$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft File: C0CDF72A73FE200131853E0EE6A9B33708242F09.mft (raw, json) Hash identifier: 4dL8KD1JNKEvgasz2ycoRRXNfG5Vz1Ek8O7iN57eHMI= Subject key identifier: 73:85:CD:1B:81:6F:BB:CC:2E:7B:26:8B:75:82:1E:B3:D4:E6:1E:1D Authority key identifier: C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 Certificate issuer: /CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Certificate serial: 04A6F31105C8C7DFD28F0F758389BD35F4F7161E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft Manifest number: 1F Signing time: Fri 04 Apr 2025 04:41:11 +0000 Manifest this update: Fri 04 Apr 2025 04:36:11 +0000 Manifest next update: Mon 07 Apr 2025 14:45:11 +0000 Files and hashes: 1: 3130332e39302e36332e302f32342d3234203d3e203633353038.roa (hash: MULEUEHSyZpY9qn3SDe7sQnJLs4h5Mi7a94B5iOdQb8=) 2: 3130332e39302e36322e302f32342d3234203d3e203633353038.roa (hash: MeO0TR42bgLm6thq+jwgdjWKMy27/0uvvv2g1npnqFo=) 3: C0CDF72A73FE200131853E0EE6A9B33708242F09.crl (hash: LdIXADI0q2M081TGUe49zbipuj6EWYhTdD/822Octio=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 14:45:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a6:f3:11:05:c8:c7:df:d2:8f:0f:75:83:89:bd:35:f4:f7:16:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Validity Not Before: Apr 4 04:36:11 2025 GMT Not After : Apr 7 14:45:11 2025 GMT Subject: CN=7385CD1B816FBBCC2E7B268B75821EB3D4E61E1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0c:2c:61:a6:b0:0f:9c:bc:28:97:60:1b:7e: f3:21:a4:b4:47:41:9d:43:8a:95:b1:9f:68:b8:4b: b8:12:20:3d:39:9e:f8:89:75:fd:76:c4:ab:55:28: ef:64:c7:ac:87:65:47:0b:b6:a3:d2:9a:79:da:43: 3d:ca:89:db:41:e8:ba:e0:af:37:e9:73:6b:02:2f: f0:ef:ca:78:4e:d0:0e:6d:ee:db:55:b2:9a:f2:dd: 5e:12:eb:87:5f:7a:68:c8:72:49:30:3e:0c:ca:f9: cd:dc:bd:78:fa:6b:a2:e0:2d:2e:70:bf:68:1b:cf: e1:e6:dd:1a:f4:a7:bc:57:cd:39:83:17:ed:a7:fb: ae:55:85:08:e1:33:74:6c:65:2b:c3:65:cb:ef:b6: 8c:58:50:d9:0a:dd:e1:96:12:de:7d:d9:25:b6:b4: 63:49:74:ef:a8:d0:ca:d0:9e:ad:21:19:08:ef:1c: 12:67:3e:ad:a2:58:8e:73:13:24:54:9d:6e:2f:00: 98:e7:78:73:9b:21:fa:c9:4e:9d:b3:4a:26:09:a0: 67:cd:25:1c:ae:44:dd:20:69:43:c1:f3:9c:43:2b: 08:77:43:25:6c:1c:5a:a2:ba:0c:1a:06:c2:db:da: 68:e6:97:4f:53:64:3b:79:8f:41:24:0e:ef:5c:8f: 55:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:85:CD:1B:81:6F:BB:CC:2E:7B:26:8B:75:82:1E:B3:D4:E6:1E:1D X509v3 Authority Key Identifier: keyid:C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:4e:51:c4:53:96:b0:69:d9:c8:a6:f0:b8:cc:01:fd:e9:8c: 7a:06:c7:d7:a2:0b:10:fc:e8:72:00:88:5a:8a:f2:01:4c:0f: e4:e0:0f:f5:d0:48:a9:66:9e:a7:5b:73:90:9a:f7:d4:61:74: 78:fe:e6:f9:ae:9c:84:7d:aa:58:84:98:83:58:02:af:32:0d: a3:0b:e2:6e:51:bb:e2:b0:04:4f:7b:08:a2:27:ac:0e:9f:66: e0:79:5c:a7:ef:05:e8:67:c0:68:60:30:21:50:3e:e8:a3:7f: 6a:77:80:5b:c7:7c:20:58:40:eb:cf:aa:f3:c9:2d:f9:56:d6: 4f:d3:55:c1:8a:ef:bf:81:59:98:5d:83:84:a2:ec:73:f0:2f: 75:7d:17:e9:8c:90:e3:b4:62:97:b0:74:19:32:7f:60:ac:c4: 9a:e4:84:b9:79:3c:7b:b3:1d:2a:f1:c6:2d:24:1d:f8:e6:52: 95:d7:2e:cb:9e:9f:ff:69:e8:23:a2:ea:79:77:6a:47:33:b5: 3c:db:30:21:fd:f3:ba:1b:b3:dc:0b:0e:f9:20:c8:e6:8b:e9: 0d:26:48:44:9f:15:47:e6:cb:07:b0:59:5b:b0:b4:4d:65:16: 46:48:20:27:da:eb:7d:2d:21:7e:0a:34:94:20:02:27:10:2c: 87:b4:5a:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBKbzEQXIx9/Sjw91g4m9NfT3Fh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcw ODI0MkYwOTAeFw0yNTA0MDQwNDM2MTFaFw0yNTA0MDcxNDQ1MTFaMDMxMTAvBgNV BAMTKDczODVDRDFCODE2RkJCQ0MyRTdCMjY4Qjc1ODIxRUIzRDRFNjFFMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5DCxhprAPnLwol2AbfvMhpLRH QZ1DipWxn2i4S7gSID05nviJdf12xKtVKO9kx6yHZUcLtqPSmnnaQz3KidtB6Lrg rzfpc2sCL/DvynhO0A5t7ttVspry3V4S64dfemjIckkwPgzK+c3cvXj6a6LgLS5w v2gbz+Hm3Rr0p7xXzTmDF+2n+65VhQjhM3RsZSvDZcvvtoxYUNkK3eGWEt592SW2 tGNJdO+o0MrQnq0hGQjvHBJnPq2iWI5zEyRUnW4vAJjneHObIfrJTp2zSiYJoGfN JRyuRN0gaUPB85xDKwh3QyVsHFqiugwaBsLb2mjml09TZDt5j0EkDu9cj1WfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc4XNG4Fvu8wueyaLdYIes9TmHh0wHwYDVR0j BBgwFoAUwM33KnP+IAExhT4O5qmzNwgkLwkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Yzc1NDdmYy00OGQ0LTQxNjktYWUzMy1jYjQ1NGQ2ZDhiOTIvMC9DMENERjcyQTcz RkUyMDAxMzE4NTNFMEVFNkE5QjMzNzA4MjQyRjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcwODI0 MkYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3NTQ3ZmMtNDhkNC00MTY5LWFl MzMtY2I0NTRkNmQ4YjkyLzAvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIz MzcwODI0MkYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACROUcRTlrBp2cim8LjMAf3pjHoGx9eiCxD8 6HIAiFqK8gFMD+TgD/XQSKlmnqdbc5Ca99RhdHj+5vmunIR9qliEmINYAq8yDaML 4m5Ru+KwBE97CKInrA6fZuB5XKfvBehnwGhgMCFQPuijf2p3gFvHfCBYQOvPqvPJ LflW1k/TVcGK77+BWZhdg4Si7HPwL3V9F+mMkOO0YpewdBkyf2CsxJrkhLl5PHuz HSrxxi0kHfjmUpXXLsuen/9p6COi6nl3akcztTzbMCH987obs9wLDvkgyOaL6Q0m SESfFUfmywewWVuwtE1lFkZIICfa630tIX4KNJQgAicQLIe0Woc= -----END CERTIFICATE-----Generated at Sun Apr 6 11:13:24 2025 by rpki-client