$ rpki-client -vvf repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft File: E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft (raw, json) Hash identifier: Co7oE7ey5ZoSlEFlheFpVbj/6CehlgoTqXRKpnJuRqg= Subject key identifier: F5:3F:4F:6F:67:F2:42:41:AB:83:68:0C:F2:6A:C2:08:FF:C3:B2:E2 Authority key identifier: E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2 Certificate issuer: /CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2 Certificate serial: 5FF4400BC269F55E9C5B95F684051BEEBCD46873 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft Manifest number: FF Signing time: Sun 01 Jun 2025 21:32:18 +0000 Manifest this update: Sun 01 Jun 2025 21:27:18 +0000 Manifest next update: Thu 05 Jun 2025 06:49:18 +0000 Files and hashes: 1: 3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa (hash: jR3Fixe166OMUTtP8mJKbsDEpASm2BgJ020ziz4iWic=) 2: 3130332e3138392e3232332e302f32342d3234203d3e20313439383831.roa (hash: eTIGvTxcclkAjkS0JQL+QXqxxlU66A6zLv2/rsCM/mo=) 3: E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl (hash: dYnqsF111Mx7PZ2WBkE20eMPhxTf+SDa0NQj/XxFhNM=) 4: 323030313a6466313a396563303a3a2f34382d3438203d3e20313439383831.roa (hash: 2+QIfySh8c6i8OAm2ZBYIJAC5i/VOgSLnCJgIJXnqcY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 06:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f4:40:0b:c2:69:f5:5e:9c:5b:95:f6:84:05:1b:ee:bc:d4:68:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2 Validity Not Before: Jun 1 21:27:18 2025 GMT Not After : Jun 5 06:49:18 2025 GMT Subject: CN=F53F4F6F67F24241AB83680CF26AC208FFC3B2E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6b:14:ab:cd:a0:db:68:ae:0c:dd:24:f6:48: e8:2d:09:37:b7:1c:96:26:85:58:7a:67:f2:26:33: ec:2e:85:3f:25:d7:bb:09:11:45:cc:94:4d:c6:a3: 27:c2:d9:b7:81:30:a2:ae:46:c5:9d:ea:fc:7b:b5: bb:27:e0:9b:d3:82:79:7b:fe:e4:66:bd:f2:27:c0: a5:11:2c:eb:fb:14:bb:ac:00:fe:76:7a:df:25:62: 69:33:57:91:e3:6f:7a:40:b8:27:da:2b:90:69:f6: 2f:96:93:eb:ee:28:a5:eb:1e:ec:19:0e:7e:f2:96: f8:a4:7f:f3:2e:9e:2d:d7:c2:8d:33:98:3b:14:28: 07:42:8a:97:15:85:09:f6:16:30:17:02:c3:ca:42: cf:2e:c5:bf:a0:cf:d1:49:e4:1e:96:17:38:d3:5c: ca:69:cb:d9:5e:e7:e6:66:44:75:b6:dd:94:0a:88: fb:d0:b9:ac:05:1c:4a:f1:f9:38:c8:1c:fc:93:d9: 64:e3:c9:11:d0:51:c4:3a:a5:e3:63:41:41:69:4f: bd:92:c5:e9:16:53:53:45:49:9c:60:e9:d2:0e:ca: 4e:e4:9d:82:44:8c:92:36:b8:02:ab:37:dd:51:6d: 1d:20:35:5e:63:ec:44:75:e8:81:37:57:f6:09:8d: 8a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:3F:4F:6F:67:F2:42:41:AB:83:68:0C:F2:6A:C2:08:FF:C3:B2:E2 X509v3 Authority Key Identifier: keyid:E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:92:d7:fc:c5:31:b5:2a:d7:b0:de:3b:ca:39:d6:0e:c9:ca: f8:f7:e8:f2:cb:e1:a8:94:3e:d9:61:7c:7b:20:42:19:16:4a: d6:8b:ab:ac:b9:cc:88:28:b0:3a:e2:07:99:25:a1:2d:f3:9d: aa:80:72:53:4c:de:ee:ee:d2:6f:ee:af:8a:4e:92:e5:45:8b: 76:3c:60:04:4c:83:fb:10:94:e7:93:a1:6f:98:0a:cd:d2:04: 8e:20:f8:7d:7e:45:61:29:21:11:44:77:ff:1b:e5:f9:c6:a9: e3:ee:19:ae:83:0d:09:79:03:e4:c6:16:f2:b5:6b:07:4a:cb: 2b:af:e0:11:2e:2a:ec:6d:4e:67:75:d8:4c:6d:59:2c:be:ca: 57:d9:3e:07:ff:a4:e0:78:9a:54:ed:e8:8e:9c:60:d4:ae:57: 9b:db:e5:ba:a3:99:d8:c9:38:a2:9c:6a:ef:47:67:9d:a2:ee: eb:a4:dc:83:c4:46:30:75:36:e7:05:38:b1:79:db:c1:3c:08: e8:e0:db:90:6b:6d:63:ad:ab:e1:45:89:33:c5:a2:99:35:4f: b6:b0:63:36:7b:69:0b:46:6c:06:8c:0c:49:c2:d6:6d:64:91: d0:99:e0:d2:9a:67:7e:7e:5a:0d:37:c7:32:36:1b:ba:4e:83: e4:23:10:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX/RAC8Jp9V6cW5X2hAUb7rzUaHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFGRTY5QTM0MjE2QzI0RDE4NzBGNUNFRDNBNDMwOTIz NEEwRjFCMjAeFw0yNTA2MDEyMTI3MThaFw0yNTA2MDUwNjQ5MThaMDMxMTAvBgNV BAMTKEY1M0Y0RjZGNjdGMjQyNDFBQjgzNjgwQ0YyNkFDMjA4RkZDM0IyRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClaxSrzaDbaK4M3ST2SOgtCTe3 HJYmhVh6Z/ImM+wuhT8l17sJEUXMlE3GoyfC2beBMKKuRsWd6vx7tbsn4JvTgnl7 /uRmvfInwKURLOv7FLusAP52et8lYmkzV5Hjb3pAuCfaK5Bp9i+Wk+vuKKXrHuwZ Dn7ylvikf/Muni3Xwo0zmDsUKAdCipcVhQn2FjAXAsPKQs8uxb+gz9FJ5B6WFzjT XMppy9le5+ZmRHW23ZQKiPvQuawFHErx+TjIHPyT2WTjyRHQUcQ6peNjQUFpT72S xekWU1NFSZxg6dIOyk7knYJEjJI2uAKrN91RbR0gNV5j7ER16IE3V/YJjYrvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9T9Pb2fyQkGrg2gM8mrCCP/DsuIwHwYDVR0j BBgwFoAU4f5po0IWwk0YcPXO06QwkjSg8bIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODhlM2ExNy0xYzkxLTQ3OTMtODNjNC0yMTFkNDIxMGFlYTgvMC9FMUZFNjlBMzQy MTZDMjREMTg3MEY1Q0VEM0E0MzA5MjM0QTBGMUIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFGRTY5QTM0MjE2QzI0RDE4NzBGNUNFRDNBNDMwOTIzNEEw RjFCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg4ZTNhMTctMWM5MS00NzkzLTgz YzQtMjExZDQyMTBhZWE4LzAvRTFGRTY5QTM0MjE2QzI0RDE4NzBGNUNFRDNBNDMw OTIzNEEwRjFCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGuS1/zFMbUq17DeO8o51g7Jyvj36PLL4aiU PtlhfHsgQhkWStaLq6y5zIgosDriB5kloS3znaqAclNM3u7u0m/ur4pOkuVFi3Y8 YARMg/sQlOeToW+YCs3SBI4g+H1+RWEpIRFEd/8b5fnGqePuGa6DDQl5A+TGFvK1 awdKyyuv4BEuKuxtTmd12ExtWSy+ylfZPgf/pOB4mlTt6I6cYNSuV5vb5bqjmdjJ OKKcau9HZ52i7uuk3IPERjB1NucFOLF528E8COjg25BrbWOtq+FFiTPFopk1T7aw YzZ7aQtGbAaMDEnC1m1kkdCZ4NKaZ35+Wg03xzI2G7pOg+QjEDg= -----END CERTIFICATE-----Generated at Tue Jun 3 23:52:28 2025 by rpki-client