$ rpki-client -vvf repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft File: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft (raw, json) Hash identifier: OyWNkvhW20S7gyN9pWju11Jjut0gG3BSSjdmNALC6h0= Subject key identifier: 85:15:93:85:0F:8C:B9:41:32:60:B3:17:18:F4:56:BA:74:97:CD:FD Authority key identifier: CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 Certificate issuer: /CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Certificate serial: 7FF04EF62DD6F1A258EC5ABAC9132C2D5088920D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft Manifest number: 0339 Signing time: Thu 01 May 2025 07:41:26 +0000 Manifest this update: Thu 01 May 2025 07:36:26 +0000 Manifest next update: Sun 04 May 2025 09:28:26 +0000 Files and hashes: 1: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl (hash: wa9wJl9VcW0Admyl/kG42shGEVbu8ZBYpEKHidDh0qc=) 2: 3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa (hash: Zud2nnElfbx5UA3aYazzfNWJKcwUrbzENyQybZ8isd0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 09:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:f0:4e:f6:2d:d6:f1:a2:58:ec:5a:ba:c9:13:2c:2d:50:88:92:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Validity Not Before: May 1 07:36:26 2025 GMT Not After : May 4 09:28:26 2025 GMT Subject: CN=851593850F8CB9413260B31718F456BA7497CDFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:80:36:cd:69:49:e0:38:63:42:86:ee:23:d4: ba:41:a5:3a:a5:fe:61:f6:72:70:67:8c:93:2a:a7: 0d:56:d6:8e:b8:5a:b4:27:e7:5b:b5:56:8d:36:0d: 2f:45:d4:cd:af:6b:8c:0c:48:c5:18:3c:41:91:e9: 67:b1:a4:94:35:64:a9:ef:c8:b6:57:78:7c:60:b0: 3d:51:37:9c:69:0d:99:9c:d6:f5:aa:1e:0f:54:a9: b3:fb:c6:05:c4:b8:9f:c4:d1:e2:f2:fa:d7:8b:d5: 2c:d3:07:c1:87:97:7c:66:05:f7:6c:23:80:09:7a: 36:99:57:04:2e:2b:a1:95:e9:97:4a:8f:ad:26:69: a6:4e:b9:80:6b:9c:4e:0f:aa:7a:35:58:f8:6b:e6: 19:29:35:c6:61:c1:a2:17:bb:41:b7:33:fe:56:b0: 7f:af:00:21:f2:47:0f:b0:d7:9e:8d:e7:5d:7d:30: 73:d4:37:5b:e8:b6:3c:20:11:a8:89:bf:f0:ab:b6: d1:fa:94:4d:2d:93:7a:0d:97:15:a5:a3:0b:af:f0: 5e:77:a1:f1:9a:37:91:bb:77:57:1f:1b:3f:d6:71: ed:b9:95:33:b4:55:91:38:1c:94:1d:17:7f:3d:d4: 40:49:a8:d2:66:02:f3:81:b3:d1:98:5a:7a:40:e8: 13:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:15:93:85:0F:8C:B9:41:32:60:B3:17:18:F4:56:BA:74:97:CD:FD X509v3 Authority Key Identifier: keyid:CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:6b:65:f2:04:bf:8e:51:d5:14:91:ad:39:6f:13:4f:7b:93: d1:1c:49:a8:8b:31:b2:ff:0a:81:2b:45:56:e4:1b:c1:54:37: 73:e2:4c:5f:81:8b:8f:8d:e0:90:b9:19:d8:3a:de:4d:72:b1: 5f:10:f4:da:1b:af:47:56:75:4f:54:7f:91:cf:00:1c:9d:03: a3:3e:8b:bd:16:42:fd:c8:1d:1f:7d:ff:cf:07:72:30:cd:1e: c0:3b:9d:3d:17:d3:6f:5c:a6:47:4a:e4:ac:b3:a2:37:04:95: 9d:ea:a2:31:a1:81:99:95:c1:95:9c:e7:06:12:68:ee:c8:ba: 56:35:b9:55:81:92:7c:12:b9:b3:b8:cc:d7:85:59:ad:82:c1: 88:08:e6:e1:1c:4a:74:11:70:92:56:64:79:fb:a7:52:f8:81: a2:6f:28:fe:d8:7c:c7:50:e9:4a:b3:a6:27:15:d0:d2:c6:c0: 8b:5d:55:df:23:39:93:bb:c3:37:09:8f:bb:0e:12:d2:f3:a9: 7d:6d:fc:84:a5:a2:38:78:56:c5:ff:5f:e9:3f:65:bf:58:3d: c4:d6:6c:53:36:c2:8e:55:f5:0a:61:ba:8a:c5:1a:f7:92:fd: a3:db:4d:ff:3f:63:1f:2a:15:cf:1b:d8:47:14:bd:f5:63:48: b9:ed:97:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf/BO9i3W8aJY7Fq6yRMsLVCIkg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFD ODRFQ0VENDAeFw0yNTA1MDEwNzM2MjZaFw0yNTA1MDQwOTI4MjZaMDMxMTAvBgNV BAMTKDg1MTU5Mzg1MEY4Q0I5NDEzMjYwQjMxNzE4RjQ1NkJBNzQ5N0NERkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNgDbNaUngOGNChu4j1LpBpTql /mH2cnBnjJMqpw1W1o64WrQn51u1Vo02DS9F1M2va4wMSMUYPEGR6WexpJQ1ZKnv yLZXeHxgsD1RN5xpDZmc1vWqHg9UqbP7xgXEuJ/E0eLy+teL1SzTB8GHl3xmBfds I4AJejaZVwQuK6GV6ZdKj60maaZOuYBrnE4Pqno1WPhr5hkpNcZhwaIXu0G3M/5W sH+vACHyRw+w156N5119MHPUN1votjwgEaiJv/CrttH6lE0tk3oNlxWlowuv8F53 ofGaN5G7d1cfGz/Wce25lTO0VZE4HJQdF3891EBJqNJmAvOBs9GYWnpA6BPrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhRWThQ+MuUEyYLMXGPRWunSXzf0wHwYDVR0j BBgwFoAUzXwmfFiuL1GBf6pSArC/kchOztQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTQ0ZDU3Ni0zODE4LTQ5ZDYtODY2Mi1mOGRmODlhYjI4NjMvMC9DRDdDMjY3QzU4 QUUyRjUxODE3RkFBNTIwMkIwQkY5MUM4NEVDRUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFDODRF Q0VENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE0NGQ1NzYtMzgxOC00OWQ2LTg2 NjItZjhkZjg5YWIyODYzLzAvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJG OTFDODRFQ0VENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABBrZfIEv45R1RSRrTlvE097k9EcSaiLMbL/ CoErRVbkG8FUN3PiTF+Bi4+N4JC5Gdg63k1ysV8Q9Nobr0dWdU9Uf5HPABydA6M+ i70WQv3IHR99/88HcjDNHsA7nT0X029cpkdK5KyzojcElZ3qojGhgZmVwZWc5wYS aO7IulY1uVWBknwSubO4zNeFWa2CwYgI5uEcSnQRcJJWZHn7p1L4gaJvKP7YfMdQ 6UqzpicV0NLGwItdVd8jOZO7wzcJj7sOEtLzqX1t/ISlojh4VsX/X+k/Zb9YPcTW bFM2wo5V9QphuorFGveS/aPbTf8/Yx8qFc8b2EcUvfVjSLntl1Y= -----END CERTIFICATE-----Generated at Thu May 1 20:08:47 2025 by rpki-client