$ rpki-client -vvf repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft File: 2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft (raw, json) Hash identifier: uZ+phYhnBdrTZPFA+6CPKfYy1Uiu1oQhufmVz6zk2Y8= Subject key identifier: 93:6C:D5:A5:5F:00:4A:3B:C5:C9:4C:9F:D1:B2:56:17:EE:C5:21:72 Authority key identifier: 23:37:E6:3A:01:42:98:4F:AF:F0:AD:9D:46:2E:B6:81:0A:C6:A0:36 Certificate issuer: /CN=2337E63A0142984FAFF0AD9D462EB6810AC6A036 Certificate serial: 5F06DE72384878546EED5F2A7778E5AACA1F41E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft Manifest number: 01C8 Signing time: Tue 06 May 2025 14:51:11 +0000 Manifest this update: Tue 06 May 2025 14:46:11 +0000 Manifest next update: Sat 10 May 2025 02:12:11 +0000 Files and hashes: 1: 3130332e3138352e3235322e302f32332d3234203d3e20313439363839.roa (hash: HnJcM1pYTCQNaP5Phr+gH+vSqyaKDOtxhKznqfzli4w=) 2: 2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl (hash: xRyznSQ50bTM4EFyYAok1595TwdVMv7w9DUFaB2+H2s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 02:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:06:de:72:38:48:78:54:6e:ed:5f:2a:77:78:e5:aa:ca:1f:41:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2337E63A0142984FAFF0AD9D462EB6810AC6A036 Validity Not Before: May 6 14:46:11 2025 GMT Not After : May 10 02:12:11 2025 GMT Subject: CN=936CD5A55F004A3BC5C94C9FD1B25617EEC52172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:68:58:61:c7:b5:92:be:12:eb:6a:61:0f:1c: 2c:a2:c7:f3:c6:ef:55:22:23:86:b6:e7:ae:ec:47: 4f:db:45:df:62:ab:1f:74:da:4d:90:a0:97:bf:e6: 07:0a:2a:2f:a0:11:45:7c:39:62:46:08:08:26:a7: be:6e:23:83:92:ba:8b:44:ea:48:b5:a7:54:35:43: 1c:60:fe:a7:f4:8f:5e:69:43:26:ca:24:ce:4c:0c: d4:b9:4b:19:37:12:eb:c7:d4:22:32:69:0c:66:14: 09:85:3a:3f:16:12:80:1b:91:ca:77:68:d5:23:03: f2:16:4c:89:44:34:a5:23:e8:9c:08:33:32:ff:8a: 1e:0a:aa:6b:e9:6d:a7:64:91:dd:df:a0:94:3d:d0: 8f:47:f0:a6:b2:72:26:1c:4b:ba:cb:38:90:1d:9e: df:92:14:2f:8b:49:66:eb:a9:60:b9:9e:a3:7c:bc: 65:b5:ec:d0:40:f2:61:db:38:f0:19:61:09:f3:24: cf:1e:df:51:3c:1d:5f:b0:84:5d:2d:08:3a:f9:65: c3:84:9a:b6:2d:ed:9c:6b:e7:fc:86:43:18:cd:f2: 9a:ae:8c:ec:21:2f:51:b9:b4:7f:5b:fa:db:96:48: 9e:d7:8e:ff:52:2d:e3:c4:c6:47:7a:02:ea:ff:6e: 2d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:6C:D5:A5:5F:00:4A:3B:C5:C9:4C:9F:D1:B2:56:17:EE:C5:21:72 X509v3 Authority Key Identifier: keyid:23:37:E6:3A:01:42:98:4F:AF:F0:AD:9D:46:2E:B6:81:0A:C6:A0:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:d9:2b:b0:2c:fc:a6:3f:24:00:43:da:a7:86:70:28:6e:e2: e6:e0:f7:2d:aa:64:06:3e:a8:86:5c:7a:6a:6e:f9:51:0b:12: ad:7b:e5:63:6b:94:d2:00:f9:4b:f7:81:86:19:90:f7:2d:c8: b0:f4:53:4d:b2:44:d3:c0:72:c2:2a:c0:01:f8:63:41:19:67: b3:1b:91:6a:0a:48:be:44:a4:61:a3:49:72:93:bf:25:de:2d: 51:7a:a1:ce:d1:2d:6f:86:04:ff:02:74:cd:23:a5:22:f0:b6: 96:61:17:eb:39:2f:88:fb:0c:d0:bc:b8:fb:0e:e2:93:78:0c: ba:63:a4:82:a4:be:08:62:f8:a6:be:1e:92:d5:00:8d:20:c4: 28:ca:47:06:9d:39:0a:fa:7a:d8:98:e5:2c:9f:7b:62:3c:d2: a6:7d:8c:bd:17:3e:fd:a4:d6:7e:71:6e:19:9a:ba:0a:65:7c: 8a:7b:18:8d:b4:01:9c:be:2b:6e:db:fe:b1:b8:70:e2:75:e9: d0:5e:f1:bf:23:13:3c:9e:96:88:57:0b:ad:f8:59:9f:5d:0f: 3b:c7:e7:a8:ab:f2:5d:0c:30:3f:a3:b2:de:c6:c7:7d:5e:b4: ca:20:4e:7c:c5:63:21:f6:08:df:e9:b6:c2:47:cd:b4:5b:f8: b1:9f:64:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXwbecjhIeFRu7V8qd3jlqsofQeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2ODEw QUM2QTAzNjAeFw0yNTA1MDYxNDQ2MTFaFw0yNTA1MTAwMjEyMTFaMDMxMTAvBgNV BAMTKDkzNkNENUE1NUYwMDRBM0JDNUM5NEM5RkQxQjI1NjE3RUVDNTIxNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqaFhhx7WSvhLramEPHCyix/PG 71UiI4a2567sR0/bRd9iqx902k2QoJe/5gcKKi+gEUV8OWJGCAgmp75uI4OSuotE 6ki1p1Q1Qxxg/qf0j15pQybKJM5MDNS5Sxk3EuvH1CIyaQxmFAmFOj8WEoAbkcp3 aNUjA/IWTIlENKUj6JwIMzL/ih4Kqmvpbadkkd3foJQ90I9H8KayciYcS7rLOJAd nt+SFC+LSWbrqWC5nqN8vGW17NBA8mHbOPAZYQnzJM8e31E8HV+whF0tCDr5ZcOE mrYt7Zxr5/yGQxjN8pqujOwhL1G5tH9b+tuWSJ7Xjv9SLePExkd6Aur/bi3ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk2zVpV8ASjvFyUyf0bJWF+7FIXIwHwYDVR0j BBgwFoAUIzfmOgFCmE+v8K2dRi62gQrGoDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTIzZDA2MC1iN2E1LTQ0NTUtOTk0MC00ZmI3YzcwNDQzMGYvMC8yMzM3RTYzQTAx NDI5ODRGQUZGMEFEOUQ0NjJFQjY4MTBBQzZBMDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2ODEwQUM2 QTAzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUyM2QwNjAtYjdhNS00NDU1LTk5 NDAtNGZiN2M3MDQ0MzBmLzAvMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2 ODEwQUM2QTAzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALPZK7As/KY/JABD2qeGcChu4ubg9y2qZAY+ qIZcempu+VELEq175WNrlNIA+Uv3gYYZkPctyLD0U02yRNPAcsIqwAH4Y0EZZ7Mb kWoKSL5EpGGjSXKTvyXeLVF6oc7RLW+GBP8CdM0jpSLwtpZhF+s5L4j7DNC8uPsO 4pN4DLpjpIKkvghi+Ka+HpLVAI0gxCjKRwadOQr6etiY5Syfe2I80qZ9jL0XPv2k 1n5xbhmaugplfIp7GI20AZy+K27b/rG4cOJ16dBe8b8jEzyelohXC634WZ9dDzvH 56ir8l0MMD+jst7Gx31etMogTnzFYyH2CN/ptsJHzbRb+LGfZO8= -----END CERTIFICATE-----Generated at Wed May 7 18:49:55 2025 by rpki-client