$ rpki-client -vvf repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft File: E2111F10F01C17C4A322DAF5076425FBD824219D.mft (raw, json) Hash identifier: OQvfN0lQ+emI2SzsF25epI5SMqVqjzcT8YpwxjfHcnk= Subject key identifier: 24:77:BA:5C:03:AD:28:0C:E8:81:80:3F:75:AC:7B:42:08:BC:75:C6 Authority key identifier: E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D Certificate issuer: /CN=E2111F10F01C17C4A322DAF5076425FBD824219D Certificate serial: 33BB5D025194C20FD2B78EFC56DE2836C11EC6FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft Manifest number: 0484 Signing time: Sat 05 Apr 2025 02:21:05 +0000 Manifest this update: Sat 05 Apr 2025 02:16:05 +0000 Manifest next update: Tue 08 Apr 2025 07:11:05 +0000 Files and hashes: 1: E2111F10F01C17C4A322DAF5076425FBD824219D.crl (hash: YEL8YdP3AUZsQvDITMoQ/myK9c/BJ8x9U0a5KbyQ7Vg=) 2: 323430353a633963303a3a2f33322d3438203d3e20313338383233.roa (hash: s8lHN6mCeR+HJshcEVWQRH0RHZcp4BOPgK7V87vFKcA=) 3: 3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa (hash: pdookKLKBtLoDCva66o7DDtyvwgfA1hrwrmWSeoqnqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:bb:5d:02:51:94:c2:0f:d2:b7:8e:fc:56:de:28:36:c1:1e:c6:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2111F10F01C17C4A322DAF5076425FBD824219D Validity Not Before: Apr 5 02:16:05 2025 GMT Not After : Apr 8 07:11:05 2025 GMT Subject: CN=2477BA5C03AD280CE881803F75AC7B4208BC75C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:31:fe:f9:f6:55:e8:18:46:cd:f0:b0:37:20: f4:61:24:ec:f2:e1:8a:15:e6:76:fd:ae:72:93:aa: c2:75:76:d4:17:52:4e:e4:3c:f5:cd:1f:7b:56:40: 58:d8:60:d4:79:4f:5c:05:84:91:d8:92:f9:6a:03: 98:92:ea:b9:a0:36:99:2a:73:f4:c7:71:61:83:f5: 51:ec:af:05:59:f8:1d:b9:dd:50:82:b7:01:f8:cd: e6:9b:55:e4:82:fb:a8:54:24:eb:7f:3c:e1:70:88: 98:2e:11:ce:88:94:7d:07:f8:c7:bb:98:1f:82:39: 56:9e:3a:62:90:3a:b7:16:d0:00:1b:89:0b:f1:93: 9f:21:53:d6:2f:79:97:1f:bc:97:5a:c7:f0:03:28: 81:6a:aa:05:9f:7a:21:a2:ab:c9:00:74:db:41:ee: a6:dc:91:1f:9d:e6:42:e0:d1:0b:48:0f:96:11:31: 9b:e0:b6:0b:69:8b:25:0a:c6:bc:ea:f9:26:ba:9b: e1:52:df:12:b4:18:a9:67:25:f7:22:d7:90:b8:ad: a7:94:9c:37:85:c6:97:1e:e5:73:57:2b:06:65:ae: ef:9f:76:bf:79:f4:cc:95:99:57:33:7b:32:17:2c: 54:99:06:07:41:b2:7b:06:3c:bc:52:ae:b2:23:99: 57:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:77:BA:5C:03:AD:28:0C:E8:81:80:3F:75:AC:7B:42:08:BC:75:C6 X509v3 Authority Key Identifier: keyid:E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:d1:6c:6a:40:66:55:fd:03:4d:9e:11:69:66:8f:50:f0:a4: 23:5e:d9:5d:e3:e1:22:16:e5:a2:bd:e0:b1:11:2b:39:38:28: 09:6d:8e:b4:1e:b7:58:07:82:cd:0f:6d:97:99:30:e1:d5:c9: b3:a0:cb:00:32:51:8e:c3:72:a3:4c:78:35:8b:14:0e:a4:ad: e0:22:1e:d6:6f:68:a7:48:93:51:d7:08:37:46:0b:27:60:67: 55:d5:43:97:f3:bb:d7:d0:7b:0d:c9:cf:11:ff:ac:7b:83:67: 13:3a:a4:b5:e6:7a:57:9f:be:8b:71:10:7a:08:4d:03:a7:b3: 1a:e1:07:6e:85:b6:9e:f4:21:15:71:78:00:71:d7:a3:19:56: bb:97:ce:e9:1f:92:64:07:5b:94:67:94:ab:97:81:d3:d3:5e: a4:fc:47:50:c1:dc:13:3e:f2:85:47:97:26:87:2b:9e:4c:cc: 97:ce:9f:57:1d:30:1a:e3:9c:0b:7b:b7:98:ff:29:4f:ed:52: 8a:b0:44:71:da:cd:72:59:f4:e1:27:23:36:9a:f1:c1:7e:86: 03:3e:d5:86:32:93:5e:a4:35:1a:90:41:f7:78:4d:d5:d9:c1: 21:04:c3:73:c0:67:c0:70:0a:23:c6:8d:de:6a:d3:a9:3a:05: a1:a4:98:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM7tdAlGUwg/St478Vt4oNsEexv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJE ODI0MjE5RDAeFw0yNTA0MDUwMjE2MDVaFw0yNTA0MDgwNzExMDVaMDMxMTAvBgNV BAMTKDI0NzdCQTVDMDNBRDI4MENFODgxODAzRjc1QUM3QjQyMDhCQzc1QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDMf759lXoGEbN8LA3IPRhJOzy 4YoV5nb9rnKTqsJ1dtQXUk7kPPXNH3tWQFjYYNR5T1wFhJHYkvlqA5iS6rmgNpkq c/THcWGD9VHsrwVZ+B253VCCtwH4zeabVeSC+6hUJOt/POFwiJguEc6IlH0H+Me7 mB+COVaeOmKQOrcW0AAbiQvxk58hU9YveZcfvJdax/ADKIFqqgWfeiGiq8kAdNtB 7qbckR+d5kLg0QtID5YRMZvgtgtpiyUKxrzq+Sa6m+FS3xK0GKlnJfci15C4raeU nDeFxpce5XNXKwZlru+fdr959MyVmVczezIXLFSZBgdBsnsGPLxSrrIjmVdvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJHe6XAOtKAzogYA/dax7Qgi8dcYwHwYDVR0j BBgwFoAU4hEfEPAcF8SjItr1B2Ql+9gkIZ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjE1OGFlYy01MjgxLTQyZTYtOTc5Yi1mY2E2MWQ0N2M4NDUvMC9FMjExMUYxMEYw MUMxN0M0QTMyMkRBRjUwNzY0MjVGQkQ4MjQyMTlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJEODI0 MjE5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIxNThhZWMtNTI4MS00MmU2LTk3 OWItZmNhNjFkNDdjODQ1LzAvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1 RkJEODI0MjE5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDRbGpAZlX9A02eEWlmj1DwpCNe2V3j4SIW 5aK94LERKzk4KAltjrQet1gHgs0PbZeZMOHVybOgywAyUY7DcqNMeDWLFA6kreAi HtZvaKdIk1HXCDdGCydgZ1XVQ5fzu9fQew3JzxH/rHuDZxM6pLXmelefvotxEHoI TQOnsxrhB26Ftp70IRVxeABx16MZVruXzukfkmQHW5RnlKuXgdPTXqT8R1DB3BM+ 8oVHlyaHK55MzJfOn1cdMBrjnAt7t5j/KU/tUoqwRHHazXJZ9OEnIzaa8cF+hgM+ 1YYyk16kNRqQQfd4TdXZwSEEw3PAZ8BwCiPGjd5q06k6BaGkmKU= -----END CERTIFICATE-----Generated at Sat Apr 5 16:40:20 2025 by rpki-client