$ rpki-client -vvf repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft File: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft (raw, json) Hash identifier: p2e/QXSjE4jS4waBcNjTx0JzrkgCERlH32DO6DPT6uU= Subject key identifier: C3:8A:EF:FF:AD:8B:D8:74:60:8E:7C:0A:1B:2F:7E:91:6E:3D:AF:C4 Authority key identifier: C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 Certificate issuer: /CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Certificate serial: 2C3A82A589CAE21B2287A93809F47B164EA4AB2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft Manifest number: 01F5 Signing time: Sun 11 May 2025 18:51:04 +0000 Manifest this update: Sun 11 May 2025 18:46:04 +0000 Manifest next update: Wed 14 May 2025 20:49:04 +0000 Files and hashes: 1: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl (hash: 74+AjcugBFWUknsl2DETsrcyGNNpOoc3/EIYEySCrYk=) 2: 3130332e38312e36302e302f32322d3234203d3e20313336303630.roa (hash: fSyZW5UURSSq8c97wxQl2sx5mMYsc0LA9hnaSF/iy/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 20:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:3a:82:a5:89:ca:e2:1b:22:87:a9:38:09:f4:7b:16:4e:a4:ab:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Validity Not Before: May 11 18:46:04 2025 GMT Not After : May 14 20:49:04 2025 GMT Subject: CN=C38AEFFFAD8BD874608E7C0A1B2F7E916E3DAFC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d7:c6:cf:52:2f:61:f2:de:3f:79:9c:c9:6e: 82:d9:f2:08:e9:fb:aa:69:3b:61:b7:ed:bd:ca:3b: 96:3d:f4:84:b4:b6:98:b8:32:3a:24:af:4b:95:9f: 90:66:d2:24:b6:d0:ad:28:f5:e9:51:df:18:1d:28: f2:52:91:14:2a:ea:c9:18:4a:3c:60:5e:8b:e4:cb: da:de:e0:00:ea:ba:ac:f1:fc:48:f6:43:d6:fd:25: af:e5:ef:8f:b7:a7:bc:40:32:21:ce:3a:30:32:b7: 4d:f8:31:35:89:99:f3:89:01:2d:2f:ed:cf:cd:a7: b6:28:01:d4:83:30:6f:28:9e:8f:d1:6c:f2:f3:d7: e5:43:a8:03:d3:4a:c9:72:7c:d1:f1:9a:2e:e4:42: a6:cc:52:ab:94:59:12:f8:40:41:5d:b2:f3:62:d4: 8a:8c:dc:ed:6a:d9:f5:a6:04:1f:95:c0:e4:24:35: 4b:da:23:99:2f:9d:8a:be:bc:0c:91:9d:00:bf:59: 41:f7:79:45:27:1b:8a:eb:66:c2:81:c5:7b:31:b4: e8:5f:5e:f0:ea:7f:99:30:02:64:46:a9:5e:d7:a8: 78:dc:3f:05:a6:47:ed:95:3c:a1:46:6a:48:27:e5: b6:52:fe:24:a8:5e:cf:57:9c:b7:b1:1e:42:77:f7: 1b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:8A:EF:FF:AD:8B:D8:74:60:8E:7C:0A:1B:2F:7E:91:6E:3D:AF:C4 X509v3 Authority Key Identifier: keyid:C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:a4:c4:1b:c8:d4:01:c0:56:12:c9:6a:05:97:b1:1e:14:51: 61:fb:60:a9:00:c6:6a:fc:f8:7d:e1:5f:03:e5:6d:83:7b:91: f0:3e:44:04:06:07:3d:66:5f:e8:e2:c1:9b:c4:1e:df:55:9e: 3b:f9:76:87:e1:9e:3a:f8:c9:a2:aa:cb:c9:6d:0e:f7:6f:53: a7:43:6e:c7:1a:84:7a:a5:48:6a:51:a9:bd:a9:67:6b:ec:87: d0:4d:2d:81:22:ac:c6:dc:a3:53:72:e8:49:70:18:91:a2:82: 67:92:f0:dc:fc:56:91:f9:b4:0f:f8:fd:07:f7:4d:8f:30:17: 59:5f:24:f4:7f:75:20:0f:05:04:4e:27:38:75:ce:9d:fe:69: 72:78:60:42:c3:92:5b:dd:62:68:8b:b3:e4:d9:fe:34:e7:e5: 6e:e3:6f:a2:9d:57:99:7b:58:df:9d:82:cb:68:3f:86:9b:2c: 7a:f0:de:a4:2a:d6:13:10:ad:b0:b8:21:7b:61:f4:ce:73:d5: f1:2e:7f:c8:4f:b9:06:ce:b2:8a:9c:e9:f6:80:99:0f:b9:91: 13:18:f1:0f:21:84:93:55:4b:bb:4b:33:87:9f:91:8e:92:2d: cd:e2:97:e5:2d:09:37:3b:ac:1e:85:17:49:c5:86:2e:f0:38: a9:9a:8e:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULDqCpYnK4hsih6k4CfR7Fk6kqy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1 RDExNjQwMjAeFw0yNTA1MTExODQ2MDRaFw0yNTA1MTQyMDQ5MDRaMDMxMTAvBgNV BAMTKEMzOEFFRkZGQUQ4QkQ4NzQ2MDhFN0MwQTFCMkY3RTkxNkUzREFGQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp18bPUi9h8t4/eZzJboLZ8gjp +6ppO2G37b3KO5Y99IS0tpi4Mjokr0uVn5Bm0iS20K0o9elR3xgdKPJSkRQq6skY SjxgXovky9re4ADquqzx/Ej2Q9b9Ja/l74+3p7xAMiHOOjAyt034MTWJmfOJAS0v 7c/Np7YoAdSDMG8ono/RbPLz1+VDqAPTSslyfNHxmi7kQqbMUquUWRL4QEFdsvNi 1IqM3O1q2fWmBB+VwOQkNUvaI5kvnYq+vAyRnQC/WUH3eUUnG4rrZsKBxXsxtOhf XvDqf5kwAmRGqV7XqHjcPwWmR+2VPKFGakgn5bZS/iSoXs9XnLexHkJ39xu1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw4rv/62L2HRgjnwKGy9+kW49r8QwHwYDVR0j BBgwFoAUwsqYyk3YjXPbZ6JBc+Kf+l0RZAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTU3NmQ0Yy0xNzQ1LTRhMTYtOGVlZi1jZWMwODFjODIwNDMvMC9DMkNBOThDQTRE RDg4RDczREI2N0EyNDE3M0UyOUZGQTVEMTE2NDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1RDEx NjQwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE1NzZkNGMtMTc0NS00YTE2LThl ZWYtY2VjMDgxYzgyMDQzLzAvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlG RkE1RDExNjQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWkxBvI1AHAVhLJagWXsR4UUWH7YKkAxmr8 +H3hXwPlbYN7kfA+RAQGBz1mX+jiwZvEHt9Vnjv5dofhnjr4yaKqy8ltDvdvU6dD bscahHqlSGpRqb2pZ2vsh9BNLYEirMbco1Ny6ElwGJGigmeS8Nz8VpH5tA/4/Qf3 TY8wF1lfJPR/dSAPBQROJzh1zp3+aXJ4YELDklvdYmiLs+TZ/jTn5W7jb6KdV5l7 WN+dgstoP4abLHrw3qQq1hMQrbC4IXth9M5z1fEuf8hPuQbOsoqc6faAmQ+5kRMY 8Q8hhJNVS7tLM4efkY6SLc3il+UtCTc7rB6FF0nFhi7wOKmajhw= -----END CERTIFICATE-----Generated at Mon May 12 08:26:41 2025 by rpki-client