$ rpki-client -vvf repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft File: CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft (raw, json) Hash identifier: RGzajJYy+QG7xHwh7qAwYprGG+aFsi1cadFmY2iyoi8= Subject key identifier: D1:FF:47:7D:7F:D8:A9:FD:36:BA:87:9F:8A:CB:69:98:84:9D:06:72 Authority key identifier: CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F Certificate issuer: /CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F Certificate serial: 1B515A82143ACF102A86ED415A9AD18F958A8659 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft Manifest number: 0175 Signing time: Wed 30 Apr 2025 04:12:08 +0000 Manifest this update: Wed 30 Apr 2025 04:07:08 +0000 Manifest next update: Sat 03 May 2025 04:21:08 +0000 Files and hashes: 1: 3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa (hash: qe46wqYoj4z+C+Tgta7yX78S6Rqx69jq5NSyjAXg4Xk=) 2: 3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa (hash: kMTgFhm7y8+vUOnTIGuYD/xnygQP3IJ+v4/uEIrSv/M=) 3: 323430373a633663303a3a2f33322d3438203d3e20313432333634.roa (hash: 9tX10629DnRQzpDIgIuzgeSKAyZ1U8PLF0M4h+rm+Qk=) 4: CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl (hash: h9HQ47lypHUi6chaM227ys57E+6tCI8SX33M4/UPQds=) 5: 3130332e3137302e3130302e302f32342d3234203d3e20313432333634.roa (hash: hx/ewGlEs42WwazUkR19IGaEFBeT7zadPeBTmHRYrnU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 04:21:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:51:5a:82:14:3a:cf:10:2a:86:ed:41:5a:9a:d1:8f:95:8a:86:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F Validity Not Before: Apr 30 04:07:08 2025 GMT Not After : May 3 04:21:08 2025 GMT Subject: CN=D1FF477D7FD8A9FD36BA879F8ACB6998849D0672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d7:9e:9a:10:4b:82:47:1a:42:a0:f2:4e:d8: 63:10:39:3d:a5:05:5a:3c:c6:e5:43:2d:f5:ec:5f: b6:e6:21:fa:78:80:a4:76:fd:02:49:ed:f0:04:0a: d8:b0:1e:e6:75:28:3f:ea:bf:e7:61:72:72:81:c2: b3:5a:f7:75:dd:51:8e:96:a5:38:18:58:78:ee:42: ac:0d:7d:d2:9d:b0:41:70:dc:eb:21:c8:93:23:35: e4:ca:83:38:44:24:32:8d:a4:1f:f8:5e:69:54:db: ae:e0:66:fa:0f:99:0b:2c:c8:c1:33:8b:8b:c0:c7: ed:e4:8a:17:3a:cf:44:75:b2:d0:c4:dd:11:83:53: c0:9b:06:9f:73:ea:ff:d7:17:bd:75:fa:48:8b:f3: 16:22:a9:73:9a:d5:f3:1a:84:32:b9:60:2e:0f:15: e6:2f:a7:e2:80:84:70:d1:b7:88:1d:87:f8:71:82: ea:ea:b4:29:c4:74:01:2b:6b:37:3d:5a:e1:90:b1: 56:b9:52:dc:87:40:82:31:c8:ee:8c:a8:80:40:b6: 69:9e:ad:3d:00:72:81:92:8b:19:5a:65:34:e7:31: 27:74:7b:8c:ec:b9:b5:c1:9a:2e:28:ee:bc:ea:26: e6:67:06:0d:5a:b6:6d:60:16:4c:93:46:95:81:4e: c9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FF:47:7D:7F:D8:A9:FD:36:BA:87:9F:8A:CB:69:98:84:9D:06:72 X509v3 Authority Key Identifier: keyid:CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:a0:2a:ff:35:6c:6f:e5:2e:12:72:34:0f:c8:92:ea:dc:69: 8c:44:29:59:a2:15:24:31:07:ce:6f:2e:1d:d4:6b:f8:8f:3a: fe:bf:b4:d1:20:05:cc:80:b8:41:21:1c:ff:a9:57:be:5f:40: a7:80:5a:a3:3f:67:ea:a7:14:4b:11:ce:bc:da:50:1d:9f:8c: 60:98:da:11:83:2f:e1:07:61:a3:02:eb:88:e6:28:40:63:13: 68:68:d4:1c:ff:9c:a1:1a:e7:f1:55:90:03:8b:fc:ce:72:92: b6:b1:c4:81:cb:3c:e8:67:e3:ba:8b:56:b9:33:68:52:63:73: 19:58:ca:d5:f9:f0:55:72:47:8d:11:e3:a2:ac:ba:de:f5:99: 61:d8:a7:b2:af:15:4d:fc:7d:70:09:7a:e9:82:04:78:b3:55: b3:23:6a:ec:2d:79:48:7f:21:d5:5b:c0:2c:e0:75:c5:9f:d8: 1f:70:0b:59:37:3b:46:9c:0e:41:70:2a:26:cf:82:ad:8a:50: ce:3d:e6:f6:db:f5:a1:82:d9:7e:5d:67:ea:29:b1:9b:2d:4e: 1a:83:80:41:cf:61:17:10:88:1b:eb:5c:f4:6b:e8:4c:9a:48: 67:a4:bc:85:1f:e3:a2:c6:1f:d5:63:d9:ca:54:e8:60:b5:7e: 94:78:d6:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG1FaghQ6zxAqhu1BWprRj5WKhlkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZD MzVFMUU0RjAeFw0yNTA0MzAwNDA3MDhaFw0yNTA1MDMwNDIxMDhaMDMxMTAvBgNV BAMTKEQxRkY0NzdEN0ZEOEE5RkQzNkJBODc5RjhBQ0I2OTk4ODQ5RDA2NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs156aEEuCRxpCoPJO2GMQOT2l BVo8xuVDLfXsX7bmIfp4gKR2/QJJ7fAECtiwHuZ1KD/qv+dhcnKBwrNa93XdUY6W pTgYWHjuQqwNfdKdsEFw3OshyJMjNeTKgzhEJDKNpB/4XmlU267gZvoPmQssyMEz i4vAx+3kihc6z0R1stDE3RGDU8CbBp9z6v/XF711+kiL8xYiqXOa1fMahDK5YC4P FeYvp+KAhHDRt4gdh/hxgurqtCnEdAErazc9WuGQsVa5UtyHQIIxyO6MqIBAtmme rT0AcoGSixlaZTTnMSd0e4zsubXBmi4o7rzqJuZnBg1atm1gFkyTRpWBTsmDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0f9HfX/Yqf02uoefistpmISdBnIwHwYDVR0j BBgwFoAUzsX+GDo5EFyeJwLMK/CJH8NeHk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NjFjZjc3Ny04YWRmLTRlZjEtOGQ2Zi05ODYyYzU1NjIwZWEvMC9DRUM1RkUxODNB MzkxMDVDOUUyNzAyQ0MyQkYwODkxRkMzNUUxRTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZDMzVF MUU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTYxY2Y3NzctOGFkZi00ZWYxLThk NmYtOTg2MmM1NTYyMGVhLzAvQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5 MUZDMzVFMUU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEagKv81bG/lLhJyNA/IkurcaYxEKVmiFSQx B85vLh3Ua/iPOv6/tNEgBcyAuEEhHP+pV75fQKeAWqM/Z+qnFEsRzrzaUB2fjGCY 2hGDL+EHYaMC64jmKEBjE2ho1Bz/nKEa5/FVkAOL/M5ykraxxIHLPOhn47qLVrkz aFJjcxlYytX58FVyR40R46Ksut71mWHYp7KvFU38fXAJeumCBHizVbMjauwteUh/ IdVbwCzgdcWf2B9wC1k3O0acDkFwKibPgq2KUM495vbb9aGC2X5dZ+opsZstThqD gEHPYRcQiBvrXPRr6EyaSGekvIUf46LGH9Vj2cpU6GC1fpR41q4= -----END CERTIFICATE-----Generated at Wed Apr 30 17:38:45 2025 by rpki-client