$ rpki-client -vvf repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft File: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft (raw, json) Hash identifier: an377OqUZ9AwFDP9eN1H3XA/p5oms3LwXBNsaBcrYrA= Subject key identifier: 94:22:93:6F:DA:31:E8:CF:5C:E5:72:9E:26:B8:56:0C:23:8E:6E:E8 Authority key identifier: CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 Certificate issuer: /CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Certificate serial: 7E6D1AD21966833F3DE6A1D0F2EF4A650FBA19C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft Manifest number: 032E Signing time: Sun 06 Apr 2025 13:51:24 +0000 Manifest this update: Sun 06 Apr 2025 13:46:24 +0000 Manifest next update: Wed 09 Apr 2025 17:52:24 +0000 Files and hashes: 1: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl (hash: RTOHpgP5+QtTwqN51o3pa5xk6ckEgS7zFR3xlET7i2Y=) 2: 3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa (hash: Zud2nnElfbx5UA3aYazzfNWJKcwUrbzENyQybZ8isd0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 17:52:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:6d:1a:d2:19:66:83:3f:3d:e6:a1:d0:f2:ef:4a:65:0f:ba:19:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Validity Not Before: Apr 6 13:46:24 2025 GMT Not After : Apr 9 17:52:24 2025 GMT Subject: CN=9422936FDA31E8CF5CE5729E26B8560C238E6EE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7b:21:04:b6:ec:2f:4d:c4:95:31:3a:05:61: 9b:f9:b4:1d:7b:02:5f:6f:da:08:fa:79:dd:40:db: 08:10:2a:87:fa:58:c3:ca:b6:c3:50:ba:cf:10:b5: f5:e2:f1:c6:2f:c6:94:af:43:fd:3e:14:33:65:42: 4a:b1:1f:06:75:49:33:91:6e:aa:45:bf:dd:34:ae: 90:55:57:f7:6e:a2:19:5b:92:72:c1:c6:d5:21:bb: 13:9d:32:12:29:aa:1c:39:0f:86:3f:ac:90:1e:02: 10:13:73:80:65:72:d8:1f:09:aa:77:1b:be:f6:c3: 30:43:29:ce:36:5d:55:23:23:17:cc:47:65:6b:6d: 96:23:ab:b7:f7:b2:ca:20:55:79:dd:c3:42:40:ea: 88:6c:a1:d8:c9:42:f7:68:c7:d8:8f:1c:97:9a:c5: 2e:7a:a4:cf:62:5e:16:94:df:2e:16:ad:ca:da:7c: 3b:04:b0:f5:0e:d7:6c:83:2f:75:35:c1:0a:a1:34: 86:0d:56:2f:2f:df:8e:97:8f:79:cd:c0:ab:8d:68: 8e:ec:9a:b5:92:9c:2b:bd:51:a9:b7:2c:c1:d9:2c: e4:34:0f:97:05:a2:ae:ad:cb:d5:97:1c:79:aa:ba: ba:be:36:2b:c8:45:9c:c3:27:91:2a:20:f2:16:ae: c4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:22:93:6F:DA:31:E8:CF:5C:E5:72:9E:26:B8:56:0C:23:8E:6E:E8 X509v3 Authority Key Identifier: keyid:CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:02:b2:5a:9e:55:34:34:4b:a0:01:ff:e8:d2:40:c8:3d:00: bd:32:d9:30:da:61:ed:70:05:22:5f:82:2f:0a:6d:9b:95:97: 77:7b:d8:25:6b:95:77:14:36:3c:40:61:1b:25:ad:90:59:7d: 9d:be:ca:28:e7:84:e7:ba:8b:fc:c3:bc:a8:b6:17:f0:c5:ff: 22:12:1b:68:90:32:35:3d:03:d2:6d:3e:63:b1:de:98:6a:c1: e0:de:02:fe:5a:c5:50:ff:86:70:37:2b:aa:4c:5d:63:a2:69: f4:27:d2:e5:27:42:bc:81:0d:76:12:4e:8c:b7:4c:51:af:90: 73:59:3a:fe:3b:35:b3:77:4d:ab:60:35:f4:65:7d:ff:d3:ba: b0:b2:6b:11:29:16:43:4a:cc:48:92:1d:30:35:ef:e9:98:71: 20:fb:19:f1:0c:09:44:7b:66:16:28:f4:d6:18:31:7c:85:63: 0e:b2:de:e3:60:fc:a4:43:27:f7:01:2d:e9:54:5f:83:37:d7: 06:a1:ab:29:9d:93:28:a1:ef:08:5b:bb:1f:9d:99:6a:7d:7b: 3c:5c:59:f0:f3:1b:ce:95:8f:90:87:00:d9:4f:be:2d:72:02: 5a:64:3d:35:eb:e4:40:2e:d7:f8:34:bc:08:28:55:3a:81:ac: 89:61:e9:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfm0a0hlmgz895qHQ8u9KZQ+6GcYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFD ODRFQ0VENDAeFw0yNTA0MDYxMzQ2MjRaFw0yNTA0MDkxNzUyMjRaMDMxMTAvBgNV BAMTKDk0MjI5MzZGREEzMUU4Q0Y1Q0U1NzI5RTI2Qjg1NjBDMjM4RTZFRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYeyEEtuwvTcSVMToFYZv5tB17 Al9v2gj6ed1A2wgQKof6WMPKtsNQus8QtfXi8cYvxpSvQ/0+FDNlQkqxHwZ1STOR bqpFv900rpBVV/duohlbknLBxtUhuxOdMhIpqhw5D4Y/rJAeAhATc4BlctgfCap3 G772wzBDKc42XVUjIxfMR2VrbZYjq7f3ssogVXndw0JA6ohsodjJQvdox9iPHJea xS56pM9iXhaU3y4WrcrafDsEsPUO12yDL3U1wQqhNIYNVi8v346Xj3nNwKuNaI7s mrWSnCu9Uam3LMHZLOQ0D5cFoq6ty9WXHHmqurq+NivIRZzDJ5EqIPIWrsRXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlCKTb9ox6M9c5XKeJrhWDCOObugwHwYDVR0j BBgwFoAUzXwmfFiuL1GBf6pSArC/kchOztQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTQ0ZDU3Ni0zODE4LTQ5ZDYtODY2Mi1mOGRmODlhYjI4NjMvMC9DRDdDMjY3QzU4 QUUyRjUxODE3RkFBNTIwMkIwQkY5MUM4NEVDRUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFDODRF Q0VENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE0NGQ1NzYtMzgxOC00OWQ2LTg2 NjItZjhkZjg5YWIyODYzLzAvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJG OTFDODRFQ0VENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALICslqeVTQ0S6AB/+jSQMg9AL0y2TDaYe1w BSJfgi8KbZuVl3d72CVrlXcUNjxAYRslrZBZfZ2+yijnhOe6i/zDvKi2F/DF/yIS G2iQMjU9A9JtPmOx3phqweDeAv5axVD/hnA3K6pMXWOiafQn0uUnQryBDXYSToy3 TFGvkHNZOv47NbN3TatgNfRlff/TurCyaxEpFkNKzEiSHTA17+mYcSD7GfEMCUR7 ZhYo9NYYMXyFYw6y3uNg/KRDJ/cBLelUX4M31wahqymdkyih7whbux+dmWp9ezxc WfDzG86Vj5CHANlPvi1yAlpkPTXr5EAu1/g0vAgoVTqBrIlh6eE= -----END CERTIFICATE-----Generated at Mon Apr 7 12:16:50 2025 by rpki-client