$ rpki-client -vvf repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft File: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft (raw, json) Hash identifier: oFm+jdoYhJI1DdfyBICFpd+TL7WQjU1Ob4o7r3JMMBE= Subject key identifier: 20:DE:88:6E:1D:2F:47:5C:97:29:88:E9:15:7B:F3:41:AE:4E:AD:07 Authority key identifier: CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 Certificate issuer: /CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Certificate serial: 4D117E603034ECD15711D424583209E2E79FC3D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft Manifest number: 04CA Signing time: Sun 04 May 2025 03:21:14 +0000 Manifest this update: Sun 04 May 2025 03:16:14 +0000 Manifest next update: Wed 07 May 2025 03:55:14 +0000 Files and hashes: 1: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl (hash: frsDpkP8NhgZRVmgZ+SQOLbDM7TzL0AJUpTYOVdBWpY=) 2: 3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa (hash: 3FQO/GU4KoR2pdteiQTTb2NEDc217LMm+LVE0TfeQnM=) 3: 323430343a3630303a3a2f33322d3438203d3e2034383333.roa (hash: XRUL5OC/FVMM95Sr+TgKKKXzxAgbs6oPZwx6ooD6oPE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 03:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:11:7e:60:30:34:ec:d1:57:11:d4:24:58:32:09:e2:e7:9f:c3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Validity Not Before: May 4 03:16:14 2025 GMT Not After : May 7 03:55:14 2025 GMT Subject: CN=20DE886E1D2F475C972988E9157BF341AE4EAD07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:79:e3:07:e1:39:1e:73:58:f1:4c:15:d3:4a: b4:a1:f8:d2:79:93:45:96:2f:14:79:25:a6:f8:45: 2d:47:88:06:6f:7d:8f:04:db:7c:3c:6c:9a:80:2e: 35:5d:6f:c3:d6:b0:81:59:6f:cf:28:c6:a3:fd:2e: 80:02:a7:ae:b0:7b:54:95:46:d5:0a:bd:b9:03:72: c3:f9:ca:bc:3e:a1:08:65:ff:01:48:02:84:15:d0: dc:c0:ed:53:d3:6b:a4:ab:14:f4:42:9d:7b:7b:fa: 0e:2d:4f:e4:6f:1d:1e:ae:17:df:84:4f:46:0a:ca: 05:b8:8d:76:8b:bc:f6:44:fd:4f:72:9f:6e:e8:b4: 91:de:02:6e:60:42:ec:85:9d:57:8f:f3:b0:37:57: 49:b3:99:ce:c3:1c:96:2a:fa:9b:3e:f2:76:7b:ab: 5f:c7:3d:e0:a3:f5:68:ea:cd:97:9b:14:11:ca:bb: 54:e0:94:6d:de:8b:84:01:47:9f:ac:92:e9:1f:23: 94:a1:f9:c1:4b:54:d9:c0:31:0e:d3:05:6b:4f:1a: 61:c1:86:f9:cc:cf:c5:24:0d:98:c4:03:e8:47:ba: d1:d6:c3:e9:06:e3:ad:3e:de:b7:9a:0a:5d:ad:c4: 31:09:61:e0:a8:10:2c:13:32:a5:43:31:3b:53:94: b1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DE:88:6E:1D:2F:47:5C:97:29:88:E9:15:7B:F3:41:AE:4E:AD:07 X509v3 Authority Key Identifier: keyid:CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:c7:7f:f2:5f:40:66:03:5e:b2:da:d3:8b:f0:c7:31:37:f5: e7:a4:de:74:48:5e:31:d3:ec:7d:8b:3c:94:ef:e9:4e:00:01: 8f:2e:37:a7:4a:fb:23:48:11:78:2e:43:43:a3:01:03:2e:6d: 81:e9:7b:c3:00:3f:84:55:82:4f:4f:e6:67:83:ad:77:35:7e: 9e:24:a3:25:b7:0f:ec:35:f5:dc:41:85:86:9b:4d:aa:3c:b4: 55:4c:8d:20:12:79:bb:1e:e3:b2:66:55:fc:64:82:50:21:e6: 6e:0f:80:a1:82:ec:06:61:25:76:55:65:d0:52:a1:8a:62:2c: cc:f5:d8:22:a7:7b:a7:5f:d7:8e:c4:84:40:ef:92:9b:14:86: aa:d8:df:7b:be:83:88:54:d7:3c:8c:22:e6:48:89:04:d1:1b: 9f:1d:cc:bb:7d:50:e9:7f:17:ab:c5:82:cb:bb:eb:2e:ab:f1: 6a:bc:22:ee:bd:ec:59:df:bf:f6:61:52:21:af:85:bd:49:49: 66:38:7c:47:7e:90:27:7c:e0:55:3a:94:59:e6:63:e9:dd:e5: 00:37:e0:9c:3b:dc:c6:31:68:21:ca:46:85:fa:d8:77:41:45: 70:5b:6e:a0:bb:bd:0f:c5:56:f5:f6:ce:4c:3a:c1:32:54:f6: b8:03:32:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTRF+YDA07NFXEdQkWDIJ4uefw9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURG NjQ4QzRFOTAeFw0yNTA1MDQwMzE2MTRaFw0yNTA1MDcwMzU1MTRaMDMxMTAvBgNV BAMTKDIwREU4ODZFMUQyRjQ3NUM5NzI5ODhFOTE1N0JGMzQxQUU0RUFEMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgeeMH4Tkec1jxTBXTSrSh+NJ5 k0WWLxR5Jab4RS1HiAZvfY8E23w8bJqALjVdb8PWsIFZb88oxqP9LoACp66we1SV RtUKvbkDcsP5yrw+oQhl/wFIAoQV0NzA7VPTa6SrFPRCnXt7+g4tT+RvHR6uF9+E T0YKygW4jXaLvPZE/U9yn27otJHeAm5gQuyFnVeP87A3V0mzmc7DHJYq+ps+8nZ7 q1/HPeCj9WjqzZebFBHKu1TglG3ei4QBR5+skukfI5Sh+cFLVNnAMQ7TBWtPGmHB hvnMz8UkDZjEA+hHutHWw+kG460+3reaCl2txDEJYeCoECwTMqVDMTtTlLErAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIN6Ibh0vR1yXKYjpFXvzQa5OrQcwHwYDVR0j BBgwFoAUzWgeQG0uzYrKKOTwe5r6nfZIxOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmMxZjUxYS04NjQ1LTRlYjEtYTJmZi1lMjdjMjRjOGUwYzgvMC9DRDY4MUU0MDZE MkVDRDhBQ0EyOEU0RjA3QjlBRkE5REY2NDhDNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURGNjQ4 QzRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZjMWY1MWEtODY0NS00ZWIxLWEy ZmYtZTI3YzI0YzhlMGM4LzAvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZB OURGNjQ4QzRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL/Hf/JfQGYDXrLa04vwxzE39eek3nRIXjHT 7H2LPJTv6U4AAY8uN6dK+yNIEXguQ0OjAQMubYHpe8MAP4RVgk9P5meDrXc1fp4k oyW3D+w19dxBhYabTao8tFVMjSASebse47JmVfxkglAh5m4PgKGC7AZhJXZVZdBS oYpiLMz12CKne6df147EhEDvkpsUhqrY33u+g4hU1zyMIuZIiQTRG58dzLt9UOl/ F6vFgsu76y6r8Wq8Iu697Fnfv/ZhUiGvhb1JSWY4fEd+kCd84FU6lFnmY+nd5QA3 4Jw73MYxaCHKRoX62HdBRXBbbqC7vQ/FVvX2zkw6wTJU9rgDMrY= -----END CERTIFICATE-----Generated at Tue May 6 16:58:24 2025 by rpki-client