$ rpki-client -vvf repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft File: CEEE0277998C75D36A98EC102AD67573C8C514E9.mft (raw, json) Hash identifier: ePi9rPex//PQSEcdeWl6Dxe336Ipb+Pih1JR4gmpJ5U= Subject key identifier: 82:0E:E0:63:B9:23:B6:87:73:DB:99:50:DE:15:BA:1B:3E:7C:C8:EE Authority key identifier: CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 Certificate issuer: /CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Certificate serial: 40676BCC2BEBFB731F9DA711613490198EEDB31C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft Manifest number: 024A Signing time: Tue 29 Apr 2025 14:31:32 +0000 Manifest this update: Tue 29 Apr 2025 14:26:32 +0000 Manifest next update: Fri 02 May 2025 16:51:32 +0000 Files and hashes: 1: CEEE0277998C75D36A98EC102AD67573C8C514E9.crl (hash: sMNvEFlBHbTHeA8j8PEjWcMPb8t2qdhj1SUAZlycUPk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 16:51:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:67:6b:cc:2b:eb:fb:73:1f:9d:a7:11:61:34:90:19:8e:ed:b3:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Validity Not Before: Apr 29 14:26:32 2025 GMT Not After : May 2 16:51:32 2025 GMT Subject: CN=820EE063B923B68773DB9950DE15BA1B3E7CC8EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:51:44:1f:65:47:41:b9:cb:25:64:10:c7:03: b1:c8:70:07:fb:82:55:6f:b6:8d:61:68:4d:34:5a: 77:53:72:bc:fa:95:ff:9e:ca:6c:6e:d5:f9:e1:5a: b7:4c:e8:f8:f1:7e:12:27:19:35:e7:16:cb:cd:2a: 6f:3f:2d:c2:42:92:4b:d6:c0:59:38:0f:1c:cd:71: e4:8e:39:bf:67:42:a3:c1:46:eb:9d:9c:f0:fb:7f: d5:6f:92:64:d2:1f:e1:41:13:65:60:6c:05:33:ba: d0:e8:66:b4:0f:4c:85:cb:40:18:2b:ed:7e:40:da: 9d:0d:67:f7:95:ba:ef:d0:4c:ae:b0:cd:e0:3d:f9: 13:d0:15:07:8a:1e:18:89:28:17:ee:b0:89:56:36: 7f:90:70:ea:04:26:06:4b:9b:de:4f:b0:81:e0:55: 68:7b:5b:8d:85:72:4a:a8:92:07:bb:54:97:f9:7e: 25:e2:91:29:a0:64:8e:69:c8:c6:54:3b:15:2c:8c: ec:14:98:5d:b9:0f:aa:82:d6:05:d5:61:48:cf:ee: 34:e4:1d:56:eb:e4:43:a7:2f:f1:53:e7:69:55:7b: 96:a4:94:91:4e:a4:96:7f:1d:dd:62:77:d8:2a:be: 8c:46:db:ef:88:71:13:e1:df:97:5d:28:ec:86:04: c4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0E:E0:63:B9:23:B6:87:73:DB:99:50:DE:15:BA:1B:3E:7C:C8:EE X509v3 Authority Key Identifier: keyid:CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:6e:04:20:0f:b2:ba:a7:cb:6b:60:f6:2c:0c:81:9f:b7:bf: 83:4d:98:ff:02:21:45:b7:89:86:ce:ad:c6:e7:06:69:a7:4a: b4:50:4b:ed:0a:5c:0a:16:73:27:86:7a:92:75:4f:90:29:8a: 43:45:2e:b6:4e:09:9f:2c:b6:29:53:86:fc:f2:fd:6e:fd:64: 6f:c7:66:4d:9c:5d:fb:a9:4a:f5:f3:70:7f:59:d9:8b:d9:e2: 1e:2e:c3:15:53:1a:71:9c:a7:db:6d:43:d8:d7:62:f1:a1:35: 78:3d:df:38:c3:aa:1c:25:c1:3b:ee:7c:1f:b5:83:a1:dd:c8: 9d:99:00:08:c0:65:00:5b:f1:01:42:17:6c:16:36:32:af:27: d4:2b:06:1a:27:c4:fd:42:81:ad:f8:4d:6a:eb:6a:be:d3:07: d0:a3:be:14:64:82:09:74:49:99:9a:e2:08:73:6d:0c:d9:95: e2:7c:f6:d5:62:29:f9:aa:ac:4f:38:ee:a1:ac:15:63:cb:a7: d5:85:83:a0:48:73:d7:4e:7f:b7:1e:52:06:31:2a:27:c9:48: 91:7b:47:56:4e:68:d5:a3:fd:31:85:7e:d5:0c:24:a8:a7:2d: 3f:6e:8f:01:68:c5:a2:b9:7f:02:58:cc:48:53:5c:a7:40:fe: 0e:19:b1:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQGdrzCvr+3MfnacRYTSQGY7tsxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzND OEM1MTRFOTAeFw0yNTA0MjkxNDI2MzJaFw0yNTA1MDIxNjUxMzJaMDMxMTAvBgNV BAMTKDgyMEVFMDYzQjkyM0I2ODc3M0RCOTk1MERFMTVCQTFCM0U3Q0M4RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZUUQfZUdBucslZBDHA7HIcAf7 glVvto1haE00WndTcrz6lf+eymxu1fnhWrdM6PjxfhInGTXnFsvNKm8/LcJCkkvW wFk4DxzNceSOOb9nQqPBRuudnPD7f9VvkmTSH+FBE2VgbAUzutDoZrQPTIXLQBgr 7X5A2p0NZ/eVuu/QTK6wzeA9+RPQFQeKHhiJKBfusIlWNn+QcOoEJgZLm95PsIHg VWh7W42Fckqokge7VJf5fiXikSmgZI5pyMZUOxUsjOwUmF25D6qC1gXVYUjP7jTk HVbr5EOnL/FT52lVe5aklJFOpJZ/Hd1id9gqvoxG2++IcRPh35ddKOyGBMRHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgg7gY7kjtodz25lQ3hW6Gz58yO4wHwYDVR0j BBgwFoAUzu4Cd5mMddNqmOwQKtZ1c8jFFOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWEzYjEwNi04ZWYwLTQ1YmYtYjI3Ny1hMjc5NDdlNDU5MWIvMC9DRUVFMDI3Nzk5 OEM3NUQzNkE5OEVDMTAyQUQ2NzU3M0M4QzUxNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzNDOEM1 MTRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVhM2IxMDYtOGVmMC00NWJmLWIy NzctYTI3OTQ3ZTQ1OTFiLzAvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1 NzNDOEM1MTRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5uBCAPsrqny2tg9iwMgZ+3v4NNmP8CIUW3 iYbOrcbnBmmnSrRQS+0KXAoWcyeGepJ1T5ApikNFLrZOCZ8stilThvzy/W79ZG/H Zk2cXfupSvXzcH9Z2YvZ4h4uwxVTGnGcp9ttQ9jXYvGhNXg93zjDqhwlwTvufB+1 g6HdyJ2ZAAjAZQBb8QFCF2wWNjKvJ9QrBhonxP1Cga34TWrrar7TB9CjvhRkggl0 SZma4ghzbQzZleJ89tViKfmqrE847qGsFWPLp9WFg6BIc9dOf7ceUgYxKifJSJF7 R1ZOaNWj/TGFftUMJKinLT9ujwFoxaK5fwJYzEhTXKdA/g4Zsds= -----END CERTIFICATE-----Generated at Tue Apr 29 20:34:10 2025 by rpki-client