$ rpki-client -vvf repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft File: CEE21891B6F5736FAA7D9BED383243F3DF381781.mft (raw, json) Hash identifier: t2k78UUoo0V93vrmrhTKdWA6In/W5urkvEH43OJVqss= Subject key identifier: 01:C9:B7:B3:92:58:90:97:8D:7F:38:79:A2:69:EB:2D:A8:E3:1D:0B Authority key identifier: CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 Certificate issuer: /CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Certificate serial: 51785EF8A35A19F151CB8D5013F378B60DBAE303 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft Manifest number: 01C0 Signing time: Wed 16 Apr 2025 07:30:58 +0000 Manifest this update: Wed 16 Apr 2025 07:25:58 +0000 Manifest next update: Sat 19 Apr 2025 08:36:58 +0000 Files and hashes: 1: CEE21891B6F5736FAA7D9BED383243F3DF381781.crl (hash: rzwbss0a6y6C2acuB5jp+eWklO0IPmY6roca4BNUPUA=) 2: 3130332e3136382e3138362e302f32332d3234203d3e20313432333232.roa (hash: 1fFCeWUuqh8Cb3Sv5grm5RDaXRUMiRw3OIxuWQiBMNw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 08:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:78:5e:f8:a3:5a:19:f1:51:cb:8d:50:13:f3:78:b6:0d:ba:e3:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Validity Not Before: Apr 16 07:25:58 2025 GMT Not After : Apr 19 08:36:58 2025 GMT Subject: CN=01C9B7B3925890978D7F3879A269EB2DA8E31D0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:80:e3:aa:2d:01:90:62:07:f6:3f:d8:02:b4: c2:76:c9:f0:7a:23:3c:a3:15:5a:65:fe:a0:81:3b: a5:50:5f:cc:9e:83:3a:a1:b9:9a:71:d4:19:43:2b: 5d:32:a9:c5:96:ce:b9:59:11:85:b8:5f:17:dc:82: 85:2b:a9:86:93:bb:a3:44:66:e0:3a:67:8f:c5:9e: a1:96:53:d6:2a:90:b5:c8:44:41:8e:3d:6c:6b:ec: 34:af:52:14:d7:5b:65:9e:d4:14:81:ef:73:37:c7: a7:5e:e3:62:10:cc:1a:d1:fd:9f:b9:2f:d5:cd:59: 67:9b:4a:61:b3:bf:9a:a6:24:fd:8f:5d:f1:a4:d9: 5a:c8:62:b8:72:6a:9d:80:bc:d2:48:91:79:09:cc: 2f:a3:21:41:7a:f5:c9:3e:d0:ed:1c:fe:bf:53:75: a7:8d:6f:7d:13:ad:5c:02:5c:86:5e:0b:44:f8:80: d0:8b:57:60:af:e9:9a:f9:90:b7:87:47:4e:55:59: fc:b9:c5:e4:8b:b2:2f:26:65:7d:00:8c:b3:98:df: 6d:a5:53:13:b6:1c:73:42:0e:46:b9:15:07:80:e9: 40:13:03:df:80:87:e7:90:80:10:ce:9a:10:be:b0: 2d:a3:fa:22:e7:d0:66:83:63:f2:22:84:39:1b:3b: 88:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C9:B7:B3:92:58:90:97:8D:7F:38:79:A2:69:EB:2D:A8:E3:1D:0B X509v3 Authority Key Identifier: keyid:CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:3c:3c:f4:3a:b1:f8:3b:06:95:a1:9b:c3:15:19:21:eb:1d: d0:b1:de:7a:73:c5:66:be:32:8a:47:84:d4:86:3f:ec:10:07: a1:4f:15:b8:25:2c:d1:78:3c:a6:82:9e:74:d5:89:eb:02:3b: 9f:5d:13:e7:a5:14:71:94:71:e0:fc:c2:8d:23:3c:7d:ee:ac: c4:d0:93:a7:ce:61:6c:f3:11:a1:75:37:82:e3:13:b1:bc:1f: f8:db:5c:b5:5e:7a:e4:0e:55:27:e7:5b:70:ff:c0:11:b9:47: 62:4c:cf:1d:1b:02:b7:93:92:77:56:36:b4:ea:77:33:74:f4: a1:1b:0c:fc:d5:76:19:2a:a4:ee:7e:b9:11:54:e8:a6:21:a5: c3:c0:7c:f9:74:b4:9c:3f:33:05:a3:c4:d7:42:3c:e2:47:51: 67:4d:70:34:b9:d3:c8:3e:88:ec:3e:e0:07:8c:39:49:cd:c3: f1:45:75:e3:8e:82:27:0c:32:e0:48:4b:e5:bf:7f:5a:16:55: a7:33:04:32:05:3f:57:1b:f4:9e:27:bd:d3:35:c9:4f:ad:78: 14:71:37:a4:02:5c:e0:47:e4:e9:2c:21:5f:ea:75:18:9f:2e: dd:c0:65:21:ac:5e:5b:5e:9c:31:7c:5e:f1:3e:81:e8:9c:22: 18:10:58:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUXhe+KNaGfFRy41QE/N4tg264wMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNE RjM4MTc4MTAeFw0yNTA0MTYwNzI1NThaFw0yNTA0MTkwODM2NThaMDMxMTAvBgNV BAMTKDAxQzlCN0IzOTI1ODkwOTc4RDdGMzg3OUEyNjlFQjJEQThFMzFEMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvgOOqLQGQYgf2P9gCtMJ2yfB6 IzyjFVpl/qCBO6VQX8yegzqhuZpx1BlDK10yqcWWzrlZEYW4XxfcgoUrqYaTu6NE ZuA6Z4/FnqGWU9YqkLXIREGOPWxr7DSvUhTXW2We1BSB73M3x6de42IQzBrR/Z+5 L9XNWWebSmGzv5qmJP2PXfGk2VrIYrhyap2AvNJIkXkJzC+jIUF69ck+0O0c/r9T daeNb30TrVwCXIZeC0T4gNCLV2Cv6Zr5kLeHR05VWfy5xeSLsi8mZX0AjLOY322l UxO2HHNCDka5FQeA6UATA9+Ah+eQgBDOmhC+sC2j+iLn0GaDY/IihDkbO4jBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAcm3s5JYkJeNfzh5omnrLajjHQswHwYDVR0j BBgwFoAUzuIYkbb1c2+qfZvtODJD8984F4EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWYwMDMxZS0yYTllLTQ3Y2EtOTI4My00MGU5MjdlMzU5OTMvMC9DRUUyMTg5MUI2 RjU3MzZGQUE3RDlCRUQzODMyNDNGM0RGMzgxNzgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNERjM4 MTc4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFmMDAzMWUtMmE5ZS00N2NhLTky ODMtNDBlOTI3ZTM1OTkzLzAvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQz RjNERjM4MTc4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEU8PPQ6sfg7BpWhm8MVGSHrHdCx3npzxWa+ MopHhNSGP+wQB6FPFbglLNF4PKaCnnTViesCO59dE+elFHGUceD8wo0jPH3urMTQ k6fOYWzzEaF1N4LjE7G8H/jbXLVeeuQOVSfnW3D/wBG5R2JMzx0bAreTkndWNrTq dzN09KEbDPzVdhkqpO5+uRFU6KYhpcPAfPl0tJw/MwWjxNdCPOJHUWdNcDS508g+ iOw+4AeMOUnNw/FFdeOOgicMMuBIS+W/f1oWVaczBDIFP1cb9J4nvdM1yU+teBRx N6QCXOBH5OksIV/qdRifLt3AZSGsXltenDF8XvE+geicIhgQWBs= -----END CERTIFICATE-----Generated at Fri Apr 18 07:28:03 2025 by rpki-client