$ rpki-client -vvf repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft File: CEEE0277998C75D36A98EC102AD67573C8C514E9.mft (raw, json) Hash identifier: rOmLWauYployAObcIJ15qDpNaClkatlf7LlsvAIqCgc= Subject key identifier: 14:2E:71:82:A1:29:55:A6:49:A7:70:3B:39:0C:22:CD:94:3E:87:0D Authority key identifier: CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 Certificate issuer: /CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Certificate serial: 041E58D56A7DD7A073BEEC9389D56E98CC14616C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft Manifest number: 023F Signing time: Fri 04 Apr 2025 16:11:32 +0000 Manifest this update: Fri 04 Apr 2025 16:06:32 +0000 Manifest next update: Mon 07 Apr 2025 21:08:32 +0000 Files and hashes: 1: CEEE0277998C75D36A98EC102AD67573C8C514E9.crl (hash: 0AE+5uhXTyv2hXhe30rn6aAiyTYdbuZeJoVfSE2VJoU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:1e:58:d5:6a:7d:d7:a0:73:be:ec:93:89:d5:6e:98:cc:14:61:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Validity Not Before: Apr 4 16:06:32 2025 GMT Not After : Apr 7 21:08:32 2025 GMT Subject: CN=142E7182A12955A649A7703B390C22CD943E870D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0f:62:53:b2:b4:77:45:2d:91:a8:a4:ac:14: d9:0e:76:57:d9:c1:4e:8a:b5:02:78:f7:a6:22:e6: 10:a4:30:55:77:68:f0:eb:46:35:69:f0:2a:68:2c: 23:b4:cf:5f:33:d3:f5:0c:2f:fd:73:ca:f2:1d:26: 2b:d4:59:c5:bc:85:0e:5f:4c:03:e8:1c:48:e5:a6: cc:03:17:22:57:c9:f5:88:db:7f:c8:d8:97:77:f3: 0d:4f:9b:59:85:08:ce:a3:91:8d:c9:0b:cf:55:0f: f1:3b:6e:39:05:fa:bd:d1:47:13:c4:de:fc:ae:8b: 0e:b8:a7:ed:b8:8b:58:c0:af:c5:12:26:a9:bd:01: 70:9c:f4:ac:82:e8:1e:d1:91:e2:d3:38:bd:34:1b: 65:af:af:7d:71:34:b0:89:d4:b3:30:27:25:e2:67: c1:c9:84:aa:b8:27:2a:f3:40:a6:d4:23:03:f6:b5: d8:d4:74:69:be:46:96:57:f1:73:2b:de:72:b2:da: f6:f8:9d:06:a8:eb:f5:70:98:c6:6d:64:56:5e:ba: 39:66:33:af:03:57:c0:b5:14:3e:86:ea:2f:0c:8f: 38:31:60:e6:49:30:37:3a:7e:70:2d:aa:9f:0d:18: 5f:e2:9a:e5:9f:c3:6e:d2:46:44:a0:5a:ca:0b:31: e5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2E:71:82:A1:29:55:A6:49:A7:70:3B:39:0C:22:CD:94:3E:87:0D X509v3 Authority Key Identifier: keyid:CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:bc:e9:9e:cd:12:b1:9d:11:2e:0d:c2:28:62:e1:59:c5:20: 1c:8c:b2:bc:d6:8d:b4:c9:0f:e3:90:57:f0:25:85:b8:76:fa: 28:d3:a0:71:d4:5c:34:fc:6f:99:51:f9:a1:6f:e7:6d:1b:31: 81:04:b4:d3:e9:99:1a:7b:7c:63:6c:4d:f8:3b:7c:37:ec:6c: 0a:ac:ce:c5:60:e3:31:81:de:02:ad:78:81:86:81:64:f7:56: b0:db:8a:2d:f9:4a:00:63:55:b9:60:e2:48:39:43:59:d1:95: f1:45:19:06:c1:69:9b:75:41:44:e5:a3:56:d0:31:dc:9b:c5: 46:0a:ed:ec:cc:1a:b2:f7:09:43:44:93:e9:1b:b2:fd:e6:90: cc:51:42:0d:96:cf:85:71:35:f3:e5:75:9b:97:16:0b:f0:a0: 73:8d:17:9d:94:36:06:2d:a2:ee:72:9c:ff:28:a6:01:cd:b2: d3:c4:7c:53:03:b0:6a:25:55:cb:9a:ca:7d:72:4c:51:b4:bd: 72:99:66:ad:47:18:af:7e:00:a8:be:d3:8a:97:3d:74:0c:ee: 26:6c:c0:bd:0d:b7:ea:72:00:e0:0c:17:9a:5b:f9:9c:02:ee: c3:96:31:c7:36:1b:b5:ee:56:17:3f:a6:e9:fd:ad:51:a9:dd: 8d:50:d3:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBB5Y1Wp916BzvuyTidVumMwUYWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzND OEM1MTRFOTAeFw0yNTA0MDQxNjA2MzJaFw0yNTA0MDcyMTA4MzJaMDMxMTAvBgNV BAMTKDE0MkU3MTgyQTEyOTU1QTY0OUE3NzAzQjM5MEMyMkNEOTQzRTg3MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYD2JTsrR3RS2RqKSsFNkOdlfZ wU6KtQJ496Yi5hCkMFV3aPDrRjVp8CpoLCO0z18z0/UML/1zyvIdJivUWcW8hQ5f TAPoHEjlpswDFyJXyfWI23/I2Jd38w1Pm1mFCM6jkY3JC89VD/E7bjkF+r3RRxPE 3vyuiw64p+24i1jAr8USJqm9AXCc9KyC6B7RkeLTOL00G2Wvr31xNLCJ1LMwJyXi Z8HJhKq4JyrzQKbUIwP2tdjUdGm+RpZX8XMr3nKy2vb4nQao6/VwmMZtZFZeujlm M68DV8C1FD6G6i8MjzgxYOZJMDc6fnAtqp8NGF/imuWfw27SRkSgWsoLMeVlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFC5xgqEpVaZJp3A7OQwizZQ+hw0wHwYDVR0j BBgwFoAUzu4Cd5mMddNqmOwQKtZ1c8jFFOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWEzYjEwNi04ZWYwLTQ1YmYtYjI3Ny1hMjc5NDdlNDU5MWIvMC9DRUVFMDI3Nzk5 OEM3NUQzNkE5OEVDMTAyQUQ2NzU3M0M4QzUxNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzNDOEM1 MTRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVhM2IxMDYtOGVmMC00NWJmLWIy NzctYTI3OTQ3ZTQ1OTFiLzAvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1 NzNDOEM1MTRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAG86Z7NErGdES4Nwihi4VnFIByMsrzWjbTJ D+OQV/Alhbh2+ijToHHUXDT8b5lR+aFv520bMYEEtNPpmRp7fGNsTfg7fDfsbAqs zsVg4zGB3gKteIGGgWT3VrDbii35SgBjVblg4kg5Q1nRlfFFGQbBaZt1QUTlo1bQ MdybxUYK7ezMGrL3CUNEk+kbsv3mkMxRQg2Wz4VxNfPldZuXFgvwoHONF52UNgYt ou5ynP8opgHNstPEfFMDsGolVcuayn1yTFG0vXKZZq1HGK9+AKi+04qXPXQM7iZs wL0Nt+pyAOAMF5pb+ZwC7sOWMcc2G7XuVhc/pun9rVGp3Y1Q0wM= -----END CERTIFICATE-----Generated at Sat Apr 5 18:26:58 2025 by rpki-client