$ rpki-client -vvf repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft File: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft (raw, json) Hash identifier: 1YmpxhBpZMcCFh0w61DVFtAZ5B3/GdGzBfSg553RUKs= Subject key identifier: 24:D9:98:74:3A:EC:07:18:9B:36:9B:A6:A7:09:55:41:57:FC:28:A3 Authority key identifier: 3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 Certificate issuer: /CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Certificate serial: 59BDB51FBE7E0485D2714E0250297CD09DE772CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft Manifest number: 52 Signing time: Mon 28 Apr 2025 18:30:54 +0000 Manifest this update: Mon 28 Apr 2025 18:25:54 +0000 Manifest next update: Thu 01 May 2025 19:30:54 +0000 Files and hashes: 1: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl (hash: woUv04wjhP+dtAiXfSscmfZeaR2IAGxxsisBj8EDiYs=) 2: 33362e35302e34342e302f32332d3234203d3e20313532303130.roa (hash: 6pByXgAQ6YR6dUDH4dJy61wrtOMRHMSvLiETBeP3xAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:bd:b5:1f:be:7e:04:85:d2:71:4e:02:50:29:7c:d0:9d:e7:72:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Validity Not Before: Apr 28 18:25:54 2025 GMT Not After : May 1 19:30:54 2025 GMT Subject: CN=24D998743AEC07189B369BA6A709554157FC28A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9d:d2:7d:87:9b:99:d4:51:c6:a3:92:6c:e5: 42:95:21:64:42:9f:5c:a5:e1:2a:e4:73:49:a4:0a: 01:2b:de:bb:4d:e5:71:af:fb:1c:95:43:77:f0:fd: 43:72:2b:3f:b0:49:d1:80:15:a0:5c:33:41:68:a0: 15:c5:99:2c:ae:66:0c:b8:a6:8a:df:bc:b7:1c:33: 39:fa:4a:b5:e5:b2:bd:60:9e:29:3f:e1:fb:63:b5: c7:aa:cd:3f:0d:12:0d:02:0d:79:d0:e4:d3:67:91: 4a:91:e3:02:fb:e8:62:ce:df:fd:65:d4:a1:65:70: a1:ea:b7:57:e1:24:f0:96:7d:12:25:1b:48:34:9d: 20:e5:4d:60:af:95:ee:b0:17:14:81:65:57:b6:d8: 2b:b9:d1:41:2c:53:96:04:4e:58:c6:55:4b:5b:c0: 24:a5:aa:09:a4:f6:b7:6c:8e:aa:c6:41:7d:b1:e1: c8:bd:b4:d5:78:2d:e9:e3:88:c7:b9:6d:c2:a3:01: a8:b7:22:4a:9f:d6:20:8a:ff:04:d0:8d:32:d1:29: 07:7a:4b:0c:d9:ac:71:12:57:b2:8a:95:36:4f:23: 7d:a4:0c:5a:93:50:bf:db:da:7f:51:b2:d2:a8:b3: 20:78:7d:4b:c1:11:4b:58:5c:a1:75:76:3f:95:7a: a4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D9:98:74:3A:EC:07:18:9B:36:9B:A6:A7:09:55:41:57:FC:28:A3 X509v3 Authority Key Identifier: keyid:3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:03:7f:ca:69:76:16:72:6e:6a:7f:da:d2:59:58:2f:ee:c3: ee:a8:8e:5b:7a:f7:da:d2:5b:eb:ac:c5:74:e0:28:e8:83:e0: 75:fc:f8:6d:af:7c:13:53:93:e9:d7:26:ab:45:e2:34:57:7e: df:aa:dd:b3:5a:de:66:81:54:b0:86:dc:8b:40:fd:24:be:15: e8:52:61:7d:fd:d5:dd:31:fe:ab:44:31:7b:c9:5e:a9:01:c8: 79:dd:c0:b4:59:3f:c4:9d:ef:a5:59:d7:42:4d:64:f8:87:bc: 11:70:99:05:ef:31:98:e8:34:ff:07:af:a1:b6:b0:9d:2b:76: a5:29:fb:4b:3a:b5:de:22:40:6f:01:f3:92:34:5b:ee:97:37: 2b:b5:0a:f4:a3:43:8d:86:48:82:f1:9b:6f:fb:4f:96:29:68: 20:a8:8c:a3:65:be:dc:5d:9d:54:bc:3d:85:0b:78:83:5b:33: 4f:9f:3f:6b:bf:52:9e:90:be:6a:34:87:9c:ab:ee:f8:03:20: 90:4d:a2:34:6e:8f:0f:f7:68:d3:da:77:9b:fd:ef:1f:a4:d3: c8:1a:10:b5:e0:b9:8b:68:e6:b5:24:fd:3e:3f:b6:60:b5:98: 20:93:23:ff:67:e9:51:3a:54:ac:03:80:9d:25:ff:40:71:af: fc:19:1e:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWb21H75+BIXScU4CUCl80J3ncsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVF OUUwN0JGNDAeFw0yNTA0MjgxODI1NTRaFw0yNTA1MDExOTMwNTRaMDMxMTAvBgNV BAMTKDI0RDk5ODc0M0FFQzA3MTg5QjM2OUJBNkE3MDk1NTQxNTdGQzI4QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChndJ9h5uZ1FHGo5Js5UKVIWRC n1yl4Srkc0mkCgEr3rtN5XGv+xyVQ3fw/UNyKz+wSdGAFaBcM0FooBXFmSyuZgy4 porfvLccMzn6SrXlsr1gnik/4ftjtceqzT8NEg0CDXnQ5NNnkUqR4wL76GLO3/1l 1KFlcKHqt1fhJPCWfRIlG0g0nSDlTWCvle6wFxSBZVe22Cu50UEsU5YETljGVUtb wCSlqgmk9rdsjqrGQX2x4ci9tNV4LenjiMe5bcKjAai3Ikqf1iCK/wTQjTLRKQd6 SwzZrHESV7KKlTZPI32kDFqTUL/b2n9RstKosyB4fUvBEUtYXKF1dj+VeqQnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJNmYdDrsBxibNpumpwlVQVf8KKMwHwYDVR0j BBgwFoAUPOympdKxOPXgXOgV1qnZBenge/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDhlYzVlYi0wMzU0LTRkODctYjJiZS0wOGZmYWQ0YWEwNmEvMC8zQ0VDQTZBNUQy QjEzOEY1RTA1Q0U4MTVENkE5RDkwNUU5RTA3QkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVFOUUw N0JGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ4ZWM1ZWItMDM1NC00ZDg3LWIy YmUtMDhmZmFkNGFhMDZhLzAvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5 MDVFOUUwN0JGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJADf8ppdhZybmp/2tJZWC/uw+6ojlt699rS W+usxXTgKOiD4HX8+G2vfBNTk+nXJqtF4jRXft+q3bNa3maBVLCG3ItA/SS+FehS YX391d0x/qtEMXvJXqkByHndwLRZP8Sd76VZ10JNZPiHvBFwmQXvMZjoNP8Hr6G2 sJ0rdqUp+0s6td4iQG8B85I0W+6XNyu1CvSjQ42GSILxm2/7T5YpaCCojKNlvtxd nVS8PYULeINbM0+fP2u/Up6Qvmo0h5yr7vgDIJBNojRujw/3aNPad5v97x+k08ga ELXguYto5rUk/T4/tmC1mCCTI/9n6VE6VKwDgJ0l/0Bxr/wZHsU= -----END CERTIFICATE-----Generated at Tue Apr 29 07:46:10 2025 by rpki-client