$ rpki-client -vvf repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft File: 1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft (raw, json) Hash identifier: hHWRYieFGqLDebk1YohNXRjRbqDwFoM3Ae9wbts/eNs= Subject key identifier: 61:C6:6A:E5:91:2A:B0:E5:86:60:A3:CE:AD:88:E4:10:47:36:91:DB Authority key identifier: 1E:EA:71:B4:C7:0A:47:D5:3B:E3:20:4F:E2:C4:8C:EF:92:7E:C7:31 Certificate issuer: /CN=1EEA71B4C70A47D53BE3204FE2C48CEF927EC731 Certificate serial: 301EDD35D9710A7AE04F2901A23A19C1E03685F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft Manifest number: 013B Signing time: Tue 03 Jun 2025 11:51:56 +0000 Manifest this update: Tue 03 Jun 2025 11:46:56 +0000 Manifest next update: Fri 06 Jun 2025 20:12:56 +0000 Files and hashes: 1: 3130332e31342e37342e302f32342d3234203d3e20313334363332.roa (hash: kRl6IfQghVcIhK14CpOe+4+3tl4P/DD5zma96SwY1Qw=) 2: 1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.crl (hash: fDgzskRT6ALtC67rsq00tMmqoDtfd8C9G3H0HXgFlzs=) 3: 3130332e31342e37352e302f32342d3234203d3e20313334363332.roa (hash: d03ba4w3/cMHa6YrFwbQZXYz0UgEChS2sqo8pZVU9h0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.crl rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:12:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:1e:dd:35:d9:71:0a:7a:e0:4f:29:01:a2:3a:19:c1:e0:36:85:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EEA71B4C70A47D53BE3204FE2C48CEF927EC731 Validity Not Before: Jun 3 11:46:56 2025 GMT Not After : Jun 6 20:12:56 2025 GMT Subject: CN=61C66AE5912AB0E58660A3CEAD88E410473691DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bb:a9:70:56:61:9e:90:dd:c2:63:e1:49:df: 0a:9f:82:55:32:9a:f3:1a:d9:bf:20:fb:d1:c7:0c: 19:0b:68:77:62:5d:b2:e4:f2:81:de:bd:12:a2:91: 68:5f:f9:19:12:ae:40:e5:dc:94:c4:a2:c0:1e:d2: 63:34:80:51:e0:5c:9d:6f:52:c5:38:4a:90:c5:c9: aa:e9:dc:32:1a:92:d8:61:c5:a3:68:36:1c:71:1d: a4:73:80:b1:7b:14:ca:ef:6c:19:43:ce:75:66:2b: 28:15:cf:5b:04:70:c4:3f:0b:a6:a7:e2:ef:f3:77: f7:a8:e7:03:08:b0:b7:e5:06:29:1e:fa:8b:fc:d7: 8c:b7:42:f9:f6:03:2e:d6:cb:fc:e9:44:b2:9d:80: 15:57:ce:01:6d:ce:ef:98:36:e7:b1:5a:72:10:47: ba:f1:9e:13:06:53:8f:c9:18:16:fc:42:66:f2:50: 82:8b:c4:ab:07:15:e3:2f:b2:d5:9f:8f:66:92:bd: e7:5d:d0:e8:ae:bd:29:f7:84:2d:ee:d7:76:fa:10: 4d:74:86:5d:5c:f5:6b:1b:24:b5:3d:f9:d5:63:94: 37:38:92:72:b3:18:1c:62:1b:f3:8b:aa:b3:a3:a2: c7:98:82:1d:7a:70:68:e8:1b:87:3f:5e:77:67:8b: 2f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C6:6A:E5:91:2A:B0:E5:86:60:A3:CE:AD:88:E4:10:47:36:91:DB X509v3 Authority Key Identifier: keyid:1E:EA:71:B4:C7:0A:47:D5:3B:E3:20:4F:E2:C4:8C:EF:92:7E:C7:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:87:63:a4:aa:50:61:41:6c:d2:33:45:59:d1:8f:53:cb:1d: b5:f4:fa:88:c7:2e:ce:29:dd:9a:6a:3a:8b:d9:ae:bc:6a:b8: 52:06:2c:fb:77:99:34:1f:fb:bb:14:4d:4f:32:5e:74:b2:be: 0f:73:31:14:13:cd:33:77:2a:8f:62:c9:7c:dc:4e:0c:f0:28: 34:57:80:46:c3:cb:70:81:a3:48:92:94:1d:83:80:d4:cd:67: 51:90:c8:68:0c:12:e2:b5:45:f8:11:44:c5:80:33:5f:d1:ec: 68:4a:d4:58:1c:7f:92:e6:11:7c:f4:77:0d:9f:b3:81:53:5f: d8:69:a2:86:99:6b:1a:13:32:90:c2:f8:c1:e3:bd:d9:a1:14: e9:b0:ef:ec:40:70:c6:52:29:70:96:37:23:c5:e6:e3:f3:37: ec:22:14:2e:86:03:5a:4b:16:f3:39:27:b8:25:1f:98:df:19: 2e:a8:90:7a:82:a1:f7:4b:b3:d5:d0:dc:89:b8:69:61:6d:ad: 65:41:9d:05:74:1c:02:71:8f:84:64:16:e3:ad:b2:52:d8:d3: ab:59:48:9f:9e:b3:13:54:da:e8:9e:7e:0b:72:45:f2:9f:7b: ca:b7:de:97:6e:9f:e4:ff:e7:c3:12:eb:09:a7:7a:b3:4e:9d: 02:ce:23:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMB7dNdlxCnrgTykBojoZweA2hfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVFQTcxQjRDNzBBNDdENTNCRTMyMDRGRTJDNDhDRUY5 MjdFQzczMTAeFw0yNTA2MDMxMTQ2NTZaFw0yNTA2MDYyMDEyNTZaMDMxMTAvBgNV BAMTKDYxQzY2QUU1OTEyQUIwRTU4NjYwQTNDRUFEODhFNDEwNDczNjkxREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZu6lwVmGekN3CY+FJ3wqfglUy mvMa2b8g+9HHDBkLaHdiXbLk8oHevRKikWhf+RkSrkDl3JTEosAe0mM0gFHgXJ1v UsU4SpDFyarp3DIakthhxaNoNhxxHaRzgLF7FMrvbBlDznVmKygVz1sEcMQ/C6an 4u/zd/eo5wMIsLflBike+ov814y3Qvn2Ay7Wy/zpRLKdgBVXzgFtzu+YNuexWnIQ R7rxnhMGU4/JGBb8QmbyUIKLxKsHFeMvstWfj2aSvedd0OiuvSn3hC3u13b6EE10 hl1c9WsbJLU9+dVjlDc4knKzGBxiG/OLqrOjoseYgh16cGjoG4c/Xndniy+HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYcZq5ZEqsOWGYKPOrYjkEEc2kdswHwYDVR0j BBgwFoAUHupxtMcKR9U74yBP4sSM75J+xzEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MDAwZTIzZS1mNDRhLTRjZmMtYmY1Ni1kOTlhMDkyZDczMTQvMC8xRUVBNzFCNEM3 MEE0N0Q1M0JFMzIwNEZFMkM0OENFRjkyN0VDNzMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUVFQTcxQjRDNzBBNDdENTNCRTMyMDRGRTJDNDhDRUY5MjdF QzczMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTAwMGUyM2UtZjQ0YS00Y2ZjLWJm NTYtZDk5YTA5MmQ3MzE0LzAvMUVFQTcxQjRDNzBBNDdENTNCRTMyMDRGRTJDNDhD RUY5MjdFQzczMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGyHY6SqUGFBbNIzRVnRj1PLHbX0+ojHLs4p 3ZpqOovZrrxquFIGLPt3mTQf+7sUTU8yXnSyvg9zMRQTzTN3Ko9iyXzcTgzwKDRX gEbDy3CBo0iSlB2DgNTNZ1GQyGgMEuK1RfgRRMWAM1/R7GhK1Fgcf5LmEXz0dw2f s4FTX9hpooaZaxoTMpDC+MHjvdmhFOmw7+xAcMZSKXCWNyPF5uPzN+wiFC6GA1pL FvM5J7glH5jfGS6okHqCofdLs9XQ3Im4aWFtrWVBnQV0HAJxj4RkFuOtslLY06tZ SJ+esxNU2uiefgtyRfKfe8q33pdun+T/58MS6wmnerNOnQLOI9A= -----END CERTIFICATE-----Generated at Thu Jun 5 18:13:17 2025 by rpki-client