$ rpki-client -vvf repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft File: C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft (raw, json) Hash identifier: HRMXWXydYYj9cijrDZjX4+FQh0Y5GYfGWPudaYJyKvc= Subject key identifier: 7A:8B:C9:C0:9D:6C:A0:C6:5C:B5:DC:14:98:A8:CE:1E:2E:5E:52:0A Authority key identifier: C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B Certificate issuer: /CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Certificate serial: 5E1A51EEC89EA451B2BA39233A2D65C228E2CBCF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft Manifest number: 04CF Signing time: Sun 11 May 2025 20:12:04 +0000 Manifest this update: Sun 11 May 2025 20:07:04 +0000 Manifest next update: Wed 14 May 2025 23:10:04 +0000 Files and hashes: 1: 3130332e3135352e3136362e302f32342d3234203d3e20313431303634.roa (hash: fijXi7JXNmOqyGzs7/506DijuSQ1n1hxqAmgpzA5UJM=) 2: C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl (hash: kG2ve2M8sxjY3gLocNmfUwFuADmiz96puXdQZHpM0t4=) 3: 3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa (hash: Q4AjejyzAPd/ncgkm+rk+HuwBec70FAvTry5cmeq/hA=) 4: 3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa (hash: TzDlH/8T37XWi95eFodHjGljwWomYVsEUxMEatIqMzY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 23:10:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:1a:51:ee:c8:9e:a4:51:b2:ba:39:23:3a:2d:65:c2:28:e2:cb:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Validity Not Before: May 11 20:07:04 2025 GMT Not After : May 14 23:10:04 2025 GMT Subject: CN=7A8BC9C09D6CA0C65CB5DC1498A8CE1E2E5E520A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:97:6a:75:3c:89:81:bb:1b:75:24:d9:6b:39: 38:9a:0f:bd:09:a4:81:cb:d2:d1:6b:1b:83:37:14: 78:b2:4c:85:3e:96:e6:30:41:8c:83:16:8b:e1:c8: 3f:c8:6d:8c:1a:fc:a7:4e:83:83:55:ab:53:5d:a5: 32:89:99:4f:c3:80:07:21:05:9d:ae:e0:f6:b8:6f: 94:82:37:7e:e1:fd:c6:02:35:dc:35:77:f7:86:f9: 41:4a:53:79:cd:da:04:c4:76:c8:23:f3:0f:a2:2d: d0:37:ec:a7:3f:4f:c1:a3:ff:54:d0:e6:71:f8:e1: 55:7c:59:f3:c5:0c:e0:78:04:46:ca:d1:fe:b6:d1: f8:0e:ab:d4:76:9f:28:34:ba:60:02:5c:ac:c2:f4: 64:11:fd:df:39:67:05:ba:18:15:34:fb:2e:05:59: b3:e6:36:8c:62:99:86:a4:b0:6d:49:58:d2:2b:98: 78:93:1c:4c:7c:4c:76:4a:86:66:a9:ab:82:4a:84: 92:a8:f5:65:6c:01:d1:2c:ac:6f:c9:e3:98:fc:e2: ee:44:90:34:f7:69:74:ea:9d:cd:3b:c0:2c:49:3e: ef:7a:18:04:11:47:81:d4:ae:37:fc:ac:68:9c:d5: f4:2c:e0:4e:8c:15:54:24:f5:ba:31:42:0f:68:0d: 6d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:8B:C9:C0:9D:6C:A0:C6:5C:B5:DC:14:98:A8:CE:1E:2E:5E:52:0A X509v3 Authority Key Identifier: keyid:C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ca:2c:e9:05:28:fd:01:4a:2a:6b:dd:44:8c:da:dd:e1:b4: 4c:6d:d6:4f:79:f5:06:6f:f3:c3:56:b7:65:16:ee:3a:99:2a: 72:0a:db:eb:76:b4:1b:82:fc:64:44:75:e4:d4:8c:28:b6:10: 68:dd:4c:0c:1a:0f:6b:ee:2c:1e:23:52:81:c4:77:d4:9a:21: 28:bf:5b:65:6a:69:ee:26:69:4e:d2:07:16:96:d7:41:b8:90: 00:d7:54:de:e2:3e:41:af:11:87:d3:08:b4:c2:6d:59:7d:0f: 5a:9b:99:a0:a7:f6:c5:3c:20:4a:ba:36:ff:de:3d:d0:48:42: 66:f8:f0:4a:e3:42:e7:73:aa:2d:52:cc:50:0a:8f:e7:88:e7: 9a:0a:a8:30:4c:f2:ec:79:28:48:27:b2:bd:93:07:54:f7:3a: d4:a1:13:b8:37:28:aa:fe:70:40:dd:3e:62:c4:03:f6:3f:8d: 80:49:86:79:25:c3:be:ea:7b:8e:75:31:d3:c4:d4:c6:aa:1f: 05:2e:11:74:5d:99:58:e0:18:76:71:99:7a:fb:1a:05:33:e5: 27:6c:39:5f:bf:3a:30:d6:d5:2f:1c:55:63:2a:5a:15:3c:f8: ae:17:65:16:31:7d:01:21:6a:2b:0c:85:3d:4d:f3:7f:4d:37: 4d:2c:c4:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXhpR7siepFGyujkjOi1lwijiy88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZC QTI2MTg5QjAeFw0yNTA1MTEyMDA3MDRaFw0yNTA1MTQyMzEwMDRaMDMxMTAvBgNV BAMTKDdBOEJDOUMwOUQ2Q0EwQzY1Q0I1REMxNDk4QThDRTFFMkU1RTUyMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDl2p1PImBuxt1JNlrOTiaD70J pIHL0tFrG4M3FHiyTIU+luYwQYyDFovhyD/IbYwa/KdOg4NVq1NdpTKJmU/DgAch BZ2u4Pa4b5SCN37h/cYCNdw1d/eG+UFKU3nN2gTEdsgj8w+iLdA37Kc/T8Gj/1TQ 5nH44VV8WfPFDOB4BEbK0f620fgOq9R2nyg0umACXKzC9GQR/d85ZwW6GBU0+y4F WbPmNoximYaksG1JWNIrmHiTHEx8THZKhmapq4JKhJKo9WVsAdEsrG/J45j84u5E kDT3aXTqnc07wCxJPu96GAQRR4HUrjf8rGic1fQs4E6MFVQk9boxQg9oDW09AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeovJwJ1soMZctdwUmKjOHi5eUgowHwYDVR0j BBgwFoAUxM4b08v7AV5gllpl4vsxpromGJswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzZiMmJkNy1kN2YxLTQ4MTUtYTYwYS1jYWQ1NDAyOWNlODgvMC9DNENFMUJEM0NC RkIwMTVFNjA5NjVBNjVFMkZCMzFBNkJBMjYxODlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZCQTI2 MTg5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM2YjJiZDctZDdmMS00ODE1LWE2 MGEtY2FkNTQwMjljZTg4LzAvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMx QTZCQTI2MTg5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzKLOkFKP0BSipr3USM2t3htExt1k959QZv 88NWt2UW7jqZKnIK2+t2tBuC/GREdeTUjCi2EGjdTAwaD2vuLB4jUoHEd9SaISi/ W2Vqae4maU7SBxaW10G4kADXVN7iPkGvEYfTCLTCbVl9D1qbmaCn9sU8IEq6Nv/e PdBIQmb48ErjQudzqi1SzFAKj+eI55oKqDBM8ux5KEgnsr2TB1T3OtShE7g3KKr+ cEDdPmLEA/Y/jYBJhnklw77qe451MdPE1MaqHwUuEXRdmVjgGHZxmXr7GgUz5Sds OV+/OjDW1S8cVWMqWhU8+K4XZRYxfQEhaisMhT1N839NN00sxCs= -----END CERTIFICATE-----Generated at Mon May 12 07:52:02 2025 by rpki-client