$ rpki-client -vvf repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft File: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft (raw, json) Hash identifier: 5sYbHwnjDzIDQobsay2N6d0/7dGLJUEXy92V60dc2e0= Subject key identifier: A9:A6:94:86:62:6B:F2:53:84:32:CA:2A:54:BC:7C:F9:A8:AF:DA:62 Authority key identifier: CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC Certificate issuer: /CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Certificate serial: 3FBCC88C6E3E9FA2C7B5EF82AE8702B8B9D68CA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft Manifest number: 026E Signing time: Sat 19 Apr 2025 18:22:00 +0000 Manifest this update: Sat 19 Apr 2025 18:17:00 +0000 Manifest next update: Wed 23 Apr 2025 00:01:00 +0000 Files and hashes: 1: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl (hash: oaHJpjBK3qoESvIUg6TeZ4B1mDQY+YpaUzgwVP0WQFY=) 2: 3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa (hash: bgwOzvgwDnc9ezV4Ont6t+9ZL+lOmgTEDPxux2zorVE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 00:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:bc:c8:8c:6e:3e:9f:a2:c7:b5:ef:82:ae:87:02:b8:b9:d6:8c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Validity Not Before: Apr 19 18:17:00 2025 GMT Not After : Apr 23 00:01:00 2025 GMT Subject: CN=A9A69486626BF2538432CA2A54BC7CF9A8AFDA62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:70:7d:92:3b:ee:f6:00:59:1b:5c:8d:48:e5: 9c:b1:97:a6:f3:0a:16:53:44:1a:44:87:bb:8d:d2: d1:c5:ed:65:26:1b:da:c4:42:80:51:2b:a9:bf:4c: 9a:f2:f3:ea:54:35:e0:b6:d4:49:28:31:d8:e3:2f: 09:7a:63:a5:09:69:df:75:24:94:4f:19:8a:10:e3: e9:a9:6a:2f:db:89:ed:01:af:02:e3:3d:67:51:a8: 9e:39:99:4d:5d:c2:80:a3:37:55:fd:de:67:87:8a: 38:74:78:51:a4:0f:64:f5:d5:f5:39:a3:e8:40:85: 18:ce:2b:92:0b:4f:06:4b:45:af:bd:77:bb:60:d4: 3a:79:c3:ca:45:68:9d:19:b0:ad:98:93:b6:e4:90: 10:0a:88:44:18:b0:13:68:dd:b9:44:35:fd:ea:10: 02:85:ba:3f:ba:96:3b:11:30:a2:9e:64:a0:29:6d: f4:d5:cd:e8:67:eb:5f:03:f8:c7:08:02:1d:1e:60: 53:10:fb:4a:e8:9c:0c:1f:e7:d2:33:42:72:8b:59: a2:06:d4:ea:0d:50:94:77:5b:68:3c:ba:02:5b:25: 89:98:6d:d2:46:39:da:7f:72:6f:0e:98:7d:8f:f3: b4:91:e5:b7:75:1e:0f:54:eb:4d:33:9f:d1:a3:fa: ae:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A6:94:86:62:6B:F2:53:84:32:CA:2A:54:BC:7C:F9:A8:AF:DA:62 X509v3 Authority Key Identifier: keyid:CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:aa:83:f4:b7:35:5e:bc:02:e4:da:8b:c6:30:f7:b7:d7:c8: 6f:c8:e6:b3:ff:ef:bb:50:9c:80:46:82:a8:3b:46:85:42:94: b3:ae:eb:1c:9b:70:5a:62:83:c2:36:ec:d6:c2:b9:ab:28:b2: 6c:16:87:2d:ff:92:e5:c2:19:27:b1:7e:88:28:49:ab:6d:14: e0:1a:53:62:b6:47:6e:0b:93:1d:4d:20:3d:f2:a2:48:3f:c3: 5b:85:e3:49:85:cd:a1:b2:8c:ec:e9:5b:d5:a2:60:4e:4c:e3: 87:f6:c3:c6:f9:e6:67:ae:f5:6a:96:be:18:a4:0d:a1:c3:92: d6:f0:64:ad:72:eb:c1:79:b3:09:ab:3d:ba:ff:5c:97:31:8e: 34:7d:a9:a1:31:65:ce:d1:2b:59:26:f3:de:bf:60:dd:c9:ea: b9:19:0b:a1:e4:bb:c1:62:d8:ee:c7:0a:90:79:be:22:bc:41: 4a:6e:d4:fa:87:29:88:a2:d7:b5:6a:41:16:95:58:d3:3d:9f: f5:4b:46:60:80:cf:79:e4:02:38:4a:af:f3:95:07:5d:ca:64: cf:e2:d4:d7:75:5d:87:4d:4c:3a:1a:6e:3e:ab:84:6b:0c:29: 01:04:cd:20:b0:1c:91:38:6b:86:fa:7d:70:2f:ae:98:e2:80: ed:7f:f8:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP7zIjG4+n6LHte+CrocCuLnWjKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThG RTdFOUFFQzAeFw0yNTA0MTkxODE3MDBaFw0yNTA0MjMwMDAxMDBaMDMxMTAvBgNV BAMTKEE5QTY5NDg2NjI2QkYyNTM4NDMyQ0EyQTU0QkM3Q0Y5QThBRkRBNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCcH2SO+72AFkbXI1I5Zyxl6bz ChZTRBpEh7uN0tHF7WUmG9rEQoBRK6m/TJry8+pUNeC21EkoMdjjLwl6Y6UJad91 JJRPGYoQ4+mpai/bie0BrwLjPWdRqJ45mU1dwoCjN1X93meHijh0eFGkD2T11fU5 o+hAhRjOK5ILTwZLRa+9d7tg1Dp5w8pFaJ0ZsK2Yk7bkkBAKiEQYsBNo3blENf3q EAKFuj+6ljsRMKKeZKApbfTVzehn618D+McIAh0eYFMQ+0ronAwf59IzQnKLWaIG 1OoNUJR3W2g8ugJbJYmYbdJGOdp/cm8OmH2P87SR5bd1Hg9U600zn9Gj+q79AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqaaUhmJr8lOEMsoqVLx8+aiv2mIwHwYDVR0j BBgwFoAUzqO1NWTT9hXmMM3ap7pa6P5+muwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Y2NjNWY2NC1lZDYyLTQ4NDgtOGMzOC00MmRmNDhlMzRiYjYvMC9DRUEzQjUzNTY0 RDNGNjE1RTYzMENEREFBN0JBNUFFOEZFN0U5QUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThGRTdF OUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWNjYzVmNjQtZWQ2Mi00ODQ4LThj MzgtNDJkZjQ4ZTM0YmI2LzAvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVB RThGRTdFOUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJyqg/S3NV68AuTai8Yw97fXyG/I5rP/77tQ nIBGgqg7RoVClLOu6xybcFpig8I27NbCuasosmwWhy3/kuXCGSexfogoSattFOAa U2K2R24Lkx1NID3yokg/w1uF40mFzaGyjOzpW9WiYE5M44f2w8b55meu9WqWvhik DaHDktbwZK1y68F5swmrPbr/XJcxjjR9qaExZc7RK1km896/YN3J6rkZC6Hku8Fi 2O7HCpB5viK8QUpu1PqHKYii17VqQRaVWNM9n/VLRmCAz3nkAjhKr/OVB13KZM/i 1Nd1XYdNTDoabj6rhGsMKQEEzSCwHJE4a4b6fXAvrpjigO1/+F4= -----END CERTIFICATE-----Generated at Sun Apr 20 01:59:47 2025 by rpki-client