$ rpki-client -vvf repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft File: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft (raw, json) Hash identifier: x+0FYQc7ig+Y4JPTG9+RRAVy3b0WLu/+IcS9EGLxpZ8= Subject key identifier: 18:47:65:0A:FF:DB:A9:1A:D8:76:AE:15:0E:1A:30:4C:FE:D8:2B:C9 Authority key identifier: CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50 Certificate issuer: /CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450 Certificate serial: 1D24B06BC36666756FCBB6A6C3B08C90E9F62877 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft Manifest number: 0355 Signing time: Sun 04 May 2025 09:02:14 +0000 Manifest this update: Sun 04 May 2025 08:57:14 +0000 Manifest next update: Wed 07 May 2025 20:05:14 +0000 Files and hashes: 1: 3130332e32302e3136362e302f32332d3234203d3e203538353531.roa (hash: CKy2gQtIBacjD8C67dYMJdlND8CS/j+yiiHq3SKDq4Q=) 2: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl (hash: jWUhTVLYKvaDzAEE0IZJo+fvvqd4YTqDff3d7w7KwBE=) 3: 3130332e382e37382e302f32332d3234203d3e203538353531.roa (hash: 3rFUXtbuW4eWsGnAQRXWPa2T5G8tLKctM7LWy4Bhpvk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 20:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:24:b0:6b:c3:66:66:75:6f:cb:b6:a6:c3:b0:8c:90:e9:f6:28:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450 Validity Not Before: May 4 08:57:14 2025 GMT Not After : May 7 20:05:14 2025 GMT Subject: CN=1847650AFFDBA91AD876AE150E1A304CFED82BC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c1:39:28:75:6c:dd:0b:c7:8d:4b:3d:52:69: 96:8d:df:e6:89:fa:27:ae:b8:e2:94:05:ac:0a:fd: af:b3:40:06:5b:06:ff:72:a9:42:c9:9f:ca:80:7c: 92:c9:98:24:9e:62:a3:ae:2f:a2:cf:e5:7c:b9:e4: bd:d0:29:c2:ee:02:f0:c2:fd:7d:bf:c4:4f:ec:fa: d6:fa:10:dd:15:e9:2c:7f:2e:30:15:93:91:34:80: ab:39:30:42:87:5b:db:4c:fa:66:53:33:37:bc:81: 76:cf:12:6a:23:8b:64:7f:e3:0b:eb:fd:6e:a4:40: ec:7a:ca:e7:46:4b:74:30:02:ef:e1:1a:26:d0:ef: 40:ed:f9:f9:ee:e5:4a:0c:7e:c5:0e:8f:c9:f4:72: 9a:d0:48:d4:ee:f4:92:30:bf:f7:a8:40:da:a8:c7: 2e:90:24:bb:84:ee:50:97:a3:30:23:64:8d:7c:c6: ca:67:df:99:26:bb:4a:45:14:37:be:4e:68:ae:7a: 9b:2c:06:6e:0d:15:b2:63:b8:b6:ee:0f:0e:ab:98: 67:6a:67:aa:ba:32:c5:64:d2:4a:8b:63:19:c5:d6: 66:cd:da:9d:5a:50:9d:3d:68:3c:3b:1d:08:be:43: 6c:7f:ec:34:cc:6a:1a:ca:8f:43:2f:84:58:70:63: b4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:47:65:0A:FF:DB:A9:1A:D8:76:AE:15:0E:1A:30:4C:FE:D8:2B:C9 X509v3 Authority Key Identifier: keyid:CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:ab:40:96:ee:9e:5a:ed:e8:34:0c:92:9c:4b:a1:71:28:be: d8:28:bb:c9:83:f9:58:12:f8:b4:2c:b4:f8:60:d1:74:d4:9f: e5:d2:6c:f6:e3:e7:9b:f8:75:8b:4c:c3:14:5e:7b:4c:80:24: e6:c6:63:f6:7c:66:d3:18:ff:36:48:be:11:e7:99:ad:38:55: d3:bc:78:cb:6c:88:0b:60:7c:5f:99:2c:68:29:19:52:f1:46: 04:1c:57:ec:1a:aa:6f:d4:bc:bb:e3:9f:30:8f:90:2f:0e:74: f9:07:de:c0:99:f8:a0:43:b2:6f:d1:31:13:cc:d7:1d:92:db: 14:28:2a:ba:41:40:80:e5:6f:88:11:29:8d:79:72:dc:33:07: 43:84:1a:e8:c8:9f:ef:e4:3f:9f:af:56:f0:de:da:82:0a:2a: e2:e0:77:e0:fa:b8:7d:42:b8:72:c9:84:4d:e9:a1:e4:db:75: e0:56:68:a0:ba:0e:4a:86:3c:18:57:8a:5a:6a:2f:04:f5:58: fc:e2:c2:31:b6:b4:e8:21:83:5c:f1:28:5d:6d:b6:08:70:9f: e9:c4:39:85:dc:f3:ab:5f:ee:b7:26:b9:be:53:5e:43:d8:ba: eb:cf:f8:c1:50:18:77:fd:6b:fb:8e:54:1a:eb:f4:a3:01:fc: c6:6b:e6:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHSSwa8NmZnVvy7amw7CMkOn2KHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgx QUFEMjQ1MDAeFw0yNTA1MDQwODU3MTRaFw0yNTA1MDcyMDA1MTRaMDMxMTAvBgNV BAMTKDE4NDc2NTBBRkZEQkE5MUFEODc2QUUxNTBFMUEzMDRDRkVEODJCQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqwTkodWzdC8eNSz1SaZaN3+aJ +ieuuOKUBawK/a+zQAZbBv9yqULJn8qAfJLJmCSeYqOuL6LP5Xy55L3QKcLuAvDC /X2/xE/s+tb6EN0V6Sx/LjAVk5E0gKs5MEKHW9tM+mZTMze8gXbPEmoji2R/4wvr /W6kQOx6yudGS3QwAu/hGibQ70Dt+fnu5UoMfsUOj8n0cprQSNTu9JIwv/eoQNqo xy6QJLuE7lCXozAjZI18xspn35kmu0pFFDe+TmiuepssBm4NFbJjuLbuDw6rmGdq Z6q6MsVk0kqLYxnF1mbN2p1aUJ09aDw7HQi+Q2x/7DTMahrKj0MvhFhwY7QPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGEdlCv/bqRrYdq4VDhowTP7YK8kwHwYDVR0j BBgwFoAUzcCF49TXVDmuG7bLaPGA6BqtJFAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDBlMGRlYS01ZjliLTQyNWMtODJjZS0zMGE4NjUwMDdjMzUvMC9DREMwODVFM0Q0 RDc1NDM5QUUxQkI2Q0I2OEYxODBFODFBQUQyNDUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgxQUFE MjQ1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQwZTBkZWEtNWY5Yi00MjVjLTgy Y2UtMzBhODY1MDA3YzM1LzAvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgw RTgxQUFEMjQ1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCrQJbunlrt6DQMkpxLoXEovtgou8mD+VgS +LQstPhg0XTUn+XSbPbj55v4dYtMwxRee0yAJObGY/Z8ZtMY/zZIvhHnma04VdO8 eMtsiAtgfF+ZLGgpGVLxRgQcV+waqm/UvLvjnzCPkC8OdPkH3sCZ+KBDsm/RMRPM 1x2S2xQoKrpBQIDlb4gRKY15ctwzB0OEGujIn+/kP5+vVvDe2oIKKuLgd+D6uH1C uHLJhE3poeTbdeBWaKC6DkqGPBhXilpqLwT1WPziwjG2tOghg1zxKF1ttghwn+nE OYXc86tf7rcmub5TXkPYuuvP+MFQGHf9a/uOVBrr9KMB/MZr5qc= -----END CERTIFICATE-----Generated at Tue May 6 11:55:52 2025 by rpki-client