$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft File: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft (raw, json) Hash identifier: cbMSJ6ssz4FBO/KCjYMdvYdT1A9Yea0clBdUNeDLBaM= Subject key identifier: 06:9C:56:55:F7:63:EE:3B:58:28:E6:31:E4:26:D7:B6:66:6E:94:DD Authority key identifier: E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F Certificate issuer: /CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F Certificate serial: 63B93DA300111E17885C50F13455F83280A018C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft Manifest number: 0165 Signing time: Sat 19 Apr 2025 06:40:49 +0000 Manifest this update: Sat 19 Apr 2025 06:35:49 +0000 Manifest next update: Tue 22 Apr 2025 10:59:49 +0000 Files and hashes: 1: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl (hash: qCK+WuvToALwxmZPf+o9EIAHB5CHFHQCCVpxIg322oI=) 2: 3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa (hash: L7eyl2XZ6A1jGQ7W7TcXIFdLoB9CiiJsysljc4+PR9I=) 3: 3130332e3137322e3234322e302f32342d3234203d3e20313437303836.roa (hash: BUZVEiAJYJLqmtOMsKiwoKkvjDG5Aqhzz5fYoIUA7O8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 10:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b9:3d:a3:00:11:1e:17:88:5c:50:f1:34:55:f8:32:80:a0:18:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F Validity Not Before: Apr 19 06:35:49 2025 GMT Not After : Apr 22 10:59:49 2025 GMT Subject: CN=069C5655F763EE3B5828E631E426D7B6666E94DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7e:32:05:fa:6b:b1:68:01:b5:85:91:f2:e3: 78:fc:ea:8b:b3:be:35:ce:7a:1d:93:2b:9f:46:a8: 02:9a:67:b0:fc:3d:bf:00:12:12:3d:6f:99:6b:e8: e0:b1:c9:54:57:a9:c5:a6:79:2e:1d:d0:f4:fe:05: 95:2b:3a:75:27:b3:67:b0:14:48:dc:d8:ac:b8:1b: 61:a3:63:b8:e1:e4:19:87:91:8d:99:9c:d2:f1:e9: 85:a6:4b:b3:86:18:76:00:53:3b:67:a6:04:fa:11: 4c:29:ca:03:b7:81:18:61:4e:bd:87:99:15:fc:cf: ea:7b:01:c5:69:c5:4d:d4:19:42:62:6c:41:c6:55: b1:ff:84:94:e0:9e:98:5a:30:dc:3c:68:23:6f:bb: 71:75:f2:07:c9:58:1e:e9:0d:75:4f:79:5b:1f:8d: 93:b9:1d:c2:18:ce:47:70:94:21:de:d9:ca:b5:66: 6a:79:ad:50:9d:32:26:d7:5e:2d:72:c2:8a:76:ee: 7c:bf:99:ae:43:05:4d:69:68:98:49:55:36:3d:d2: 97:48:cd:58:22:92:ba:cc:02:58:38:ad:67:01:d3: d4:54:65:8c:8f:25:dc:fd:fd:51:54:36:77:36:8b: 3b:40:44:69:0c:15:f8:74:3c:ea:57:e3:4c:af:df: 76:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9C:56:55:F7:63:EE:3B:58:28:E6:31:E4:26:D7:B6:66:6E:94:DD X509v3 Authority Key Identifier: keyid:E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:22:fa:23:b7:f3:b4:e6:ff:c6:4b:0d:b2:3a:6b:aa:9e:bc: c2:e0:8b:fb:45:4c:6b:e7:97:64:69:7f:c8:23:cd:40:c3:30: 81:b7:cf:28:94:da:42:c0:ae:65:13:53:44:2f:25:1f:23:65: b3:ca:c1:e5:7a:cd:41:c3:9d:8f:49:19:b5:63:8b:95:6c:7b: c7:ef:19:c8:27:80:10:c7:1a:45:80:09:06:50:17:23:03:6a: cb:b5:40:5f:94:ed:8f:35:e8:e8:a3:a6:f8:6d:90:8d:9d:91: a6:76:c6:53:1e:d2:dc:62:36:9f:7c:ff:9a:8c:e1:66:50:a6: 78:8c:f0:a7:f1:b3:a9:cb:60:33:71:c2:54:64:49:d4:a6:d6: 79:b1:af:87:cd:6a:40:97:9e:e2:7c:fc:06:20:41:7f:07:46: f6:52:f8:9c:a9:04:8e:cd:82:49:93:2e:51:5d:df:44:9b:1c: f8:f4:d3:19:e6:de:95:73:30:0d:b9:e5:9d:79:7d:f0:72:7e: 11:7c:7c:51:e1:83:1f:44:81:fe:d6:62:13:16:94:87:54:49: 54:61:15:ee:86:13:c3:4f:61:83:af:fe:04:30:6e:e3:d3:7d: 8e:45:80:bf:74:1b:40:5c:1f:d9:4b:9f:87:b8:ac:66:d1:54: 2f:69:de:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY7k9owARHheIXFDxNFX4MoCgGMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJBMDNG QUY1NzU2RjAeFw0yNTA0MTkwNjM1NDlaFw0yNTA0MjIxMDU5NDlaMDMxMTAvBgNV BAMTKDA2OUM1NjU1Rjc2M0VFM0I1ODI4RTYzMUU0MjZEN0I2NjY2RTk0REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnfjIF+muxaAG1hZHy43j86ouz vjXOeh2TK59GqAKaZ7D8Pb8AEhI9b5lr6OCxyVRXqcWmeS4d0PT+BZUrOnUns2ew FEjc2Ky4G2GjY7jh5BmHkY2ZnNLx6YWmS7OGGHYAUztnpgT6EUwpygO3gRhhTr2H mRX8z+p7AcVpxU3UGUJibEHGVbH/hJTgnphaMNw8aCNvu3F18gfJWB7pDXVPeVsf jZO5HcIYzkdwlCHe2cq1Zmp5rVCdMibXXi1ywop27ny/ma5DBU1paJhJVTY90pdI zVgikrrMAlg4rWcB09RUZYyPJdz9/VFUNnc2iztARGkMFfh0POpX40yv33bnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBpxWVfdj7jtYKOYx5CbXtmZulN0wHwYDVR0j BBgwFoAU4q7sffiXqdbk8NHRxDEqA/r1dW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjZkOGY5Ny1jODA2LTQ3OTktODVlMC04Y2NmMThkYmJiMzEvMC9FMkFFRUM3REY4 OTdBOUQ2RTRGMEQxRDFDNDMxMkEwM0ZBRjU3NTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJBMDNGQUY1 NzU2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2ZDhmOTctYzgwNi00Nzk5LTg1 ZTAtOGNjZjE4ZGJiYjMxLzAvRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJB MDNGQUY1NzU2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALsi+iO387Tm/8ZLDbI6a6qevMLgi/tFTGvn l2Rpf8gjzUDDMIG3zyiU2kLArmUTU0QvJR8jZbPKweV6zUHDnY9JGbVji5Vse8fv GcgngBDHGkWACQZQFyMDasu1QF+U7Y816OijpvhtkI2dkaZ2xlMe0txiNp98/5qM 4WZQpniM8Kfxs6nLYDNxwlRkSdSm1nmxr4fNakCXnuJ8/AYgQX8HRvZS+JypBI7N gkmTLlFd30SbHPj00xnm3pVzMA255Z15ffByfhF8fFHhgx9Egf7WYhMWlIdUSVRh Fe6GE8NPYYOv/gQwbuPTfY5FgL90G0BcH9lLn4e4rGbRVC9p3gU= -----END CERTIFICATE-----Generated at Sat Apr 19 18:37:19 2025 by rpki-client