$ rpki-client -vvf repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft File: CD93E5B741D83CA78E83C5AD92156B086BC05233.mft (raw, json) Hash identifier: Gg5o2oABBS9AfGYPcYSVqiHW+EX0zG/EDnV52iowLzQ= Subject key identifier: AF:C7:62:08:5E:CC:16:FC:62:C2:ED:86:22:5F:44:CF:29:C6:F6:01 Authority key identifier: CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33 Certificate issuer: /CN=CD93E5B741D83CA78E83C5AD92156B086BC05233 Certificate serial: 36B3441E4EB0E86FD464C33E732078336F08F1BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft Manifest number: 025B Signing time: Sat 05 Apr 2025 00:42:08 +0000 Manifest this update: Sat 05 Apr 2025 00:37:08 +0000 Manifest next update: Tue 08 Apr 2025 04:31:08 +0000 Files and hashes: 1: CD93E5B741D83CA78E83C5AD92156B086BC05233.crl (hash: hEaZOQkNrKfhT3pxGvNshmDp5/gtT1l6S5LNHcdi8yE=) 2: 3130332e3135382e3139362e302f32342d3234203d3e20313431313333.roa (hash: iJSB4Tl2dCbFuiTRh7IWs9g86a1v/pjGccwQNvmJqM4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:b3:44:1e:4e:b0:e8:6f:d4:64:c3:3e:73:20:78:33:6f:08:f1:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD93E5B741D83CA78E83C5AD92156B086BC05233 Validity Not Before: Apr 5 00:37:08 2025 GMT Not After : Apr 8 04:31:08 2025 GMT Subject: CN=AFC762085ECC16FC62C2ED86225F44CF29C6F601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1a:af:0b:3f:40:e8:92:37:17:10:7a:3b:c5: c3:71:8b:55:1e:7b:99:62:18:e5:0f:b0:a7:aa:8f: 00:15:34:be:fb:bd:a9:a8:34:2a:ef:3e:4a:d3:4d: 79:f8:2b:6a:6c:48:8d:b1:1f:fd:2f:f4:05:67:ca: 2d:87:98:f6:e1:c4:28:9c:26:c7:7b:10:da:23:18: 8a:1b:86:8a:d5:47:99:e3:2b:fb:1f:98:f2:2a:ec: 75:da:d7:6f:a5:28:6b:3b:3e:71:3e:24:c6:23:d9: b9:06:89:00:03:d3:56:a9:3a:a4:bd:9b:ae:33:f7: 67:1b:3c:7c:00:5c:cb:6d:29:b2:4b:1a:ec:32:80: dd:a0:55:a7:c0:ba:3b:69:1d:36:11:56:46:dc:41: 69:8f:cc:1a:db:87:f0:b3:2a:0b:b1:3e:00:80:fb: 9e:8f:d6:a1:6a:b8:cf:12:62:7c:3d:b2:45:87:ff: ba:7b:dc:ae:97:55:36:22:82:8b:06:6e:1f:0a:06: 49:d8:a6:a1:9e:e3:58:21:bc:74:6c:d6:32:d5:7f: b9:0d:ef:3a:af:8d:7b:60:81:b6:27:99:8f:69:c5: 17:70:65:30:a2:f3:ca:11:47:92:3b:96:eb:e5:77: 6d:9f:91:d3:4d:65:9c:5b:f9:d4:0c:80:04:97:2c: 1c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C7:62:08:5E:CC:16:FC:62:C2:ED:86:22:5F:44:CF:29:C6:F6:01 X509v3 Authority Key Identifier: keyid:CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:08:0b:c8:ec:c3:70:73:ab:d1:e4:51:22:73:3e:27:31:81: fc:fa:47:d3:fd:47:eb:93:ef:38:da:f2:f1:d4:3e:2a:ba:39: 58:94:94:cf:4e:26:97:7c:ec:aa:42:c1:ce:9a:fb:59:ad:65: 6a:e1:b5:19:fe:d5:93:d4:ab:5d:d7:15:5b:3d:82:f4:f8:65: 91:d8:19:0b:7c:92:c6:80:d6:51:b0:96:41:aa:8f:5c:bd:64: 12:a0:06:22:0b:a1:3c:45:eb:8c:c2:57:27:ec:e0:62:23:2e: 97:15:da:ae:21:1e:dc:86:7d:e3:d8:46:b6:8b:2a:41:9c:50: 90:02:d8:66:35:36:a4:6a:7e:bf:ce:cc:46:8c:02:bf:10:7a: 04:20:c3:f6:dd:9c:3e:f3:a5:33:cf:bd:27:f4:88:e4:fc:cc: 0c:f4:46:48:cd:b3:22:aa:30:98:6b:d6:47:fd:67:3a:be:8e: 85:47:f1:f8:7c:e1:e0:fb:98:5a:13:6f:39:33:16:81:99:a6: 99:a8:75:78:50:a6:2f:0b:ad:6a:fc:76:3b:26:67:ae:93:e3: 1a:64:f0:64:fd:4e:51:0c:cb:9c:4b:f8:c7:4f:20:bc:b0:82: cd:5c:1b:f4:ea:13:72:0f:c7:1d:de:76:c0:c0:52:ed:49:ad: 03:08:ef:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNrNEHk6w6G/UZMM+cyB4M28I8b8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZCMDg2 QkMwNTIzMzAeFw0yNTA0MDUwMDM3MDhaFw0yNTA0MDgwNDMxMDhaMDMxMTAvBgNV BAMTKEFGQzc2MjA4NUVDQzE2RkM2MkMyRUQ4NjIyNUY0NENGMjlDNkY2MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYGq8LP0DokjcXEHo7xcNxi1Ue e5liGOUPsKeqjwAVNL77vamoNCrvPkrTTXn4K2psSI2xH/0v9AVnyi2HmPbhxCic Jsd7ENojGIobhorVR5njK/sfmPIq7HXa12+lKGs7PnE+JMYj2bkGiQAD01apOqS9 m64z92cbPHwAXMttKbJLGuwygN2gVafAujtpHTYRVkbcQWmPzBrbh/CzKguxPgCA +56P1qFquM8SYnw9skWH/7p73K6XVTYigosGbh8KBknYpqGe41ghvHRs1jLVf7kN 7zqvjXtggbYnmY9pxRdwZTCi88oRR5I7luvld22fkdNNZZxb+dQMgASXLByTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr8diCF7MFvxiwu2GIl9EzynG9gEwHwYDVR0j BBgwFoAUzZPlt0HYPKeOg8WtkhVrCGvAUjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmRkY2I0Yi02ZDhlLTQ1OWItOGFhMi05OWE2MDg4NjI1NmEvMC9DRDkzRTVCNzQx RDgzQ0E3OEU4M0M1QUQ5MjE1NkIwODZCQzA1MjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZCMDg2QkMw NTIzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZkZGNiNGItNmQ4ZS00NTliLThh YTItOTlhNjA4ODYyNTZhLzAvQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZC MDg2QkMwNTIzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYIC8jsw3Bzq9HkUSJzPicxgfz6R9P9R+uT 7zja8vHUPiq6OViUlM9OJpd87KpCwc6a+1mtZWrhtRn+1ZPUq13XFVs9gvT4ZZHY GQt8ksaA1lGwlkGqj1y9ZBKgBiILoTxF64zCVyfs4GIjLpcV2q4hHtyGfePYRraL KkGcUJAC2GY1NqRqfr/OzEaMAr8QegQgw/bdnD7zpTPPvSf0iOT8zAz0RkjNsyKq MJhr1kf9Zzq+joVH8fh84eD7mFoTbzkzFoGZppmodXhQpi8LrWr8djsmZ66T4xpk 8GT9TlEMy5xL+MdPILywgs1cG/TqE3IPxx3edsDAUu1JrQMI78c= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:28 2025 by rpki-client