$ rpki-client -vvf repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft File: E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft (raw, json) Hash identifier: oUXQuoc8C4aHIlHhn1BqXzgupPfpXeRiyNOEtAwhAyA= Subject key identifier: 40:E4:F7:AB:83:12:0A:EF:CF:F1:9E:74:AD:DE:90:9D:32:37:F3:AB Authority key identifier: E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9 Certificate issuer: /CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9 Certificate serial: 7DDC248C0E5BFBF50DAFCD7E39D5F00B9E50D6CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft Manifest number: 01A9 Signing time: Fri 18 Apr 2025 09:01:29 +0000 Manifest this update: Fri 18 Apr 2025 08:56:29 +0000 Manifest next update: Mon 21 Apr 2025 10:39:29 +0000 Files and hashes: 1: 3130332e3138392e3234382e302f32342d3234203d3e20313439383838.roa (hash: imfZYd+PwuMIdN7UcBrml21Vlzc4h9f5RzLmotI9hlU=) 2: 3130332e3138392e3234392e302f32342d3234203d3e20313439383838.roa (hash: D0t/YeMSaxANRp7Cjj+UYZjgVfcPEy0eqBQGOyEnZWA=) 3: E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl (hash: 3mzERFq4Kp5f5RLDxIPazK/Xa5UdDtmLplS7RVqF6n4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 10:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:dc:24:8c:0e:5b:fb:f5:0d:af:cd:7e:39:d5:f0:0b:9e:50:d6:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9 Validity Not Before: Apr 18 08:56:29 2025 GMT Not After : Apr 21 10:39:29 2025 GMT Subject: CN=40E4F7AB83120AEFCFF19E74ADDE909D3237F3AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f3:68:08:7f:d8:0c:06:93:b5:2b:36:9a:1f: cb:7b:1d:60:60:fb:31:e1:a1:f0:86:28:7e:6b:a1: 96:e0:71:ed:13:bb:bc:36:11:f9:49:a9:96:84:6c: 39:c8:af:c4:12:63:45:1b:a5:ef:09:ef:65:db:cd: 2c:62:e1:50:2a:34:e7:85:9a:6d:78:bc:e9:b2:55: 19:5a:b5:5c:66:1c:b3:fa:ba:d6:c1:a9:4f:90:30: 03:c4:1c:2e:d4:d3:02:ea:7e:f2:01:ba:df:94:78: 9d:f1:9b:90:82:87:c9:39:01:6d:a8:5d:92:cb:08: 95:63:fa:9a:42:fa:7e:b8:cc:2b:b4:52:19:a5:e2: 51:10:21:5c:80:fa:47:d1:58:f5:77:2c:7e:01:18: b5:3e:59:e1:0b:aa:a0:bb:48:24:87:d2:af:11:1e: 15:a2:f8:76:86:b9:47:0d:d1:7f:7b:b5:92:f9:1d: 41:6e:84:e3:d1:7a:dc:15:da:e3:33:79:56:6c:26: df:f9:e7:6f:67:a5:de:43:4d:bd:d8:8c:90:55:60: 7e:68:a3:d8:58:f5:b7:88:c6:8c:d2:34:ae:52:92: 34:19:80:76:0e:74:ea:7a:4a:81:3d:6f:6b:db:ff: b7:da:d4:0d:0b:ff:b1:b0:15:00:95:3d:e4:71:35: 97:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E4:F7:AB:83:12:0A:EF:CF:F1:9E:74:AD:DE:90:9D:32:37:F3:AB X509v3 Authority Key Identifier: keyid:E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:05:ec:ec:3e:33:49:47:6b:96:5b:3b:78:11:30:4c:bf:8b: 2e:38:6e:af:26:c8:03:c9:ec:69:ca:e8:18:b0:09:8f:94:eb: 0c:a4:ff:8f:fb:a6:54:4d:e7:6c:c2:8f:c9:69:7b:3e:e0:58: 5e:00:46:e6:13:75:e5:ed:8b:1b:00:56:18:28:c4:e4:41:f2: d2:f5:e7:c2:35:50:fe:83:de:84:f6:6e:4f:58:28:f5:f7:b3: 4d:6e:27:70:41:41:2f:82:ed:30:e4:a9:05:54:da:34:08:37: 04:25:b3:ee:11:d9:5e:e8:90:76:57:6a:dd:90:04:da:b0:3a: 18:6c:7f:fc:60:a4:89:b7:49:a9:da:95:d7:73:e5:b7:82:5a: a6:f3:95:2a:ad:f2:09:5f:38:64:94:b0:d7:f1:6e:b1:67:0c: cb:6d:76:bc:ef:0f:b8:a7:7b:e6:c0:ec:34:8b:75:04:f2:73: fc:0e:e6:25:11:c7:7a:94:be:82:1a:d4:84:ac:da:fc:3f:f6: f3:05:13:f9:d8:07:b1:fc:23:87:73:d2:09:89:49:9a:16:d8: 82:23:47:2c:87:d2:9f:93:51:ce:83:8a:38:b2:3e:cf:0e:81: 0f:2c:b9:c5:6c:8b:d2:e7:64:45:23:ae:1c:94:39:09:64:6f: a8:4f:ff:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfdwkjA5b+/UNr81+OdXwC55Q1sowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VEMjEx QzlGMjFDOTAeFw0yNTA0MTgwODU2MjlaFw0yNTA0MjExMDM5MjlaMDMxMTAvBgNV BAMTKDQwRTRGN0FCODMxMjBBRUZDRkYxOUU3NEFEREU5MDlEMzIzN0YzQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE82gIf9gMBpO1KzaaH8t7HWBg +zHhofCGKH5roZbgce0Tu7w2EflJqZaEbDnIr8QSY0Ubpe8J72XbzSxi4VAqNOeF mm14vOmyVRlatVxmHLP6utbBqU+QMAPEHC7U0wLqfvIBut+UeJ3xm5CCh8k5AW2o XZLLCJVj+ppC+n64zCu0Uhml4lEQIVyA+kfRWPV3LH4BGLU+WeELqqC7SCSH0q8R HhWi+HaGuUcN0X97tZL5HUFuhOPRetwV2uMzeVZsJt/5529npd5DTb3YjJBVYH5o o9hY9beIxozSNK5SkjQZgHYOdOp6SoE9b2vb/7fa1A0L/7GwFQCVPeRxNZe7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQOT3q4MSCu/P8Z50rd6QnTI386swHwYDVR0j BBgwFoAU4s2qIjv7bysTlz64A1PtIRyfIckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGY0MTY0ZS03NGU1LTQwZDYtOWEzMC1iMzcyYTRkMmE0NTQvMC9FMkNEQUEyMjNC RkI2RjJCMTM5NzNFQjgwMzUzRUQyMTFDOUYyMUM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VEMjExQzlG MjFDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRmNDE2NGUtNzRlNS00MGQ2LTlh MzAtYjM3MmE0ZDJhNDU0LzAvRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VE MjExQzlGMjFDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUF7Ow+M0lHa5ZbO3gRMEy/iy44bq8myAPJ 7GnK6BiwCY+U6wyk/4/7plRN52zCj8lpez7gWF4ARuYTdeXtixsAVhgoxORB8tL1 58I1UP6D3oT2bk9YKPX3s01uJ3BBQS+C7TDkqQVU2jQINwQls+4R2V7okHZXat2Q BNqwOhhsf/xgpIm3Sanalddz5beCWqbzlSqt8glfOGSUsNfxbrFnDMttdrzvD7in e+bA7DSLdQTyc/wO5iURx3qUvoIa1ISs2vw/9vMFE/nYB7H8I4dz0gmJSZoW2IIj RyyH0p+TUc6DijiyPs8OgQ8sucVsi9LnZEUjrhyUOQlkb6hP/4k= -----END CERTIFICATE-----Generated at Sat Apr 19 12:07:25 2025 by rpki-client