$ rpki-client -vvf repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft File: 0CC3B451FD4CA85AECD3DEBA039782844757C400.mft (raw, json) Hash identifier: P+86t7kndGVCEq7UIIHgtSOisd4YCFPQK8kB7IAzaG4= Subject key identifier: B1:AA:43:EB:B2:CF:47:6E:18:4A:D8:D2:75:10:E3:1A:B7:72:16:04 Authority key identifier: 0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00 Certificate issuer: /CN=0CC3B451FD4CA85AECD3DEBA039782844757C400 Certificate serial: 7F3A1C4F9B4360B11F2B632B7D7EF06EB92CEC97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft Manifest number: D0 Signing time: Mon 05 May 2025 05:00:02 +0000 Manifest this update: Mon 05 May 2025 04:55:02 +0000 Manifest next update: Thu 08 May 2025 11:11:02 +0000 Files and hashes: 1: 0CC3B451FD4CA85AECD3DEBA039782844757C400.crl (hash: fNFF9Ls5yUicpG7OZKTdwXCgpqeATS7TmfK9Vj0ESO4=) 2: 3130332e34322e3234332e302f32342d3234203d3e20313531353935.roa (hash: CkioTeBJV4sL++uAeWAcKZDwePzlaEoJ8Dt/Q+Ec1n8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 11:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:3a:1c:4f:9b:43:60:b1:1f:2b:63:2b:7d:7e:f0:6e:b9:2c:ec:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CC3B451FD4CA85AECD3DEBA039782844757C400 Validity Not Before: May 5 04:55:02 2025 GMT Not After : May 8 11:11:02 2025 GMT Subject: CN=B1AA43EBB2CF476E184AD8D27510E31AB7721604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d2:bf:61:54:44:a1:ac:3b:d9:6e:52:38:49: 27:77:ad:02:5b:61:c2:99:c4:f8:5c:29:1b:70:03: 81:66:08:74:bd:44:19:41:0c:ca:ec:11:58:56:8c: 34:23:0c:8a:03:a9:aa:7e:a6:6f:21:ee:40:f7:05: 45:87:a2:a5:92:5a:12:28:98:df:ab:25:1f:34:d5: 2f:e6:f6:f2:18:0b:f6:6a:0f:44:87:cc:ff:80:61: ed:c6:8f:f0:8e:d5:bb:a8:db:d0:d6:c3:32:be:a2: 41:31:54:70:d9:ad:dd:b6:cc:39:18:eb:a7:5b:8b: cf:76:9f:21:70:4d:34:b2:26:9a:43:42:cf:2a:55: 64:9b:4c:26:fd:51:3a:af:11:0e:75:c4:1a:14:ae: 10:25:48:3e:8c:61:82:06:1d:20:a2:6b:7b:18:c7: 75:c7:24:cf:2d:c2:96:de:f8:73:d8:ac:c7:ec:c7: f8:98:31:ea:1d:d8:20:1a:7c:db:f1:12:9d:d7:e5: a1:f9:39:7b:2b:c8:7e:c8:8c:48:a7:54:ae:6f:e4: dd:43:16:2a:77:e4:ac:eb:1b:bd:7e:7b:28:19:b2: 7b:08:8b:82:e8:74:e2:05:04:76:4a:bd:e0:c8:da: 7a:55:2f:b1:37:74:bb:5e:19:a1:34:3d:11:c2:63: 86:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AA:43:EB:B2:CF:47:6E:18:4A:D8:D2:75:10:E3:1A:B7:72:16:04 X509v3 Authority Key Identifier: keyid:0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:14:06:95:b1:2c:a1:59:f8:c7:38:35:68:d4:3a:e8:90:b0: 28:89:a4:8e:94:9f:0f:7f:65:66:4e:04:4d:c2:c6:6c:4b:b9: ad:eb:da:7b:4e:ef:db:c3:c1:8d:da:1d:98:0a:ab:29:45:8a: 3f:fc:09:76:36:ab:53:81:48:c5:20:da:7e:6e:1f:28:34:83: 80:d4:0d:18:67:70:25:37:09:06:ae:8b:e7:4f:01:8d:6c:86: 5c:e1:a7:d1:cb:64:2c:6f:76:f1:e8:65:52:1c:09:61:ec:9d: 22:7e:11:7d:e3:82:68:3d:e7:d8:36:4b:cd:06:d1:b8:b2:90: ce:a2:06:62:19:df:5a:4c:1d:ba:d9:29:18:b4:16:af:9f:ec: 78:08:e4:5b:d9:06:71:b3:c7:05:a6:3f:ad:10:f7:69:66:82: 8e:88:66:2b:cf:f5:f4:8f:e8:08:54:54:84:97:33:bf:e7:9e: c9:55:7d:cd:7f:15:2e:f5:39:b4:c9:52:ed:19:f0:6c:40:6c: 02:ab:63:90:4c:93:9c:cb:cb:70:70:28:65:3f:38:af:8f:0d: 53:95:62:6d:11:d7:68:1e:d5:a7:bd:ff:09:76:87:05:25:1d: 70:95:e3:ae:89:98:56:46:f8:f1:89:72:ef:a0:2c:80:f4:25: 7d:44:fb:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfzocT5tDYLEfK2MrfX7wbrks7JcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5NzgyODQ0 NzU3QzQwMDAeFw0yNTA1MDUwNDU1MDJaFw0yNTA1MDgxMTExMDJaMDMxMTAvBgNV BAMTKEIxQUE0M0VCQjJDRjQ3NkUxODRBRDhEMjc1MTBFMzFBQjc3MjE2MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK0r9hVEShrDvZblI4SSd3rQJb YcKZxPhcKRtwA4FmCHS9RBlBDMrsEVhWjDQjDIoDqap+pm8h7kD3BUWHoqWSWhIo mN+rJR801S/m9vIYC/ZqD0SHzP+AYe3Gj/CO1buo29DWwzK+okExVHDZrd22zDkY 66dbi892nyFwTTSyJppDQs8qVWSbTCb9UTqvEQ51xBoUrhAlSD6MYYIGHSCia3sY x3XHJM8twpbe+HPYrMfsx/iYMeod2CAafNvxEp3X5aH5OXsryH7IjEinVK5v5N1D Fip35KzrG71+eygZsnsIi4LodOIFBHZKveDI2npVL7E3dLteGaE0PRHCY4ZLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsapD67LPR24YStjSdRDjGrdyFgQwHwYDVR0j BBgwFoAUDMO0Uf1MqFrs0966A5eChEdXxAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjkzYjgxNi1lN2JlLTQ2NGMtODc4NS00OThiZjg0ZDM3MzUvMC8wQ0MzQjQ1MUZE NENBODVBRUNEM0RFQkEwMzk3ODI4NDQ3NTdDNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5NzgyODQ0NzU3 QzQwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmY5M2I4MTYtZTdiZS00NjRjLTg3 ODUtNDk4YmY4NGQzNzM1LzAvMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5Nzgy ODQ0NzU3QzQwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgUBpWxLKFZ+Mc4NWjUOuiQsCiJpI6Unw9/ ZWZOBE3CxmxLua3r2ntO79vDwY3aHZgKqylFij/8CXY2q1OBSMUg2n5uHyg0g4DU DRhncCU3CQaui+dPAY1shlzhp9HLZCxvdvHoZVIcCWHsnSJ+EX3jgmg959g2S80G 0biykM6iBmIZ31pMHbrZKRi0Fq+f7HgI5FvZBnGzxwWmP60Q92lmgo6IZivP9fSP 6AhUVISXM7/nnslVfc1/FS71ObTJUu0Z8GxAbAKrY5BMk5zLy3BwKGU/OK+PDVOV Ym0R12ge1ae9/wl2hwUlHXCV466JmFZG+PGJcu+gLID0JX1E+6M= -----END CERTIFICATE-----Generated at Tue May 6 17:15:15 2025 by rpki-client