dNy9blKlPvtpCpYwV7XkrITM4U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:5a:42:20:7d:05:dc:b4:41:66:46:4f:89:4a:d0:c2:b5:b2:f0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA Validity Not Before: Apr 5 05:37:14 2025 GMT Not After : Apr 8 13:03:14 2025 GMT Subject: CN=82212C5B797650C38B17B3CA9FFA9006247EDFD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:57:52:53:f3:b8:04:1a:c9:e1:a1:62:81:42: 32:1a:85:83:14:51:01:bd:b7:36:05:15:9d:20:4c: d0:24:cb:89:94:ec:07:9c:53:ca:5a:fc:3c:9d:75: f8:d8:64:10:e2:61:2e:ec:3c:06:a7:68:8f:08:b7: 83:02:c0:76:d5:50:ed:fe:bd:66:e5:4b:af:27:7c: 50:83:ca:b5:f8:7d:0a:6f:10:27:22:33:f0:ed:90: 19:a7:de:ca:a8:22:ca:74:a5:32:0f:54:b8:79:05: c3:f5:17:87:9e:df:83:2d:1e:7e:18:0f:de:2f:31: 8c:2d:49:2e:01:a2:95:1c:54:78:f9:9c:d4:5d:40: c0:9b:e3:12:e7:9a:e1:84:c6:f2:64:4f:58:d2:fd: 63:84:38:57:36:10:4b:94:a1:ad:04:43:e7:38:83: 90:1d:a0:c6:a8:4b:00:b0:93:20:2e:9f:f2:00:85: 67:39:bd:18:b7:9c:40:93:5d:1b:2a:4a:4e:6d:bb: 71:bf:68:b4:7f:e0:5b:89:e3:05:48:1d:c3:88:1a: 40:02:0e:7e:e5:d3:fa:4c:6a:a9:84:0e:58:ac:d3: 6d:7f:d0:f8:2e:91:48:fc:c1:a0:d6:49:ce:97:b6: 25:09:ae:5d:e9:a5:8c:20:99:86:4a:26:2d:f8:8d: cf:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:21:2C:5B:79:76:50:C3:8B:17:B3:CA:9F:FA:90:06:24:7E:DF:D1 X509v3 Authority Key Identifier: keyid:CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:3d:86:4a:52:f2:2d:7e:da:bd:a5:0a:cf:32:de:e7:1f:9c: 81:11:02:f8:a2:83:87:89:f6:72:40:e3:c7:b4:00:50:74:8c: 27:51:2f:d5:6c:74:ae:90:a1:f3:8e:f1:7d:57:03:1d:96:93: 87:74:37:09:32:b8:f9:d7:17:e6:6d:d8:30:81:48:55:e6:c0: c6:bf:94:49:e3:a2:1c:ef:fd:ae:ee:ce:7f:53:9c:85:ad:50: 12:e4:6c:8d:e5:41:9c:2b:ce:bf:3d:22:2e:cb:1a:bc:05:1b: e7:6a:6d:27:9f:c9:22:92:fb:b0:55:db:8b:1f:90:fd:28:83: eb:3a:55:52:1b:47:83:97:0a:0b:50:74:b5:39:cc:bc:1d:f7: 49:d6:0b:79:d0:81:ed:54:0e:74:62:37:6c:a6:f7:68:90:1a: 06:29:90:4e:34:c6:94:13:92:ea:bf:b9:79:7a:ab:78:4b:26: 7e:ea:31:7d:4e:0f:1b:30:02:3c:21:9e:e1:bd:1d:c2:4f:76: ef:c5:2b:f5:99:ab:a3:73:89:16:e0:d9:8d:31:0e:e7:f4:72: 08:41:34:94:64:96:2b:be:70:c9:ab:2c:71:61:d3:79:70:d3: fe:dc:b5:99:7a:ab:e7:83:7b:6f:d6:3e:35:3a:c8:1f:e8:95: 7b:12:5e:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI1pCIH0F3LRBZkZPiUrQwrWy8GAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDODY3NDMyNjIzOEJFMzU1MzI5MDEyRTFDRkREQjk5 RUM1QjZCQTAeFw0yNTA0MDUwNTM3MTRaFw0yNTA0MDgxMzAzMTRaMDMxMTAvBgNV BAMTKDgyMjEyQzVCNzk3NjUwQzM4QjE3QjNDQTlGRkE5MDA2MjQ3RURGRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7V1JT87gEGsnhoWKBQjIahYMU UQG9tzYFFZ0gTNAky4mU7AecU8pa/DyddfjYZBDiYS7sPAanaI8It4MCwHbVUO3+ vWblS68nfFCDyrX4fQpvECciM/DtkBmn3sqoIsp0pTIPVLh5BcP1F4ee34MtHn4Y D94vMYwtSS4BopUcVHj5nNRdQMCb4xLnmuGExvJkT1jS/WOEOFc2EEuUoa0EQ+c4 g5AdoMaoSwCwkyAun/IAhWc5vRi3nECTXRsqSk5tu3G/aLR/4FuJ4wVIHcOIGkAC Dn7l0/pMaqmEDlis021/0PgukUj8waDWSc6XtiUJrl3ppYwgmYZKJi34jc/LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgiEsW3l2UMOLF7PKn/qQBiR+39EwHwYDVR0j BBgwFoAUzchnQyYji+NVMpAS4c/duZ7FtrowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWUyZjNiZC1kNGVjLTQyY2ItYWFjZi1hZGMyODI1YzE4NGIvMC9DREM4Njc0MzI2 MjM4QkUzNTUzMjkwMTJFMUNGRERCOTlFQzVCNkJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RDODY3NDMyNjIzOEJFMzU1MzI5MDEyRTFDRkREQjk5RUM1 QjZCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjllMmYzYmQtZDRlYy00MmNiLWFh Y2YtYWRjMjgyNWMxODRiLzAvQ0RDODY3NDMyNjIzOEJFMzU1MzI5MDEyRTFDRkRE Qjk5RUM1QjZCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF49hkpS8i1+2r2lCs8y3ucfnIERAviig4eJ 9nJA48e0AFB0jCdRL9VsdK6QofOO8X1XAx2Wk4d0NwkyuPnXF+Zt2DCBSFXmwMa/ lEnjohzv/a7uzn9TnIWtUBLkbI3lQZwrzr89Ii7LGrwFG+dqbSefySKS+7BV24sf kP0og+s6VVIbR4OXCgtQdLU5zLwd90nWC3nQge1UDnRiN2ym92iQGgYpkE40xpQT kuq/uXl6q3hLJn7qMX1ODxswAjwhnuG9HcJPdu/FK/WZq6NziRbg2Y0xDuf0cghB NJRkliu+cMmrLHFh03lw0/7ctZl6q+eDe2/WPjU6yB/olXsSXto= -----END CERTIFICATE-----Generated at Sat Apr 5 19:08:55 2025 by rpki-client