$ rpki-client -vvf repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft File: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft (raw, json) Hash identifier: /t/umcoyZSsOir/joWuIkiPLOe/US6+hPnKJ2VFl8PA= Subject key identifier: 9C:77:4F:88:98:87:0C:45:DE:F4:28:71:B2:74:0E:E6:99:D9:BB:6A Authority key identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 Certificate issuer: /CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Certificate serial: 09F35728B6B0B5FCFBD212BF678EA56A79FDA94C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft Manifest number: 04CE Signing time: Mon 12 May 2025 00:21:06 +0000 Manifest this update: Mon 12 May 2025 00:16:06 +0000 Manifest next update: Thu 15 May 2025 07:36:06 +0000 Files and hashes: 1: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl (hash: yLrmqz74oM9JgYcDhnr4TrgiMV4GLR9LW1x67jmWLLI=) 2: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: +wADgBbGHlnAaJF9ne9rrntz6G0qBIbnlfj6NpTrwJg=) 3: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: czpyfmW5qXUOgmdTX+fLvnr7WIFjh3STKQ+hvn+zqQg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 07:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:f3:57:28:b6:b0:b5:fc:fb:d2:12:bf:67:8e:a5:6a:79:fd:a9:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Validity Not Before: May 12 00:16:06 2025 GMT Not After : May 15 07:36:06 2025 GMT Subject: CN=9C774F8898870C45DEF42871B2740EE699D9BB6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9e:fd:77:63:5a:99:4b:b5:a4:bf:e8:c7:26: 61:f6:a9:82:f0:25:0c:c3:9d:b3:e1:5b:69:1a:2a: f0:12:5f:91:99:67:df:b1:fd:99:90:1a:5a:10:11: 8d:12:50:99:0d:a5:8e:c3:ef:2c:37:30:bb:37:10: 83:1f:e6:6e:d1:7d:0d:ec:2d:fb:d0:01:d6:f3:71: dc:a9:68:e3:ca:fa:03:e9:02:c0:e7:73:a7:61:a1: 32:74:49:ed:4e:35:80:56:d0:fb:ad:56:43:69:7d: 8e:95:c8:20:58:b3:9d:84:2f:1a:a4:8b:60:04:3f: f5:1a:09:f1:87:38:62:4e:fe:51:f3:77:67:47:b9: fb:05:01:b6:f9:50:2b:63:4d:fc:ce:5a:be:ee:32: 84:e9:21:27:0a:aa:09:d2:8d:5b:c1:e6:e7:3a:07: f2:58:a1:10:74:64:5f:3f:25:de:d7:cb:fe:34:e4: d0:87:57:bf:e0:04:28:7b:a4:15:2b:30:55:57:c0: 86:ae:ee:14:6f:ae:17:27:c6:4a:36:bb:0e:38:35: cd:ef:de:f0:97:af:18:00:6b:ec:a6:28:99:81:71: c3:68:f0:62:ba:51:7d:16:69:2b:e4:0d:2f:9a:1e: cf:87:af:31:be:bd:9c:64:d8:4f:de:53:c5:10:be: f3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:77:4F:88:98:87:0C:45:DE:F4:28:71:B2:74:0E:E6:99:D9:BB:6A X509v3 Authority Key Identifier: keyid:CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:f6:6c:a8:87:a1:dc:27:42:8a:68:94:fa:29:ad:11:3b:d2: 56:3a:9b:ca:54:5a:e5:8b:93:5d:28:fe:08:ae:d2:a9:13:3c: 26:80:c7:e8:fa:3b:ef:ad:f2:1f:b8:9f:bf:d3:1f:28:e5:55: 74:f1:70:33:08:0f:4c:1f:9b:91:0f:15:eb:7b:25:e6:cc:bc: a2:b6:4c:f1:72:3c:0f:e0:6d:b3:c8:32:b3:c1:a2:33:4c:b1: 64:d8:ea:2e:89:08:dc:e5:bf:47:b1:8c:e1:55:f6:e5:44:8c: a0:e1:10:5f:f3:a1:6b:99:a7:db:27:2e:fb:77:f5:e6:08:7a: a7:c8:71:b9:8f:a4:d5:50:f7:43:a9:9a:51:f4:9c:0b:11:c5: 07:f5:1e:58:0b:9e:b0:af:cb:db:a6:e7:2e:0b:4e:fd:21:cc: 5d:1f:36:3e:07:5f:82:a7:3f:2e:46:fe:4f:e0:93:89:94:7a: be:68:cd:ff:08:c3:5f:19:2a:9c:c2:ae:39:fe:6a:a9:54:44: f6:9c:5b:d5:1d:6f:bd:fd:00:a0:88:1c:c0:84:53:a2:da:d4: 06:6a:f1:66:ab:39:19:cb:fc:e4:af:2d:7d:d7:da:72:b6:a7: 55:01:34:3f:f6:56:86:93:d1:6c:15:b7:90:86:d0:02:2c:40: 4f:1f:ac:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCfNXKLawtfz70hK/Z46lann9qUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4 RjZDMTE4OTAeFw0yNTA1MTIwMDE2MDZaFw0yNTA1MTUwNzM2MDZaMDMxMTAvBgNV BAMTKDlDNzc0Rjg4OTg4NzBDNDVERUY0Mjg3MUIyNzQwRUU2OTlEOUJCNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCnv13Y1qZS7Wkv+jHJmH2qYLw JQzDnbPhW2kaKvASX5GZZ9+x/ZmQGloQEY0SUJkNpY7D7yw3MLs3EIMf5m7RfQ3s LfvQAdbzcdypaOPK+gPpAsDnc6dhoTJ0Se1ONYBW0PutVkNpfY6VyCBYs52ELxqk i2AEP/UaCfGHOGJO/lHzd2dHufsFAbb5UCtjTfzOWr7uMoTpIScKqgnSjVvB5uc6 B/JYoRB0ZF8/Jd7Xy/405NCHV7/gBCh7pBUrMFVXwIau7hRvrhcnxko2uw44Nc3v 3vCXrxgAa+ymKJmBccNo8GK6UX0WaSvkDS+aHs+HrzG+vZxk2E/eU8UQvvNlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnHdPiJiHDEXe9ChxsnQO5pnZu2owHwYDVR0j BBgwFoAUzgzRNTpCoKme52jz+vI1449sEYkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzczYmM2MS1jNWY5LTQxNTktOThiYy1hMDUzMGI0ZGQ4YjQvMC9DRTBDRDEzNTNB NDJBMEE5OUVFNzY4RjNGQUYyMzVFMzhGNkMxMTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1RTM4RjZD MTE4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM3M2JjNjEtYzVmOS00MTU5LTk4 YmMtYTA1MzBiNGRkOGI0LzAvQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2OEYzRkFGMjM1 RTM4RjZDMTE4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALP2bKiHodwnQopolPoprRE70lY6m8pUWuWL k10o/giu0qkTPCaAx+j6O++t8h+4n7/THyjlVXTxcDMID0wfm5EPFet7JebMvKK2 TPFyPA/gbbPIMrPBojNMsWTY6i6JCNzlv0exjOFV9uVEjKDhEF/zoWuZp9snLvt3 9eYIeqfIcbmPpNVQ90OpmlH0nAsRxQf1HlgLnrCvy9um5y4LTv0hzF0fNj4HX4Kn Py5G/k/gk4mUer5ozf8Iw18ZKpzCrjn+aqlURPacW9Udb739AKCIHMCEU6La1AZq 8WarORnL/OSvLX3X2nK2p1UBND/2VoaT0WwVt5CG0AIsQE8frMc= -----END CERTIFICATE-----Generated at Tue May 13 03:11:45 2025 by rpki-client