$ rpki-client -vvf repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft File: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft (raw, json) Hash identifier: Dc6ukmGrr2s1xDaR17JQzfnUN3W2Zfb1E7xlJosBtGY= Subject key identifier: 9A:BF:E0:C5:05:FE:A7:53:AB:CB:04:E4:24:E7:BB:E7:B9:E0:BC:2E Authority key identifier: CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 Certificate issuer: /CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Certificate serial: 3990E9F6D4EF6321C9FED6FA8771973016307D3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft Manifest number: 8F Signing time: Sun 06 Apr 2025 14:20:52 +0000 Manifest this update: Sun 06 Apr 2025 14:15:52 +0000 Manifest next update: Wed 09 Apr 2025 15:20:52 +0000 Files and hashes: 1: 3135372e31302e3232322e302f32332d3234203d3e20313431383938.roa (hash: ovjV3a2j1iQ8rLesRKk+cSW1tBSJlk1/Dzy2fJZMGZY=) 2: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl (hash: u5D4e/Z/18p7ySh8bNTgvVQ+l7yc/EAlk2fsIIwtGj4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 15:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:90:e9:f6:d4:ef:63:21:c9:fe:d6:fa:87:71:97:30:16:30:7d:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Validity Not Before: Apr 6 14:15:52 2025 GMT Not After : Apr 9 15:20:52 2025 GMT Subject: CN=9ABFE0C505FEA753ABCB04E424E7BBE7B9E0BC2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e2:a3:35:c1:20:6a:af:40:65:bb:c5:47:ef: e3:fe:f3:08:dc:bd:5b:2f:ab:b4:58:1f:79:8c:ed: 88:72:ed:59:ed:2e:f5:99:d5:5b:0b:c6:6c:b9:5d: 2f:a1:f4:25:50:93:75:41:a8:3f:ef:68:e5:68:f8: 5a:dc:33:91:81:00:dd:44:05:4a:95:6b:18:35:c9: 49:1c:a2:b4:aa:29:8b:1a:16:11:91:86:bb:dd:f7: db:09:35:1c:0a:59:d4:f8:ac:13:84:81:5e:2b:ac: eb:d1:52:49:d2:74:3d:6b:01:f1:c9:f0:ab:b1:39: 37:51:14:8a:a2:fa:cd:4b:e6:cc:57:c1:5d:b6:b2: e4:40:99:73:56:e9:8c:26:e4:a2:a7:f5:84:d9:51: 00:39:d6:6f:76:7a:89:3a:0f:d8:99:a3:46:19:ca: ca:93:8d:4f:20:fe:3a:27:f0:01:3e:bb:a9:11:f3: 3e:20:9e:98:89:47:3c:f9:01:42:6e:8c:9c:91:77: 78:7d:59:a6:8d:0a:fd:0f:ff:de:cc:d6:15:c2:0f: 9e:f9:25:0e:37:61:1a:39:68:1f:62:dd:af:cd:65: 61:25:76:45:82:e2:92:c1:89:85:ec:1c:1d:15:a8: 4e:33:5a:0e:46:22:97:df:49:99:a6:93:a6:5a:59: 91:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BF:E0:C5:05:FE:A7:53:AB:CB:04:E4:24:E7:BB:E7:B9:E0:BC:2E X509v3 Authority Key Identifier: keyid:CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:67:ab:01:90:31:87:3e:6a:c5:6e:2f:e2:61:c7:46:9f:22: ff:01:c6:a5:3f:ab:28:61:be:03:77:bc:6f:ff:aa:ca:f1:5f: 1f:3b:c6:11:53:19:eb:95:56:a2:e9:0d:c3:74:2d:61:a1:a8: 8c:2e:26:9f:30:7b:fd:72:ce:93:0c:b2:19:bd:d3:f7:71:65: 5e:fe:44:eb:e7:83:96:3c:2e:a3:25:a1:ca:ae:a5:ad:00:66: 52:2d:51:54:fd:43:4c:e9:d8:d5:f8:9c:07:b5:d7:b9:11:0c: 47:f0:c3:86:b9:32:a1:8f:ed:5e:bf:d2:40:e3:4d:39:0c:f1: 6b:d4:3b:a0:73:1a:45:1c:ec:d7:15:58:bf:f8:74:6e:f7:30: 33:05:31:ed:4c:fb:a5:4d:33:40:51:b9:f1:1c:16:0d:3b:5f: 92:3d:24:b4:9e:7d:20:c0:d3:6d:e9:e4:93:ac:e0:17:2d:a1: e8:d1:0a:eb:e5:64:46:2d:58:a2:c6:d4:a7:8f:23:3e:bc:9f: f6:d4:ad:5b:ed:df:37:d5:40:1c:79:ac:05:8b:cc:97:44:c9: 38:66:f9:95:3a:8d:9f:01:4d:fc:a7:0e:37:aa:c5:f4:a1:7c: 36:2d:eb:70:34:49:af:e2:39:4e:87:1c:dc:f2:13:80:c6:be: c2:3c:57:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOZDp9tTvYyHJ/tb6h3GXMBYwfT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJC NDQ0NDE0MDAeFw0yNTA0MDYxNDE1NTJaFw0yNTA0MDkxNTIwNTJaMDMxMTAvBgNV BAMTKDlBQkZFMEM1MDVGRUE3NTNBQkNCMDRFNDI0RTdCQkU3QjlFMEJDMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE4qM1wSBqr0Blu8VH7+P+8wjc vVsvq7RYH3mM7Yhy7VntLvWZ1VsLxmy5XS+h9CVQk3VBqD/vaOVo+FrcM5GBAN1E BUqVaxg1yUkcorSqKYsaFhGRhrvd99sJNRwKWdT4rBOEgV4rrOvRUknSdD1rAfHJ 8KuxOTdRFIqi+s1L5sxXwV22suRAmXNW6Ywm5KKn9YTZUQA51m92eok6D9iZo0YZ ysqTjU8g/jon8AE+u6kR8z4gnpiJRzz5AUJujJyRd3h9WaaNCv0P/97M1hXCD575 JQ43YRo5aB9i3a/NZWEldkWC4pLBiYXsHB0VqE4zWg5GIpffSZmmk6ZaWZH5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmr/gxQX+p1OrywTkJOe757ngvC4wHwYDVR0j BBgwFoAUzrT5rjR2YwqvIvTNQs5ga7REQUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTM3NmE2ZS0zZWNhLTRmNzMtOGQxNS1kMWRkZWU5MWZmOTgvMC9DRUI0RjlBRTM0 NzY2MzBBQUYyMkY0Q0Q0MkNFNjA2QkI0NDQ0MTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJCNDQ0 NDE0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2EzNzZhNmUtM2VjYS00ZjczLThk MTUtZDFkZGVlOTFmZjk4LzAvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYw NkJCNDQ0NDE0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJFnqwGQMYc+asVuL+Jhx0afIv8BxqU/qyhh vgN3vG//qsrxXx87xhFTGeuVVqLpDcN0LWGhqIwuJp8we/1yzpMMshm90/dxZV7+ ROvng5Y8LqMlocqupa0AZlItUVT9Q0zp2NX4nAe117kRDEfww4a5MqGP7V6/0kDj TTkM8WvUO6BzGkUc7NcVWL/4dG73MDMFMe1M+6VNM0BRufEcFg07X5I9JLSefSDA 023p5JOs4BctoejRCuvlZEYtWKLG1KePIz68n/bUrVvt3zfVQBx5rAWLzJdEyThm +ZU6jZ8BTfynDjeqxfShfDYt63A0Sa/iOU6HHNzyE4DGvsI8V7I= -----END CERTIFICATE-----Generated at Mon Apr 7 03:51:13 2025 by rpki-client