$ rpki-client -vvf repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft File: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft (raw, json) Hash identifier: VSplJqDk+RhAIf1X/eiaYtdrQf577l1cE5ikuBHHGsg= Subject key identifier: F3:35:3A:0C:A1:CC:6A:0F:82:88:FC:D1:BA:61:77:A5:AC:67:19:F2 Authority key identifier: CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50 Certificate issuer: /CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450 Certificate serial: 5C4B39006BDFDCAC24A736175D78C30705BD0876 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft Manifest number: 0352 Signing time: Mon 28 Apr 2025 00:12:14 +0000 Manifest this update: Mon 28 Apr 2025 00:07:14 +0000 Manifest next update: Thu 01 May 2025 00:45:14 +0000 Files and hashes: 1: 3130332e382e37382e302f32332d3234203d3e203538353531.roa (hash: 3rFUXtbuW4eWsGnAQRXWPa2T5G8tLKctM7LWy4Bhpvk=) 2: 3130332e32302e3136362e302f32332d3234203d3e203538353531.roa (hash: CKy2gQtIBacjD8C67dYMJdlND8CS/j+yiiHq3SKDq4Q=) 3: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl (hash: 3dv3YxaX2DsXM2vHI2E6VmtKHjfHB7WsMq4mS80JHCM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 00:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:4b:39:00:6b:df:dc:ac:24:a7:36:17:5d:78:c3:07:05:bd:08:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450 Validity Not Before: Apr 28 00:07:14 2025 GMT Not After : May 1 00:45:14 2025 GMT Subject: CN=F3353A0CA1CC6A0F8288FCD1BA6177A5AC6719F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1b:31:d3:0e:28:91:e1:7a:82:c6:5f:9d:db: 0a:a9:96:69:dd:f7:86:67:12:4a:44:c2:1f:06:81: 24:23:eb:f0:58:d5:5f:05:f4:50:1a:bf:2c:a6:47: 50:64:45:ba:f0:bc:2f:6e:96:1f:a5:74:f9:00:b9: 45:13:35:37:49:3b:ea:01:dc:80:39:8f:52:25:fe: 81:2d:6c:0c:ef:93:27:2c:26:95:9d:67:70:86:8c: bb:b6:24:86:73:f5:50:f5:3a:a5:ac:3b:33:8e:26: 63:8a:f5:38:10:ae:7b:b5:16:62:fd:4b:0a:07:da: 65:28:ae:4f:7c:bf:de:4b:28:f1:35:43:02:ba:ca: 7f:45:d9:8c:c4:82:27:a1:d8:75:86:25:b2:e6:ab: 5d:17:57:15:ef:31:d6:82:a0:5c:b6:b8:a0:2a:69: c2:6f:72:14:0d:9a:57:10:46:74:6c:6f:41:cf:3f: 0e:6f:c5:a2:49:bc:e7:2b:6c:f3:60:44:7d:0e:b8: 15:0c:94:80:53:33:f6:cf:07:02:84:a4:c2:d9:75: 2e:55:69:7a:d4:95:d7:e3:22:e8:cf:0c:76:94:69: 21:50:ff:b6:2e:e8:ed:f7:9f:1b:28:da:ee:94:a6: 82:35:87:4d:79:ca:3a:2a:e5:9b:db:5c:14:c7:15: 0b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:35:3A:0C:A1:CC:6A:0F:82:88:FC:D1:BA:61:77:A5:AC:67:19:F2 X509v3 Authority Key Identifier: keyid:CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:83:26:f8:e7:77:dc:ef:05:f6:26:3e:07:1c:e7:2c:aa:23: 49:c7:0b:08:ed:f4:59:8f:2c:32:8c:17:76:48:bb:96:a0:83: aa:a6:00:26:15:e0:6c:9b:ef:9d:6b:89:f8:96:fe:a5:ec:02: 71:d9:5e:c1:d5:d6:68:88:fd:3f:71:3f:57:96:b8:9e:63:e5: a1:d2:d7:6a:40:e3:11:9b:93:61:e4:bb:a0:46:53:d1:5b:ed: 8a:72:62:06:da:2c:26:b4:05:10:b7:91:64:a9:07:fc:60:2e: ce:92:1b:0b:91:57:76:1b:23:ab:d6:eb:62:c2:40:5a:46:33: a8:05:61:d0:10:cf:75:e6:61:8f:d1:fd:a6:cc:55:7a:7b:a4: dc:54:1e:9e:90:a1:26:9c:92:1b:25:d1:7f:37:2a:83:27:09: cc:cc:21:97:3a:f6:69:86:17:9d:b8:f7:3d:74:a7:1a:ed:b2: b9:08:64:7d:e7:0c:91:49:66:ea:e1:82:21:a7:46:ec:54:1a: 29:ee:95:73:98:d2:10:e8:09:57:06:0b:42:f4:16:f8:27:3f: ab:00:d9:cc:b6:5a:9e:dd:16:57:64:2e:fd:9c:4b:c8:bd:dd: b9:95:d4:5b:85:bd:51:50:04:16:48:54:19:2d:cc:ea:cd:6e: 95:fa:d8:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXEs5AGvf3KwkpzYXXXjDBwW9CHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgx QUFEMjQ1MDAeFw0yNTA0MjgwMDA3MTRaFw0yNTA1MDEwMDQ1MTRaMDMxMTAvBgNV BAMTKEYzMzUzQTBDQTFDQzZBMEY4Mjg4RkNEMUJBNjE3N0E1QUM2NzE5RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFGzHTDiiR4XqCxl+d2wqplmnd 94ZnEkpEwh8GgSQj6/BY1V8F9FAavyymR1BkRbrwvC9ulh+ldPkAuUUTNTdJO+oB 3IA5j1Il/oEtbAzvkycsJpWdZ3CGjLu2JIZz9VD1OqWsOzOOJmOK9TgQrnu1FmL9 SwoH2mUork98v95LKPE1QwK6yn9F2YzEgieh2HWGJbLmq10XVxXvMdaCoFy2uKAq acJvchQNmlcQRnRsb0HPPw5vxaJJvOcrbPNgRH0OuBUMlIBTM/bPBwKEpMLZdS5V aXrUldfjIujPDHaUaSFQ/7Yu6O33nxso2u6UpoI1h015yjoq5ZvbXBTHFQtVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8zU6DKHMag+CiPzRumF3paxnGfIwHwYDVR0j BBgwFoAUzcCF49TXVDmuG7bLaPGA6BqtJFAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDBlMGRlYS01ZjliLTQyNWMtODJjZS0zMGE4NjUwMDdjMzUvMC9DREMwODVFM0Q0 RDc1NDM5QUUxQkI2Q0I2OEYxODBFODFBQUQyNDUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgxQUFE MjQ1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQwZTBkZWEtNWY5Yi00MjVjLTgy Y2UtMzBhODY1MDA3YzM1LzAvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgw RTgxQUFEMjQ1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyDJvjnd9zvBfYmPgcc5yyqI0nHCwjt9FmP LDKMF3ZIu5agg6qmACYV4Gyb751rifiW/qXsAnHZXsHV1miI/T9xP1eWuJ5j5aHS 12pA4xGbk2Hku6BGU9Fb7YpyYgbaLCa0BRC3kWSpB/xgLs6SGwuRV3YbI6vW62LC QFpGM6gFYdAQz3XmYY/R/abMVXp7pNxUHp6QoSackhsl0X83KoMnCczMIZc69mmG F5249z10pxrtsrkIZH3nDJFJZurhgiGnRuxUGinulXOY0hDoCVcGC0L0FvgnP6sA 2cy2Wp7dFldkLv2cS8i93bmV1FuFvVFQBBZIVBktzOrNbpX62Fg= -----END CERTIFICATE-----Generated at Wed Apr 30 00:08:57 2025 by rpki-client