$ rpki-client -vvf repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft File: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft (raw, json) Hash identifier: DNMkm7dByH/o5/DiZ/5yKkeb+SFJuTQ3KLRFo8Cs2kY= Subject key identifier: DB:1C:6D:64:46:1B:15:9E:85:06:8A:F0:53:49:F9:8F:F4:47:30:E7 Authority key identifier: CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D Certificate issuer: /CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D Certificate serial: 3C7698DB3BF4C99DFA009DC0B5C4AF14C1A0143C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft Manifest number: 013B Signing time: Tue 13 May 2025 23:51:59 +0000 Manifest this update: Tue 13 May 2025 23:46:59 +0000 Manifest next update: Sat 17 May 2025 04:30:59 +0000 Files and hashes: 1: 3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa (hash: YU44qqt6xQCwxLXA5jfaKyr8+7F8xFDqnBfx8dtxJPU=) 2: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl (hash: hlitFSSSzwJvYqOf8TqBiV58rV1w/LcmVKChI19LoRs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 04:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:76:98:db:3b:f4:c9:9d:fa:00:9d:c0:b5:c4:af:14:c1:a0:14:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D Validity Not Before: May 13 23:46:59 2025 GMT Not After : May 17 04:30:59 2025 GMT Subject: CN=DB1C6D64461B159E85068AF05349F98FF44730E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4b:0a:a6:35:a4:f6:94:84:70:4c:2d:6d:2b: 9e:9b:41:2c:df:88:ad:ec:c1:e0:09:76:fa:ca:f4: 2b:0e:82:8a:1f:86:6f:b4:e0:3d:f8:94:c0:3f:96: 01:f5:19:d1:f9:20:93:54:75:c6:79:fc:78:72:cf: 43:78:5c:b5:0f:b1:63:27:4f:45:7f:d5:31:46:49: 3f:67:0f:bf:9c:c7:ab:5d:c9:7e:cb:40:dd:af:d8: c1:03:f7:46:1f:b9:de:fb:63:ec:44:0e:48:37:f2: 4a:e3:2d:d4:1e:9d:97:f6:78:b4:07:1d:f9:62:e8: c4:71:45:64:2b:d8:4e:81:50:16:83:65:8c:02:34: f5:3b:84:6a:4b:0f:40:c5:f8:8a:d3:80:78:19:aa: e0:b0:ca:ab:02:92:58:1e:cb:ad:14:21:11:52:15: 66:4f:75:a1:ce:d1:95:fc:8e:14:71:15:9c:7d:99: 2c:66:65:f9:35:a0:a2:77:2c:f7:b3:06:b3:e7:94: a8:0d:b4:da:27:95:59:c8:4d:02:e1:56:61:8b:51: 8b:b4:45:18:7d:8d:04:58:7d:58:19:1d:c6:30:b8: a8:b7:09:19:79:af:c9:6d:a6:f1:8b:fe:78:72:a9: 44:b4:6b:ff:3e:69:36:aa:85:22:be:28:e8:01:9e: 26:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1C:6D:64:46:1B:15:9E:85:06:8A:F0:53:49:F9:8F:F4:47:30:E7 X509v3 Authority Key Identifier: keyid:CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:06:40:88:d8:76:de:88:a5:91:1f:18:4a:d9:46:51:7d:e7: ab:dd:fd:ce:60:55:c9:96:44:79:48:d3:4a:53:5b:a9:76:17: 88:c1:e5:d5:4c:66:aa:61:6f:26:19:ab:0b:1b:4b:b9:ad:c1: 33:b3:d6:07:e9:ae:2e:4a:7d:ab:7c:ca:2d:c6:17:20:59:b2: 3a:42:79:55:c6:91:35:90:e1:7c:cf:c2:f9:ef:78:0e:9e:ed: fa:9a:d1:0e:71:99:73:9a:2b:a2:7e:8c:ab:73:bb:b9:43:98: cb:37:47:a8:48:69:7c:c9:83:a5:da:06:66:7e:d8:f6:f1:95: 54:e9:3a:8d:df:19:86:d6:21:08:11:ad:8b:08:aa:5e:34:70: ce:9e:f1:95:79:86:a1:c6:9c:df:ea:ad:77:9c:46:fd:5e:a7: eb:1d:f0:bf:6b:34:50:20:9b:71:33:d2:54:a0:d5:be:0c:ce: 29:1b:a7:85:07:7f:92:a6:5d:50:bf:bc:9a:2b:f4:d3:1f:03: f3:42:19:b7:7e:17:74:80:6f:34:eb:93:9f:60:a9:31:e3:be: 1b:05:dd:c8:5f:42:a0:b8:fa:df:a1:8a:fa:62:66:5e:f6:1b: 7a:aa:b1:d6:bf:5c:2e:00:47:d3:ea:8b:51:9f:4d:f6:cd:09: cd:69:26:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPHaY2zv0yZ36AJ3AtcSvFMGgFDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RF NTk3NTkwRDAeFw0yNTA1MTMyMzQ2NTlaFw0yNTA1MTcwNDMwNTlaMDMxMTAvBgNV BAMTKERCMUM2RDY0NDYxQjE1OUU4NTA2OEFGMDUzNDlGOThGRjQ0NzMwRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3SwqmNaT2lIRwTC1tK56bQSzf iK3sweAJdvrK9CsOgoofhm+04D34lMA/lgH1GdH5IJNUdcZ5/Hhyz0N4XLUPsWMn T0V/1TFGST9nD7+cx6tdyX7LQN2v2MED90Yfud77Y+xEDkg38krjLdQenZf2eLQH Hfli6MRxRWQr2E6BUBaDZYwCNPU7hGpLD0DF+IrTgHgZquCwyqsCklgey60UIRFS FWZPdaHO0ZX8jhRxFZx9mSxmZfk1oKJ3LPezBrPnlKgNtNonlVnITQLhVmGLUYu0 RRh9jQRYfVgZHcYwuKi3CRl5r8ltpvGL/nhyqUS0a/8+aTaqhSK+KOgBniZPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2xxtZEYbFZ6FBorwU0n5j/RHMOcwHwYDVR0j BBgwFoAUzU6sAwbQbyEJ8medyfUvfeWXWQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzhiYmZkNC02N2I0LTQ5OGQtODQxMS1lOTY0YzVmZTExNzIvMC9DRDRFQUMwMzA2 RDA2RjIxMDlGMjY3OURDOUY1MkY3REU1OTc1OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RFNTk3 NTkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc4YmJmZDQtNjdiNC00OThkLTg0 MTEtZTk2NGM1ZmUxMTcyLzAvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJG N0RFNTk3NTkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANIGQIjYdt6IpZEfGErZRlF956vd/c5gVcmW RHlI00pTW6l2F4jB5dVMZqphbyYZqwsbS7mtwTOz1gfpri5Kfat8yi3GFyBZsjpC eVXGkTWQ4XzPwvnveA6e7fqa0Q5xmXOaK6J+jKtzu7lDmMs3R6hIaXzJg6XaBmZ+ 2PbxlVTpOo3fGYbWIQgRrYsIql40cM6e8ZV5hqHGnN/qrXecRv1ep+sd8L9rNFAg m3Ez0lSg1b4Mzikbp4UHf5KmXVC/vJor9NMfA/NCGbd+F3SAbzTrk59gqTHjvhsF 3chfQqC4+t+hivpiZl72G3qqsda/XC4AR9Pqi1GfTfbNCc1pJlU= -----END CERTIFICATE-----Generated at Thu May 15 22:17:27 2025 by rpki-client