$ rpki-client -vvf repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft File: CB8106D827747D008C9DE9181B4EC6739C8EE800.mft (raw, json) Hash identifier: Dxtxqnl8WhKRzIU95QZzSllDad5GK3nxIhqaoBNpYBM= Subject key identifier: B8:95:F7:DC:AD:98:3E:66:52:35:05:A1:48:B7:85:B5:C9:F4:0C:2A Authority key identifier: CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 Certificate issuer: /CN=CB8106D827747D008C9DE9181B4EC6739C8EE800 Certificate serial: 4BBC8C0FC49515F59ADDDAFA92287BCD56D94F35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft Manifest number: 04BD Signing time: Sat 05 Apr 2025 18:40:50 +0000 Manifest this update: Sat 05 Apr 2025 18:35:50 +0000 Manifest next update: Wed 09 Apr 2025 06:29:50 +0000 Files and hashes: 1: CB8106D827747D008C9DE9181B4EC6739C8EE800.crl (hash: T9eqRZJ4A7ohBBp5vqG/6pFGaUMa/SDmD6L7ffPQImg=) 2: 3130332e3234382e3139362e302f32322d3234203d3e20313331373436.roa (hash: nxYOm0XXR50V6GnhRaIQYUBF2UG5sIA0HyaLTjhPLDc=) 3: 3130332e32312e3230342e302f32322d3234203d3e20313331373436.roa (hash: Pzwwc/DaRh7douIe0O7l7uQ+2W5v06vmWKYPm+xMR5Y=) 4: 323430303a663334303a3a2f33322d3438203d3e20313331373436.roa (hash: 6yavDvIc4pSEZOii3wG3tpQ49E/AOM1JrdsShPejo+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.crl rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:bc:8c:0f:c4:95:15:f5:9a:dd:da:fa:92:28:7b:cd:56:d9:4f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8106D827747D008C9DE9181B4EC6739C8EE800 Validity Not Before: Apr 5 18:35:50 2025 GMT Not After : Apr 9 06:29:50 2025 GMT Subject: CN=B895F7DCAD983E66523505A148B785B5C9F40C2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:70:16:dc:87:c8:fb:6c:e1:23:d0:a9:46:40: b6:3e:d7:d9:6b:4f:98:d8:1f:b6:09:40:21:62:93: 44:a9:cb:0d:db:1c:9b:ee:2e:03:16:9f:9c:23:ca: c7:b5:e5:fc:b0:ab:a7:92:d2:81:2c:51:72:79:8e: b5:23:70:16:f4:3a:ca:1c:d7:79:e6:37:ea:70:30: a4:74:df:a6:2b:24:12:bf:81:6a:9a:da:d4:38:f7: de:97:be:5c:91:e8:98:2a:c5:38:d4:73:ec:59:96: 93:36:93:9e:85:e6:f3:44:df:eb:cb:2d:72:de:ef: a4:51:14:d7:a6:84:a0:6a:cf:b0:8a:d6:ba:46:e3: df:a1:27:d8:20:57:80:20:c1:da:b5:89:76:fe:18: 8f:b2:7a:7e:f7:af:e2:8f:ee:f9:fa:37:88:ac:fa: 35:d1:4a:ae:33:3b:88:18:03:7b:66:f2:1d:64:26: 81:77:a5:23:6c:e5:d2:f9:85:fc:67:0c:49:c9:de: bc:5f:9c:77:d3:1e:e8:b7:9d:b2:9e:e5:5f:9c:26: 9c:97:51:e6:d4:7a:5e:27:73:d8:32:f1:8f:2f:a5: ee:02:c5:1b:48:53:77:c0:fb:72:19:88:80:3e:9b: 69:75:6a:45:b3:99:da:5e:6c:8e:1f:b9:10:29:00: 49:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:95:F7:DC:AD:98:3E:66:52:35:05:A1:48:B7:85:B5:C9:F4:0C:2A X509v3 Authority Key Identifier: keyid:CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:94:19:0f:33:8f:26:da:0f:32:cb:13:0c:58:76:c5:64:fb: 45:42:43:79:fe:b5:ee:70:62:1c:d1:49:ec:1b:28:5f:7f:c4: 7e:2d:d0:e5:4a:82:88:6d:2b:43:58:0f:10:61:0e:ae:01:9b: ba:22:ab:2d:a4:c3:21:1c:cb:e3:61:8f:8a:fb:b0:e5:a8:99: c6:bb:4f:00:7a:d0:02:19:a2:8e:e9:37:b3:8b:3c:26:ff:39: ec:c9:80:fe:b0:05:9e:56:2e:51:9f:f3:b0:04:9c:10:b0:6a: d5:37:9c:45:62:be:0b:3d:06:66:b8:e1:06:31:02:25:af:04: a0:31:08:3f:f6:ce:82:22:46:58:e3:1d:5a:b8:fe:33:41:25: 57:2d:f1:1d:39:33:c0:a8:9f:ab:00:40:99:b9:ab:cd:19:95: 52:ca:29:93:a1:f9:11:fc:be:e8:80:6b:d4:bd:de:5c:1b:db: 05:95:01:b1:f7:c7:58:ef:b3:d0:44:f3:ed:2d:8e:d2:fc:52: 58:11:14:2d:87:db:d2:eb:e7:32:50:1c:28:91:8f:2a:5e:17: 5a:0b:bc:4f:14:7c:e8:30:e9:ef:e7:9f:4a:26:a5:eb:a2:29: f3:34:95:a6:61:46:bb:2a:a4:cc:9f:3b:0f:d9:ff:8f:72:21: 69:9d:9a:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS7yMD8SVFfWa3dr6kih7zVbZTzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2NzM5 QzhFRTgwMDAeFw0yNTA0MDUxODM1NTBaFw0yNTA0MDkwNjI5NTBaMDMxMTAvBgNV BAMTKEI4OTVGN0RDQUQ5ODNFNjY1MjM1MDVBMTQ4Qjc4NUI1QzlGNDBDMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDicBbch8j7bOEj0KlGQLY+19lr T5jYH7YJQCFik0Spyw3bHJvuLgMWn5wjyse15fywq6eS0oEsUXJ5jrUjcBb0Osoc 13nmN+pwMKR036YrJBK/gWqa2tQ4996XvlyR6JgqxTjUc+xZlpM2k56F5vNE3+vL LXLe76RRFNemhKBqz7CK1rpG49+hJ9ggV4Agwdq1iXb+GI+yen73r+KP7vn6N4is +jXRSq4zO4gYA3tm8h1kJoF3pSNs5dL5hfxnDEnJ3rxfnHfTHui3nbKe5V+cJpyX UebUel4nc9gy8Y8vpe4CxRtIU3fA+3IZiIA+m2l1akWzmdpebI4fuRApAEkVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuJX33K2YPmZSNQWhSLeFtcn0DCowHwYDVR0j BBgwFoAUy4EG2Cd0fQCMnekYG07Gc5yO6AAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmU1NzhkMC1kM2FhLTRmMGYtYmI5ZC1mNzRiNDljNmE2NTUvMC9DQjgxMDZEODI3 NzQ3RDAwOEM5REU5MTgxQjRFQzY3MzlDOEVFODAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2NzM5QzhF RTgwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlNTc4ZDAtZDNhYS00ZjBmLWJi OWQtZjc0YjQ5YzZhNjU1LzAvQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2 NzM5QzhFRTgwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWUGQ8zjybaDzLLEwxYdsVk+0VCQ3n+te5w YhzRSewbKF9/xH4t0OVKgohtK0NYDxBhDq4Bm7oiqy2kwyEcy+Nhj4r7sOWomca7 TwB60AIZoo7pN7OLPCb/OezJgP6wBZ5WLlGf87AEnBCwatU3nEVivgs9Bma44QYx AiWvBKAxCD/2zoIiRljjHVq4/jNBJVct8R05M8Con6sAQJm5q80ZlVLKKZOh+RH8 vuiAa9S93lwb2wWVAbH3x1jvs9BE8+0tjtL8UlgRFC2H29Lr5zJQHCiRjypeF1oL vE8UfOgw6e/nn0ompeuiKfM0laZhRrsqpMyfOw/Z/49yIWmdmkc= -----END CERTIFICATE-----Generated at Sat Apr 5 23:16:44 2025 by rpki-client