$ rpki-client -vvf repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft File: CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft (raw, json) Hash identifier: QArc368pjqVIXsdTe89/J1E8hJw5OwhikE6/ugeA5Gg= Subject key identifier: 83:FB:AE:73:31:20:7D:A9:08:C2:21:0C:24:5B:5C:4D:5A:E7:CF:B7 Authority key identifier: CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA Certificate issuer: /CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA Certificate serial: 5854A280DA90BBF8E282236DDF5719512A7DC6CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft Manifest number: 04C9 Signing time: Mon 28 Apr 2025 04:42:14 +0000 Manifest this update: Mon 28 Apr 2025 04:37:14 +0000 Manifest next update: Thu 01 May 2025 05:10:14 +0000 Files and hashes: 1: 34332e3235342e3132342e302f32322d3234203d3e203538343832.roa (hash: tcS0/4g/bvz81xpbYZwH5c3HOtuAVxXo5nqpsqEa1Dc=) 2: CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl (hash: 3xx1ki7Qkj9nDvlCtlBGETEmRQOCQsGPsIdnIH7oDoo=) 3: 323430343a663930303a3a2f33322d3438203d3e203538343832.roa (hash: P1hzEQwjHdVhS7I0LLckp0JkbGZXIWU/KqIoWLVRQrY=) 4: 3130332e32382e3232342e302f32322d3234203d3e203538343832.roa (hash: rlplgg3r+rxIXNon2dNy9blKlPvtpCpYwV7XkrITM4U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 05:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:54:a2:80:da:90:bb:f8:e2:82:23:6d:df:57:19:51:2a:7d:c6:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA Validity Not Before: Apr 28 04:37:14 2025 GMT Not After : May 1 05:10:14 2025 GMT Subject: CN=83FBAE7331207DA908C2210C245B5C4D5AE7CFB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:48:84:8f:9c:a4:ef:56:0a:4e:11:b2:f8:bf: 25:11:7a:53:4a:17:ff:a7:61:50:b3:b4:9d:34:7b: 7a:49:96:a2:35:b4:1b:63:f3:ba:ac:e3:9f:77:87: 7e:61:43:d3:81:04:68:35:58:55:00:8c:76:ab:4e: d1:f2:d5:3e:ab:6d:23:46:23:70:79:f1:88:95:d6: 7d:66:e2:cb:14:d2:0d:74:3a:3e:4b:60:eb:d8:06: ba:bb:d7:4a:53:bf:6b:f7:c4:d3:73:f8:8b:5f:08: 64:d8:ec:fd:d5:65:9d:13:2d:83:72:0c:08:56:88: 49:c5:44:b8:07:98:f8:48:38:93:68:8e:f8:e1:3f: 58:b0:94:d4:12:72:42:e3:fb:67:0a:ed:bf:f3:c7: da:cb:3b:3d:2a:9b:a5:d1:f2:68:ca:16:34:d6:72: 50:f2:03:5a:91:a0:24:e0:63:24:27:48:5b:24:60: 49:b8:19:b5:be:83:a2:4f:af:04:6b:e6:c9:90:59: f1:cc:5e:b2:9b:a4:07:f2:a8:83:1d:f8:85:52:d1: 7d:46:80:46:da:0c:17:67:5b:d3:d4:af:0a:f8:83: 8a:99:42:bc:87:b4:c8:ee:fc:7b:2f:7d:af:dd:7f: 1a:cc:0d:85:c0:b5:ab:ed:31:ab:33:8d:85:e9:d3: 62:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FB:AE:73:31:20:7D:A9:08:C2:21:0C:24:5B:5C:4D:5A:E7:CF:B7 X509v3 Authority Key Identifier: keyid:CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:29:72:76:a8:bd:f5:64:11:88:77:86:69:54:ae:cd:ad:63: 61:16:fd:a8:84:0a:73:57:ab:ce:00:a9:02:4e:6d:79:84:30: 39:37:ec:7d:58:a0:16:49:12:64:c4:eb:51:8a:49:4a:eb:f8: 42:06:67:71:15:d3:d6:3b:b9:3e:1b:fe:28:0e:c0:66:37:a0: 80:0a:cb:15:92:5f:0f:c5:d8:ad:7c:2c:bf:db:be:7c:88:37: fe:81:13:79:44:14:8a:25:67:b8:e1:5b:bb:5f:10:fd:e5:f0: 41:8b:3f:7e:b4:f7:7b:40:e6:8d:b7:83:7e:ac:36:7c:fb:e9: dd:75:c1:7d:3b:99:9f:f8:cf:c5:2d:1d:7f:10:b3:d5:f2:ae: 4b:a9:4a:5b:68:2b:fe:f7:12:f0:e6:1f:29:93:cb:bd:5f:0a: c6:84:71:c9:fd:70:0b:d8:81:5a:1d:3e:b7:72:7f:e4:5b:29: b8:1e:41:b5:32:e7:02:ec:b4:93:1f:0b:98:7d:85:9b:0a:e0: 3c:04:8d:16:2f:d1:62:ec:6b:06:e1:5d:10:fb:dd:6a:90:67: 1a:63:85:1d:7e:72:a3:0a:ee:a3:7c:be:1a:8b:7d:7b:a0:f9: 87:d6:3a:6a:5d:ff:de:8d:03:75:5b:cf:aa:8c:30:b7:ff:a7: da:58:7b:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWFSigNqQu/jigiNt31cZUSp9xs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDODY3NDMyNjIzOEJFMzU1MzI5MDEyRTFDRkREQjk5 RUM1QjZCQTAeFw0yNTA0MjgwNDM3MTRaFw0yNTA1MDEwNTEwMTRaMDMxMTAvBgNV BAMTKDgzRkJBRTczMzEyMDdEQTkwOEMyMjEwQzI0NUI1QzRENUFFN0NGQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpSISPnKTvVgpOEbL4vyURelNK F/+nYVCztJ00e3pJlqI1tBtj87qs4593h35hQ9OBBGg1WFUAjHarTtHy1T6rbSNG I3B58YiV1n1m4ssU0g10Oj5LYOvYBrq710pTv2v3xNNz+ItfCGTY7P3VZZ0TLYNy DAhWiEnFRLgHmPhIOJNojvjhP1iwlNQSckLj+2cK7b/zx9rLOz0qm6XR8mjKFjTW clDyA1qRoCTgYyQnSFskYEm4GbW+g6JPrwRr5smQWfHMXrKbpAfyqIMd+IVS0X1G gEbaDBdnW9PUrwr4g4qZQryHtMju/Hsvfa/dfxrMDYXAtavtMaszjYXp02ITAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg/uuczEgfakIwiEMJFtcTVrnz7cwHwYDVR0j BBgwFoAUzchnQyYji+NVMpAS4c/duZ7FtrowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWUyZjNiZC1kNGVjLTQyY2ItYWFjZi1hZGMyODI1YzE4NGIvMC9DREM4Njc0MzI2 MjM4QkUzNTUzMjkwMTJFMUNGRERCOTlFQzVCNkJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RDODY3NDMyNjIzOEJFMzU1MzI5MDEyRTFDRkREQjk5RUM1 QjZCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjllMmYzYmQtZDRlYy00MmNiLWFh Y2YtYWRjMjgyNWMxODRiLzAvQ0RDODY3NDMyNjIzOEJFMzU1MzI5MDEyRTFDRkRE Qjk5RUM1QjZCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkpcnaovfVkEYh3hmlUrs2tY2EW/aiECnNX q84AqQJObXmEMDk37H1YoBZJEmTE61GKSUrr+EIGZ3EV09Y7uT4b/igOwGY3oIAK yxWSXw/F2K18LL/bvnyIN/6BE3lEFIolZ7jhW7tfEP3l8EGLP36093tA5o23g36s Nnz76d11wX07mZ/4z8UtHX8Qs9XyrkupSltoK/73EvDmHymTy71fCsaEccn9cAvY gVodPrdyf+RbKbgeQbUy5wLstJMfC5h9hZsK4DwEjRYv0WLsawbhXRD73WqQZxpj hR1+cqMK7qN8vhqLfXug+YfWOmpd/96NA3Vbz6qMMLf/p9pYe2w= -----END CERTIFICATE-----Generated at Wed Apr 30 02:30:34 2025 by rpki-client