$ rpki-client -vvf repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft File: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft (raw, json) Hash identifier: w31J7Rj+PkwSTdkeiLK6vQZgX2Bth59BXNg1sDnra/Y= Subject key identifier: B0:2D:E6:33:13:F7:88:8D:7E:5A:1E:44:5C:F3:28:5F:7F:29:A7:54 Authority key identifier: CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50 Certificate issuer: /CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450 Certificate serial: 4D8B716BF62D2020BA9CC87707D8552CFE428FCB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft Manifest number: 0333 Signing time: Mon 17 Feb 2025 23:02:12 +0000 Manifest this update: Mon 17 Feb 2025 22:57:12 +0000 Manifest next update: Fri 21 Feb 2025 10:05:12 +0000 Files and hashes: 1: 3130332e382e37382e302f32332d3234203d3e203538353531.roa (hash: OwvRHKXOCqilqh1cTmagBAChy5YOmSNiZsYY8ObeQjM=) 2: 3130332e32302e3136362e302f32332d3234203d3e203538353531.roa (hash: ZQeUJA8FemXPUrCCTqWQsa/Ey/xybN+VqtEDuKlLH5M=) 3: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl (hash: ll4r3DyotoORXKvy34iI9j4z/OeKuYQ3mQoi99GQDac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 10:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:8b:71:6b:f6:2d:20:20:ba:9c:c8:77:07:d8:55:2c:fe:42:8f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450 Validity Not Before: Feb 17 22:57:12 2025 GMT Not After : Feb 21 10:05:12 2025 GMT Subject: CN=B02DE63313F7888D7E5A1E445CF3285F7F29A754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fb:90:b3:60:b2:68:c9:b9:df:20:0a:9e:f0: 5a:be:72:bf:48:bb:60:53:a6:6a:2c:0d:cd:76:f3: 96:d8:9d:a2:aa:27:4e:2f:be:da:fd:1e:98:be:23: 6b:43:13:2b:a2:72:a5:82:7d:ea:59:ce:cc:0c:59: b1:21:75:ef:50:fa:5c:11:a9:c1:66:f9:b5:f7:7b: 4f:3a:32:18:91:4a:06:32:0f:68:8c:43:12:b3:a3: 9f:67:07:a5:8f:ff:42:aa:cd:a0:64:5e:13:dd:4c: ec:7a:c3:fe:93:df:1c:81:fb:6d:8c:01:8d:32:12: f8:ab:e3:a2:bf:cc:e8:10:08:9c:df:b7:78:bb:f1: 6b:83:77:45:40:72:69:f3:5f:44:f2:94:8b:91:dd: 61:c5:64:47:98:f0:22:3b:2b:68:46:dc:8e:24:7d: 71:3e:3b:51:13:9d:28:11:1e:41:55:bb:7f:b5:bf: ee:a2:1f:70:e3:ea:58:32:de:13:ee:5f:87:01:3a: 05:ef:59:69:b1:42:a6:54:3b:90:19:48:20:22:0e: 58:4f:3d:5d:b4:22:2f:28:24:2c:d0:82:b4:11:7d: 75:be:ed:57:64:11:e2:e2:06:2c:ee:43:ab:69:52: 4b:c9:51:55:50:f8:7e:ae:24:ce:39:ee:99:1b:55: 85:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2D:E6:33:13:F7:88:8D:7E:5A:1E:44:5C:F3:28:5F:7F:29:A7:54 X509v3 Authority Key Identifier: keyid:CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:58:75:84:71:2d:2f:28:09:e7:0d:f1:bd:34:37:b6:4a:46: 26:a4:ad:4b:18:88:6b:98:cd:8d:d8:d6:11:23:9e:4b:13:2b: 6b:6f:05:13:c0:bd:49:68:ff:61:c3:32:b3:12:a1:3f:64:27: 18:05:a6:c8:4e:79:ac:67:d1:46:54:38:3a:9b:ba:fe:84:4f: 55:76:fb:51:0c:52:fd:ae:fc:54:9d:db:81:9f:0d:37:3f:fe: 65:06:ba:e9:0a:61:50:98:e3:60:73:a8:f8:fc:b7:b0:bb:fb: fe:8e:77:2d:57:4a:52:e2:d6:60:17:b7:9a:30:67:a5:2e:64: b1:ab:19:b5:f4:82:2f:a4:42:94:1f:ca:8d:c1:c0:c4:6b:61: a0:24:6a:50:42:e3:e6:73:74:eb:7f:af:29:e9:c1:68:ad:0b: 2f:93:82:ab:ea:35:71:82:57:3e:bb:42:c8:2b:2a:4c:da:89: 48:59:d6:16:02:86:92:ac:1b:67:1f:ca:2e:f0:7f:e6:0a:78: 9f:98:ea:f3:3c:a1:2f:60:b7:93:cf:57:a9:97:0b:1c:29:cd: 7d:c1:08:ff:77:7c:e2:d9:45:28:e8:a8:2f:a4:59:2e:60:93: f1:58:d3:a6:80:67:03:17:dd:32:0f:41:cd:5b:e1:a5:01:b1: bd:93:f2:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTYtxa/YtICC6nMh3B9hVLP5Cj8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgx QUFEMjQ1MDAeFw0yNTAyMTcyMjU3MTJaFw0yNTAyMjExMDA1MTJaMDMxMTAvBgNV BAMTKEIwMkRFNjMzMTNGNzg4OEQ3RTVBMUU0NDVDRjMyODVGN0YyOUE3NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN+5CzYLJoybnfIAqe8Fq+cr9I u2BTpmosDc1285bYnaKqJ04vvtr9Hpi+I2tDEyuicqWCfepZzswMWbEhde9Q+lwR qcFm+bX3e086MhiRSgYyD2iMQxKzo59nB6WP/0KqzaBkXhPdTOx6w/6T3xyB+22M AY0yEvir46K/zOgQCJzft3i78WuDd0VAcmnzX0TylIuR3WHFZEeY8CI7K2hG3I4k fXE+O1ETnSgRHkFVu3+1v+6iH3Dj6lgy3hPuX4cBOgXvWWmxQqZUO5AZSCAiDlhP PV20Ii8oJCzQgrQRfXW+7VdkEeLiBizuQ6tpUkvJUVVQ+H6uJM457pkbVYW5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsC3mMxP3iI1+Wh5EXPMoX38pp1QwHwYDVR0j BBgwFoAUzcCF49TXVDmuG7bLaPGA6BqtJFAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDBlMGRlYS01ZjliLTQyNWMtODJjZS0zMGE4NjUwMDdjMzUvMC9DREMwODVFM0Q0 RDc1NDM5QUUxQkI2Q0I2OEYxODBFODFBQUQyNDUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgxQUFE MjQ1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQwZTBkZWEtNWY5Yi00MjVjLTgy Y2UtMzBhODY1MDA3YzM1LzAvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgw RTgxQUFEMjQ1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxYdYRxLS8oCecN8b00N7ZKRiakrUsYiGuY zY3Y1hEjnksTK2tvBRPAvUlo/2HDMrMSoT9kJxgFpshOeaxn0UZUODqbuv6ET1V2 +1EMUv2u/FSd24GfDTc//mUGuukKYVCY42BzqPj8t7C7+/6Ody1XSlLi1mAXt5ow Z6UuZLGrGbX0gi+kQpQfyo3BwMRrYaAkalBC4+ZzdOt/rynpwWitCy+TgqvqNXGC Vz67QsgrKkzaiUhZ1hYChpKsG2cfyi7wf+YKeJ+Y6vM8oS9gt5PPV6mXCxwpzX3B CP93fOLZRSjoqC+kWS5gk/FY06aAZwMX3TIPQc1b4aUBsb2T8jE= -----END CERTIFICATE-----Generated at Wed Feb 19 22:01:29 2025 by rpki-client