$ rpki-client -vvf repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft File: 2140359E23DF113617F9AB2E131D231E4D35F9AA.mft (raw, json) Hash identifier: mDuGW2FSKXtLpIi6mf9ci/zWGrJBb/EwVcjoWnWi/c4= Subject key identifier: 9B:C7:9B:8C:CB:BC:0B:43:80:D0:A9:2A:8B:1B:B9:1A:EE:83:F7:63 Authority key identifier: 21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA Certificate issuer: /CN=2140359E23DF113617F9AB2E131D231E4D35F9AA Certificate serial: 49EA5DE617BFB13630CE6A30026F5550AFA9F7DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft Manifest number: 04CE Signing time: Mon 28 Apr 2025 05:41:50 +0000 Manifest this update: Mon 28 Apr 2025 05:36:50 +0000 Manifest next update: Thu 01 May 2025 08:07:50 +0000 Files and hashes: 1: 2140359E23DF113617F9AB2E131D231E4D35F9AA.crl (hash: ppi/A26B+OzWRq/4JCKdNPfZqkdATPkb0A+f6mYvQgI=) 2: 323430353a6234303a3a2f33322d3438203d3e203535363734.roa (hash: vwG6rdNeDAh4jG1/O0P49gXsPwynq5he4dtgM3d7KkM=) 3: 3130312e3230332e3136382e302f32322d3234203d3e203535363734.roa (hash: vzqh/DIiKaxTtSHfzibTju1MXYLVCm6nZTZLoRiAMXA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.crl rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 08:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:ea:5d:e6:17:bf:b1:36:30:ce:6a:30:02:6f:55:50:af:a9:f7:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2140359E23DF113617F9AB2E131D231E4D35F9AA Validity Not Before: Apr 28 05:36:50 2025 GMT Not After : May 1 08:07:50 2025 GMT Subject: CN=9BC79B8CCBBC0B4380D0A92A8B1BB91AEE83F763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:aa:f9:74:ec:1d:8c:38:62:bf:a5:6a:d6:59: 5c:f6:27:92:ca:94:06:c3:b1:08:1b:5d:00:52:3a: 65:85:b0:4c:af:5a:52:4b:09:51:9e:33:47:e5:dc: 3b:09:42:b2:5e:24:d4:d9:01:16:ab:23:46:1e:f5: 6f:e4:db:fc:46:d4:29:3d:b4:59:15:cc:0a:e8:72: 32:06:3c:e4:f0:6c:ca:ef:72:10:60:da:f7:ae:59: 28:2d:39:d5:fb:6e:0f:be:98:90:44:3b:f3:2d:1c: 06:c7:15:42:66:42:8d:f1:e3:9c:33:f4:76:3b:42: 53:e5:00:07:b7:44:06:21:ab:88:d4:6f:47:bf:98: 65:ea:4f:91:52:89:7a:0b:d2:b2:6f:f1:86:e9:7f: 11:fc:20:a5:d1:05:59:d5:12:b6:95:bc:9d:67:df: ff:ee:85:cf:32:b3:bd:4d:a7:00:eb:cc:2e:2d:4e: a7:27:27:26:9e:4c:8f:43:aa:c1:94:22:2d:0d:38: 4c:53:23:fc:ad:64:fb:da:78:d2:20:87:47:b8:06: 62:29:64:b9:a3:74:48:14:48:48:12:a8:ce:a8:05: 11:04:dd:c8:0a:56:c0:d5:2b:f9:3e:2e:cb:70:c2: 40:25:4a:cb:20:01:15:62:e3:45:7a:8d:22:bb:0e: 27:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C7:9B:8C:CB:BC:0B:43:80:D0:A9:2A:8B:1B:B9:1A:EE:83:F7:63 X509v3 Authority Key Identifier: keyid:21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a0:73:ee:5f:bb:54:b1:1c:7e:2f:5d:79:d5:5b:f7:d8:5a: 3f:ba:c4:8d:55:53:56:14:e4:60:9a:0e:c2:e9:0d:ac:c4:46: 3a:e2:90:31:c9:48:9d:3c:08:35:32:00:e1:fb:f7:b6:df:ce: 09:1f:22:1e:ea:d9:e2:a9:90:b6:a4:b1:b7:ac:32:b1:8a:b2: 5d:47:77:de:4c:75:bc:cd:6a:80:e6:11:81:9a:59:d2:40:e4: 5b:9b:ca:13:f4:c3:93:8d:4c:7d:46:9a:c3:6f:ac:85:18:ec: 36:78:a4:2f:88:ad:24:e8:9f:38:5a:8b:6b:f5:f2:14:65:2c: 5e:b6:ea:74:f2:73:67:ae:89:3c:63:4e:b2:d3:d7:29:0c:dd: 2a:99:d6:c7:c6:ee:0d:5f:75:b7:0d:a1:0f:99:87:05:fc:40: 5d:4b:24:93:5a:8a:73:67:ce:7e:01:e0:11:54:2d:bb:78:85: a4:25:01:e5:79:0e:67:76:b6:6e:3e:f4:f3:e8:39:16:f8:08: 3d:71:3a:56:80:d5:cb:45:86:a7:79:d5:a6:9b:55:de:57:8a: e0:f0:b6:d0:b0:96:f4:19:fd:c6:1f:65:55:68:5b:0a:88:e1: a9:4a:ef:31:8c:a9:85:0e:1c:3d:cd:8f:10:42:33:c9:95:97: 6d:9f:7b:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSepd5he/sTYwzmowAm9VUK+p990wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIzMUU0 RDM1RjlBQTAeFw0yNTA0MjgwNTM2NTBaFw0yNTA1MDEwODA3NTBaMDMxMTAvBgNV BAMTKDlCQzc5QjhDQ0JCQzBCNDM4MEQwQTkyQThCMUJCOTFBRUU4M0Y3NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsqvl07B2MOGK/pWrWWVz2J5LK lAbDsQgbXQBSOmWFsEyvWlJLCVGeM0fl3DsJQrJeJNTZARarI0Ye9W/k2/xG1Ck9 tFkVzArocjIGPOTwbMrvchBg2veuWSgtOdX7bg++mJBEO/MtHAbHFUJmQo3x45wz 9HY7QlPlAAe3RAYhq4jUb0e/mGXqT5FSiXoL0rJv8YbpfxH8IKXRBVnVEraVvJ1n 3//uhc8ys71NpwDrzC4tTqcnJyaeTI9DqsGUIi0NOExTI/ytZPvaeNIgh0e4BmIp ZLmjdEgUSEgSqM6oBREE3cgKVsDVK/k+LstwwkAlSssgARVi40V6jSK7DidJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm8ebjMu8C0OA0Kkqixu5Gu6D92MwHwYDVR0j BBgwFoAUIUA1niPfETYX+asuEx0jHk01+aowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTgwZjc1NS01YzI3LTQwZjgtODBhZi0yZmE4ZGYxMTUyODIvMC8yMTQwMzU5RTIz REYxMTM2MTdGOUFCMkUxMzFEMjMxRTREMzVGOUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIzMUU0RDM1 RjlBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4MGY3NTUtNWMyNy00MGY4LTgw YWYtMmZhOGRmMTE1MjgyLzAvMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIz MUU0RDM1RjlBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqgc+5fu1SxHH4vXXnVW/fYWj+6xI1VU1YU 5GCaDsLpDazERjrikDHJSJ08CDUyAOH797bfzgkfIh7q2eKpkLaksbesMrGKsl1H d95MdbzNaoDmEYGaWdJA5FubyhP0w5ONTH1GmsNvrIUY7DZ4pC+IrSTonzhai2v1 8hRlLF626nTyc2euiTxjTrLT1ykM3SqZ1sfG7g1fdbcNoQ+ZhwX8QF1LJJNainNn zn4B4BFULbt4haQlAeV5Dmd2tm4+9PPoORb4CD1xOlaA1ctFhqd51aabVd5XiuDw ttCwlvQZ/cYfZVVoWwqI4alK7zGMqYUOHD3NjxBCM8mVl22fe/U= -----END CERTIFICATE-----Generated at Tue Apr 29 23:33:07 2025 by rpki-client