$ rpki-client -vvf repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft File: CE118685D363E20B6D3B3955972062D9581B9E43.mft (raw, json) Hash identifier: nBaNTv8m6K0HNIbCceQWNDWprTkSMwBzb8zbHIiTIVQ= Subject key identifier: 60:1C:3B:67:23:7B:0A:A5:E5:9D:16:AB:FA:46:5A:E4:DD:81:85:83 Authority key identifier: CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43 Certificate issuer: /CN=CE118685D363E20B6D3B3955972062D9581B9E43 Certificate serial: 19B926CC065C79DDEE2589793DE05D3A7EFE83E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft Manifest number: 01A4 Signing time: Tue 29 Apr 2025 15:50:44 +0000 Manifest this update: Tue 29 Apr 2025 15:45:44 +0000 Manifest next update: Sat 03 May 2025 02:17:44 +0000 Files and hashes: 1: 3130332e3232342e3132342e302f32332d3234203d3e20313530313937.roa (hash: BZo1iQGJtOH0KYD7EjAIqb+6wWHVZqj9bpdNw1+DGvc=) 2: CE118685D363E20B6D3B3955972062D9581B9E43.crl (hash: y4dYDs87RLKLCOwJ1osvZgonAIbukvlQQpglyIbsVoY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.crl rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:b9:26:cc:06:5c:79:dd:ee:25:89:79:3d:e0:5d:3a:7e:fe:83:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE118685D363E20B6D3B3955972062D9581B9E43 Validity Not Before: Apr 29 15:45:44 2025 GMT Not After : May 3 02:17:44 2025 GMT Subject: CN=601C3B67237B0AA5E59D16ABFA465AE4DD818583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b6:14:74:57:bd:8e:cd:c5:d9:c8:70:f5:14: f3:23:a7:99:cd:7a:a5:4c:43:ae:5b:45:7d:ba:5b: 64:84:d1:fd:03:57:fb:01:db:e5:42:df:9d:f8:79: 5b:87:3f:ad:7c:65:5c:bd:1b:8e:95:dc:1f:28:90: 7c:0a:27:0b:0a:8c:fd:3f:2a:41:f0:b1:fe:63:94: 99:a2:d5:e9:14:63:c1:2c:ae:89:fa:43:8d:86:86: bb:0a:53:db:6b:f5:e6:dd:40:13:43:c5:f1:17:38: 2b:59:ad:11:77:dd:88:bd:a6:9d:f3:82:00:d4:90: 93:35:36:31:04:02:20:3e:42:46:28:dd:f8:c6:38: ff:c5:75:6a:dd:8f:a6:c9:39:b8:39:19:13:6e:d0: 4c:a5:1f:7a:93:17:d6:2b:63:88:9c:da:96:a1:a0: 79:c1:54:10:1d:5d:f3:b5:15:16:a3:52:96:ff:5f: fe:7b:26:5d:56:30:81:7e:4e:b5:03:b2:32:8c:15: 01:a6:44:27:b3:2b:28:3e:90:70:08:e6:e5:d1:57: 69:c0:26:aa:4a:b0:a5:11:23:dd:e1:10:1d:37:ab: 29:cb:14:e4:cd:31:c8:c3:74:79:fc:f0:b7:3c:78: 71:f7:29:d3:cd:a6:b9:e9:71:d5:eb:3d:f6:d1:29: 3b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1C:3B:67:23:7B:0A:A5:E5:9D:16:AB:FA:46:5A:E4:DD:81:85:83 X509v3 Authority Key Identifier: keyid:CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:86:7c:95:32:bc:b8:73:d9:b0:ae:28:28:14:a4:62:cc:b8: d0:97:12:3d:dc:4c:8b:03:c1:f8:d4:88:21:c1:e6:e3:64:37: 32:23:ac:9f:2a:db:88:fd:b0:7b:85:d4:72:9f:5a:8c:99:80: fa:03:dc:ef:fe:2c:ef:ec:e7:d6:2d:df:9b:df:30:58:eb:7c: 5c:40:73:e4:27:4a:69:5a:b0:8d:7e:37:41:70:5d:b0:dd:50: d8:bc:66:2b:19:a4:58:37:bf:a3:a9:e5:f7:be:f1:6e:ee:20: 6f:2a:61:00:8c:89:20:c4:66:dc:ef:68:8e:f8:57:b2:80:48: c8:25:52:e0:d8:af:32:c1:e0:52:21:92:bb:eb:98:c2:b2:07: 98:60:a7:17:5e:fa:68:23:a0:dd:fb:d2:fd:ee:33:3e:b8:b5: 62:36:30:c0:fe:97:6c:b5:55:1d:bc:5e:45:97:e8:df:39:79: 7f:55:9a:c8:aa:1c:d4:ff:e8:22:dc:c7:12:80:e5:df:2b:b2: e1:1a:05:ed:72:93:c0:da:fe:76:20:89:d8:b5:db:59:99:af: 06:82:21:0f:00:6a:1f:be:3b:1e:93:67:27:4f:07:b3:90:a3: fb:12:3b:88:4d:e2:f5:2d:f0:73:48:7e:44:ab:b0:e4:db:b2: 45:30:ad:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGbkmzAZced3uJYl5PeBdOn7+g+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYyRDk1 ODFCOUU0MzAeFw0yNTA0MjkxNTQ1NDRaFw0yNTA1MDMwMjE3NDRaMDMxMTAvBgNV BAMTKDYwMUMzQjY3MjM3QjBBQTVFNTlEMTZBQkZBNDY1QUU0REQ4MTg1ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDthR0V72OzcXZyHD1FPMjp5nN eqVMQ65bRX26W2SE0f0DV/sB2+VC3534eVuHP618ZVy9G46V3B8okHwKJwsKjP0/ KkHwsf5jlJmi1ekUY8Esron6Q42GhrsKU9tr9ebdQBNDxfEXOCtZrRF33Yi9pp3z ggDUkJM1NjEEAiA+QkYo3fjGOP/FdWrdj6bJObg5GRNu0EylH3qTF9YrY4ic2pah oHnBVBAdXfO1FRajUpb/X/57Jl1WMIF+TrUDsjKMFQGmRCezKyg+kHAI5uXRV2nA JqpKsKURI93hEB03qynLFOTNMcjDdHn88Lc8eHH3KdPNprnpcdXrPfbRKTu9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYBw7ZyN7CqXlnRar+kZa5N2BhYMwHwYDVR0j BBgwFoAUzhGGhdNj4gttOzlVlyBi2VgbnkMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZDgwOGY2Ny05YWJjLTQ2ZGQtOTgxNy1iOTMzOTA5M2Y4OGUvMC9DRTExODY4NUQz NjNFMjBCNkQzQjM5NTU5NzIwNjJEOTU4MUI5RTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYyRDk1ODFC OUU0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWQ4MDhmNjctOWFiYy00NmRkLTk4 MTctYjkzMzkwOTNmODhlLzAvQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYy RDk1ODFCOUU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+GfJUyvLhz2bCuKCgUpGLMuNCXEj3cTIsD wfjUiCHB5uNkNzIjrJ8q24j9sHuF1HKfWoyZgPoD3O/+LO/s59Yt35vfMFjrfFxA c+QnSmlasI1+N0FwXbDdUNi8ZisZpFg3v6Op5fe+8W7uIG8qYQCMiSDEZtzvaI74 V7KASMglUuDYrzLB4FIhkrvrmMKyB5hgpxde+mgjoN370v3uMz64tWI2MMD+l2y1 VR28XkWX6N85eX9VmsiqHNT/6CLcxxKA5d8rsuEaBe1yk8Da/nYgidi121mZrwaC IQ8Aah++Ox6TZydPB7OQo/sSO4hN4vUt8HNIfkSrsOTbskUwrWQ= -----END CERTIFICATE-----Generated at Thu May 1 04:32:20 2025 by rpki-client