$ rpki-client -vvf repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft File: C85C49978E8023F2D58521524D4EC616244CDC14.mft (raw, json) Hash identifier: Afgngj0rdqDQbL7urs6zj81IZjoHZyYwkREebsqMouQ= Subject key identifier: 74:CA:BB:8C:0D:17:04:C5:22:DA:F3:6B:23:B0:BB:54:D8:57:34:D4 Authority key identifier: C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 Certificate issuer: /CN=C85C49978E8023F2D58521524D4EC616244CDC14 Certificate serial: 3CF0D282F05F19CAEC31EA68D08A489AE6B28A2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft Manifest number: 01AC Signing time: Mon 05 May 2025 01:02:13 +0000 Manifest this update: Mon 05 May 2025 00:57:13 +0000 Manifest next update: Thu 08 May 2025 04:22:13 +0000 Files and hashes: 1: C85C49978E8023F2D58521524D4EC616244CDC14.crl (hash: nggSs7Qb5dP7XzVvnipgCK3cwf4/EEdTI0P5TF4soTk=) 2: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (hash: Bx1b38fbUxJjhjrxeEuROMcN+gxdeGCZuXwCivK7OCQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 04:22:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f0:d2:82:f0:5f:19:ca:ec:31:ea:68:d0:8a:48:9a:e6:b2:8a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C85C49978E8023F2D58521524D4EC616244CDC14 Validity Not Before: May 5 00:57:13 2025 GMT Not After : May 8 04:22:13 2025 GMT Subject: CN=74CABB8C0D1704C522DAF36B23B0BB54D85734D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:49:23:95:ca:f7:96:d1:80:57:c2:e5:be:45: 32:f1:a7:f2:4c:05:b7:4b:7d:16:f1:f7:21:7c:cd: 41:ca:bd:9c:78:23:80:a5:b4:f4:c7:45:0b:41:47: 0b:f2:6b:86:17:f9:17:15:18:87:33:e7:d2:e5:17: 7a:53:ef:2b:78:0d:43:98:79:36:4a:cc:f0:c8:9c: a4:e5:c1:81:ee:15:73:31:6b:b7:9a:46:28:9e:19: c6:97:87:1a:00:0d:9c:76:38:ca:14:71:47:36:3e: d0:45:d3:bc:ee:4e:f1:c7:3c:2e:07:1b:a5:66:82: 8f:19:f7:d3:f5:14:94:03:7c:97:b2:9a:04:81:a3: d7:b6:4d:93:d3:18:eb:53:7d:d3:b6:95:14:9c:b8: 60:46:78:a7:c5:12:fb:f6:6f:b8:87:ba:49:6d:4e: 5b:a6:46:63:af:c4:83:89:35:c3:5a:8c:06:38:31: b1:f5:5d:88:b9:f7:bc:f2:61:c9:5a:9f:da:25:90: 3a:f7:2c:7d:04:f6:f5:48:81:e1:5c:9e:07:7a:62: f1:a8:6c:c9:64:c3:2a:cf:c3:ba:a3:31:c8:ca:a8: 4d:80:79:6b:16:65:16:ee:72:25:45:c7:8a:27:f9: c4:ee:19:2f:34:74:3d:91:4e:e1:46:40:f6:be:e7: e4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:CA:BB:8C:0D:17:04:C5:22:DA:F3:6B:23:B0:BB:54:D8:57:34:D4 X509v3 Authority Key Identifier: keyid:C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d8:7b:4e:64:3d:5f:88:ce:71:d4:4b:b7:b8:3f:60:0a:a8: 2a:66:ef:c1:7e:59:0d:3a:35:5b:1b:c7:ba:ce:aa:c3:94:05: 41:8f:c6:01:8c:30:5e:66:4c:cd:a4:6e:e3:50:a7:99:16:ee: 7c:8a:41:f4:8c:11:5b:23:20:3c:38:b7:48:95:eb:b6:6e:bd: 44:9d:41:bd:09:76:51:de:36:52:07:f6:d8:78:d7:d4:da:ea: bf:ad:6a:50:10:71:93:b8:d9:c6:b1:71:ea:31:46:ed:10:bf: 7b:64:fb:bf:58:f7:f5:ff:16:18:2f:46:22:6a:7f:a6:67:fd: 28:0b:d3:6c:43:00:38:e9:26:58:93:f0:40:bb:28:34:9e:6b: 49:ff:d6:91:f7:28:fd:3d:63:c7:fc:f3:cf:d1:e4:4f:75:71: 94:72:e8:48:50:46:bd:84:84:ae:f2:88:a5:99:86:e0:51:da: 58:73:e5:1d:22:44:61:ef:43:16:1b:1c:bd:c1:7e:fe:e0:40: b7:58:62:84:41:fb:0a:9b:e6:45:84:cb:e0:20:fa:e3:ca:a7: 9e:ca:63:fc:2a:63:97:fe:b2:85:c6:66:02:94:6d:2e:86:03: 03:53:5f:96:c0:50:18:26:7d:d6:83:e4:a3:28:22:95:46:9c: 63:97:f8:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPPDSgvBfGcrsMepo0IpImuayiiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYy NDRDREMxNDAeFw0yNTA1MDUwMDU3MTNaFw0yNTA1MDgwNDIyMTNaMDMxMTAvBgNV BAMTKDc0Q0FCQjhDMEQxNzA0QzUyMkRBRjM2QjIzQjBCQjU0RDg1NzM0RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9SSOVyveW0YBXwuW+RTLxp/JM BbdLfRbx9yF8zUHKvZx4I4CltPTHRQtBRwvya4YX+RcVGIcz59LlF3pT7yt4DUOY eTZKzPDInKTlwYHuFXMxa7eaRiieGcaXhxoADZx2OMoUcUc2PtBF07zuTvHHPC4H G6Vmgo8Z99P1FJQDfJeymgSBo9e2TZPTGOtTfdO2lRScuGBGeKfFEvv2b7iHuklt TlumRmOvxIOJNcNajAY4MbH1XYi597zyYclan9olkDr3LH0E9vVIgeFcngd6YvGo bMlkwyrPw7qjMcjKqE2AeWsWZRbuciVFx4on+cTuGS80dD2RTuFGQPa+5+STAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdMq7jA0XBMUi2vNrI7C7VNhXNNQwHwYDVR0j BBgwFoAUyFxJl46AI/LVhSFSTU7GFiRM3BQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTUxNmU2ZS1jNjc5LTRlNTAtYjdhYi0xZTQwNjc5MTI1Y2QvMC9DODVDNDk5NzhF ODAyM0YyRDU4NTIxNTI0RDRFQzYxNjI0NENEQzE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYyNDRD REMxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U1MTZlNmUtYzY3OS00ZTUwLWI3 YWItMWU0MDY3OTEyNWNkLzAvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2 MTYyNDRDREMxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7Ye05kPV+IznHUS7e4P2AKqCpm78F+WQ06 NVsbx7rOqsOUBUGPxgGMMF5mTM2kbuNQp5kW7nyKQfSMEVsjIDw4t0iV67ZuvUSd Qb0JdlHeNlIH9th419Ta6r+talAQcZO42caxceoxRu0Qv3tk+79Y9/X/FhgvRiJq f6Zn/SgL02xDADjpJliT8EC7KDSea0n/1pH3KP09Y8f888/R5E91cZRy6EhQRr2E hK7yiKWZhuBR2lhz5R0iRGHvQxYbHL3Bfv7gQLdYYoRB+wqb5kWEy+Ag+uPKp57K Y/wqY5f+soXGZgKUbS6GAwNTX5bAUBgmfdaD5KMoIpVGnGOX+Bs= -----END CERTIFICATE-----Generated at Tue May 6 20:01:09 2025 by rpki-client