$ rpki-client -vvf repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft File: C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft (raw, json) Hash identifier: eGMcemf8UAtZeCUCNjtLA+rByagO5L0NXZ7V6b26ipg= Subject key identifier: F6:C8:FE:FE:85:40:9E:96:AF:E4:0B:7B:A9:AC:B2:94:3A:5D:86:95 Authority key identifier: C2:0D:D3:7A:F0:EF:3C:A0:55:DF:DF:8F:3F:5D:18:F0:81:81:96:F4 Certificate issuer: /CN=C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4 Certificate serial: 5D550BE06451A812670EC0ACA23A592BE434FCE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft Manifest number: 0314 Signing time: Fri 25 Apr 2025 11:01:50 +0000 Manifest this update: Fri 25 Apr 2025 10:56:50 +0000 Manifest next update: Mon 28 Apr 2025 21:46:50 +0000 Files and hashes: 1: C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl (hash: 4cSZqLlUpchUQGnn4DPFzOryu1kXL3gdHUhRf7NLKms=) 2: 3130332e3136312e37332e302f32342d3234203d3e203538333738.roa (hash: N58UqlFMp748Khi3FbSfGS0G+XtsfGGuqPSO+3bYMNA=) 3: 3130332e3136312e37322e302f32342d3234203d3e203538333738.roa (hash: WHyXZiHm1tFrwAXrz4brauNseb8V8ZMQneoiM0eZr/g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:55:0b:e0:64:51:a8:12:67:0e:c0:ac:a2:3a:59:2b:e4:34:fc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4 Validity Not Before: Apr 25 10:56:50 2025 GMT Not After : Apr 28 21:46:50 2025 GMT Subject: CN=F6C8FEFE85409E96AFE40B7BA9ACB2943A5D8695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:65:7b:a2:a5:00:f6:e2:8a:e6:f4:e5:ca:f4: 25:7d:5a:cf:2d:5a:3e:b7:5e:88:f2:fe:e6:c6:a5: 3d:97:c2:85:10:7b:1c:d9:f8:44:46:73:61:91:3b: d6:d2:e4:89:bf:aa:47:b6:88:e4:2c:ba:b4:7a:07: d9:46:1b:ae:dc:b0:94:20:a5:cf:bd:11:a6:4f:87: 28:d9:86:34:c7:07:50:52:8b:0f:02:d7:a7:06:4d: 9b:71:e7:5d:66:87:19:ac:71:77:db:01:e8:e3:42: c3:fb:39:55:87:ea:66:83:07:64:bf:5f:99:07:c6: 71:6f:4c:a4:4d:d5:64:c7:df:fb:ef:b7:f5:0d:9e: ae:a6:22:a8:3c:5d:e4:b8:bb:5a:32:03:a5:34:64: 26:97:bb:a6:c0:e3:65:e6:77:88:5f:5f:ba:cf:a3: c9:ca:aa:52:3e:f2:76:8c:4d:08:68:c2:3f:64:ba: 76:dc:b0:79:7a:65:02:f3:5c:44:26:81:6e:4c:83: 7a:9b:8c:5f:ad:37:b6:6a:8a:78:fa:d1:a3:02:06: b7:3a:56:18:3c:c4:7e:11:c1:41:6e:0a:45:01:c1: 96:f7:96:5c:f2:95:4d:99:dd:18:0b:6a:90:3a:7c: 47:ec:96:78:a9:23:fe:95:36:ee:30:2a:65:d3:e0: 32:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C8:FE:FE:85:40:9E:96:AF:E4:0B:7B:A9:AC:B2:94:3A:5D:86:95 X509v3 Authority Key Identifier: keyid:C2:0D:D3:7A:F0:EF:3C:A0:55:DF:DF:8F:3F:5D:18:F0:81:81:96:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:4e:3f:5f:02:55:f9:66:a1:5d:04:f2:54:ca:c0:d3:b2:94: be:6e:9b:c5:07:e7:1f:f5:92:52:4e:fd:20:0a:75:a5:a3:c6: fd:c4:c0:84:54:23:5b:8a:19:d9:93:85:af:ed:c8:39:7f:62: 9f:99:7f:c1:31:5f:bf:26:4f:39:6f:e1:69:0b:e2:b5:9d:c6: 24:7a:32:fb:93:17:e8:82:e2:10:48:0d:cc:6c:9e:16:75:c7: c3:ea:be:88:de:a5:d1:de:d6:19:58:b6:5a:e7:80:cb:5a:b7: 09:be:62:50:67:b3:cd:d4:e3:81:22:88:a6:8f:05:f1:44:8b: a6:cb:9c:28:d6:c5:03:33:d3:29:be:0b:81:4a:0a:39:05:ee: 7b:fc:cb:f5:60:1c:c4:23:23:27:19:f8:26:b2:29:24:6f:66: df:73:bf:4a:29:f6:34:91:5d:01:c9:35:bc:01:9f:2b:56:4c: 61:2d:d7:72:8b:e6:92:61:44:fa:ee:4e:4a:b4:64:90:f8:a6: 71:53:f1:16:a2:25:a0:b2:72:d3:aa:46:81:3f:66:aa:60:47: 86:84:74:0b:41:8f:c7:b5:9b:7b:d9:16:84:33:e6:f6:48:4c: 2a:e1:ae:2e:48:74:b9:2b:22:b9:5b:df:48:c4:ba:3e:f4:06: 26:34:66:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXVUL4GRRqBJnDsCsojpZK+Q0/OAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4RjA4 MTgxOTZGNDAeFw0yNTA0MjUxMDU2NTBaFw0yNTA0MjgyMTQ2NTBaMDMxMTAvBgNV BAMTKEY2QzhGRUZFODU0MDlFOTZBRkU0MEI3QkE5QUNCMjk0M0E1RDg2OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBZXuipQD24orm9OXK9CV9Ws8t Wj63Xojy/ubGpT2XwoUQexzZ+ERGc2GRO9bS5Im/qke2iOQsurR6B9lGG67csJQg pc+9EaZPhyjZhjTHB1BSiw8C16cGTZtx511mhxmscXfbAejjQsP7OVWH6maDB2S/ X5kHxnFvTKRN1WTH3/vvt/UNnq6mIqg8XeS4u1oyA6U0ZCaXu6bA42Xmd4hfX7rP o8nKqlI+8naMTQhowj9kunbcsHl6ZQLzXEQmgW5Mg3qbjF+tN7Zqinj60aMCBrc6 Vhg8xH4RwUFuCkUBwZb3llzylU2Z3RgLapA6fEfslnipI/6VNu4wKmXT4DKVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9sj+/oVAnpav5At7qayylDpdhpUwHwYDVR0j BBgwFoAUwg3TevDvPKBV39+PP10Y8IGBlvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWJlN2FkOC1lMTVjLTQwMTQtYmZiMy1iZTY5YjdkNWRlODgvMC9DMjBERDM3QUYw RUYzQ0EwNTVERkRGOEYzRjVEMThGMDgxODE5NkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4RjA4MTgx OTZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWViZTdhZDgtZTE1Yy00MDE0LWJm YjMtYmU2OWI3ZDVkZTg4LzAvQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4 RjA4MTgxOTZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM1OP18CVflmoV0E8lTKwNOylL5um8UH5x/1 klJO/SAKdaWjxv3EwIRUI1uKGdmTha/tyDl/Yp+Zf8ExX78mTzlv4WkL4rWdxiR6 MvuTF+iC4hBIDcxsnhZ1x8PqvojepdHe1hlYtlrngMtatwm+YlBns83U44EiiKaP BfFEi6bLnCjWxQMz0ym+C4FKCjkF7nv8y/VgHMQjIycZ+CayKSRvZt9zv0op9jSR XQHJNbwBnytWTGEt13KL5pJhRPruTkq0ZJD4pnFT8RaiJaCyctOqRoE/ZqpgR4aE dAtBj8e1m3vZFoQz5vZITCrhri5IdLkrIrlb30jEuj70BiY0Zi4= -----END CERTIFICATE-----Generated at Fri Apr 25 12:54:06 2025 by rpki-client on console.sobornost.net