$ rpki-client -vvf repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft File: CD93E5B741D83CA78E83C5AD92156B086BC05233.mft (raw, json) Hash identifier: FaIire3kd7wMIxa4McCPEoPzrf/NqrKl1jtt4dt2n+0= Subject key identifier: A6:00:EB:A7:48:1A:17:6E:4B:D5:63:D7:7C:8D:04:6F:3D:67:D8:10 Authority key identifier: CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33 Certificate issuer: /CN=CD93E5B741D83CA78E83C5AD92156B086BC05233 Certificate serial: 3E0918507E5052F9FC0687CAE5466D1D9945E9DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft Manifest number: 0275 Signing time: Mon 02 Jun 2025 09:32:11 +0000 Manifest this update: Mon 02 Jun 2025 09:27:11 +0000 Manifest next update: Thu 05 Jun 2025 20:14:11 +0000 Files and hashes: 1: CD93E5B741D83CA78E83C5AD92156B086BC05233.crl (hash: RsnKY+Umjco/fIYtGQwau8kGq2T8h3PxSn+hxioOP9M=) 2: 3130332e3135382e3139362e302f32342d3234203d3e20313431313333.roa (hash: iJSB4Tl2dCbFuiTRh7IWs9g86a1v/pjGccwQNvmJqM4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 20:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:09:18:50:7e:50:52:f9:fc:06:87:ca:e5:46:6d:1d:99:45:e9:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD93E5B741D83CA78E83C5AD92156B086BC05233 Validity Not Before: Jun 2 09:27:11 2025 GMT Not After : Jun 5 20:14:11 2025 GMT Subject: CN=A600EBA7481A176E4BD563D77C8D046F3D67D810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c5:c7:b9:3e:79:82:16:29:27:16:ab:61:1f: d2:d2:07:7f:1d:12:64:00:5e:96:59:77:c9:a5:cc: 23:9c:49:94:47:0e:43:d4:b8:50:96:9b:18:51:b6: af:28:ab:3a:96:c0:be:cd:69:31:b4:de:7a:7d:47: 33:94:35:d2:33:52:5b:b3:8d:c6:cc:b6:92:b8:b5: 6f:17:93:ea:61:d4:b0:05:c4:19:29:e2:f0:74:ce: 52:12:1a:08:55:f4:d0:54:de:8f:fb:28:ef:45:32: e7:02:98:17:90:f6:29:f3:e2:22:cd:e9:1d:fe:b1: 0a:93:f9:98:ee:d0:6d:d9:79:86:1f:75:6c:1e:77: c1:e5:20:95:c4:26:75:d1:c1:bb:90:c4:00:ed:08: 90:6d:99:a1:bf:de:92:a7:02:b9:b9:60:2a:62:e0: a3:bc:a6:9f:32:6d:be:eb:9f:0f:2f:3e:cb:20:22: af:56:60:86:fa:48:51:a3:5d:7a:f5:99:e1:50:1b: bb:da:86:a5:71:4d:af:57:c9:53:1a:2c:d1:b5:11: f5:d5:21:49:cd:c8:59:71:22:a4:19:68:14:00:e5: 63:b4:8b:0c:b6:cd:ad:3b:62:b9:f3:61:48:98:82: bf:71:4a:0d:43:dd:ce:92:f0:c4:86:98:d9:06:6a: 57:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:00:EB:A7:48:1A:17:6E:4B:D5:63:D7:7C:8D:04:6F:3D:67:D8:10 X509v3 Authority Key Identifier: keyid:CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:14:77:81:09:59:e5:da:df:d6:fe:3f:89:bb:3f:e7:83:79: 7c:d4:c5:32:1b:4f:1e:50:b5:bd:0e:0b:d7:fe:5c:d1:f8:b9: cd:74:98:75:b8:20:a6:56:e6:55:ef:eb:d1:81:2c:69:5e:08: b0:db:dc:b8:3f:48:27:96:df:1f:28:89:8f:46:e3:c6:dc:8a: b3:7f:c4:41:b0:06:10:78:88:b6:06:a4:13:e3:87:47:c4:1d: 95:39:53:2c:70:fe:31:4c:ae:c7:87:e0:e4:ce:8e:8f:53:f6: 91:7b:96:35:25:74:48:f5:de:ed:fa:2e:f4:83:e2:fa:ef:f3: 60:4e:e5:d4:a3:fe:2f:4f:42:7b:d8:13:b0:92:d0:1d:6c:79: 3f:27:ba:bb:d7:fc:a4:24:6d:11:4d:bf:e0:80:20:30:de:17: f5:eb:a8:27:e5:8a:54:90:be:cd:d8:6b:94:df:63:94:44:5e: 4e:12:03:47:9c:d7:93:aa:c8:17:03:76:55:48:f5:42:1c:18: 8e:4e:71:94:ec:58:f8:89:cc:9d:ba:21:d8:57:59:93:aa:81: 93:67:ec:60:7f:8a:89:44:65:de:4e:75:50:cb:0f:e8:38:cc: 05:34:7d:dd:9f:d1:f7:fa:1f:e3:24:8d:c1:a6:66:ad:f9:5d: 01:81:85:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPgkYUH5QUvn8BofK5UZtHZlF6d4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZCMDg2 QkMwNTIzMzAeFw0yNTA2MDIwOTI3MTFaFw0yNTA2MDUyMDE0MTFaMDMxMTAvBgNV BAMTKEE2MDBFQkE3NDgxQTE3NkU0QkQ1NjNENzdDOEQwNDZGM0Q2N0Q4MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8xce5PnmCFiknFqthH9LSB38d EmQAXpZZd8mlzCOcSZRHDkPUuFCWmxhRtq8oqzqWwL7NaTG03np9RzOUNdIzUluz jcbMtpK4tW8Xk+ph1LAFxBkp4vB0zlISGghV9NBU3o/7KO9FMucCmBeQ9inz4iLN 6R3+sQqT+Zju0G3ZeYYfdWwed8HlIJXEJnXRwbuQxADtCJBtmaG/3pKnArm5YCpi 4KO8pp8ybb7rnw8vPssgIq9WYIb6SFGjXXr1meFQG7vahqVxTa9XyVMaLNG1EfXV IUnNyFlxIqQZaBQA5WO0iwy2za07YrnzYUiYgr9xSg1D3c6S8MSGmNkGalfpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpgDrp0gaF25L1WPXfI0Ebz1n2BAwHwYDVR0j BBgwFoAUzZPlt0HYPKeOg8WtkhVrCGvAUjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmRkY2I0Yi02ZDhlLTQ1OWItOGFhMi05OWE2MDg4NjI1NmEvMC9DRDkzRTVCNzQx RDgzQ0E3OEU4M0M1QUQ5MjE1NkIwODZCQzA1MjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZCMDg2QkMw NTIzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZkZGNiNGItNmQ4ZS00NTliLThh YTItOTlhNjA4ODYyNTZhLzAvQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZC MDg2QkMwNTIzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAoUd4EJWeXa39b+P4m7P+eDeXzUxTIbTx5Q tb0OC9f+XNH4uc10mHW4IKZW5lXv69GBLGleCLDb3Lg/SCeW3x8oiY9G48bcirN/ xEGwBhB4iLYGpBPjh0fEHZU5Uyxw/jFMrseH4OTOjo9T9pF7ljUldEj13u36LvSD 4vrv82BO5dSj/i9PQnvYE7CS0B1seT8nurvX/KQkbRFNv+CAIDDeF/XrqCflilSQ vs3Ya5TfY5REXk4SA0ec15OqyBcDdlVI9UIcGI5OcZTsWPiJzJ26IdhXWZOqgZNn 7GB/iolEZd5OdVDLD+g4zAU0fd2f0ff6H+MkjcGmZq35XQGBhdQ= -----END CERTIFICATE-----Generated at Tue Jun 3 23:28:54 2025 by rpki-client