$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft File: E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft (raw, json) Hash identifier: DKQyqqjFsMmUe1cywmgf5fnn06+/o0R7FyJhPCk1Efs= Subject key identifier: EF:C5:16:ED:3B:2B:31:45:5A:2B:ED:CD:C5:FA:C6:95:2F:66:99:4A Authority key identifier: E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 Certificate issuer: /CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Certificate serial: 57643F323D085AC313909580A9E374D7D5C72CA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft Manifest number: 9A Signing time: Wed 04 Jun 2025 03:12:06 +0000 Manifest this update: Wed 04 Jun 2025 03:07:06 +0000 Manifest next update: Sat 07 Jun 2025 03:21:06 +0000 Files and hashes: 1: 323030313a6466333a653563303a3a2f34382d3438203d3e20313532383231.roa (hash: pQCtNd2+RXtFnrSf+6sVuQqtxv0QiGcHuuERYnQ23YQ=) 2: E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl (hash: nAp9ao0OMp0qsRSsMZV9aRfbsEt2ovR5o0kvRhI+cac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:21:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:64:3f:32:3d:08:5a:c3:13:90:95:80:a9:e3:74:d7:d5:c7:2c:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Validity Not Before: Jun 4 03:07:06 2025 GMT Not After : Jun 7 03:21:06 2025 GMT Subject: CN=EFC516ED3B2B31455A2BEDCDC5FAC6952F66994A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:59:fa:b9:9e:36:e1:d2:53:3d:53:ca:ce:f6: b3:13:98:f9:07:fe:ea:0d:14:fc:58:b6:5f:83:11: 9d:57:e3:9f:f2:09:ff:36:21:17:8f:3e:31:b8:86: 48:a0:bc:1a:1c:17:8d:a6:4d:f6:16:bc:61:04:4e: aa:54:95:4d:7d:e4:7d:d5:41:ab:34:3e:57:41:69: 33:9e:37:b7:14:e0:4f:17:c6:45:4a:42:93:18:5c: 7f:90:23:e6:62:13:09:5d:1e:4a:d7:cd:1e:9c:ff: 5d:e6:59:56:53:37:e6:09:11:a7:0e:0f:d1:ed:48: 47:47:cc:31:5e:85:45:4b:d1:a5:0c:83:14:55:6a: 05:42:84:1c:dc:c2:66:e2:ef:3f:dd:d6:5d:7c:a0: f3:5c:20:fb:7a:81:c1:23:8f:a4:67:84:12:54:0b: 2d:1d:8f:61:1c:04:3f:93:0f:55:07:46:d8:df:47: ee:c8:be:7b:2b:12:76:49:e6:2b:19:a1:f6:e0:8a: bb:8f:e1:c5:15:77:c9:ab:eb:41:bd:d1:2c:51:1a: 3e:9c:19:de:2c:83:7c:2a:64:18:50:85:f4:13:0d: 28:e5:de:0e:65:e5:6f:d2:6f:bd:56:2a:74:05:e8: 12:ca:9a:d4:5f:a5:38:49:2f:98:41:21:77:6d:8a: ad:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C5:16:ED:3B:2B:31:45:5A:2B:ED:CD:C5:FA:C6:95:2F:66:99:4A X509v3 Authority Key Identifier: keyid:E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:4a:16:a5:13:58:8d:35:f4:f6:32:db:fa:56:2b:b2:43:3f: 24:fb:89:4d:82:5e:0c:74:1e:04:b0:fa:82:bd:6d:c0:00:b8: 3f:f4:2e:a6:a3:ca:37:e5:7c:17:be:60:2d:03:23:83:61:2a: e8:f3:13:0d:c6:dc:31:d8:25:c6:3b:ae:94:88:d8:6b:64:f8: 67:23:74:69:77:c8:86:0a:92:87:45:5c:0b:4f:da:f1:36:12: 7f:23:67:20:24:b8:86:4c:96:5c:e5:77:e7:cf:34:c5:20:1d: ac:6d:86:fb:30:2b:39:72:a0:80:42:ea:73:c0:dd:21:aa:d3: 3c:03:ce:e9:40:aa:7b:7f:1e:8b:c4:2e:17:16:ce:0e:18:e0: 48:ff:31:79:ac:f2:1d:82:8e:ff:05:a0:9c:bc:79:36:9f:10: db:d8:2b:d4:9a:25:3f:b5:a9:4d:64:b8:a7:8b:2a:9c:af:8d: 20:2c:35:93:77:61:fb:b5:1e:06:51:13:62:67:ae:b2:83:74: f7:fc:13:f5:69:be:c5:d1:ed:69:03:59:ca:b7:f8:1c:78:be: 51:2e:68:9f:d8:93:d8:00:16:7e:8d:cb:28:c2:b7:8a:b0:90: d8:d0:53:a7:e7:87:8b:c2:78:b6:f5:9a:06:35:a3:60:9f:6f: ee:cb:f1:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV2Q/Mj0IWsMTkJWAqeN019XHLKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1 MTM2QzAwMjAeFw0yNTA2MDQwMzA3MDZaFw0yNTA2MDcwMzIxMDZaMDMxMTAvBgNV BAMTKEVGQzUxNkVEM0IyQjMxNDU1QTJCRURDREM1RkFDNjk1MkY2Njk5NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuWfq5njbh0lM9U8rO9rMTmPkH /uoNFPxYtl+DEZ1X45/yCf82IRePPjG4hkigvBocF42mTfYWvGEETqpUlU195H3V Qas0PldBaTOeN7cU4E8XxkVKQpMYXH+QI+ZiEwldHkrXzR6c/13mWVZTN+YJEacO D9HtSEdHzDFehUVL0aUMgxRVagVChBzcwmbi7z/d1l18oPNcIPt6gcEjj6RnhBJU Cy0dj2EcBD+TD1UHRtjfR+7IvnsrEnZJ5isZofbgiruP4cUVd8mr60G90SxRGj6c Gd4sg3wqZBhQhfQTDSjl3g5l5W/Sb71WKnQF6BLKmtRfpThJL5hBIXdtiq0vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU78UW7TsrMUVaK+3NxfrGlS9mmUowHwYDVR0j BBgwFoAU5wjJd7Bqz66Lr8ayGeWkWFE2wAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMS9FNzA4Qzk3N0Iw NkFDRkFFOEJBRkM2QjIxOUU1QTQ1ODUxMzZDMDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1MTM2 QzAwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzEvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0 NTg1MTM2QzAwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJKFqUTWI019PYy2/pWK7JDPyT7iU2CXgx0 HgSw+oK9bcAAuD/0LqajyjflfBe+YC0DI4NhKujzEw3G3DHYJcY7rpSI2Gtk+Gcj dGl3yIYKkodFXAtP2vE2En8jZyAkuIZMllzld+fPNMUgHaxthvswKzlyoIBC6nPA 3SGq0zwDzulAqnt/HovELhcWzg4Y4Ej/MXms8h2Cjv8FoJy8eTafENvYK9SaJT+1 qU1kuKeLKpyvjSAsNZN3Yfu1HgZRE2JnrrKDdPf8E/VpvsXR7WkDWcq3+Bx4vlEu aJ/Yk9gAFn6NyyjCt4qwkNjQU6fnh4vCeLb1mgY1o2Cfb+7L8Zw= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:19 2025 by rpki-client