$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft File: C0CDF72A73FE200131853E0EE6A9B33708242F09.mft (raw, json) Hash identifier: EujgCI3dWgac5qP1/IhnQf/db2fNpSom4IjktLc9728= Subject key identifier: 7B:69:A1:0E:6E:C3:66:03:F8:86:2E:85:76:5F:B2:4E:F4:0B:86:FA Authority key identifier: C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 Certificate issuer: /CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Certificate serial: 21C33391C5488640869E455D79A9B8FE184ABDC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft Manifest number: 2F Signing time: Sat 10 May 2025 06:31:11 +0000 Manifest this update: Sat 10 May 2025 06:26:11 +0000 Manifest next update: Tue 13 May 2025 16:14:11 +0000 Files and hashes: 1: 3130332e39302e36322e302f32342d3234203d3e203633353038.roa (hash: MeO0TR42bgLm6thq+jwgdjWKMy27/0uvvv2g1npnqFo=) 2: C0CDF72A73FE200131853E0EE6A9B33708242F09.crl (hash: 14negxeG1+GhfhBIMv8933ATo4BKhWTbxwb+AgmVS0o=) 3: 3130332e39302e36332e302f32342d3234203d3e203633353038.roa (hash: MULEUEHSyZpY9qn3SDe7sQnJLs4h5Mi7a94B5iOdQb8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 16:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c3:33:91:c5:48:86:40:86:9e:45:5d:79:a9:b8:fe:18:4a:bd:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Validity Not Before: May 10 06:26:11 2025 GMT Not After : May 13 16:14:11 2025 GMT Subject: CN=7B69A10E6EC36603F8862E85765FB24EF40B86FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:27:09:3a:02:30:80:b4:f8:5a:47:4d:84:98: 7a:39:17:4d:6d:c1:cc:65:c0:ef:01:5c:f0:fc:e9: 02:df:76:0b:59:c6:11:9a:3c:6c:c2:d1:97:ef:95: 80:3d:f6:5b:bd:60:9d:c9:c1:ba:3a:b0:fd:57:2c: 1e:51:c3:74:77:f1:5b:0e:ad:77:2c:d8:90:76:f5: c8:c5:a3:6e:1d:92:fb:4a:c3:9a:91:07:7a:7c:8f: 49:61:8a:47:e7:60:86:b5:90:97:9e:58:c0:c8:e4: 61:aa:18:9b:88:98:91:55:bb:d9:3a:33:aa:84:84: 84:40:3d:2a:07:48:8b:bb:41:af:a0:13:8a:3b:a1: ea:11:87:de:4f:93:d9:12:95:a5:88:03:ba:d7:53: aa:b3:82:dc:02:3f:3a:4a:2e:4f:ee:2d:62:90:37: 83:d3:23:eb:30:49:d4:c2:20:41:d9:9a:fa:32:d2: 52:d3:3a:40:97:b2:57:dc:78:79:f8:7b:30:a3:2f: 41:6a:90:7b:8f:65:8d:8f:3a:5e:24:2e:0a:03:21: d3:e1:0e:2e:c4:2c:5c:ea:5c:11:2e:76:3e:a1:8a: 3c:79:30:de:44:d9:7c:33:39:32:5b:39:91:55:af: 33:1c:35:19:39:f0:d7:9e:45:0f:06:2b:75:56:ba: 52:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:69:A1:0E:6E:C3:66:03:F8:86:2E:85:76:5F:B2:4E:F4:0B:86:FA X509v3 Authority Key Identifier: keyid:C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:a6:db:b2:9f:40:49:91:12:86:ca:c6:8d:1b:c7:4d:f2:69: 8b:54:68:2b:5b:3a:9d:2e:94:07:d2:75:72:1e:3e:80:ac:f0: aa:7c:fd:a8:30:0c:5c:20:12:dd:56:ab:eb:74:f3:63:86:94: e9:de:4b:3f:99:80:c9:89:80:ac:b8:79:3c:bc:8b:7b:58:68: 66:1d:f3:49:46:cb:6d:34:4c:c8:e7:03:33:2a:03:3f:95:e2: 33:ba:61:a2:37:3f:3c:ef:ed:fb:7b:f3:4d:17:25:f7:fc:47: 84:39:a5:60:4f:27:71:2b:b6:7c:6c:56:30:0c:b8:9b:39:5c: da:23:84:6d:a6:15:5c:f6:bd:34:4c:ec:95:77:b7:ea:3f:24: 9f:aa:bb:d4:87:99:78:82:d0:ed:9f:14:9c:33:c7:66:2a:72: 20:32:b2:49:fd:d9:45:9d:2d:fc:01:56:43:d7:c8:0a:cb:9e: 44:f4:34:76:83:e9:13:21:81:c4:8b:90:e5:09:4f:cf:2e:58: e3:4e:1e:45:9d:9f:8c:3f:bb:99:71:f3:70:db:f6:89:e4:e9: 34:59:bf:8c:8a:a4:0b:bf:71:dd:dd:64:d2:89:79:81:ae:5d: 54:34:cc:b5:9b:d6:e9:af:92:47:8e:e9:5e:eb:06:77:cb:88: 7b:9c:b0:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIcMzkcVIhkCGnkVdeam4/hhKvcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcw ODI0MkYwOTAeFw0yNTA1MTAwNjI2MTFaFw0yNTA1MTMxNjE0MTFaMDMxMTAvBgNV BAMTKDdCNjlBMTBFNkVDMzY2MDNGODg2MkU4NTc2NUZCMjRFRjQwQjg2RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmJwk6AjCAtPhaR02EmHo5F01t wcxlwO8BXPD86QLfdgtZxhGaPGzC0ZfvlYA99lu9YJ3Jwbo6sP1XLB5Rw3R38VsO rXcs2JB29cjFo24dkvtKw5qRB3p8j0lhikfnYIa1kJeeWMDI5GGqGJuImJFVu9k6 M6qEhIRAPSoHSIu7Qa+gE4o7oeoRh95Pk9kSlaWIA7rXU6qzgtwCPzpKLk/uLWKQ N4PTI+swSdTCIEHZmvoy0lLTOkCXslfceHn4ezCjL0FqkHuPZY2POl4kLgoDIdPh Di7ELFzqXBEudj6hijx5MN5E2XwzOTJbOZFVrzMcNRk58NeeRQ8GK3VWulJDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe2mhDm7DZgP4hi6Fdl+yTvQLhvowHwYDVR0j BBgwFoAUwM33KnP+IAExhT4O5qmzNwgkLwkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Yzc1NDdmYy00OGQ0LTQxNjktYWUzMy1jYjQ1NGQ2ZDhiOTIvMC9DMENERjcyQTcz RkUyMDAxMzE4NTNFMEVFNkE5QjMzNzA4MjQyRjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcwODI0 MkYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3NTQ3ZmMtNDhkNC00MTY5LWFl MzMtY2I0NTRkNmQ4YjkyLzAvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIz MzcwODI0MkYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABam27KfQEmREobKxo0bx03yaYtUaCtbOp0u lAfSdXIePoCs8Kp8/agwDFwgEt1Wq+t082OGlOneSz+ZgMmJgKy4eTy8i3tYaGYd 80lGy200TMjnAzMqAz+V4jO6YaI3Pzzv7ft7800XJff8R4Q5pWBPJ3ErtnxsVjAM uJs5XNojhG2mFVz2vTRM7JV3t+o/JJ+qu9SHmXiC0O2fFJwzx2YqciAyskn92UWd LfwBVkPXyArLnkT0NHaD6RMhgcSLkOUJT88uWONOHkWdn4w/u5lx83Db9onk6TRZ v4yKpAu/cd3dZNKJeYGuXVQ0zLWb1umvkkeO6V7rBnfLiHucsJ0= -----END CERTIFICATE-----Generated at Sun May 11 15:12:00 2025 by rpki-client