$ rpki-client -vvf repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft File: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft (raw, json) Hash identifier: 6upDzwEYTFALK8YoxF3xRYqnc83tte70ae/UxYPWd8s= Subject key identifier: 04:C5:11:66:6A:DC:05:7E:E4:F5:A8:AD:90:E0:0C:BA:3E:6B:80:03 Authority key identifier: CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 Certificate issuer: /CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Certificate serial: 734970FDD0475A3DCC9E768D6DF4B394824CAE2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft Manifest number: 01BE Signing time: Mon 05 May 2025 19:02:26 +0000 Manifest this update: Mon 05 May 2025 18:57:26 +0000 Manifest next update: Thu 08 May 2025 23:48:26 +0000 Files and hashes: 1: 3130332e3134372e3131352e302f32342d3234203d3e203438343635.roa (hash: w2tRSLiLgHJy1W/6XsyVINn6a4HucZp7ol94fDbTiO8=) 2: 3130332e3134372e3131342e302f32342d3234203d3e203438343635.roa (hash: 9CXlJMGB7RbCSbz4yAVHg0gxAoOKIuDCGk9V2ZNRStQ=) 3: 3130332e3134372e3131342e302f32332d3234203d3e20313439393732.roa (hash: rgFJ98/EqnKQuT7uOMG6CZkoBkNIU5ZfYz7pmO03ZPE=) 4: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl (hash: PuIA6H489YbzqkCbXi6x6C/WK4huvjseM8i44tFbq/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 23:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:49:70:fd:d0:47:5a:3d:cc:9e:76:8d:6d:f4:b3:94:82:4c:ae:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Validity Not Before: May 5 18:57:26 2025 GMT Not After : May 8 23:48:26 2025 GMT Subject: CN=04C511666ADC057EE4F5A8AD90E00CBA3E6B8003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1d:5b:e7:8b:cc:3c:e8:b2:98:dc:26:81:1a: 77:0c:b9:ef:35:2e:36:ad:cf:79:dd:cb:ae:c9:ab: 4c:36:5f:b5:3e:cb:cf:b5:9b:80:d1:1b:f7:75:99: 8f:0d:ad:4e:21:98:73:ef:85:91:69:f2:92:49:99: 86:19:e8:28:b4:fa:a1:9b:87:69:b9:c6:29:0a:f2: 69:77:ee:06:33:1b:27:39:76:9f:e6:6c:97:bd:3d: ca:5b:79:61:ef:5b:c2:86:d6:ed:47:00:6c:bd:96: af:3c:9a:55:3c:01:0d:ed:b7:67:d2:96:da:aa:7a: 83:15:7c:df:8f:06:12:a4:88:98:65:2c:0e:9d:7b: 2f:13:f0:72:1b:25:8c:30:d8:6e:f3:47:53:6c:8f: 7c:a8:d1:b9:d8:73:87:e8:fe:11:c0:90:b0:52:7e: 51:57:3a:84:16:51:7b:73:de:fe:d1:cf:fa:00:b8: 41:4e:96:91:74:9b:87:a6:66:04:80:f0:e9:ed:a9: db:b0:5a:32:46:2d:91:4b:ab:7a:76:21:e1:df:1c: 07:c7:04:dc:8e:73:a3:ba:c1:04:16:0c:88:4b:98: e7:95:2e:21:ec:5e:46:5a:04:87:1d:94:f0:ff:06: 0a:e4:86:7e:e6:25:b5:69:39:8a:af:79:0d:56:35: 79:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C5:11:66:6A:DC:05:7E:E4:F5:A8:AD:90:E0:0C:BA:3E:6B:80:03 X509v3 Authority Key Identifier: keyid:CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:70:cf:9a:34:b9:26:79:b3:10:a3:04:85:6f:38:66:b7:ff: 33:42:84:48:a5:51:10:d8:31:e4:fa:1e:de:54:e9:10:ba:b0: 4f:1d:47:2c:9e:17:2b:5c:6b:95:02:ab:4d:86:10:76:d3:48: 80:12:e3:d2:79:6f:21:2a:32:33:3d:40:63:24:5f:4d:00:e2: 86:92:96:c0:fe:a9:4b:94:77:1d:3f:6d:06:b7:60:a5:b3:bf: 69:29:f3:89:4f:5e:44:be:f6:2c:28:3d:8a:87:6d:79:ad:a3: 98:8d:b0:a4:56:bc:13:6a:e6:58:04:03:e7:8c:c9:66:62:16: 3a:af:19:c7:c5:95:23:c9:ca:f1:e8:af:a8:eb:e7:d2:bb:8e: e7:86:5c:d9:bd:f3:83:90:bc:75:52:20:43:fa:2d:a1:5a:25: a9:58:8d:ce:55:69:d4:33:e3:45:c5:6d:73:41:6a:70:3d:3c: a3:a1:ee:b5:c7:7e:2c:31:e7:3d:f2:87:8a:e3:55:f2:73:c2: e8:88:9c:42:6a:68:18:ef:9d:b1:41:9f:5b:eb:9b:8e:6c:cf: f0:a5:4d:9c:8c:bc:fe:de:3d:1e:a4:91:57:4a:ce:7c:ff:d1: 89:09:71:b4:5d:97:d9:75:59:f9:47:8b:69:c1:9b:a0:bf:53: ce:88:09:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc0lw/dBHWj3MnnaNbfSzlIJMriswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFE NUIyM0E3NDAeFw0yNTA1MDUxODU3MjZaFw0yNTA1MDgyMzQ4MjZaMDMxMTAvBgNV BAMTKDA0QzUxMTY2NkFEQzA1N0VFNEY1QThBRDkwRTAwQ0JBM0U2QjgwMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIHVvni8w86LKY3CaBGncMue81 Ljatz3ndy67Jq0w2X7U+y8+1m4DRG/d1mY8NrU4hmHPvhZFp8pJJmYYZ6Ci0+qGb h2m5xikK8ml37gYzGyc5dp/mbJe9PcpbeWHvW8KG1u1HAGy9lq88mlU8AQ3tt2fS ltqqeoMVfN+PBhKkiJhlLA6dey8T8HIbJYww2G7zR1Nsj3yo0bnYc4fo/hHAkLBS flFXOoQWUXtz3v7Rz/oAuEFOlpF0m4emZgSA8OntqduwWjJGLZFLq3p2IeHfHAfH BNyOc6O6wQQWDIhLmOeVLiHsXkZaBIcdlPD/Bgrkhn7mJbVpOYqveQ1WNXkNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBMURZmrcBX7k9aitkOAMuj5rgAMwHwYDVR0j BBgwFoAUzTKB/Idajdln5+g81A8QatWyOnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjhjYzA1OS01ZTZjLTQ1MDEtYjg5NC0xNGE4MmQxOGQyMWUvMC9DRDMyODFGQzg3 NUE4REQ5NjdFN0U4M0NENDBGMTA2QUQ1QjIzQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFENUIy M0E3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY4Y2MwNTktNWU2Yy00NTAxLWI4 OTQtMTRhODJkMThkMjFlLzAvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEw NkFENUIyM0E3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRwz5o0uSZ5sxCjBIVvOGa3/zNChEilURDY MeT6Ht5U6RC6sE8dRyyeFytca5UCq02GEHbTSIAS49J5byEqMjM9QGMkX00A4oaS lsD+qUuUdx0/bQa3YKWzv2kp84lPXkS+9iwoPYqHbXmto5iNsKRWvBNq5lgEA+eM yWZiFjqvGcfFlSPJyvHor6jr59K7jueGXNm984OQvHVSIEP6LaFaJalYjc5VadQz 40XFbXNBanA9PKOh7rXHfiwx5z3yh4rjVfJzwuiInEJqaBjvnbFBn1vrm45sz/Cl TZyMvP7ePR6kkVdKznz/0YkJcbRdl9l1WflHi2nBm6C/U86ICSI= -----END CERTIFICATE-----Generated at Wed May 7 15:14:59 2025 by rpki-client