$ rpki-client -vvf repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft File: C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft (raw, json) Hash identifier: Qt17xvNj4ujDuPMFXQLfv8o2KBRYwIOMOnwv7ODzx4U= Subject key identifier: 35:8D:63:52:7A:63:8B:72:D8:48:EF:90:D0:5C:34:75:7A:97:B6:02 Authority key identifier: C2:0D:D3:7A:F0:EF:3C:A0:55:DF:DF:8F:3F:5D:18:F0:81:81:96:F4 Certificate issuer: /CN=C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4 Certificate serial: 650DEE7E3E89E81E940F1C57C9107DBF2557A1BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft Manifest number: 0318 Signing time: Sun 04 May 2025 20:31:51 +0000 Manifest this update: Sun 04 May 2025 20:26:51 +0000 Manifest next update: Wed 07 May 2025 22:40:51 +0000 Files and hashes: 1: C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl (hash: PYFUqlzvdy9jbmIRS2ikx9pl6oEHpkC0xyp3zH/4ymk=) 2: 3130332e3136312e37322e302f32342d3234203d3e203538333738.roa (hash: WHyXZiHm1tFrwAXrz4brauNseb8V8ZMQneoiM0eZr/g=) 3: 3130332e3136312e37332e302f32342d3234203d3e203538333738.roa (hash: N58UqlFMp748Khi3FbSfGS0G+XtsfGGuqPSO+3bYMNA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 22:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:0d:ee:7e:3e:89:e8:1e:94:0f:1c:57:c9:10:7d:bf:25:57:a1:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4 Validity Not Before: May 4 20:26:51 2025 GMT Not After : May 7 22:40:51 2025 GMT Subject: CN=358D63527A638B72D848EF90D05C34757A97B602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:29:ed:f3:d9:c8:62:52:a4:83:f6:67:b6:f4: 28:54:01:1f:e9:62:81:f3:2d:e6:9a:4d:c8:a3:dc: 1f:ae:61:01:a1:74:a5:c5:4c:e5:53:a8:e9:a9:9a: 53:52:70:9e:17:7d:62:1c:cf:c2:b6:03:c3:90:be: bf:4c:f4:d9:0c:4d:7c:0a:40:6d:68:42:26:60:99: 8d:b1:85:87:61:00:eb:e4:b0:54:9a:b5:bc:ca:e1: 7d:25:26:18:a3:54:4f:ce:c0:82:e4:ce:24:b3:8a: 25:de:b5:41:34:ee:b4:a1:32:e3:41:8e:54:be:99: cf:8b:65:9d:ba:13:35:7f:25:3e:6a:59:f4:fe:69: 74:5d:8c:0a:34:5d:1e:e9:97:a3:c6:e3:aa:fb:ff: 81:35:d6:0d:c1:31:92:2a:e0:37:01:60:5e:03:1f: 21:50:11:ff:c0:1b:83:9f:c2:4a:77:62:6e:19:37: 08:be:eb:39:1f:19:8e:e1:ef:00:f3:72:8c:91:4e: 9e:27:bb:87:c9:0d:a4:10:a7:57:f8:b1:5e:3b:ea: 92:e0:1a:b1:6c:aa:a5:ab:9a:f3:69:3d:77:fa:cd: c7:be:b5:cf:36:17:3b:58:f0:a0:01:10:4c:37:eb: bd:43:a2:4d:ec:87:ae:42:6b:42:f5:75:72:57:31: 99:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8D:63:52:7A:63:8B:72:D8:48:EF:90:D0:5C:34:75:7A:97:B6:02 X509v3 Authority Key Identifier: keyid:C2:0D:D3:7A:F0:EF:3C:A0:55:DF:DF:8F:3F:5D:18:F0:81:81:96:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:89:97:78:68:ed:c5:52:8e:d4:65:b3:86:26:ca:27:3f:a9: 81:ab:a3:9b:8e:75:0a:fe:79:e6:81:75:b1:e3:9c:6e:a4:88: ed:23:2e:2f:17:bd:1b:7f:ef:e8:34:70:9f:1b:82:83:56:13: 5f:fe:b6:2c:3c:d9:e9:a4:8e:af:dd:e1:a0:c3:99:85:b7:2a: 26:ed:49:33:02:0c:a4:a7:ee:db:9e:75:a2:47:21:1f:83:be: 79:fb:db:87:c0:5d:61:47:5a:b0:89:6a:a3:18:a9:4d:cc:aa: 02:b8:b8:39:93:df:2e:7b:a4:32:d7:8e:4f:41:31:a4:1d:11: bb:7e:be:a5:cc:2c:9d:23:24:07:92:e9:7c:fb:f9:b5:2e:58: 1e:c5:d9:9d:fb:35:01:9e:fe:d3:b6:94:c1:d9:39:72:55:64: 73:af:98:9f:6c:6c:a2:b7:71:f2:57:0e:6c:8c:b5:41:68:e8: 6d:b6:f5:94:e6:c0:14:5a:79:0c:65:63:c9:74:c7:31:3e:0d: fe:09:36:72:81:3e:19:84:16:54:77:cc:41:1f:5e:2e:85:91: 58:0b:4c:ad:06:76:20:ae:36:97:1a:29:e3:04:80:f5:cd:af: 27:ec:11:eb:ce:4e:ba:61:18:ce:8d:8a:72:40:75:e1:05:4c: 40:78:ca:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZQ3ufj6J6B6UDxxXyRB9vyVXob0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4RjA4 MTgxOTZGNDAeFw0yNTA1MDQyMDI2NTFaFw0yNTA1MDcyMjQwNTFaMDMxMTAvBgNV BAMTKDM1OEQ2MzUyN0E2MzhCNzJEODQ4RUY5MEQwNUMzNDc1N0E5N0I2MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzKe3z2chiUqSD9me29ChUAR/p YoHzLeaaTcij3B+uYQGhdKXFTOVTqOmpmlNScJ4XfWIcz8K2A8OQvr9M9NkMTXwK QG1oQiZgmY2xhYdhAOvksFSatbzK4X0lJhijVE/OwILkziSziiXetUE07rShMuNB jlS+mc+LZZ26EzV/JT5qWfT+aXRdjAo0XR7pl6PG46r7/4E11g3BMZIq4DcBYF4D HyFQEf/AG4Ofwkp3Ym4ZNwi+6zkfGY7h7wDzcoyRTp4nu4fJDaQQp1f4sV476pLg GrFsqqWrmvNpPXf6zce+tc82FztY8KABEEw3671Dok3sh65Ca0L1dXJXMZkzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNY1jUnpji3LYSO+Q0Fw0dXqXtgIwHwYDVR0j BBgwFoAUwg3TevDvPKBV39+PP10Y8IGBlvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWJlN2FkOC1lMTVjLTQwMTQtYmZiMy1iZTY5YjdkNWRlODgvMC9DMjBERDM3QUYw RUYzQ0EwNTVERkRGOEYzRjVEMThGMDgxODE5NkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4RjA4MTgx OTZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWViZTdhZDgtZTE1Yy00MDE0LWJm YjMtYmU2OWI3ZDVkZTg4LzAvQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4 RjA4MTgxOTZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2Jl3ho7cVSjtRls4Ymyic/qYGro5uOdQr+ eeaBdbHjnG6kiO0jLi8XvRt/7+g0cJ8bgoNWE1/+tiw82emkjq/d4aDDmYW3Kibt STMCDKSn7tuedaJHIR+Dvnn724fAXWFHWrCJaqMYqU3MqgK4uDmT3y57pDLXjk9B MaQdEbt+vqXMLJ0jJAeS6Xz7+bUuWB7F2Z37NQGe/tO2lMHZOXJVZHOvmJ9sbKK3 cfJXDmyMtUFo6G229ZTmwBRaeQxlY8l0xzE+Df4JNnKBPhmEFlR3zEEfXi6FkVgL TK0GdiCuNpcaKeMEgPXNryfsEevOTrphGM6NinJAdeEFTEB4ypk= -----END CERTIFICATE-----Generated at Tue May 6 06:51:49 2025 by rpki-client