$ rpki-client -vvf repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft File: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft (raw, json) Hash identifier: PC0Mq0xAyBnGXl85++4/Nd5dyUbGle1S/HirlvuDpeo= Subject key identifier: 65:7E:69:1C:26:B1:01:06:BD:C8:34:EA:56:1D:F2:2D:A0:2F:F6:5E Authority key identifier: C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB Certificate issuer: /CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Certificate serial: 2B096FF5F6F09D41555D8CA12DBF9DB87390D3F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft Manifest number: 01B4 Signing time: Tue 06 May 2025 11:11:45 +0000 Manifest this update: Tue 06 May 2025 11:06:45 +0000 Manifest next update: Fri 09 May 2025 21:01:45 +0000 Files and hashes: 1: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (hash: DEQ6i2fIqhrPJGH2IFEMi8YnzTrgKlP6WPrpjEcp18o=) 2: 3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (hash: ZIvgL7/TSUjSQgis1M5EWea31F4jkT0hl76IfkMAhxg=) 3: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (hash: t1SEps+PxNqj4zacSf/7DBl+MO9xjw/dSKyX8w5YIzQ=) 4: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl (hash: rBIYJL/gKMWVvchHN7p1O+3watw6DltLepUAxGWgFME=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 21:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:09:6f:f5:f6:f0:9d:41:55:5d:8c:a1:2d:bf:9d:b8:73:90:d3:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Validity Not Before: May 6 11:06:45 2025 GMT Not After : May 9 21:01:45 2025 GMT Subject: CN=657E691C26B10106BDC834EA561DF22DA02FF65E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:03:e7:81:cd:db:94:71:8d:47:a9:65:6d:7f: c5:6f:7d:19:f9:96:d8:d4:e7:7e:9f:37:f4:dc:36: 49:5a:0b:55:fa:97:60:39:80:52:db:bc:eb:d9:d5: 30:d1:74:4d:42:03:56:f3:ba:ef:b8:aa:3b:63:30: 2e:f5:80:bb:27:97:3b:b0:5b:1e:74:31:81:b6:e4: cd:88:97:55:3b:f2:97:c5:97:a3:94:13:cc:90:c4: ea:37:2a:5d:12:d8:79:6e:2a:7b:4a:67:63:64:2e: 7d:82:be:ce:a2:8a:90:4f:ed:eb:eb:ca:73:19:e1: 80:dc:ff:14:31:aa:8d:34:a6:cd:e3:01:08:12:ef: 44:cf:ad:7d:bc:3e:41:c4:fa:e0:b3:a9:f5:f3:d4: bf:71:53:cc:a0:f6:27:7e:a7:74:1d:2c:43:28:f9: 94:68:5d:37:2c:b0:79:64:be:55:b3:d7:b3:83:56: 15:14:1c:a4:e1:2a:76:32:91:f1:0a:44:5d:69:9d: 03:73:0e:63:86:5f:66:c1:3d:b5:bb:7e:0f:d7:33: cb:34:3c:35:b9:52:90:76:82:66:bc:b3:c9:40:ff: 9e:b6:3f:d0:e3:43:48:f1:fd:0f:47:5a:fb:06:57: 50:8f:63:a0:ce:7e:a2:91:0c:f1:84:e0:01:80:6d: 29:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:7E:69:1C:26:B1:01:06:BD:C8:34:EA:56:1D:F2:2D:A0:2F:F6:5E X509v3 Authority Key Identifier: keyid:C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:45:23:b4:ef:c9:34:df:4f:53:79:90:7b:cc:a4:27:32:74: e2:62:60:5b:08:24:6e:98:e4:20:d0:97:9b:41:f0:2c:33:05: 5f:14:93:bd:76:eb:d0:18:11:c3:ea:f4:8f:c3:ad:b1:34:1c: 21:c4:25:c9:b8:9a:ae:a3:53:a3:2b:7a:29:44:9e:b9:5b:79: 56:89:43:ee:57:42:65:eb:5a:e6:25:d1:b0:54:85:74:e7:9c: 88:02:79:85:dc:72:60:f5:c9:40:bf:df:10:20:f9:a0:14:e8: e6:77:60:fc:56:72:6e:ba:73:a7:92:2c:a8:b8:89:57:fa:5d: 17:20:10:93:30:48:37:cb:1a:49:6c:d4:3a:a3:20:57:04:51: 28:e7:ec:94:fc:19:6e:13:58:b5:b7:47:0c:07:27:1a:e3:75: 99:2f:20:60:23:f3:9f:9d:4f:2b:70:c5:16:7b:9a:9c:e3:17: 34:a0:03:b5:b8:1f:56:cf:3f:8d:99:e9:13:61:31:b5:94:ae: d6:7f:23:34:a9:2a:e2:f6:68:5b:9c:88:20:bb:aa:34:2d:af: a7:05:cc:25:5d:91:7a:e7:39:3c:2c:db:e8:4c:e9:a0:9c:f6: 93:45:13:f0:82:0d:99:b1:9c:02:22:ff:e0:11:87:10:84:5a: 63:53:1d:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKwlv9fbwnUFVXYyhLb+duHOQ0/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZF RDdGNUZCQjAeFw0yNTA1MDYxMTA2NDVaFw0yNTA1MDkyMTAxNDVaMDMxMTAvBgNV BAMTKDY1N0U2OTFDMjZCMTAxMDZCREM4MzRFQTU2MURGMjJEQTAyRkY2NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdA+eBzduUcY1HqWVtf8VvfRn5 ltjU536fN/TcNklaC1X6l2A5gFLbvOvZ1TDRdE1CA1bzuu+4qjtjMC71gLsnlzuw Wx50MYG25M2Il1U78pfFl6OUE8yQxOo3Kl0S2HluKntKZ2NkLn2Cvs6iipBP7evr ynMZ4YDc/xQxqo00ps3jAQgS70TPrX28PkHE+uCzqfXz1L9xU8yg9id+p3QdLEMo +ZRoXTcssHlkvlWz17ODVhUUHKThKnYykfEKRF1pnQNzDmOGX2bBPbW7fg/XM8s0 PDW5UpB2gma8s8lA/562P9DjQ0jx/Q9HWvsGV1CPY6DOfqKRDPGE4AGAbSkHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZX5pHCaxAQa9yDTqVh3yLaAv9l4wHwYDVR0j BBgwFoAUwcAjPcBzAuhtEUq3cqtlZu1/X7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM5YzI1Mi1mN2NhLTRkZDUtODhmNi0yMmFkZGM4OTM0YjMvMC9DMUMwMjMzREMw NzMwMkU4NkQxMTRBQjc3MkFCNjU2NkVEN0Y1RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZFRDdG NUZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjOWMyNTItZjdjYS00ZGQ1LTg4 ZjYtMjJhZGRjODkzNGIzLzAvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1 NjZFRDdGNUZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNFI7TvyTTfT1N5kHvMpCcydOJiYFsIJG6Y 5CDQl5tB8CwzBV8Uk71269AYEcPq9I/DrbE0HCHEJcm4mq6jU6MreilEnrlbeVaJ Q+5XQmXrWuYl0bBUhXTnnIgCeYXccmD1yUC/3xAg+aAU6OZ3YPxWcm66c6eSLKi4 iVf6XRcgEJMwSDfLGkls1DqjIFcEUSjn7JT8GW4TWLW3RwwHJxrjdZkvIGAj85+d TytwxRZ7mpzjFzSgA7W4H1bPP42Z6RNhMbWUrtZ/IzSpKuL2aFuciCC7qjQtr6cF zCVdkXrnOTws2+hM6aCc9pNFE/CCDZmxnAIi/+ARhxCEWmNTHRE= -----END CERTIFICATE-----Generated at Wed May 7 20:52:22 2025 by rpki-client