$ rpki-client -vvf repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft File: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft (raw, json) Hash identifier: 9u0oNLrvaSkjzFde4WeiMDn7i6EgIALmBtPnbRCWU0o= Subject key identifier: 76:C2:9A:4C:D1:7F:8A:6C:02:2E:65:1F:BC:46:18:B1:26:5A:57:9B Authority key identifier: 2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0 Certificate issuer: /CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0 Certificate serial: 111C378F5E210668188A7E05FFA3EAEB00846203 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft Manifest number: 01D7 Signing time: Sat 05 Apr 2025 23:41:14 +0000 Manifest this update: Sat 05 Apr 2025 23:36:14 +0000 Manifest next update: Wed 09 Apr 2025 09:51:14 +0000 Files and hashes: 1: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl (hash: 5IP7NnvwATgVtR5oCGKozCVjSBB4kBtxr8PIQxHSkVs=) 2: 3130332e39312e33322e302f32322d3234203d3e203338343936.roa (hash: lG93mDy8mZJ1KYLzkUSHtFdOp3jxkVuITP5q7tld/tA=) 3: 3132332e3235332e3235322e302f32322d3234203d3e20313339333937.roa (hash: 1PlLZ70/l1XO167EbfOMkFAS5NVNN52M28JEV2n5Nfw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 09:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:1c:37:8f:5e:21:06:68:18:8a:7e:05:ff:a3:ea:eb:00:84:62:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0 Validity Not Before: Apr 5 23:36:14 2025 GMT Not After : Apr 9 09:51:14 2025 GMT Subject: CN=76C29A4CD17F8A6C022E651FBC4618B1265A579B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d2:cd:dc:2c:51:b3:17:40:df:f0:48:cc:a0: 3c:d4:ae:fa:ad:25:24:83:75:7a:c3:1d:a7:2e:72: 88:4a:35:4d:8e:7a:ae:11:3a:83:2b:79:dd:2b:4d: 84:92:73:75:bf:c5:bf:b9:5e:18:03:41:1f:10:eb: cb:7c:28:69:4f:e9:4d:d8:92:dd:2f:80:32:21:1a: ef:d0:c0:53:3c:db:8b:31:55:70:5a:c7:c1:6f:90: 7c:b4:67:16:38:30:e1:5e:f9:38:79:92:27:f8:ad: 4d:e6:df:e4:a4:2d:6c:80:95:68:46:b5:52:f6:76: 01:1d:d7:4c:85:c6:61:8c:f3:6e:b3:cc:c2:92:80: 4f:f7:82:67:9b:24:90:b1:59:f2:f1:2a:88:f4:8c: ca:26:35:1c:f6:0a:65:b4:aa:9c:24:99:f8:48:be: fc:3e:60:83:18:e8:e9:af:b5:30:0a:0d:42:29:1f: 52:81:d3:61:69:7f:47:3d:c1:14:9a:bb:32:9e:30: 0c:04:5d:6b:7b:34:84:b0:9b:41:01:52:8b:48:a2: 7b:a4:1f:0f:f2:85:c1:ba:32:bd:47:6b:4c:9b:2f: 4e:a2:95:66:b9:ac:b3:07:52:e7:ab:b9:c7:72:ef: a4:04:94:79:cb:9e:09:d5:3e:b9:36:b2:84:80:e4: 12:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C2:9A:4C:D1:7F:8A:6C:02:2E:65:1F:BC:46:18:B1:26:5A:57:9B X509v3 Authority Key Identifier: keyid:2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:18:06:c3:59:f6:ca:d5:69:20:c8:89:68:7d:39:c5:7d:91: f8:8c:ef:05:e5:fb:9c:3a:58:18:3c:e4:98:ed:2a:e1:8b:c7: d8:e4:b6:9c:1b:a1:25:c8:71:4b:29:ad:09:70:95:58:b1:d1: d4:04:75:61:81:bb:6d:f6:04:58:76:ec:0f:93:06:85:a9:30: 72:90:2e:25:a9:9d:f6:9f:2e:65:e7:5a:56:8a:fb:dc:4d:32: e8:67:3c:29:b1:2a:f9:a5:3a:fe:c4:00:8a:35:b3:f3:49:a3: 08:a1:6d:31:84:0f:33:cf:6c:0e:06:8a:4d:a6:f7:43:1e:8d: 46:40:c7:ab:b0:bc:34:13:58:18:ff:95:09:8a:c7:b6:c5:9f: 53:90:55:a5:d0:66:8f:75:df:41:38:b9:f4:f2:37:c6:74:78: b6:1a:79:c2:3a:ea:bc:79:e1:00:63:cf:83:a9:05:25:e5:c7: d3:30:fc:83:d5:b5:86:6b:9b:e3:03:0c:14:e9:87:8a:a2:be: 5a:83:20:45:69:78:30:38:7c:74:6b:ff:29:9d:ff:ab:dc:4f: 87:c6:d8:be:d7:1f:a7:c2:88:a6:61:62:3b:f0:50:bd:42:82: 6d:50:d8:33:d3:45:c1:68:67:67:62:60:8e:25:ec:8a:de:be: 81:6a:87:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUERw3j14hBmgYin4F/6Pq6wCEYgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYzRjVE QUJENDVGMDAeFw0yNTA0MDUyMzM2MTRaFw0yNTA0MDkwOTUxMTRaMDMxMTAvBgNV BAMTKDc2QzI5QTRDRDE3RjhBNkMwMjJFNjUxRkJDNDYxOEIxMjY1QTU3OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS0s3cLFGzF0Df8EjMoDzUrvqt JSSDdXrDHacucohKNU2Oeq4ROoMred0rTYSSc3W/xb+5XhgDQR8Q68t8KGlP6U3Y kt0vgDIhGu/QwFM824sxVXBax8FvkHy0ZxY4MOFe+Th5kif4rU3m3+SkLWyAlWhG tVL2dgEd10yFxmGM826zzMKSgE/3gmebJJCxWfLxKoj0jMomNRz2CmW0qpwkmfhI vvw+YIMY6OmvtTAKDUIpH1KB02Fpf0c9wRSauzKeMAwEXWt7NISwm0EBUotIonuk Hw/yhcG6Mr1Ha0ybL06ilWa5rLMHUuerucdy76QElHnLngnVPrk2soSA5BIjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdsKaTNF/imwCLmUfvEYYsSZaV5swHwYDVR0j BBgwFoAULoOxeT+i4YpBN6ZqCSFj9dq9RfAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWVjYjAwMi0yNGE0LTQ5NTUtYTMzMy0wMDJmZGI3NDU1M2YvMC8yRTgzQjE3OTNG QTJFMThBNDEzN0E2NkEwOTIxNjNGNURBQkQ0NUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYzRjVEQUJE NDVGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FlY2IwMDItMjRhNC00OTU1LWEz MzMtMDAyZmRiNzQ1NTNmLzAvMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYz RjVEQUJENDVGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwYBsNZ9srVaSDIiWh9OcV9kfiM7wXl+5w6 WBg85JjtKuGLx9jktpwboSXIcUsprQlwlVix0dQEdWGBu232BFh27A+TBoWpMHKQ LiWpnfafLmXnWlaK+9xNMuhnPCmxKvmlOv7EAIo1s/NJowihbTGEDzPPbA4Gik2m 90MejUZAx6uwvDQTWBj/lQmKx7bFn1OQVaXQZo9130E4ufTyN8Z0eLYaecI66rx5 4QBjz4OpBSXlx9Mw/IPVtYZrm+MDDBTph4qivlqDIEVpeDA4fHRr/ymd/6vcT4fG 2L7XH6fCiKZhYjvwUL1Cgm1Q2DPTRcFoZ2diYI4l7IrevoFqhzU= -----END CERTIFICATE-----Generated at Sun Apr 6 12:47:58 2025 by rpki-client