$ rpki-client -vvf repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft File: CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft (raw, json) Hash identifier: s+rcVYHjlTYvC2If0o75O2ygUTjX3JI3hWR0S/ZwUt0= Subject key identifier: BB:F8:B8:B4:CF:A5:1E:AC:C4:7B:9F:4F:20:8A:5A:70:D0:3F:02:00 Authority key identifier: CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B Certificate issuer: /CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B Certificate serial: 250D2680974DE95D2923A11C193CB0252830A837 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft Manifest number: 04D0 Signing time: Wed 30 Apr 2025 01:51:48 +0000 Manifest this update: Wed 30 Apr 2025 01:46:48 +0000 Manifest next update: Sat 03 May 2025 09:15:48 +0000 Files and hashes: 1: CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl (hash: F8yHenHpKA6FTCNxHss7zrmJy4s+VFiaJOZhFXFXcq4=) 2: 3130332e36362e38362e302f32342d3234203d3e20313431313037.roa (hash: bKZ9Kr5vGdouh2ZI4N+bxQ7MC1/jdvf7JVbCsDM4qhY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 09:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:0d:26:80:97:4d:e9:5d:29:23:a1:1c:19:3c:b0:25:28:30:a8:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B Validity Not Before: Apr 30 01:46:48 2025 GMT Not After : May 3 09:15:48 2025 GMT Subject: CN=BBF8B8B4CFA51EACC47B9F4F208A5A70D03F0200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d7:87:46:4b:f0:16:5f:c5:a1:af:25:1e:f1: 8b:32:37:0a:79:b8:16:65:5e:54:fa:29:67:b0:fe: 8d:f9:c9:35:76:7a:49:71:cc:b1:ee:1b:b0:aa:3d: 3c:38:6d:12:81:63:a5:dd:a4:27:d1:ea:71:c7:da: fd:7b:72:87:55:74:c4:d3:f9:21:35:d6:65:9b:2e: c2:16:0c:21:0a:0a:ce:21:b5:30:42:b8:d2:c5:12: 55:0f:6c:b2:1b:9c:af:28:2e:65:55:da:00:9d:d5: 3d:8f:09:aa:16:de:d2:c4:fb:5b:38:1d:d8:b6:d9: 53:de:6b:73:f3:34:85:dc:8f:b5:f3:fa:16:53:3e: 78:0c:cb:cc:6f:31:3f:fb:12:cf:a2:44:f4:f9:38: 27:a9:b8:6d:16:c3:78:18:cc:da:c0:ed:10:e9:ae: ff:27:23:4e:97:ca:aa:a1:db:bc:a0:07:eb:25:7c: b8:d1:ab:58:3a:2b:7e:96:1f:fb:9e:a6:fd:f2:59: 3f:ae:50:a1:29:2e:98:50:cf:96:d7:a9:b0:2b:ba: f2:b5:3a:39:8e:fe:a9:a6:67:d9:9e:d1:93:5d:bf: a9:f7:1c:6d:8b:05:46:fb:b7:5b:e3:2d:2c:94:19: 67:c6:b2:7a:e1:6d:1c:48:b6:17:37:d7:5d:04:19: 8b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F8:B8:B4:CF:A5:1E:AC:C4:7B:9F:4F:20:8A:5A:70:D0:3F:02:00 X509v3 Authority Key Identifier: keyid:CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:c5:7e:35:63:57:c8:0b:33:18:dc:f5:e2:ce:dc:37:5e:a8: 04:78:98:74:9c:50:d1:a9:43:7a:f2:f4:3b:38:6d:51:7f:2e: 15:b1:73:20:15:1b:cb:43:16:f2:03:78:ff:c9:b5:fc:30:f3: 78:68:f6:89:44:be:48:ce:cf:63:8e:2d:ce:99:0c:36:c5:c5: bd:7f:42:b7:16:f6:99:fd:5f:11:e1:09:3d:d3:09:ef:d9:b6: 73:07:88:6e:8d:53:21:db:ae:5e:dc:24:c2:63:42:89:a0:fa: d4:87:b5:2b:98:6f:e4:46:6f:00:c4:d4:17:37:e5:ac:af:fb: 13:14:75:35:e2:85:4f:b1:06:6b:fd:32:28:f8:fa:b7:96:85: dc:a6:61:8c:a5:3b:e9:61:d0:71:24:b7:e9:38:c0:ca:cf:9e: 20:a4:d4:31:18:2c:9a:7a:5e:2b:df:92:07:ec:4b:9b:62:81: be:69:f3:d4:ae:73:77:1f:04:ba:d8:9c:5f:20:48:0b:a0:28: d6:a7:c5:ee:ea:51:d7:55:02:70:7b:43:d2:fc:d6:3e:bb:20: d1:19:ee:1a:9b:07:8b:fa:0c:a3:1d:64:80:06:4a:04:85:c5: 84:11:de:9d:42:d1:df:ef:74:0d:4a:2d:ac:17:92:b3:f4:f7: 64:1c:ae:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJQ0mgJdN6V0pI6EcGTywJSgwqDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJEQzcz MjE0MDk5QjAeFw0yNTA0MzAwMTQ2NDhaFw0yNTA1MDMwOTE1NDhaMDMxMTAvBgNV BAMTKEJCRjhCOEI0Q0ZBNTFFQUNDNDdCOUY0RjIwOEE1QTcwRDAzRjAyMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy14dGS/AWX8WhryUe8YsyNwp5 uBZlXlT6KWew/o35yTV2eklxzLHuG7CqPTw4bRKBY6XdpCfR6nHH2v17codVdMTT +SE11mWbLsIWDCEKCs4htTBCuNLFElUPbLIbnK8oLmVV2gCd1T2PCaoW3tLE+1s4 Hdi22VPea3PzNIXcj7Xz+hZTPngMy8xvMT/7Es+iRPT5OCepuG0Ww3gYzNrA7RDp rv8nI06Xyqqh27ygB+slfLjRq1g6K36WH/uepv3yWT+uUKEpLphQz5bXqbAruvK1 OjmO/qmmZ9me0ZNdv6n3HG2LBUb7t1vjLSyUGWfGsnrhbRxIthc3110EGYv/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu/i4tM+lHqzEe59PIIpacNA/AgAwHwYDVR0j BBgwFoAUykHd41kdz4m70VvJbgW9xzIUCZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmNjMmQ0NC05NDE4LTQwMTMtOTcyMy1hOTc4ZjhiZDhiNmIvMC9DQTQxRERFMzU5 MURDRjg5QkJEMTVCQzk2RTA1QkRDNzMyMTQwOTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJEQzczMjE0 MDk5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZjYzJkNDQtOTQxOC00MDEzLTk3 MjMtYTk3OGY4YmQ4YjZiLzAvQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJE QzczMjE0MDk5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPFfjVjV8gLMxjc9eLO3DdeqAR4mHScUNGp Q3ry9Ds4bVF/LhWxcyAVG8tDFvIDeP/Jtfww83ho9olEvkjOz2OOLc6ZDDbFxb1/ QrcW9pn9XxHhCT3TCe/ZtnMHiG6NUyHbrl7cJMJjQomg+tSHtSuYb+RGbwDE1Bc3 5ayv+xMUdTXihU+xBmv9Mij4+reWhdymYYylO+lh0HEkt+k4wMrPniCk1DEYLJp6 XivfkgfsS5tigb5p89Suc3cfBLrYnF8gSAugKNanxe7qUddVAnB7Q9L81j67INEZ 7hqbB4v6DKMdZIAGSgSFxYQR3p1C0d/vdA1KLawXkrP092QcrkU= -----END CERTIFICATE-----Generated at Wed Apr 30 12:57:46 2025 by rpki-client