$ rpki-client -vvf repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft File: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft (raw, json) Hash identifier: h41YO68hVbsqWvP8B9L0H1mEMuSa0HyVLyqGkheLK4U= Subject key identifier: 00:E4:ED:C5:92:D1:1E:F5:E3:A8:D5:7D:DC:AE:26:56:F9:DD:93:9E Authority key identifier: 2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 Certificate issuer: /CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Certificate serial: 54ED0C37C440F6728DAEB84EB2F7E1CC195D0470 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft Manifest number: 01A1 Signing time: Thu 03 Apr 2025 10:10:55 +0000 Manifest this update: Thu 03 Apr 2025 10:05:55 +0000 Manifest next update: Sun 06 Apr 2025 21:16:55 +0000 Files and hashes: 1: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl (hash: x01n9moSariFfHolR6nbXiRigS4QAA017oqFepaueoE=) 2: 3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa (hash: 2Vdu2MWYo3OwMz4g8uGZOXFnM8X1Z4ETt9GbdMMRo+8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 21:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:ed:0c:37:c4:40:f6:72:8d:ae:b8:4e:b2:f7:e1:cc:19:5d:04:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Validity Not Before: Apr 3 10:05:55 2025 GMT Not After : Apr 6 21:16:55 2025 GMT Subject: CN=00E4EDC592D11EF5E3A8D57DDCAE2656F9DD939E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:32:5d:50:2b:59:6f:3e:7c:7d:c4:ac:b1:2e: 60:77:6a:7c:c8:f3:a9:39:79:73:7e:f0:a8:4c:7b: 9c:6a:95:9e:bf:1e:a3:e1:4a:6c:48:62:85:bd:63: 88:09:2c:0b:96:b7:50:a0:1c:06:23:a8:da:b1:b9: 4f:67:1a:08:7f:4c:93:73:73:67:72:4f:a7:9d:84: b3:01:c9:78:ca:ae:c3:c0:42:59:40:9a:c3:d1:d4: 1d:23:96:ad:52:c0:6b:b9:41:e4:ca:92:7d:d7:6b: 9d:3a:7a:c7:2e:4a:39:bd:5b:e8:7f:05:ff:8f:94: 9e:a7:53:9f:0e:f3:de:3f:46:99:41:88:80:1d:08: 61:31:2a:27:69:81:b4:2a:76:27:85:b7:2e:59:48: 84:5f:cb:12:c4:25:f8:29:6c:37:ec:5c:46:61:d7: a2:bf:4c:3b:bc:3b:8b:98:60:9f:f7:2d:5c:a1:f5: 42:f2:1c:c3:e4:68:2e:d5:91:c1:0b:60:c4:a2:6c: 05:50:08:00:f1:cc:86:0e:30:d3:55:24:ee:d2:3d: ec:34:21:c1:cb:ad:26:72:53:2a:f3:10:ba:65:f1: 18:36:e4:ac:9b:b8:75:64:8c:ad:09:02:fd:66:1a: 76:d3:c3:31:13:ec:27:87:3b:73:60:a0:07:59:76: fb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E4:ED:C5:92:D1:1E:F5:E3:A8:D5:7D:DC:AE:26:56:F9:DD:93:9E X509v3 Authority Key Identifier: keyid:2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:f4:b4:47:92:46:68:bf:1e:73:9e:4f:24:3a:f2:e8:98:6f: ca:33:84:e1:65:41:8a:89:28:68:f8:f2:96:ca:fb:66:db:a0: fa:d8:79:28:60:5f:5b:3d:7d:d8:e7:82:07:cd:61:97:83:84: c3:a3:ce:6a:9f:6b:66:6f:7a:8d:ea:d2:cd:90:3e:fd:e7:5c: 2d:28:1d:67:49:f1:35:d1:b0:32:c5:d1:7a:50:a9:6e:54:45: 3f:09:db:4b:5c:2c:2c:33:bc:a7:5e:47:ef:06:ea:f3:d3:7a: a6:1a:0d:b5:0a:d8:2c:4c:f0:bd:68:92:89:58:a3:87:5f:90: 01:00:f5:4b:8c:8f:aa:4e:4b:a3:b0:cb:11:a7:db:df:bd:25: 8f:03:72:ea:bc:7c:c7:0f:19:9b:9f:fe:ac:f8:2d:36:2e:f7: a5:60:b7:4c:d2:1f:e4:39:10:db:45:8f:fe:d0:be:3b:8e:b5: 0c:dc:08:f4:ea:43:3b:8c:18:c4:76:80:18:00:67:3a:42:bf: 57:d7:5b:40:4d:41:ef:3e:13:09:6c:db:ac:1a:19:b8:70:b5: a4:a7:53:ba:1f:96:4e:c4:9c:70:89:b7:7f:71:a3:d1:45:a0: 8d:ff:d9:7c:00:dc:13:ec:15:53:b0:68:c8:a1:ff:57:ff:34: 94:16:65:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVO0MN8RA9nKNrrhOsvfhzBldBHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFD NEYxN0MyNjAeFw0yNTA0MDMxMDA1NTVaFw0yNTA0MDYyMTE2NTVaMDMxMTAvBgNV BAMTKDAwRTRFREM1OTJEMTFFRjVFM0E4RDU3RERDQUUyNjU2RjlERDkzOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyMl1QK1lvPnx9xKyxLmB3anzI 86k5eXN+8KhMe5xqlZ6/HqPhSmxIYoW9Y4gJLAuWt1CgHAYjqNqxuU9nGgh/TJNz c2dyT6edhLMByXjKrsPAQllAmsPR1B0jlq1SwGu5QeTKkn3Xa506escuSjm9W+h/ Bf+PlJ6nU58O894/RplBiIAdCGExKidpgbQqdieFty5ZSIRfyxLEJfgpbDfsXEZh 16K/TDu8O4uYYJ/3LVyh9ULyHMPkaC7VkcELYMSibAVQCADxzIYOMNNVJO7SPew0 IcHLrSZyUyrzELpl8Rg25KybuHVkjK0JAv1mGnbTwzET7CeHO3NgoAdZdvslAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAOTtxZLRHvXjqNV93K4mVvndk54wHwYDVR0j BBgwFoAULSPGKe2Vbxc2t9rszSqvMcTxfCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODY4Y2YyMi1kMDI5LTQ1ZTItOWUyMS1kOTg5MmQzYWY3YTYvMC8yRDIzQzYyOUVE OTU2RjE3MzZCN0RBRUNDRDJBQUYzMUM0RjE3QzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFDNEYx N0MyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg2OGNmMjItZDAyOS00NWUyLTll MjEtZDk4OTJkM2FmN2E2LzAvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFG MzFDNEYxN0MyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKT0tEeSRmi/HnOeTyQ68uiYb8ozhOFlQYqJ KGj48pbK+2bboPrYeShgX1s9fdjnggfNYZeDhMOjzmqfa2Zveo3q0s2QPv3nXC0o HWdJ8TXRsDLF0XpQqW5URT8J20tcLCwzvKdeR+8G6vPTeqYaDbUK2CxM8L1okolY o4dfkAEA9UuMj6pOS6OwyxGn29+9JY8Dcuq8fMcPGZuf/qz4LTYu96Vgt0zSH+Q5 ENtFj/7QvjuOtQzcCPTqQzuMGMR2gBgAZzpCv1fXW0BNQe8+Ewls26waGbhwtaSn U7oflk7EnHCJt39xo9FFoI3/2XwA3BPsFVOwaMih/1f/NJQWZbQ= -----END CERTIFICATE-----Generated at Sat Apr 5 17:51:04 2025 by rpki-client