$ rpki-client -vvf repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft File: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft (raw, json) Hash identifier: 9kQ/45sYJ3mxmzoGtHYsQ4oPbH0TYHcbMsq/pwsMqaE= Subject key identifier: D5:41:4A:7A:50:7A:20:66:D6:F5:F5:5C:B3:76:29:4F:C3:ED:A1:E7 Authority key identifier: C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD Certificate issuer: /CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Certificate serial: 4CB2201411D4056022C69D2EFD77E90FE797318B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft Manifest number: A2 Signing time: Sat 26 Apr 2025 08:22:05 +0000 Manifest this update: Sat 26 Apr 2025 08:17:05 +0000 Manifest next update: Tue 29 Apr 2025 15:19:05 +0000 Files and hashes: 1: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl (hash: oZLBkoOYcR6z9NHDDbBx+Yy9R6Z7SdGezUshtGlQiaE=) 2: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: XsjHTUcHkRjkYPKHbvijLc/iJA9BjCnhWYDW42TR7Mc=) 3: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: frMDYjZLvx/PXC3WNp74+r5lWIhNgG/QgNa89ajNdXU=) 4: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: zJyhGvQzaDs1uZ/vkTZ4lisg94de9IwLPmGapH9vBW8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:b2:20:14:11:d4:05:60:22:c6:9d:2e:fd:77:e9:0f:e7:97:31:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Validity Not Before: Apr 26 08:17:05 2025 GMT Not After : Apr 29 15:19:05 2025 GMT Subject: CN=D5414A7A507A2066D6F5F55CB376294FC3EDA1E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:65:0b:a6:c2:e6:c1:b4:ce:eb:53:4a:b2:e8: 85:55:db:37:e2:02:4e:60:12:b4:85:4e:f5:ac:1e: 05:b1:1c:71:36:4e:64:27:4a:2b:e7:a6:80:9b:e1: 3f:f2:d4:b6:0d:67:13:40:b7:bb:45:60:08:9b:8a: 1d:bc:1b:3e:68:fc:3f:ca:c0:fb:5e:c1:1d:12:70: 74:c6:9e:81:04:e1:81:15:df:a2:82:5f:5b:d0:2d: 2a:5c:78:c8:0f:b4:43:2d:ff:b3:dc:48:18:c2:fe: ed:5a:20:ea:47:b6:29:a9:d7:7c:a3:ae:0d:e1:da: 6e:b1:63:30:70:ae:26:39:e0:b1:5a:2f:ba:5e:46: 05:71:5b:09:06:5f:6c:68:e3:cb:d2:59:b7:2f:fd: 49:6d:0d:93:90:a2:bb:f5:b8:b7:ff:e1:2e:97:77: c0:e0:20:e3:a6:48:95:40:8a:aa:02:ea:47:f5:34: a7:42:3b:af:ab:33:40:3f:e8:14:6c:5f:8e:d8:d0: 23:84:e6:49:7f:ca:be:e0:dd:79:54:5a:c8:ff:f6: 74:de:f3:84:93:fe:5d:d4:0f:aa:f5:5e:25:ab:81: d0:7d:92:ca:1b:f2:29:7f:66:58:33:ee:ef:dc:e3: 3b:de:85:03:ee:4e:d2:9b:5c:85:3e:bb:8d:50:bd: 8a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:41:4A:7A:50:7A:20:66:D6:F5:F5:5C:B3:76:29:4F:C3:ED:A1:E7 X509v3 Authority Key Identifier: keyid:C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:d3:7d:ae:f0:c1:ef:36:4f:8d:de:b0:4e:76:36:0d:12:af: 86:50:c9:16:b5:18:43:4f:16:ab:77:24:05:f1:95:97:c7:4f: ad:e9:ca:c9:60:56:e0:51:12:2a:52:1f:16:53:ea:e5:ed:0e: 02:ad:75:94:0a:30:36:d9:f0:ef:8e:f9:58:f1:3a:00:36:66: 02:ed:68:d1:23:a1:2a:b5:32:0b:82:ca:ed:33:fb:32:7c:fe: 31:a5:76:5d:06:78:8e:3b:d7:b9:96:78:3d:bf:50:93:71:e3: e3:17:a7:1d:c4:32:ef:f5:57:12:4b:73:0a:0e:90:1a:d0:13: f5:9a:76:f2:d8:35:2a:8f:c8:04:17:98:af:4c:6a:d0:5b:1b: be:2e:9c:e8:01:6d:b7:2b:28:1c:e2:78:c6:ec:55:f0:a8:c9: 0f:5a:de:34:43:0a:6e:cd:88:91:96:71:b5:84:6d:ce:31:1a: 05:00:5b:8c:e1:38:81:1a:3c:95:d8:72:db:0e:ba:ac:72:34: ca:41:3f:7d:04:58:ae:e0:ea:10:91:41:50:3d:cc:9d:d3:99: f0:f2:56:e2:21:10:5e:e9:51:41:7f:9e:45:2c:aa:0f:c6:f7: 6c:ee:bd:ba:33:ba:70:af:73:60:83:28:53:1a:7a:a7:bb:f6: 39:09:70:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTLIgFBHUBWAixp0u/XfpD+eXMYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5 RkI0N0FERDAeFw0yNTA0MjYwODE3MDVaFw0yNTA0MjkxNTE5MDVaMDMxMTAvBgNV BAMTKEQ1NDE0QTdBNTA3QTIwNjZENkY1RjU1Q0IzNzYyOTRGQzNFREExRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFZQumwubBtM7rU0qy6IVV2zfi Ak5gErSFTvWsHgWxHHE2TmQnSivnpoCb4T/y1LYNZxNAt7tFYAibih28Gz5o/D/K wPtewR0ScHTGnoEE4YEV36KCX1vQLSpceMgPtEMt/7PcSBjC/u1aIOpHtimp13yj rg3h2m6xYzBwriY54LFaL7peRgVxWwkGX2xo48vSWbcv/UltDZOQorv1uLf/4S6X d8DgIOOmSJVAiqoC6kf1NKdCO6+rM0A/6BRsX47Y0COE5kl/yr7g3XlUWsj/9nTe 84ST/l3UD6r1XiWrgdB9ksob8il/Zlgz7u/c4zvehQPuTtKbXIU+u41QvYqFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1UFKelB6IGbW9fVcs3YpT8PtoecwHwYDVR0j BBgwFoAUwYTQu6DNGUTBmb8g0OulGp+0et0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTM3NGQ0OC01YTcwLTRjN2YtYmRmZC1kODA1MmViYWYwYWIvMC9DMTg0RDBCQkEw Q0QxOTQ0QzE5OUJGMjBEMEVCQTUxQTlGQjQ3QURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5RkI0 N0FERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGUzNzRkNDgtNWE3MC00YzdmLWJk ZmQtZDgwNTJlYmFmMGFiLzAvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1 MUE5RkI0N0FERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXTfa7wwe82T43esE52Ng0Sr4ZQyRa1GENP Fqt3JAXxlZfHT63pyslgVuBREipSHxZT6uXtDgKtdZQKMDbZ8O+O+VjxOgA2ZgLt aNEjoSq1MguCyu0z+zJ8/jGldl0GeI4717mWeD2/UJNx4+MXpx3EMu/1VxJLcwoO kBrQE/WadvLYNSqPyAQXmK9MatBbG74unOgBbbcrKBzieMbsVfCoyQ9a3jRDCm7N iJGWcbWEbc4xGgUAW4zhOIEaPJXYctsOuqxyNMpBP30EWK7g6hCRQVA9zJ3TmfDy VuIhEF7pUUF/nkUsqg/G92zuvbozunCvc2CDKFMaeqe79jkJcDY= -----END CERTIFICATE-----Generated at Sun Apr 27 06:05:00 2025 by rpki-client