$ rpki-client -vvf repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft File: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft (raw, json) Hash identifier: Z5IFdaX8fOCmF+FqC7k52Fw3Gu8Nes40EtIAnz1GYv0= Subject key identifier: 9B:CC:BD:97:F8:3B:5B:5B:7D:DB:E4:97:5D:BE:79:4F:F8:C1:F3:26 Authority key identifier: CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 Certificate issuer: /CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Certificate serial: 3E270C9F69554884D45915A23104D1DBD4051DC2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft Manifest number: 04BE Signing time: Fri 04 Apr 2025 02:00:51 +0000 Manifest this update: Fri 04 Apr 2025 01:55:51 +0000 Manifest next update: Mon 07 Apr 2025 08:58:51 +0000 Files and hashes: 1: 323030313a6466343a6630303a3a2f34382d3438203d3e203535363931.roa (hash: inTtE/2z3zxOo2M8puwuxje9wrX7I3TQwEI651FTI7w=) 2: 3230332e372e3137312e302f32342d3234203d3e203535363931.roa (hash: 6/BGm352ofBFwmMWeXlwLiQDWFsCjJihfEUy/SjVwOI=) 3: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl (hash: TWdWBhWq0IL3jhj5UoyNOjdZhSsC65ruTE61e+h0KM4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 08:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:27:0c:9f:69:55:48:84:d4:59:15:a2:31:04:d1:db:d4:05:1d:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Validity Not Before: Apr 4 01:55:51 2025 GMT Not After : Apr 7 08:58:51 2025 GMT Subject: CN=9BCCBD97F83B5B5B7DDBE4975DBE794FF8C1F326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7f:b3:a8:a0:da:1f:42:88:75:8f:59:0c:8d: 25:b1:76:69:65:79:a3:d4:5e:6f:51:ae:ba:39:5b: 8b:3b:c3:29:7f:6e:08:d5:ca:20:6b:ff:49:4d:02: 04:69:0a:43:4d:6e:b5:d7:4e:5b:15:33:df:c8:07: 96:c6:85:f1:44:8b:3e:96:8c:98:95:28:f0:81:60: 53:6e:8c:93:be:d8:1e:55:95:02:a1:f4:71:d4:75: f8:76:d7:e7:7e:86:6d:73:fb:3d:4b:8e:45:e4:07: 40:78:8a:f7:5e:fc:3b:84:f8:13:81:cc:90:38:3e: 93:bc:a4:b8:ff:d9:3d:f2:7d:af:f1:04:84:f3:5c: d4:c5:7e:89:b3:37:d5:61:4a:73:b4:fa:0a:8a:4c: 30:93:75:3b:8b:f2:40:8d:5d:ee:00:3a:1d:72:56: ab:ee:af:8d:0b:2e:97:c4:70:dd:04:23:45:52:fc: 7b:ad:b1:33:e5:9a:df:3c:9e:16:5a:a9:c4:05:f3: 88:43:31:1a:45:1f:68:27:aa:e3:63:d7:7d:2b:13: 27:7e:47:70:97:58:e4:a4:f5:8f:f2:d4:52:57:28: ad:12:46:89:7d:17:27:f9:7f:19:f9:e4:7c:a2:82: b3:94:19:39:ff:c1:24:4b:5c:26:16:64:5e:65:32: f1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CC:BD:97:F8:3B:5B:5B:7D:DB:E4:97:5D:BE:79:4F:F8:C1:F3:26 X509v3 Authority Key Identifier: keyid:CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:11:fd:c7:70:d4:9c:85:f8:84:9e:89:94:4e:88:f4:7e:70: 5a:03:53:5a:23:42:46:a9:ae:6b:0c:be:94:df:ee:c5:c8:2c: 19:d8:eb:db:b6:89:7f:2b:8c:53:d9:c3:a4:f9:70:89:c7:eb: d4:da:81:6c:d2:0f:f4:ca:60:9b:91:1a:d8:75:12:7d:56:1a: bd:9f:64:23:12:1e:9f:9e:0c:00:5f:61:86:ff:b4:50:74:e8: ab:b5:91:ad:58:76:75:5a:5e:f6:85:f3:97:15:9d:53:82:ba: 84:d5:d5:02:06:2a:98:23:a0:da:85:b3:70:72:99:76:d8:34: 12:e1:b6:cb:36:a1:34:45:08:b8:d3:47:f6:6d:f0:13:5a:01: 0d:6e:00:e7:cf:43:00:2f:6d:fb:ad:e2:3e:23:8a:3f:d4:5e: 9b:aa:28:b4:1a:93:c8:b5:88:e4:db:38:91:f0:3d:1b:4e:41: f3:01:20:d7:e3:d4:db:ad:fb:1f:23:08:ae:e4:9f:14:11:c2: 7f:fe:d6:5d:de:4f:72:7d:88:27:4a:2c:7c:1e:75:2a:0f:5c: a5:36:8b:8a:95:34:6c:a9:f9:e1:e2:21:a9:0c:5d:5f:cf:d4: 1a:28:b2:26:d0:7c:6d:5f:2b:ac:a4:71:4f:ca:de:ea:ad:26: 64:35:35:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPicMn2lVSITUWRWiMQTR29QFHcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEz M0U5OEVFMzAeFw0yNTA0MDQwMTU1NTFaFw0yNTA0MDcwODU4NTFaMDMxMTAvBgNV BAMTKDlCQ0NCRDk3RjgzQjVCNUI3RERCRTQ5NzVEQkU3OTRGRjhDMUYzMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCff7OooNofQoh1j1kMjSWxdmll eaPUXm9Rrro5W4s7wyl/bgjVyiBr/0lNAgRpCkNNbrXXTlsVM9/IB5bGhfFEiz6W jJiVKPCBYFNujJO+2B5VlQKh9HHUdfh21+d+hm1z+z1LjkXkB0B4ivde/DuE+BOB zJA4PpO8pLj/2T3yfa/xBITzXNTFfomzN9VhSnO0+gqKTDCTdTuL8kCNXe4AOh1y Vqvur40LLpfEcN0EI0VS/HutsTPlmt88nhZaqcQF84hDMRpFH2gnquNj130rEyd+ R3CXWOSk9Y/y1FJXKK0SRol9Fyf5fxn55HyigrOUGTn/wSRLXCYWZF5lMvFlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm8y9l/g7W1t92+SXXb55T/jB8yYwHwYDVR0j BBgwFoAUzoJueWg+1uXOYf6iRLa3kTPpjuMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDBhZTBmMS1iOGMwLTQ1MmYtOGU4OS0xZGZjM2Y1OTRkNGMvMC9DRTgyNkU3OTY4 M0VENkU1Q0U2MUZFQTI0NEI2Qjc5MTMzRTk4RUUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEzM0U5 OEVFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzAwYWUwZjEtYjhjMC00NTJmLThl ODktMWRmYzNmNTk0ZDRjLzAvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3 OTEzM0U5OEVFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUR/cdw1JyF+ISeiZROiPR+cFoDU1ojQkap rmsMvpTf7sXILBnY69u2iX8rjFPZw6T5cInH69TagWzSD/TKYJuRGth1En1WGr2f ZCMSHp+eDABfYYb/tFB06Ku1ka1YdnVaXvaF85cVnVOCuoTV1QIGKpgjoNqFs3By mXbYNBLhtss2oTRFCLjTR/Zt8BNaAQ1uAOfPQwAvbfut4j4jij/UXpuqKLQak8i1 iOTbOJHwPRtOQfMBINfj1Nut+x8jCK7knxQRwn/+1l3eT3J9iCdKLHwedSoPXKU2 i4qVNGyp+eHiIakMXV/P1BoosibQfG1fK6ykcU/K3uqtJmQ1NQc= -----END CERTIFICATE-----Generated at Sat Apr 5 19:03:42 2025 by rpki-client