$ rpki-client -vvf repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft File: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft (raw, json) Hash identifier: 9Y8qvgTyY/6jB0sbpHe8e2C+HIrugsEijfAzlCNzEHs= Subject key identifier: CF:3F:58:B4:10:7A:77:F9:A4:76:AD:68:1D:80:71:08:F8:90:0A:69 Authority key identifier: CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 Certificate issuer: /CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Certificate serial: 5C88154126AA102F5702EBBF362230E0F3EF4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft Manifest number: 9E Signing time: Wed 07 May 2025 10:10:52 +0000 Manifest this update: Wed 07 May 2025 10:05:52 +0000 Manifest next update: Sat 10 May 2025 16:16:52 +0000 Files and hashes: 1: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl (hash: wbTfde93ty6eQs4NKBbL37Oga2yF77NmR3sLxrljnL0=) 2: 3135372e31302e3232322e302f32332d3234203d3e20313431383938.roa (hash: GMU+CWZ37DvQvoDo6BkkC4G2UgM09X3lRKvxQBg5EIg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 16:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:88:15:41:26:aa:10:2f:57:02:eb:bf:36:22:30:e0:f3:ef:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Validity Not Before: May 7 10:05:52 2025 GMT Not After : May 10 16:16:52 2025 GMT Subject: CN=CF3F58B4107A77F9A476AD681D807108F8900A69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:51:8f:5c:54:57:96:25:e3:ba:d7:d6:17:7f: 5b:19:b2:ba:d8:83:6b:ff:e7:18:9a:b5:f3:1b:13: 8e:9c:e2:ab:58:b1:09:16:eb:dd:af:73:86:c5:ad: 64:e9:b4:e9:fe:8b:0e:27:80:83:1a:5e:a0:c6:e7: f0:1a:77:ae:29:e0:21:85:fc:16:85:96:cf:c7:d9: da:aa:94:99:ee:d6:a1:09:c6:90:15:b2:db:e4:ab: 8f:85:1c:af:dd:87:af:cc:00:e1:ea:dd:f6:4e:4a: d4:4c:6c:6b:cc:34:31:50:d7:81:ad:e6:ac:25:3c: 6e:39:c2:ce:a8:ff:f1:e4:4c:aa:aa:d7:e6:5c:ea: 1f:18:8f:19:d8:6f:f0:db:0e:af:7d:3f:25:16:d6: 90:c7:44:47:ef:dd:d9:2d:99:4f:23:e2:e9:87:63: b7:85:13:7a:a5:a7:3d:49:86:47:19:10:e1:d5:13: 06:c8:b2:ee:91:6d:d6:08:b2:29:34:2f:93:1d:3b: b7:4a:1f:70:9f:62:f9:72:44:a3:d8:75:4e:f0:a6: da:da:b3:69:a2:78:7f:53:09:ff:18:ea:fd:4e:3d: f0:b1:f5:ac:c0:98:01:3d:17:4f:6a:97:94:cd:20: 11:a5:59:55:7b:27:59:55:d3:47:69:1e:86:14:81: b8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3F:58:B4:10:7A:77:F9:A4:76:AD:68:1D:80:71:08:F8:90:0A:69 X509v3 Authority Key Identifier: keyid:CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:df:de:ed:ee:f8:71:51:f3:eb:6a:02:ef:ff:73:59:ac:b3: ce:ec:b7:c3:88:eb:37:3c:e4:95:5c:aa:f3:d6:45:fe:7a:39: c1:fb:a6:76:a2:33:38:2b:82:54:74:d0:26:30:6c:f4:61:5c: b2:ff:5a:41:01:6c:85:22:f4:1e:2a:27:6d:14:c1:6e:ef:f9: 98:8a:05:c4:56:28:ea:96:1c:ed:de:0c:d8:ab:b3:34:dd:f5: 4e:ef:5c:fd:e8:b2:34:71:76:a7:e3:9a:2f:73:ca:41:a5:53: 66:a5:7e:f7:44:89:92:a6:41:f1:2b:fa:bc:be:ac:ba:b3:58: 5f:6b:46:4c:90:e9:5f:40:cb:7d:84:14:9f:ae:12:74:ac:ea: f5:d2:28:01:f6:7d:08:6d:e6:db:c3:65:c0:7c:14:e5:93:52: f1:8b:01:36:4e:8b:e8:c6:cb:21:4a:45:5d:31:25:c4:10:dc: bc:41:8a:79:d8:5d:51:ff:cf:f9:12:c6:9f:88:aa:c4:fa:d6: a4:7b:2e:79:f7:64:14:a0:1a:fb:fb:28:01:43:1c:39:c4:d7: 43:78:c9:b9:e4:76:51:f1:ab:af:0a:71:d8:1a:90:41:47:d6: 20:f5:4d:09:d3:7f:f0:b2:80:de:3b:44:5a:07:31:e3:b6:94: 41:de:cd:bf -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITXIgVQSaqEC9XAuu/NiIw4PPvTDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhDRUI0RjlBRTM0NzY2MzBBQUYyMkY0Q0Q0MkNFNjA2QkI0 NDQ0MTQwMB4XDTI1MDUwNzEwMDU1MloXDTI1MDUxMDE2MTY1MlowMzExMC8GA1UE AxMoQ0YzRjU4QjQxMDdBNzdGOUE0NzZBRDY4MUQ4MDcxMDhGODkwMEE2OTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJRRj1xUV5Yl47rX1hd/WxmyutiD a//nGJq18xsTjpziq1ixCRbr3a9zhsWtZOm06f6LDieAgxpeoMbn8Bp3ringIYX8 FoWWz8fZ2qqUme7WoQnGkBWy2+Srj4Ucr92Hr8wA4erd9k5K1Exsa8w0MVDXga3m rCU8bjnCzqj/8eRMqqrX5lzqHxiPGdhv8NsOr30/JRbWkMdER+/d2S2ZTyPi6Ydj t4UTeqWnPUmGRxkQ4dUTBsiy7pFt1giyKTQvkx07t0ofcJ9i+XJEo9h1TvCm2tqz aaJ4f1MJ/xjq/U498LH1rMCYAT0XT2qXlM0gEaVZVXsnWVXTR2kehhSBuO8CAwEA AaOCAjwwggI4MB0GA1UdDgQWBBTPP1i0EHp3+aR2rWgdgHEI+JAKaTAfBgNVHSME GDAWgBTOtPmuNHZjCq8i9M1CzmBrtERBQDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Nh Mzc2YTZlLTNlY2EtNGY3My04ZDE1LWQxZGRlZTkxZmY5OC8wL0NFQjRGOUFFMzQ3 NjYzMEFBRjIyRjRDRDQyQ0U2MDZCQjQ0NDQxNDAuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMS9DRUI0RjlBRTM0NzY2MzBBQUYyMkY0Q0Q0MkNFNjA2QkI0NDQ0 MTQwLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9jYTM3NmE2ZS0zZWNhLTRmNzMtOGQx NS1kMWRkZWU5MWZmOTgvMC9DRUI0RjlBRTM0NzY2MzBBQUYyMkY0Q0Q0MkNFNjA2 QkI0NDQ0MTQwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAtt/e7e74cVHz62oC7/9zWayzzuy3w4jrNzzk lVyq89ZF/no5wfumdqIzOCuCVHTQJjBs9GFcsv9aQQFshSL0HionbRTBbu/5mIoF xFYo6pYc7d4M2KuzNN31Tu9c/eiyNHF2p+OaL3PKQaVTZqV+90SJkqZB8Sv6vL6s urNYX2tGTJDpX0DLfYQUn64SdKzq9dIoAfZ9CG3m28NlwHwU5ZNS8YsBNk6L6MbL IUpFXTElxBDcvEGKedhdUf/P+RLGn4iqxPrWpHsuefdkFKAa+/soAUMcOcTXQ3jJ ueR2UfGrrwpx2BqQQUfWIPVNCdN/8LKA3jtEWgcx47aUQd7Nvw== -----END CERTIFICATE-----Generated at Thu May 8 19:09:35 2025 by rpki-client