$ rpki-client -vvf repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft File: 2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft (raw, json) Hash identifier: Vdhz3iD3ysj5AN1Yb+tW/ksG8q8r3oTRZdHEeEiHD64= Subject key identifier: DE:08:3D:CA:78:AC:8B:D8:E8:CC:B8:42:67:FC:18:E7:57:70:D9:39 Authority key identifier: 23:37:E6:3A:01:42:98:4F:AF:F0:AD:9D:46:2E:B6:81:0A:C6:A0:36 Certificate issuer: /CN=2337E63A0142984FAFF0AD9D462EB6810AC6A036 Certificate serial: 18F9F1FBD4A2572337E64A949855A0290EB98CD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft Manifest number: 01BF Signing time: Fri 18 Apr 2025 15:11:12 +0000 Manifest this update: Fri 18 Apr 2025 15:06:12 +0000 Manifest next update: Mon 21 Apr 2025 15:54:12 +0000 Files and hashes: 1: 2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl (hash: 3iy9OTRjNwBEbW7p844JMNtlFoVQxLX1MAihjx9wh2E=) 2: 3130332e3138352e3235322e302f32332d3234203d3e20313439363839.roa (hash: KPo4wuLbGzX/6ydQMeGG4vRz99frNxB88+YZBW4aDp8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 15:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:f9:f1:fb:d4:a2:57:23:37:e6:4a:94:98:55:a0:29:0e:b9:8c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2337E63A0142984FAFF0AD9D462EB6810AC6A036 Validity Not Before: Apr 18 15:06:12 2025 GMT Not After : Apr 21 15:54:12 2025 GMT Subject: CN=DE083DCA78AC8BD8E8CCB84267FC18E75770D939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d4:23:f2:7e:e4:36:c4:99:d5:fc:77:37:5e: 97:90:bd:b6:96:7d:6c:a7:f8:a6:1f:15:80:c5:82: ee:6d:2b:31:95:33:49:64:65:58:37:f6:1d:d1:dc: c0:6a:4f:a9:da:d6:d5:40:0f:97:63:21:d0:5b:bc: 92:fb:87:4a:e2:c4:e6:8b:b3:73:5c:5f:9d:f9:f5: 69:6c:74:ba:07:62:41:c3:26:87:9b:3e:e1:eb:ec: f6:5b:00:e5:2e:47:f4:8c:1c:76:94:e7:fa:46:89: 47:d6:f8:4c:21:8e:26:6a:0e:02:f2:15:a8:dd:a8: 5f:56:6e:da:d6:f1:f8:1d:37:7b:54:7f:8d:f8:49: a4:64:ac:be:52:db:e4:9c:91:f3:a8:b7:ea:46:fb: ad:c3:ed:9a:5a:84:6c:ec:7e:b7:08:e3:e8:5d:5f: 06:5a:ee:82:12:32:47:cd:42:e7:cf:2e:4f:d9:81: 06:a2:e0:ae:38:0e:b6:4b:b5:63:37:63:19:a2:e1: 9c:e8:71:9c:da:c7:0a:74:40:81:c9:5d:a1:6c:0d: 9e:51:04:3f:a5:61:27:95:e1:50:ba:b9:0d:c5:47: 0b:73:7a:c3:5d:2e:c8:87:f5:1d:4c:db:31:65:64: df:65:46:75:5f:86:83:1e:95:51:2c:39:41:42:96: 7b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:08:3D:CA:78:AC:8B:D8:E8:CC:B8:42:67:FC:18:E7:57:70:D9:39 X509v3 Authority Key Identifier: keyid:23:37:E6:3A:01:42:98:4F:AF:F0:AD:9D:46:2E:B6:81:0A:C6:A0:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:51:9b:43:0a:d8:d4:b0:0b:f1:a6:77:07:f1:12:d3:03:61: f3:9d:7c:f1:7a:aa:b3:eb:78:1b:f5:54:5b:a3:49:5c:3d:38: d0:84:76:4d:57:22:95:a1:53:82:a2:d9:dc:c1:16:a9:76:39: 6c:d7:4e:7c:92:9d:28:a5:d9:37:60:3e:a0:2a:5a:30:47:38: 37:ae:1a:ff:62:af:3b:32:9d:d6:1c:26:9a:d4:6a:b4:f0:41: 52:41:be:90:0d:b2:8c:65:36:8f:7f:6b:81:7d:09:1f:57:30: a9:b7:30:37:af:4c:50:0b:0f:00:98:47:3a:57:d6:21:c2:42: ef:91:e5:88:c8:f5:f1:57:93:e9:f6:5d:fa:ad:d8:35:51:a9: d6:fc:12:c0:cb:2a:00:e8:7f:ae:82:64:01:66:cb:d9:9f:01: ff:62:c9:ae:0f:46:b7:c2:14:fe:27:d8:3c:88:3b:c4:ba:ad: d6:2d:e8:2f:f8:55:df:10:26:8d:9a:3a:62:a9:d4:e1:2a:ef: 5d:e2:87:ba:db:f5:7e:55:52:85:82:e4:6d:2f:95:36:d9:d7: 41:04:a5:0e:55:19:fc:44:e4:4b:10:2a:ea:7f:1c:f5:1b:f6: 99:d5:c3:96:86:03:6f:b9:27:8e:40:5b:2a:a2:30:a8:77:43: db:24:5c:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGPnx+9SiVyM35kqUmFWgKQ65jNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2ODEw QUM2QTAzNjAeFw0yNTA0MTgxNTA2MTJaFw0yNTA0MjExNTU0MTJaMDMxMTAvBgNV BAMTKERFMDgzRENBNzhBQzhCRDhFOENDQjg0MjY3RkMxOEU3NTc3MEQ5MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR1CPyfuQ2xJnV/Hc3XpeQvbaW fWyn+KYfFYDFgu5tKzGVM0lkZVg39h3R3MBqT6na1tVAD5djIdBbvJL7h0rixOaL s3NcX5359WlsdLoHYkHDJoebPuHr7PZbAOUuR/SMHHaU5/pGiUfW+EwhjiZqDgLy FajdqF9WbtrW8fgdN3tUf434SaRkrL5S2+SckfOot+pG+63D7ZpahGzsfrcI4+hd XwZa7oISMkfNQufPLk/ZgQai4K44DrZLtWM3Yxmi4ZzocZzaxwp0QIHJXaFsDZ5R BD+lYSeV4VC6uQ3FRwtzesNdLsiH9R1M2zFlZN9lRnVfhoMelVEsOUFClnuPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3gg9ynisi9jozLhCZ/wY51dw2TkwHwYDVR0j BBgwFoAUIzfmOgFCmE+v8K2dRi62gQrGoDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTIzZDA2MC1iN2E1LTQ0NTUtOTk0MC00ZmI3YzcwNDQzMGYvMC8yMzM3RTYzQTAx NDI5ODRGQUZGMEFEOUQ0NjJFQjY4MTBBQzZBMDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2ODEwQUM2 QTAzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUyM2QwNjAtYjdhNS00NDU1LTk5 NDAtNGZiN2M3MDQ0MzBmLzAvMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2 ODEwQUM2QTAzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9Rm0MK2NSwC/GmdwfxEtMDYfOdfPF6qrPr eBv1VFujSVw9ONCEdk1XIpWhU4Ki2dzBFql2OWzXTnySnSil2TdgPqAqWjBHODeu Gv9irzsyndYcJprUarTwQVJBvpANsoxlNo9/a4F9CR9XMKm3MDevTFALDwCYRzpX 1iHCQu+R5YjI9fFXk+n2Xfqt2DVRqdb8EsDLKgDof66CZAFmy9mfAf9iya4PRrfC FP4n2DyIO8S6rdYt6C/4Vd8QJo2aOmKp1OEq713ih7rb9X5VUoWC5G0vlTbZ10EE pQ5VGfxE5EsQKup/HPUb9pnVw5aGA2+5J45AWyqiMKh3Q9skXGs= -----END CERTIFICATE-----Generated at Sun Apr 20 00:48:18 2025 by rpki-client