$ rpki-client -vvf repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft File: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft (raw, json) Hash identifier: T+AVAPf1ABNNfJlizb+Q07x2Moz60VduT/PtaxqcUAc= Subject key identifier: E0:EB:CE:61:82:55:C3:A6:6A:83:D0:4A:08:EB:D2:4F:81:9E:F5:03 Authority key identifier: CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 Certificate issuer: /CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Certificate serial: 3E162B980B510D7AA262402E5171FA53D478F4F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft Manifest number: 9A Signing time: Mon 28 Apr 2025 10:20:52 +0000 Manifest this update: Mon 28 Apr 2025 10:15:52 +0000 Manifest next update: Thu 01 May 2025 20:46:52 +0000 Files and hashes: 1: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl (hash: XTB4GQbPUvIGfggQhwKtSsRkaJQvO48THFDAlk32U7k=) 2: 3135372e31302e3232322e302f32332d3234203d3e20313431383938.roa (hash: GMU+CWZ37DvQvoDo6BkkC4G2UgM09X3lRKvxQBg5EIg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:46:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:16:2b:98:0b:51:0d:7a:a2:62:40:2e:51:71:fa:53:d4:78:f4:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Validity Not Before: Apr 28 10:15:52 2025 GMT Not After : May 1 20:46:52 2025 GMT Subject: CN=E0EBCE618255C3A66A83D04A08EBD24F819EF503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a6:25:e4:47:a4:75:6e:ff:20:bd:04:81:10: 84:fc:24:9d:fb:e8:4a:a1:b6:5e:c7:52:81:9c:d8: 79:8d:bd:62:26:80:02:b6:1f:4c:65:3b:5a:3a:e8: d8:d1:56:18:ff:29:c1:47:58:eb:0b:dc:57:68:ef: ff:30:7a:d4:7f:a9:34:7b:8f:fc:05:0d:b1:ff:f7: f5:c8:37:e9:fa:e2:50:ad:03:7a:47:f2:96:cc:9b: 5a:18:8a:76:c4:17:f7:cc:a3:0b:b9:a3:e7:3d:6c: 39:1b:5f:02:72:ea:fb:3c:2b:cc:7d:52:aa:f0:6c: aa:4c:53:bd:f8:f4:3b:39:09:f9:fa:20:27:37:80: 29:b4:6d:74:de:d9:f0:c3:f9:c6:3a:8a:7c:f7:76: 11:aa:32:72:de:e4:ed:cd:a7:a9:b6:90:89:a9:79: 63:86:be:b1:b7:ea:34:91:c1:a2:e0:3c:e8:e2:7b: 2c:02:c4:43:7d:3b:c9:e4:52:f3:66:05:6a:d0:18: c6:63:48:37:9c:9e:d7:29:b3:a4:b1:3e:7a:18:1d: 31:9f:37:e6:d1:36:c8:d9:fe:c6:71:18:1a:67:a5: 98:02:f6:f6:0c:87:c8:b4:6a:6f:89:05:27:fd:93: 9a:25:83:c1:b0:a3:bf:c6:f4:54:dd:de:cf:6d:70: d6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EB:CE:61:82:55:C3:A6:6A:83:D0:4A:08:EB:D2:4F:81:9E:F5:03 X509v3 Authority Key Identifier: keyid:CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:08:d5:29:aa:2f:10:a0:5b:20:a6:cf:f5:ee:20:9f:30:84: a0:7c:a6:8f:d5:22:58:7e:ca:15:ba:df:2c:14:22:d8:44:70: 71:3f:cd:c6:f3:f4:a7:2a:86:ff:96:07:b1:85:65:88:58:cb: b0:03:2e:a9:5b:26:1c:f4:df:26:ba:63:6e:96:4a:50:ce:7d: a0:4a:3d:7b:b7:0f:45:76:d7:19:d8:68:92:0f:21:3b:a8:37: d2:28:27:2d:9a:91:61:68:b6:86:a6:84:1b:6b:8b:92:c2:49: 1e:56:d7:9a:3e:bf:32:a5:c4:fe:1d:7b:5a:11:0d:a9:ff:45: 5b:ee:3b:2c:30:5a:d8:b6:5c:8a:b7:b1:11:6d:7d:07:6e:ed: ca:cc:42:2a:6a:7f:69:c0:96:f1:0d:01:c4:b3:fd:1b:24:f7: 3d:bf:c6:3b:6e:87:ac:26:b8:ee:7a:bb:e9:cb:5d:84:96:16: 64:79:c8:e8:b2:e4:26:dc:27:b0:16:44:7c:9d:81:6e:52:05: 4d:16:b5:ad:78:28:20:88:51:8d:ab:e3:a6:0f:95:b6:c3:ea: 75:61:9c:60:5a:06:22:f9:fe:af:3d:4c:26:82:80:47:7b:dc: 64:a1:83:6c:2c:f0:5d:54:41:98:9e:f2:bb:a3:e3:59:01:70: 23:16:d7:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPhYrmAtRDXqiYkAuUXH6U9R49PAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJC NDQ0NDE0MDAeFw0yNTA0MjgxMDE1NTJaFw0yNTA1MDEyMDQ2NTJaMDMxMTAvBgNV BAMTKEUwRUJDRTYxODI1NUMzQTY2QTgzRDA0QTA4RUJEMjRGODE5RUY1MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCopiXkR6R1bv8gvQSBEIT8JJ37 6Eqhtl7HUoGc2HmNvWImgAK2H0xlO1o66NjRVhj/KcFHWOsL3Fdo7/8wetR/qTR7 j/wFDbH/9/XIN+n64lCtA3pH8pbMm1oYinbEF/fMowu5o+c9bDkbXwJy6vs8K8x9 UqrwbKpMU7349Ds5Cfn6ICc3gCm0bXTe2fDD+cY6inz3dhGqMnLe5O3Np6m2kImp eWOGvrG36jSRwaLgPOjieywCxEN9O8nkUvNmBWrQGMZjSDecntcps6SxPnoYHTGf N+bRNsjZ/sZxGBpnpZgC9vYMh8i0am+JBSf9k5olg8Gwo7/G9FTd3s9tcNYdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4OvOYYJVw6Zqg9BKCOvST4Ge9QMwHwYDVR0j BBgwFoAUzrT5rjR2YwqvIvTNQs5ga7REQUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTM3NmE2ZS0zZWNhLTRmNzMtOGQxNS1kMWRkZWU5MWZmOTgvMC9DRUI0RjlBRTM0 NzY2MzBBQUYyMkY0Q0Q0MkNFNjA2QkI0NDQ0MTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJCNDQ0 NDE0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2EzNzZhNmUtM2VjYS00ZjczLThk MTUtZDFkZGVlOTFmZjk4LzAvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYw NkJCNDQ0NDE0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwI1SmqLxCgWyCmz/XuIJ8whKB8po/VIlh+ yhW63ywUIthEcHE/zcbz9Kcqhv+WB7GFZYhYy7ADLqlbJhz03ya6Y26WSlDOfaBK PXu3D0V21xnYaJIPITuoN9IoJy2akWFotoamhBtri5LCSR5W15o+vzKlxP4de1oR Dan/RVvuOywwWti2XIq3sRFtfQdu7crMQipqf2nAlvENAcSz/Rsk9z2/xjtuh6wm uO56u+nLXYSWFmR5yOiy5CbcJ7AWRHydgW5SBU0Wta14KCCIUY2r46YPlbbD6nVh nGBaBiL5/q89TCaCgEd73GShg2ws8F1UQZie8ruj41kBcCMW1yM= -----END CERTIFICATE-----Generated at Wed Apr 30 06:27:12 2025 by rpki-client