$ rpki-client -vvf repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft File: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft (raw, json) Hash identifier: KliQflICJAbrcG3DiRPBAZxoSX3/Thdq+Uj1eQPA298= Subject key identifier: 4B:D9:9C:53:53:6E:F5:FF:DC:DC:13:D9:61:6F:C8:DA:A4:69:F8:8B Authority key identifier: CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 Certificate issuer: /CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Certificate serial: 6122DA26E570726BFD81C34FCE7DD18A10ED59BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft Manifest number: 033D Signing time: Fri 09 May 2025 18:51:26 +0000 Manifest this update: Fri 09 May 2025 18:46:26 +0000 Manifest next update: Tue 13 May 2025 05:56:26 +0000 Files and hashes: 1: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl (hash: 8Y50cX80R8vJYr7RVp7ONwGI1ptI0w7uZIukPwZ2UT8=) 2: 3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa (hash: Zud2nnElfbx5UA3aYazzfNWJKcwUrbzENyQybZ8isd0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 05:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:22:da:26:e5:70:72:6b:fd:81:c3:4f:ce:7d:d1:8a:10:ed:59:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Validity Not Before: May 9 18:46:26 2025 GMT Not After : May 13 05:56:26 2025 GMT Subject: CN=4BD99C53536EF5FFDCDC13D9616FC8DAA469F88B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:89:b7:27:56:31:9e:49:05:f6:61:86:f3:eb: d6:48:ad:4c:dd:1a:19:03:eb:76:ac:b6:a7:fb:4d: 5c:1c:ea:20:b8:df:39:f8:ac:b3:de:1b:8a:dd:42: 6f:d9:2e:1b:8d:d8:9d:2e:ce:04:28:19:36:94:97: f1:be:24:28:38:9b:d4:02:d5:7d:89:1b:f1:9c:a2: da:e6:22:2a:fb:84:88:4c:4f:a6:b8:5c:7c:fb:7e: 70:b2:08:69:c6:3d:ed:e2:7a:a9:9c:83:2f:2d:cd: 3d:2c:b4:d0:aa:79:b0:aa:e6:17:a7:d6:4f:8c:46: f6:be:e8:0b:dc:c1:38:f5:3c:09:ea:72:80:7b:63: ee:45:12:3e:06:16:55:1e:40:89:b2:15:b5:7a:99: 4c:6c:20:86:5c:26:37:13:36:55:af:5d:f4:a0:23: 38:61:ae:c4:1d:d2:81:fd:8f:64:cf:52:3e:0c:c4: b6:15:4a:fd:57:84:98:91:06:2a:0d:28:ea:89:e9: 4b:d2:5f:e1:9d:9c:5d:09:da:f2:c0:ce:bc:bb:26: 67:59:54:1e:45:9f:b7:92:ae:4e:00:eb:67:98:05: 3f:cb:25:57:c3:7f:03:41:fc:55:2a:d3:fd:89:4b: c3:6f:8b:a0:7e:53:67:ca:82:27:e2:c0:10:08:b3: 62:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D9:9C:53:53:6E:F5:FF:DC:DC:13:D9:61:6F:C8:DA:A4:69:F8:8B X509v3 Authority Key Identifier: keyid:CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ae:fc:6c:d9:f4:5a:ff:9a:21:b9:5b:a9:04:72:b4:83:47: 92:45:08:71:cf:ad:30:f8:d2:a8:41:af:b0:ff:20:e5:7d:6c: 40:35:c5:26:6b:e4:06:7c:49:71:53:c5:87:e3:00:9b:65:83: 21:c6:ef:bb:96:c7:d3:2b:9f:a0:0c:98:54:dc:44:c5:d0:ff: c1:d3:e8:15:ad:76:d2:2c:90:66:09:16:e4:70:63:c5:6a:4f: c4:9b:bd:23:79:59:89:56:78:98:26:56:46:2f:6b:d1:51:e8: 18:39:c4:a3:86:84:70:fa:44:4c:af:97:b4:99:d9:05:60:c4: 56:77:24:37:2e:61:1c:2d:19:93:b6:b3:4b:12:16:3f:8f:2c: 2b:1e:d2:c5:7e:da:52:1d:5e:58:68:fd:7c:99:68:82:51:89: 69:af:63:90:e3:49:06:0c:f0:45:14:3d:49:a1:b8:c5:7f:a2: 92:22:19:df:0d:ff:82:06:c9:90:f6:ed:14:ba:02:a9:94:3d: e1:15:f5:cb:bb:c1:8f:48:f9:36:43:b0:80:c6:dd:48:d8:f2: ac:06:1e:62:94:74:c7:9a:8c:f4:5a:bc:05:11:c0:43:7c:16: d8:ed:df:f7:9a:37:d5:a0:a2:e1:03:3c:29:ee:8e:a7:c7:10: f3:2e:cf:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYSLaJuVwcmv9gcNPzn3RihDtWbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFD ODRFQ0VENDAeFw0yNTA1MDkxODQ2MjZaFw0yNTA1MTMwNTU2MjZaMDMxMTAvBgNV BAMTKDRCRDk5QzUzNTM2RUY1RkZEQ0RDMTNEOTYxNkZDOERBQTQ2OUY4OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwibcnVjGeSQX2YYbz69ZIrUzd GhkD63astqf7TVwc6iC43zn4rLPeG4rdQm/ZLhuN2J0uzgQoGTaUl/G+JCg4m9QC 1X2JG/GcotrmIir7hIhMT6a4XHz7fnCyCGnGPe3ieqmcgy8tzT0stNCqebCq5hen 1k+MRva+6AvcwTj1PAnqcoB7Y+5FEj4GFlUeQImyFbV6mUxsIIZcJjcTNlWvXfSg IzhhrsQd0oH9j2TPUj4MxLYVSv1XhJiRBioNKOqJ6UvSX+GdnF0J2vLAzry7JmdZ VB5Fn7eSrk4A62eYBT/LJVfDfwNB/FUq0/2JS8Nvi6B+U2fKgifiwBAIs2J7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS9mcU1Nu9f/c3BPZYW/I2qRp+IswHwYDVR0j BBgwFoAUzXwmfFiuL1GBf6pSArC/kchOztQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTQ0ZDU3Ni0zODE4LTQ5ZDYtODY2Mi1mOGRmODlhYjI4NjMvMC9DRDdDMjY3QzU4 QUUyRjUxODE3RkFBNTIwMkIwQkY5MUM4NEVDRUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFDODRF Q0VENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE0NGQ1NzYtMzgxOC00OWQ2LTg2 NjItZjhkZjg5YWIyODYzLzAvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJG OTFDODRFQ0VENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6u/GzZ9Fr/miG5W6kEcrSDR5JFCHHPrTD4 0qhBr7D/IOV9bEA1xSZr5AZ8SXFTxYfjAJtlgyHG77uWx9Mrn6AMmFTcRMXQ/8HT 6BWtdtIskGYJFuRwY8VqT8SbvSN5WYlWeJgmVkYva9FR6Bg5xKOGhHD6REyvl7SZ 2QVgxFZ3JDcuYRwtGZO2s0sSFj+PLCse0sV+2lIdXlho/XyZaIJRiWmvY5DjSQYM 8EUUPUmhuMV/opIiGd8N/4IGyZD27RS6AqmUPeEV9cu7wY9I+TZDsIDG3UjY8qwG HmKUdMeajPRavAURwEN8Ftjt3/eaN9WgouEDPCnujqfHEPMuz3I= -----END CERTIFICATE-----Generated at Sun May 11 09:36:56 2025 by rpki-client