$ rpki-client -vvf repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft File: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft (raw, json) Hash identifier: JpxhG2S4linGK1eVRCrHOxOsDRuyBS0iKfCzcmqOMNc= Subject key identifier: 80:45:63:C6:C8:6D:35:E9:E5:5E:E6:08:A9:99:A6:F8:48:E4:8A:DE Authority key identifier: CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 Certificate issuer: /CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Certificate serial: 66DAB0040912B6EE354B840FBAE2624171852FC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject info access: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft Manifest number: 01BB Signing time: Mon 28 Apr 2025 23:52:10 +0000 Manifest this update: Mon 28 Apr 2025 23:47:10 +0000 Manifest next update: Fri 02 May 2025 06:22:10 +0000 Files and hashes: 1: 3130332e3134372e3131342e302f32342d3234203d3e203438343635.roa (hash: 9CXlJMGB7RbCSbz4yAVHg0gxAoOKIuDCGk9V2ZNRStQ=) 2: 3130332e3134372e3131352e302f32342d3234203d3e203438343635.roa (hash: w2tRSLiLgHJy1W/6XsyVINn6a4HucZp7ol94fDbTiO8=) 3: CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl (hash: 6KQpulPGNz8O2BBaFrsF60ausxJICkSnPAnLSG2i1wk=) 4: 3130332e3134372e3131342e302f32332d3234203d3e20313439393732.roa (hash: rgFJ98/EqnKQuT7uOMG6CZkoBkNIU5ZfYz7pmO03ZPE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:da:b0:04:09:12:b6:ee:35:4b:84:0f:ba:e2:62:41:71:85:2f:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD3281FC875A8DD967E7E83CD40F106AD5B23A74 Validity Not Before: Apr 28 23:47:10 2025 GMT Not After : May 2 06:22:10 2025 GMT Subject: CN=804563C6C86D35E9E55EE608A999A6F848E48ADE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ae:e5:a1:7f:62:6b:82:f2:2c:a5:a9:98:db: af:7a:2b:06:42:3a:06:27:19:17:27:ba:69:53:c7: c9:dc:df:37:eb:b4:50:9b:e0:b7:da:46:92:66:fe: 8a:a9:d3:fd:a8:46:a6:c9:a2:ff:1d:78:be:8a:95: 3f:f0:72:4c:e1:ac:68:09:ae:c4:ef:6b:39:bd:8a: 5b:d6:51:07:fe:4e:9d:a2:8c:2c:f4:f0:19:96:4d: ea:13:f5:ec:d5:22:48:e2:de:13:0b:a8:bf:c5:8a: 80:8d:df:3b:75:b1:dc:11:c8:14:54:33:e6:ab:14: b2:89:66:3d:45:58:8c:e7:79:3a:2a:a7:81:c7:05: 0b:cf:e3:72:bf:3a:44:5d:06:5f:ec:d5:e9:60:6e: c8:a2:47:a9:7e:e1:5d:5c:47:c0:dd:8c:64:92:79: 01:9e:a0:b3:30:67:96:47:1b:23:c3:f4:64:bf:33: 65:2c:7b:67:a0:ad:93:6c:02:d9:1c:53:67:da:c1: c4:bd:59:af:5f:e6:da:62:02:ec:e6:6d:0e:b0:e7: 2e:06:6f:01:b3:73:cc:ad:a5:f4:28:58:ba:21:b9: d2:92:7d:ae:45:cb:ca:7f:f7:e9:33:a8:5b:2f:ea: 61:74:ac:dd:23:7b:3e:90:fd:85:fb:35:6e:5f:b5: b7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:45:63:C6:C8:6D:35:E9:E5:5E:E6:08:A9:99:A6:F8:48:E4:8A:DE X509v3 Authority Key Identifier: keyid:CD:32:81:FC:87:5A:8D:D9:67:E7:E8:3C:D4:0F:10:6A:D5:B2:3A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/168cc059-5e6c-4501-b894-14a82d18d21e/0/CD3281FC875A8DD967E7E83CD40F106AD5B23A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:fa:36:d5:5e:61:a5:3f:58:79:28:82:8f:89:db:57:1e:99: 10:7d:0a:6f:19:68:ea:7e:41:00:d4:c5:0f:28:70:64:95:4b: 7b:d3:56:8c:2e:06:f6:6c:34:b8:67:c6:ca:d4:0d:11:e5:6c: 7d:98:2c:0c:45:a5:48:f7:0b:e0:4f:4a:37:cf:8e:6b:a2:58: e8:25:52:48:db:75:44:0d:2c:24:7b:bc:83:22:16:7f:d4:18: 01:dd:dc:63:bc:a2:9b:b5:68:87:09:53:6a:89:27:c0:00:53: 48:bc:55:4a:0b:28:18:d8:a6:40:e8:c5:6c:48:c5:ce:df:cc: ef:51:fb:a1:97:3c:b7:c6:36:d7:8f:e2:ad:06:b0:be:af:05: 02:42:0c:36:ed:ff:b5:bf:a6:d6:a7:92:bc:62:0a:f0:0d:aa: ef:f2:2f:7b:dd:5c:00:bb:8f:60:83:82:25:34:05:8f:11:a4: df:54:ad:a9:7c:cf:0a:52:2e:f9:a6:6e:56:32:83:77:3a:a9: de:c5:2d:ba:40:b2:6b:87:a3:e4:00:ba:68:d0:c5:65:b0:52: 5b:21:10:ef:29:55:6d:a9:d3:a2:f3:55:8d:8f:58:15:61:c2: 8e:54:e6:19:38:03:ff:e0:5a:2f:35:77:41:4d:eb:e9:b2:e7: 69:df:5e:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZtqwBAkStu41S4QPuuJiQXGFL8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFE NUIyM0E3NDAeFw0yNTA0MjgyMzQ3MTBaFw0yNTA1MDIwNjIyMTBaMDMxMTAvBgNV BAMTKDgwNDU2M0M2Qzg2RDM1RTlFNTVFRTYwOEE5OTlBNkY4NDhFNDhBREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFruWhf2JrgvIspamY2696KwZC OgYnGRcnumlTx8nc3zfrtFCb4LfaRpJm/oqp0/2oRqbJov8deL6KlT/wckzhrGgJ rsTvazm9ilvWUQf+Tp2ijCz08BmWTeoT9ezVIkji3hMLqL/FioCN3zt1sdwRyBRU M+arFLKJZj1FWIzneToqp4HHBQvP43K/OkRdBl/s1elgbsiiR6l+4V1cR8DdjGSS eQGeoLMwZ5ZHGyPD9GS/M2Use2egrZNsAtkcU2fawcS9Wa9f5tpiAuzmbQ6w5y4G bwGzc8ytpfQoWLohudKSfa5Fy8p/9+kzqFsv6mF0rN0jez6Q/YX7NW5ftbfvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgEVjxshtNenlXuYIqZmm+Ejkit4wHwYDVR0j BBgwFoAUzTKB/Idajdln5+g81A8QatWyOnQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjhjYzA1OS01ZTZjLTQ1MDEtYjg5NC0xNGE4MmQxOGQyMWUvMC9DRDMyODFGQzg3 NUE4REQ5NjdFN0U4M0NENDBGMTA2QUQ1QjIzQTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEwNkFENUIy M0E3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY4Y2MwNTktNWU2Yy00NTAxLWI4 OTQtMTRhODJkMThkMjFlLzAvQ0QzMjgxRkM4NzVBOEREOTY3RTdFODNDRDQwRjEw NkFENUIyM0E3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN36NtVeYaU/WHkogo+J21cemRB9Cm8ZaOp+ QQDUxQ8ocGSVS3vTVowuBvZsNLhnxsrUDRHlbH2YLAxFpUj3C+BPSjfPjmuiWOgl UkjbdUQNLCR7vIMiFn/UGAHd3GO8opu1aIcJU2qJJ8AAU0i8VUoLKBjYpkDoxWxI xc7fzO9R+6GXPLfGNteP4q0GsL6vBQJCDDbt/7W/ptankrxiCvANqu/yL3vdXAC7 j2CDgiU0BY8RpN9Ural8zwpSLvmmblYyg3c6qd7FLbpAsmuHo+QAumjQxWWwUlsh EO8pVW2p06LzVY2PWBVhwo5U5hk4A//gWi81d0FN6+my52nfXqc= -----END CERTIFICATE-----Generated at Wed Apr 30 08:17:26 2025 by rpki-client