$ rpki-client -vvf repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft File: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft (raw, json) Hash identifier: hggRtiPId046i8h57StATjEsUYwWG8lmqghgs/qhSwE= Subject key identifier: E0:43:E7:1D:0D:0B:E7:B4:5B:DD:6C:06:FD:5B:ED:E2:3D:E0:50:32 Authority key identifier: 23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D Certificate issuer: /CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Certificate serial: 4DD034251C891B6A52A732D5325FD2C3794FD5BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft Manifest number: 04D1 Signing time: Wed 07 May 2025 04:31:46 +0000 Manifest this update: Wed 07 May 2025 04:26:46 +0000 Manifest next update: Sat 10 May 2025 06:33:46 +0000 Files and hashes: 1: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl (hash: HybKpIwF4dw1EJWmbOkS1jo0Ax8mydM9BT+exUtYnd8=) 2: 3230322e3136352e33322e302f32302d3234203d3e203137353338.roa (hash: Xq/nk1aLkZ/Nl9N21WbLvcg8yh69WLzrt1dFMWGoW1k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 06:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:d0:34:25:1c:89:1b:6a:52:a7:32:d5:32:5f:d2:c3:79:4f:d5:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Validity Not Before: May 7 04:26:46 2025 GMT Not After : May 10 06:33:46 2025 GMT Subject: CN=E043E71D0D0BE7B45BDD6C06FD5BEDE23DE05032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ee:4f:0e:52:ac:ec:ef:a8:23:fa:f6:99:6c: 96:e4:52:f2:53:c8:95:50:63:15:34:d7:60:79:2c: d0:1f:a0:8f:70:2f:d6:a8:e8:01:74:23:10:40:81: 22:03:6a:96:ae:fd:be:d8:63:b9:5f:2b:99:97:a4: cf:6d:cc:5c:80:e3:08:d3:ea:ee:56:7e:b1:9e:12: 2f:38:b8:83:ef:4c:42:f3:5f:ab:fc:ad:eb:d8:13: f4:70:7b:00:67:7f:fd:9e:b3:0f:51:b9:2b:d9:56: 10:a6:0d:f5:d3:e0:d0:3d:ae:8e:52:c8:8d:17:85: 3e:14:84:83:d6:f4:51:f4:ea:6d:4a:c3:15:3f:98: 81:c4:04:96:15:7d:ce:04:70:8e:dc:db:6d:02:2a: 41:ef:c2:33:8e:27:2e:25:85:f9:af:51:c6:60:72: a7:15:f4:28:54:96:80:f9:bb:8d:f5:92:2e:da:5b: 50:d8:0d:10:24:06:04:2a:2a:43:cd:8f:95:38:80: bc:92:53:50:aa:d7:1e:d4:9d:1d:40:50:f5:7e:45: 7e:10:65:58:ad:b7:33:ad:ca:3d:c5:a6:51:22:7a: 7c:60:e5:ef:04:12:1d:34:e2:67:77:d9:74:a7:d8: cc:8b:68:38:c4:49:7b:bd:bb:60:37:b6:1b:ff:dd: 8f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:43:E7:1D:0D:0B:E7:B4:5B:DD:6C:06:FD:5B:ED:E2:3D:E0:50:32 X509v3 Authority Key Identifier: keyid:23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:94:a4:16:88:b9:ce:8a:41:e1:b6:7c:72:62:4e:aa:b0:5f: 4a:f7:eb:d9:24:34:ef:94:9e:06:75:66:c6:5b:fc:d8:fd:c0: e8:ff:af:24:f4:d2:49:87:9c:64:03:c9:56:85:7c:49:71:6b: da:c2:75:85:2e:24:97:5a:1a:42:45:14:56:41:92:d5:d7:68: d5:21:31:25:ed:ef:2c:8f:ec:97:ed:4c:5d:21:81:8d:c6:b6: de:4d:71:62:7a:5e:70:ea:f0:cc:04:9f:45:21:87:cc:b1:e1: 4d:79:7e:3d:f5:63:bd:a3:fa:b1:27:35:a9:94:36:b9:a5:62: 1b:b4:5b:d1:bb:6d:c6:e1:48:4e:a3:9d:61:54:46:15:6a:53: 5b:29:eb:1b:be:7f:57:0c:4b:a6:8c:67:46:ee:7a:eb:75:65: 48:fd:be:9b:3f:b8:ab:49:c6:53:65:c2:1b:98:79:af:1a:e9: 93:c0:38:a4:74:4e:e0:24:35:40:c7:b2:0a:17:d6:92:d4:38: c6:5e:17:50:3a:3a:13:3f:d1:23:e9:88:be:88:2c:e9:d5:77: e9:9d:ee:19:1d:14:d4:6c:40:86:6d:a9:a7:d5:0a:d6:ab:5c: 4c:0e:fa:28:80:d3:f4:c0:e4:8f:3b:ac:de:51:d0:e1:38:ef: e7:90:61:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTdA0JRyJG2pSpzLVMl/Sw3lP1bowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUw NURERjIzRDAeFw0yNTA1MDcwNDI2NDZaFw0yNTA1MTAwNjMzNDZaMDMxMTAvBgNV BAMTKEUwNDNFNzFEMEQwQkU3QjQ1QkRENkMwNkZENUJFREUyM0RFMDUwMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC97k8OUqzs76gj+vaZbJbkUvJT yJVQYxU012B5LNAfoI9wL9ao6AF0IxBAgSIDapau/b7YY7lfK5mXpM9tzFyA4wjT 6u5WfrGeEi84uIPvTELzX6v8revYE/RwewBnf/2esw9RuSvZVhCmDfXT4NA9ro5S yI0XhT4UhIPW9FH06m1KwxU/mIHEBJYVfc4EcI7c220CKkHvwjOOJy4lhfmvUcZg cqcV9ChUloD5u431ki7aW1DYDRAkBgQqKkPNj5U4gLySU1Cq1x7UnR1AUPV+RX4Q ZVittzOtyj3FplEienxg5e8EEh004md32XSn2MyLaDjESXu9u2A3thv/3Y8FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4EPnHQ0L57Rb3WwG/Vvt4j3gUDIwHwYDVR0j BBgwFoAUIzrybX2ubDWesDrVxvtLTgXd8j0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTVlYWM5Ny0zMWI1LTRmMzMtODJmNC01MjQxNDcwY2JiYmUvMC8yMzNBRjI2RDdE QUU2QzM1OUVCMDNBRDVDNkZCNEI0RTA1RERGMjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUwNURE RjIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU1ZWFjOTctMzFiNS00ZjMzLTgy ZjQtNTI0MTQ3MGNiYmJlLzAvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRC NEUwNURERjIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKUpBaIuc6KQeG2fHJiTqqwX0r369kkNO+U ngZ1ZsZb/Nj9wOj/ryT00kmHnGQDyVaFfElxa9rCdYUuJJdaGkJFFFZBktXXaNUh MSXt7yyP7JftTF0hgY3Gtt5NcWJ6XnDq8MwEn0Uhh8yx4U15fj31Y72j+rEnNamU NrmlYhu0W9G7bcbhSE6jnWFURhVqU1sp6xu+f1cMS6aMZ0bueut1ZUj9vps/uKtJ xlNlwhuYea8a6ZPAOKR0TuAkNUDHsgoX1pLUOMZeF1A6OhM/0SPpiL6ILOnVd+md 7hkdFNRsQIZtqafVCtarXEwO+iiA0/TA5I87rN5R0OE47+eQYYY= -----END CERTIFICATE-----Generated at Thu May 8 15:49:18 2025 by rpki-client