$ rpki-client -vvf repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft File: 82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft (raw, json) Hash identifier: M89X7aS7AjRxDi09ETKXyd5720Lzdh4E8a4vRKsKs7M= Subject key identifier: 4C:30:22:86:7D:42:DC:20:D9:59:88:C1:22:AE:00:47:AB:0F:9A:C5 Authority key identifier: 82:EA:BF:24:EF:91:10:6C:28:AC:F9:48:3B:2E:F1:1B:2E:A5:31:9D Certificate issuer: /CN=82EABF24EF91106C28ACF9483B2EF11B2EA5319D Certificate serial: 4B3D1F085F52578E99FD5536BFB039857FEBC17D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft Manifest number: 46 Signing time: Mon 28 Apr 2025 20:50:48 +0000 Manifest this update: Mon 28 Apr 2025 20:45:48 +0000 Manifest next update: Fri 02 May 2025 07:11:48 +0000 Files and hashes: 1: 82EABF24EF91106C28ACF9483B2EF11B2EA5319D.crl (hash: ul2NMBe5eCzd1sZ+7exwDvv42envogQS6bN2HnnS0T8=) 2: 3130332e3137322e34332e302f32342d3234203d3e20313432333835.roa (hash: g9jFrOfBeKGOtAqjJ9uVuWkc/5vTF7nGD5l4sFSL5w4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.crl rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:3d:1f:08:5f:52:57:8e:99:fd:55:36:bf:b0:39:85:7f:eb:c1:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82EABF24EF91106C28ACF9483B2EF11B2EA5319D Validity Not Before: Apr 28 20:45:48 2025 GMT Not After : May 2 07:11:48 2025 GMT Subject: CN=4C3022867D42DC20D95988C122AE0047AB0F9AC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:24:9d:74:73:31:07:45:9d:11:d4:34:d4:13: 10:63:e8:ba:bb:12:2a:bb:20:6f:83:fe:c8:a1:44: 5d:bf:ef:8a:61:e2:13:19:14:a4:f2:56:83:3a:ef: 9f:ff:92:dc:44:52:6a:1c:c4:0a:7c:c6:36:0c:0b: 9d:42:c5:2d:c5:e2:c5:59:92:bb:08:fa:6a:76:f0: ee:0e:7e:d4:e1:da:6b:a0:bd:64:05:7b:da:47:f9: 0a:4a:13:3f:d1:fa:71:02:f9:ea:6a:b3:31:84:da: a9:03:bb:c6:f9:de:d6:03:5e:71:39:77:8a:95:70: 19:f1:6c:f5:ce:b1:4d:37:af:6f:f0:90:cc:2e:df: bb:4d:d4:74:41:44:0b:90:da:dd:96:a4:ee:5a:98: 43:55:be:45:07:0c:b5:b2:2a:6d:bb:45:79:9f:e1: 02:35:09:13:d9:c1:e3:89:0d:79:cb:88:3c:4e:1d: 58:46:8b:30:e8:ad:73:23:20:d6:50:cc:a2:48:1b: 55:fc:d7:7c:09:23:27:bc:5b:72:bf:82:ca:b0:65: f2:9c:92:f1:b2:1d:0f:d0:dd:80:80:b1:09:d0:dd: 16:ec:c1:1d:82:7f:1b:80:4e:bb:02:af:e4:ac:64: a1:83:ff:73:1d:f9:d5:f9:f0:56:0c:2a:e0:62:b8: 4b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:30:22:86:7D:42:DC:20:D9:59:88:C1:22:AE:00:47:AB:0F:9A:C5 X509v3 Authority Key Identifier: keyid:82:EA:BF:24:EF:91:10:6C:28:AC:F9:48:3B:2E:F1:1B:2E:A5:31:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f6:c8:46:f5:fc:af:f9:1c:09:7f:50:fa:03:88:01:18:8d: cc:39:af:4a:7b:8c:63:34:3f:7c:51:14:1e:ea:0a:f4:11:ab: 7d:e8:ad:bb:73:0c:84:77:c5:82:5d:7c:60:f2:38:42:50:e6: b2:55:cb:9b:ef:12:28:af:60:9d:4e:35:a9:de:93:8a:c5:7e: ad:b5:3b:97:62:51:43:1a:b3:d0:8a:60:7d:86:42:2e:b1:c9: 44:d2:68:61:8d:31:f1:fa:21:60:e6:30:a6:5a:4a:6a:62:98: aa:c9:6b:ca:0f:95:80:36:c7:51:e6:ee:cb:75:cb:f0:f2:9c: f0:d5:97:e0:6d:12:8a:bd:8c:4d:70:9a:54:73:3f:50:c4:e9: 3f:b1:6c:cd:74:fb:81:e6:39:3d:a2:fd:8c:16:ca:8e:68:e0: a2:a8:5e:49:b7:73:ea:9f:6b:9b:75:cc:be:b0:09:4b:19:9d: ad:07:ea:d0:23:6a:6b:0d:c4:f3:47:b7:1a:8b:ba:b3:8a:59: 3d:18:d0:b8:2b:b3:d5:5f:b3:1d:a1:08:ec:60:07:84:42:59: 4d:1f:32:fa:89:13:15:8a:23:c6:a1:7e:86:90:08:22:4c:c3: 56:9c:a0:19:e1:b1:12:33:73:88:4f:bb:0b:98:91:39:21:1d: 19:62:e5:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSz0fCF9SV46Z/VU2v7A5hX/rwX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJFQUJGMjRFRjkxMTA2QzI4QUNGOTQ4M0IyRUYxMUIy RUE1MzE5RDAeFw0yNTA0MjgyMDQ1NDhaFw0yNTA1MDIwNzExNDhaMDMxMTAvBgNV BAMTKDRDMzAyMjg2N0Q0MkRDMjBEOTU5ODhDMTIyQUUwMDQ3QUIwRjlBQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYJJ10czEHRZ0R1DTUExBj6Lq7 Eiq7IG+D/sihRF2/74ph4hMZFKTyVoM675//ktxEUmocxAp8xjYMC51CxS3F4sVZ krsI+mp28O4OftTh2mugvWQFe9pH+QpKEz/R+nEC+epqszGE2qkDu8b53tYDXnE5 d4qVcBnxbPXOsU03r2/wkMwu37tN1HRBRAuQ2t2WpO5amENVvkUHDLWyKm27RXmf 4QI1CRPZweOJDXnLiDxOHVhGizDorXMjINZQzKJIG1X813wJIye8W3K/gsqwZfKc kvGyHQ/Q3YCAsQnQ3RbswR2CfxuATrsCr+SsZKGD/3Md+dX58FYMKuBiuEtFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTDAihn1C3CDZWYjBIq4AR6sPmsUwHwYDVR0j BBgwFoAUguq/JO+REGworPlIOy7xGy6lMZ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTMxYzY5YS1iNzkyLTQwYTQtYTE0NC0yMzRiNWExZGRlNTIvMC84MkVBQkYyNEVG OTExMDZDMjhBQ0Y5NDgzQjJFRjExQjJFQTUzMTlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODJFQUJGMjRFRjkxMTA2QzI4QUNGOTQ4M0IyRUYxMUIyRUE1 MzE5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGUzMWM2OWEtYjc5Mi00MGE0LWEx NDQtMjM0YjVhMWRkZTUyLzAvODJFQUJGMjRFRjkxMTA2QzI4QUNGOTQ4M0IyRUYx MUIyRUE1MzE5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACz2yEb1/K/5HAl/UPoDiAEYjcw5r0p7jGM0 P3xRFB7qCvQRq33orbtzDIR3xYJdfGDyOEJQ5rJVy5vvEiivYJ1ONanek4rFfq21 O5diUUMas9CKYH2GQi6xyUTSaGGNMfH6IWDmMKZaSmpimKrJa8oPlYA2x1Hm7st1 y/DynPDVl+BtEoq9jE1wmlRzP1DE6T+xbM10+4HmOT2i/YwWyo5o4KKoXkm3c+qf a5t1zL6wCUsZna0H6tAjamsNxPNHtxqLurOKWT0Y0Lgrs9Vfsx2hCOxgB4RCWU0f MvqJExWKI8ahfoaQCCJMw1acoBnhsRIzc4hPuwuYkTkhHRli5f4= -----END CERTIFICATE-----Generated at Tue Apr 29 21:06:47 2025 by rpki-client