$ rpki-client -vvf repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft File: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft (raw, json) Hash identifier: niH5hJTMYxND/IOeloltpDqZPVH5EaJMADEZoBbeLvQ= Subject key identifier: 67:5A:A8:0F:C3:D6:B5:4F:E8:59:1C:85:07:C5:FC:45:90:E0:34:BA Authority key identifier: CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 Certificate issuer: /CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Certificate serial: 4D7988BE699E72CFA4D667251E8FEF54A4987387 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft Manifest number: B3 Signing time: Thu 08 May 2025 10:32:12 +0000 Manifest this update: Thu 08 May 2025 10:27:12 +0000 Manifest next update: Sun 11 May 2025 17:07:12 +0000 Files and hashes: 1: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl (hash: x40Sj851kB2/sCI0WClg7XSlK2T3W+7SwwJWmRW83lg=) 2: 3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (hash: +r4hk/SZgMTurIzv+fNPFL73b+UlFP07BXG9b2YC2us=) 3: 3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (hash: AokcwqbiC4agd4vuQFD9ZPFGfzBXJyXcGsAxju/Umd8=) 4: 3130332e3135342e37372e302f32342d3234203d3e20313430343831.roa (hash: A5SwHDOo7iq6Y1gkaeCc0A/1Pj/X9IMjx0F9yKE6Rqs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 17:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:79:88:be:69:9e:72:cf:a4:d6:67:25:1e:8f:ef:54:a4:98:73:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Validity Not Before: May 8 10:27:12 2025 GMT Not After : May 11 17:07:12 2025 GMT Subject: CN=675AA80FC3D6B54FE8591C8507C5FC4590E034BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ef:b7:1a:76:95:ff:07:5f:c9:7f:0d:9e:7b: 22:68:5b:90:8f:01:f2:f8:94:25:72:a7:26:b4:ed: ea:2d:05:b4:70:4a:79:20:94:59:cc:9d:b6:37:f4: 45:66:cf:17:df:c4:62:58:33:f4:a4:b2:08:40:ae: 7b:05:61:b6:59:b5:2e:3b:80:f7:33:72:fb:e6:a4: f7:93:78:52:52:59:18:3f:2c:f8:6f:91:c0:b9:73: 19:dd:ca:de:0d:f2:54:78:5c:90:3e:b0:fa:b8:39: b7:17:28:6e:1c:25:f2:db:aa:0d:cf:82:0d:fb:88: 8a:19:80:19:1b:89:2b:7b:77:be:2e:24:a2:db:21: 04:df:79:04:22:a7:5c:84:b3:97:b3:82:7c:81:52: 36:ee:0d:94:07:62:6d:3a:9a:51:33:41:ec:74:ce: b1:42:16:ca:1d:9f:f4:a8:29:c1:05:c2:01:4a:df: 3a:9e:8e:a9:2b:4a:01:c5:e5:39:b5:a1:94:9d:eb: ca:79:14:43:2a:9a:c9:ee:8e:af:80:bc:fc:30:ed: 8b:eb:2b:92:35:4e:38:20:98:80:99:5e:80:cf:0b: 34:66:18:9a:c2:50:c3:28:ac:ad:47:ba:ef:52:66: 9c:f8:1f:69:62:f3:dd:c6:0f:16:c3:3a:fb:39:6b: 2f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5A:A8:0F:C3:D6:B5:4F:E8:59:1C:85:07:C5:FC:45:90:E0:34:BA X509v3 Authority Key Identifier: keyid:CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:0d:ca:e7:04:22:c4:e6:8d:0a:c6:16:90:73:42:19:69:b6: 65:10:27:04:39:17:66:e2:78:43:fe:94:0c:4f:24:e6:f7:5a: a2:30:09:9a:11:4d:b5:fb:bb:b9:35:c9:85:8e:2d:a4:37:01: b5:6d:01:cf:10:63:fc:2a:6e:50:ae:91:dc:b1:c6:86:23:19: 5a:1b:15:04:13:8b:4d:85:dc:24:5f:f0:38:24:33:ba:6e:de: b9:a8:b8:e8:05:fe:e4:ec:76:cb:6b:da:e9:4b:c0:d3:79:01: 25:35:9d:20:9c:35:7c:ce:5f:71:3a:d4:b9:a1:9d:26:ab:e4: 67:44:d0:1a:35:44:c8:50:fa:ce:a8:75:39:62:ce:44:cc:45: 7f:26:58:96:ae:7e:fc:2f:eb:aa:50:9d:44:98:a8:ab:fb:50: 2f:bd:c9:96:78:c5:21:2e:2b:18:30:0a:4e:e5:4f:60:eb:32: 75:e5:f4:f0:44:f6:0e:21:a9:c5:bc:ef:3f:c7:c5:f0:97:2a: e7:43:1c:65:8f:cd:41:38:d3:b8:a6:05:37:73:7a:ca:44:98: dd:b8:32:5b:2b:c6:69:e1:ba:f9:0d:25:11:a8:ef:0a:07:a0: ed:09:e2:05:c7:3d:d8:34:76:06:6b:2e:5b:2a:09:f2:d4:eb: 92:52:57:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTXmIvmmecs+k1mclHo/vVKSYc4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlC NjVEMTdEMzAeFw0yNTA1MDgxMDI3MTJaFw0yNTA1MTExNzA3MTJaMDMxMTAvBgNV BAMTKDY3NUFBODBGQzNENkI1NEZFODU5MUM4NTA3QzVGQzQ1OTBFMDM0QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH77cadpX/B1/Jfw2eeyJoW5CP AfL4lCVypya07eotBbRwSnkglFnMnbY39EVmzxffxGJYM/SksghArnsFYbZZtS47 gPczcvvmpPeTeFJSWRg/LPhvkcC5cxndyt4N8lR4XJA+sPq4ObcXKG4cJfLbqg3P gg37iIoZgBkbiSt7d74uJKLbIQTfeQQip1yEs5ezgnyBUjbuDZQHYm06mlEzQex0 zrFCFsodn/SoKcEFwgFK3zqejqkrSgHF5Tm1oZSd68p5FEMqmsnujq+AvPww7Yvr K5I1TjggmICZXoDPCzRmGJrCUMMorK1Huu9SZpz4H2li893GDxbDOvs5ay8XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ1qoD8PWtU/oWRyFB8X8RZDgNLowHwYDVR0j BBgwFoAUzq5Pd1nuIbplLg+4nQGjCbZdF9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjM1YTQ1MS1jMzA0LTQ1ZjUtYjdkYi01Njg3ZTJiMTA4MDcvMC9DRUFFNEY3NzU5 RUUyMUJBNjUyRTBGQjg5RDAxQTMwOUI2NUQxN0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlCNjVE MTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYzNWE0NTEtYzMwNC00NWY1LWI3 ZGItNTY4N2UyYjEwODA3LzAvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEz MDlCNjVEMTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0NyucEIsTmjQrGFpBzQhlptmUQJwQ5F2bi eEP+lAxPJOb3WqIwCZoRTbX7u7k1yYWOLaQ3AbVtAc8QY/wqblCukdyxxoYjGVob FQQTi02F3CRf8DgkM7pu3rmouOgF/uTsdstr2ulLwNN5ASU1nSCcNXzOX3E61Lmh nSar5GdE0Bo1RMhQ+s6odTlizkTMRX8mWJaufvwv66pQnUSYqKv7UC+9yZZ4xSEu KxgwCk7lT2DrMnXl9PBE9g4hqcW87z/HxfCXKudDHGWPzUE407imBTdzespEmN24 MlsrxmnhuvkNJRGo7woHoO0J4gXHPdg0dgZrLlsqCfLU65JSVz8= -----END CERTIFICATE-----Generated at Fri May 9 04:04:47 2025 by rpki-client