$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft File: E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft (raw, json) Hash identifier: uFpj0bJBmwpXYQ5h1CnQmTOoEBuU3lO9tuGHIoNyaYY= Subject key identifier: BE:47:99:F7:BB:72:4A:79:A2:E8:43:DC:77:6B:FC:16:AD:DF:3A:0F Authority key identifier: E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1 Certificate issuer: /CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1 Certificate serial: 44CAB1AB0258F6454E4DD6EC7E95ADDF9B05B44A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft Manifest number: 0284 Signing time: Sat 05 Apr 2025 00:02:15 +0000 Manifest this update: Fri 04 Apr 2025 23:57:15 +0000 Manifest next update: Tue 08 Apr 2025 09:49:15 +0000 Files and hashes: 1: E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl (hash: UU2CzOhHvznWCgZQ0En+SLRZFJDi3wRvNImJayxnF8k=) 2: 3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa (hash: MJveUDHHKCs24S4XkZveJi95FO/ZRzpAvr7f8xFl65E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:ca:b1:ab:02:58:f6:45:4e:4d:d6:ec:7e:95:ad:df:9b:05:b4:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1 Validity Not Before: Apr 4 23:57:15 2025 GMT Not After : Apr 8 09:49:15 2025 GMT Subject: CN=BE4799F7BB724A79A2E843DC776BFC16ADDF3A0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:43:3c:97:22:98:9a:e2:2d:20:21:b4:95:f7: ea:aa:28:af:88:05:df:33:71:17:3e:b8:09:67:e0: fb:f3:16:10:8f:30:dd:24:25:c6:0b:53:83:2f:f3: 25:e2:99:f5:d1:7e:92:77:f8:1d:cc:f0:4d:0b:96: b1:8a:01:ff:ce:c5:8c:26:9f:05:e2:28:8d:db:cb: af:0a:9a:41:5b:48:7e:dc:9f:e3:bd:47:64:23:ce: 20:67:e0:f6:07:0f:38:ad:54:ba:ed:90:91:29:79: 02:2a:c7:89:9b:81:fc:b2:01:fc:74:92:e9:31:49: 12:a3:5b:1e:28:86:50:1f:c5:53:db:53:6d:b1:ff: 47:bf:67:4a:2c:77:19:33:6b:08:b6:97:a9:df:2f: 36:48:2a:01:97:08:59:3f:e5:81:a5:5e:7f:89:2c: 45:c7:e8:c3:c3:82:27:87:22:af:15:bb:79:7b:57: 4d:cb:7b:fc:34:40:5f:6f:76:64:fa:e9:e1:10:b7: d5:0a:b8:70:0c:8d:3c:eb:0b:68:f4:6c:9b:b4:c6: 2e:21:93:8d:75:87:45:06:19:55:1a:08:96:94:a4: 52:14:9a:bd:90:c0:73:37:64:26:cf:69:81:4b:a5: 83:13:ec:6c:e2:af:ea:ee:5b:00:89:dd:93:4b:e4: 7b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:47:99:F7:BB:72:4A:79:A2:E8:43:DC:77:6B:FC:16:AD:DF:3A:0F X509v3 Authority Key Identifier: keyid:E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:48:a5:d5:05:db:14:b0:60:e5:4b:3f:5a:94:38:3d:d7:6a: 3d:07:c8:9d:4f:4f:20:93:fe:db:f5:b8:76:32:86:9e:42:66: 07:81:91:49:5e:70:4f:6f:d4:a5:50:f4:b6:37:eb:3a:29:f8: e2:e5:09:0e:eb:74:e7:19:5b:eb:3e:0d:8c:0b:87:07:57:ce: 84:16:ac:8e:e7:29:e7:ab:38:8d:87:47:8b:94:39:c3:1f:a5: 1c:ea:1f:43:a4:07:ed:39:63:e2:68:29:33:2c:ec:ab:82:e7: e2:42:fc:9c:db:5d:0c:af:39:24:1d:5f:db:ad:86:96:d8:ac: fd:3e:69:7b:15:1e:bd:b5:23:48:5b:a2:b2:9d:c9:86:cf:d0: 54:fe:c0:35:8b:11:bc:0d:be:b8:e9:be:8e:29:1e:ec:10:84: f6:96:71:80:13:35:84:e8:a1:79:7b:87:87:30:f8:38:fa:2d: 85:c7:1b:d6:91:81:97:31:00:5e:ab:ef:9c:3f:70:a0:0d:2b: 48:90:c2:35:62:78:5c:be:f1:8f:73:13:a0:61:5f:0b:4e:e1: 6d:a5:3d:e8:2a:ec:1c:bb:20:9d:62:5f:9e:5e:69:48:1c:f2: 73:1d:58:33:13:60:31:96:d8:b7:40:a1:70:f5:ff:38:28:7f: eb:e5:01:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURMqxqwJY9kVOTdbsfpWt35sFtEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAxNEU2RUQwMzUzN0U0NTM1NjVEMDZFN0I4QTMxQUE4 QTA1MjVBMTAeFw0yNTA0MDQyMzU3MTVaFw0yNTA0MDgwOTQ5MTVaMDMxMTAvBgNV BAMTKEJFNDc5OUY3QkI3MjRBNzlBMkU4NDNEQzc3NkJGQzE2QURERjNBMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVQzyXIpia4i0gIbSV9+qqKK+I Bd8zcRc+uAln4PvzFhCPMN0kJcYLU4Mv8yXimfXRfpJ3+B3M8E0LlrGKAf/OxYwm nwXiKI3by68KmkFbSH7cn+O9R2QjziBn4PYHDzitVLrtkJEpeQIqx4mbgfyyAfx0 kukxSRKjWx4ohlAfxVPbU22x/0e/Z0osdxkzawi2l6nfLzZIKgGXCFk/5YGlXn+J LEXH6MPDgieHIq8Vu3l7V03Le/w0QF9vdmT66eEQt9UKuHAMjTzrC2j0bJu0xi4h k411h0UGGVUaCJaUpFIUmr2QwHM3ZCbPaYFLpYMT7Gzir+ruWwCJ3ZNL5HuzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvkeZ97tySnmi6EPcd2v8Fq3fOg8wHwYDVR0j BBgwFoAU4BTm7QNTfkU1ZdBue4oxqooFJaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmIyOTM3OC00NWYwLTQ5ZDMtYTZhZi01NzNiZTdkY2E2ZDAvMC9FMDE0RTZFRDAz NTM3RTQ1MzU2NUQwNkU3QjhBMzFBQThBMDUyNUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAxNEU2RUQwMzUzN0U0NTM1NjVEMDZFN0I4QTMxQUE4QTA1 MjVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJiMjkzNzgtNDVmMC00OWQzLWE2 YWYtNTczYmU3ZGNhNmQwLzAvRTAxNEU2RUQwMzUzN0U0NTM1NjVEMDZFN0I4QTMx QUE4QTA1MjVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABBIpdUF2xSwYOVLP1qUOD3Xaj0HyJ1PTyCT /tv1uHYyhp5CZgeBkUlecE9v1KVQ9LY36zop+OLlCQ7rdOcZW+s+DYwLhwdXzoQW rI7nKeerOI2HR4uUOcMfpRzqH0OkB+05Y+JoKTMs7KuC5+JC/JzbXQyvOSQdX9ut hpbYrP0+aXsVHr21I0hborKdyYbP0FT+wDWLEbwNvrjpvo4pHuwQhPaWcYATNYTo oXl7h4cw+Dj6LYXHG9aRgZcxAF6r75w/cKANK0iQwjVieFy+8Y9zE6BhXwtO4W2l Pegq7By7IJ1iX55eaUgc8nMdWDMTYDGW2LdAoXD1/zgof+vlAfA= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:25 2025 by rpki-client