$ rpki-client -vvf repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft File: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft (raw, json) Hash identifier: JRnWibJkwmcL59Pr20Q05asAExVAqLQfwwLRDUB1dyo= Subject key identifier: 3D:B2:BF:EB:C7:00:4F:34:00:39:3D:9F:90:BA:53:A0:B5:8B:EA:CE Authority key identifier: CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 Certificate issuer: /CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Certificate serial: 2D7682CFFF1C8392BBB40592ECD3AA8CE641CBBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft Manifest number: B0 Signing time: Thu 01 May 2025 15:02:11 +0000 Manifest this update: Thu 01 May 2025 14:57:11 +0000 Manifest next update: Sun 04 May 2025 17:45:11 +0000 Files and hashes: 1: 3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (hash: +r4hk/SZgMTurIzv+fNPFL73b+UlFP07BXG9b2YC2us=) 2: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl (hash: tjZOb+ipbDe0fzMuGeqAX2/E0Ox7XG3gbTkHpZf1akQ=) 3: 3130332e3135342e37372e302f32342d3234203d3e20313430343831.roa (hash: A5SwHDOo7iq6Y1gkaeCc0A/1Pj/X9IMjx0F9yKE6Rqs=) 4: 3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (hash: AokcwqbiC4agd4vuQFD9ZPFGfzBXJyXcGsAxju/Umd8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 17:45:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:76:82:cf:ff:1c:83:92:bb:b4:05:92:ec:d3:aa:8c:e6:41:cb:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Validity Not Before: May 1 14:57:11 2025 GMT Not After : May 4 17:45:11 2025 GMT Subject: CN=3DB2BFEBC7004F3400393D9F90BA53A0B58BEACE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bf:e3:e9:21:fb:7e:ac:54:0a:db:c1:49:90: 6f:41:21:34:a4:a7:0a:d7:c8:be:80:98:f0:44:90: 04:7a:2d:57:15:89:8c:92:81:4d:46:fc:66:ce:68: 23:ff:7c:b4:d0:e1:af:de:5e:fb:d9:69:a5:90:f2: a9:88:f3:2b:d3:7e:7f:02:2e:94:9b:bf:62:ae:a2: bb:65:22:65:87:d8:c3:7e:06:a8:7f:0d:ac:be:bf: b7:15:12:38:4f:1c:81:6d:e5:44:9f:ba:3e:8b:95: 14:44:d5:bb:7c:40:11:58:93:c1:c3:1e:cc:7b:df: 71:b5:f7:68:d2:a1:b7:0f:2b:72:24:67:4c:d7:be: a3:52:c1:cc:b6:51:f8:58:be:d0:f1:d1:68:14:26: 26:b0:75:c9:36:1b:09:35:b8:22:25:63:7b:19:57: 69:46:eb:1e:68:a1:96:0c:e5:9a:3b:fe:56:44:ed: b1:db:b8:cf:c8:ba:8e:de:35:bd:3b:8d:24:04:b7: d9:ea:bd:0e:ca:42:ff:31:63:a2:30:63:dd:cf:ad: 1f:47:41:51:20:e0:03:c5:86:a2:c2:cb:9d:b8:c9: a1:97:34:9b:42:ab:1e:ac:31:9f:e0:ee:ac:f4:af: 32:7d:03:60:f0:10:b5:15:a0:31:41:90:95:99:b7: b6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B2:BF:EB:C7:00:4F:34:00:39:3D:9F:90:BA:53:A0:B5:8B:EA:CE X509v3 Authority Key Identifier: keyid:CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:6f:d5:0a:f7:2d:05:bc:a0:5d:63:fa:4f:04:b8:ed:e9:2e: 1f:4d:c7:ba:1d:b3:0c:a1:0b:06:10:5f:cc:29:92:96:ed:da: 45:2e:fa:58:9a:ac:ef:03:c4:ab:e3:16:3a:6b:77:a6:90:67: 2b:9b:6f:49:10:ca:9a:c5:69:d3:3b:a3:5c:29:cb:8c:20:d8: 06:14:38:99:08:c0:a8:35:0a:66:b7:03:be:2c:38:d4:8d:fd: 0b:05:af:35:d8:0f:ee:69:8b:e8:6b:fa:69:c3:98:e5:ab:b9: 11:5e:a3:41:8f:22:2e:31:0a:7a:90:15:e2:87:56:73:4d:ab: f0:d4:98:95:5a:63:c2:a6:08:ad:06:ae:26:ca:5e:f0:9b:13: f4:69:2c:0d:38:7f:0d:7b:3d:d9:0a:6c:93:2f:90:04:ec:eb: 9e:e7:f5:24:8c:96:34:6f:72:6e:e7:16:b7:05:f4:45:3a:6b: 52:73:1c:54:61:3b:87:f9:5e:eb:ea:0c:e6:fd:c4:96:14:2b: 3b:bc:0d:17:6f:aa:0d:ff:0c:5a:51:d8:86:3d:37:f9:d8:0d: 85:57:95:13:ab:55:03:7b:c6:65:91:92:e3:e3:1f:50:78:f1: b8:78:b7:72:8f:46:cb:99:81:da:9f:94:90:ca:d0:ec:4b:7d: 29:8b:7d:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULXaCz/8cg5K7tAWS7NOqjOZBy70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlC NjVEMTdEMzAeFw0yNTA1MDExNDU3MTFaFw0yNTA1MDQxNzQ1MTFaMDMxMTAvBgNV BAMTKDNEQjJCRkVCQzcwMDRGMzQwMDM5M0Q5RjkwQkE1M0EwQjU4QkVBQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1v+PpIft+rFQK28FJkG9BITSk pwrXyL6AmPBEkAR6LVcViYySgU1G/GbOaCP/fLTQ4a/eXvvZaaWQ8qmI8yvTfn8C LpSbv2KuortlImWH2MN+Bqh/Day+v7cVEjhPHIFt5USfuj6LlRRE1bt8QBFYk8HD Hsx733G192jSobcPK3IkZ0zXvqNSwcy2UfhYvtDx0WgUJiawdck2Gwk1uCIlY3sZ V2lG6x5ooZYM5Zo7/lZE7bHbuM/Iuo7eNb07jSQEt9nqvQ7KQv8xY6IwY93PrR9H QVEg4APFhqLCy524yaGXNJtCqx6sMZ/g7qz0rzJ9A2DwELUVoDFBkJWZt7bhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPbK/68cATzQAOT2fkLpToLWL6s4wHwYDVR0j BBgwFoAUzq5Pd1nuIbplLg+4nQGjCbZdF9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjM1YTQ1MS1jMzA0LTQ1ZjUtYjdkYi01Njg3ZTJiMTA4MDcvMC9DRUFFNEY3NzU5 RUUyMUJBNjUyRTBGQjg5RDAxQTMwOUI2NUQxN0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlCNjVE MTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYzNWE0NTEtYzMwNC00NWY1LWI3 ZGItNTY4N2UyYjEwODA3LzAvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEz MDlCNjVEMTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpv1Qr3LQW8oF1j+k8EuO3pLh9Nx7odswyh CwYQX8wpkpbt2kUu+liarO8DxKvjFjprd6aQZyubb0kQyprFadM7o1wpy4wg2AYU OJkIwKg1Cma3A74sONSN/QsFrzXYD+5pi+hr+mnDmOWruRFeo0GPIi4xCnqQFeKH VnNNq/DUmJVaY8KmCK0GribKXvCbE/RpLA04fw17PdkKbJMvkATs657n9SSMljRv cm7nFrcF9EU6a1JzHFRhO4f5XuvqDOb9xJYUKzu8DRdvqg3/DFpR2IY9N/nYDYVX lROrVQN7xmWRkuPjH1B48bh4t3KPRsuZgdqflJDK0OxLfSmLfXA= -----END CERTIFICATE-----Generated at Fri May 2 17:43:41 2025 by rpki-client