$ rpki-client -vvf repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft File: E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft (raw, json) Hash identifier: qKvyDJ5typUgEYQk8EY4jIUKbVOf1WDiuQytm0NtQzU= Subject key identifier: AB:CF:44:70:9A:03:D9:AF:B1:ED:92:CE:BB:F8:2E:54:E9:36:84:48 Authority key identifier: E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9 Certificate issuer: /CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9 Certificate serial: 32F3FC1477E19AAEC8A21C179E41D4B5A892DE2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft Manifest number: 0190 Signing time: Wed 19 Feb 2025 20:31:28 +0000 Manifest this update: Wed 19 Feb 2025 20:26:28 +0000 Manifest next update: Sun 23 Feb 2025 05:14:28 +0000 Files and hashes: 1: 3130332e3138392e3234382e302f32342d3234203d3e20313439383838.roa (hash: imfZYd+PwuMIdN7UcBrml21Vlzc4h9f5RzLmotI9hlU=) 2: 3130332e3138392e3234392e302f32342d3234203d3e20313439383838.roa (hash: D0t/YeMSaxANRp7Cjj+UYZjgVfcPEy0eqBQGOyEnZWA=) 3: E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl (hash: 6uT4O9d7+gxHgq9+VRzRLu7yF8rES5qFNOPIZYATyw4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 21:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:f3:fc:14:77:e1:9a:ae:c8:a2:1c:17:9e:41:d4:b5:a8:92:de:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9 Validity Not Before: Feb 19 20:26:28 2025 GMT Not After : Feb 23 05:14:28 2025 GMT Subject: CN=ABCF44709A03D9AFB1ED92CEBBF82E54E9368448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:28:87:dc:96:e1:5c:9e:e4:97:b5:f5:d4:d2: 15:0a:08:03:50:a2:82:0c:97:0c:d9:6f:46:47:1b: 30:93:06:48:4e:69:2b:64:48:ba:46:47:f7:c5:72: 85:4a:77:ad:40:ef:56:99:7d:18:cc:3a:81:6f:3c: f2:2c:0f:7b:98:49:ef:2a:15:b8:cb:89:df:2b:b5: bf:a8:86:88:aa:e1:e1:6b:a8:a8:71:9e:f1:bf:64: 3c:44:48:77:c5:e2:d4:bc:2c:0d:02:ec:5e:0a:da: 38:ba:58:3e:52:52:88:71:3d:d8:50:7f:33:12:d0: 26:5c:a7:8d:1b:87:c4:7c:74:59:83:f1:13:26:8a: 29:b4:f4:a5:38:e7:3d:56:b6:2f:aa:57:fd:6f:e5: 09:f9:4d:04:16:4c:43:4a:29:65:f5:75:37:03:73: 33:c1:36:12:48:1a:7b:4f:a3:20:7a:5e:04:18:ec: 93:5f:dd:75:87:ae:3a:4b:d3:c1:6b:54:af:d7:aa: 90:26:e5:8d:f2:04:f2:a9:29:f9:86:81:84:4b:df: 6e:ed:eb:fd:c4:7d:4f:32:da:fb:75:7f:e3:a8:86: 9b:4f:26:c0:e7:f7:cf:f0:5e:45:5b:fd:86:68:5e: d8:9d:db:d9:3a:dd:42:44:5c:94:91:60:3e:ea:5d: 77:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:CF:44:70:9A:03:D9:AF:B1:ED:92:CE:BB:F8:2E:54:E9:36:84:48 X509v3 Authority Key Identifier: keyid:E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:2e:22:7d:d4:0e:89:c6:33:7f:c7:52:cb:1c:ec:1d:50:5d: 32:2a:30:0c:59:9c:d1:fd:9b:75:e2:3a:4b:5b:0f:34:d5:0c: 65:74:48:3c:ba:27:50:ee:f9:05:44:ea:9e:da:c1:05:68:19: a9:9e:13:ea:92:0f:c1:ac:f6:31:d2:25:ff:89:78:24:c3:e7: bc:0f:d3:74:b6:7f:83:b9:f8:4d:35:c6:06:03:3d:0a:45:4b: 56:0f:3f:de:f3:fe:49:6f:f3:3e:3a:c1:20:b3:b5:f7:04:9e: ca:f9:45:f1:18:7c:ab:45:71:6f:94:a6:08:d1:c6:b1:95:08: 45:5d:e3:43:5e:94:9b:35:aa:d9:3c:e1:31:53:2a:6b:d6:a8: 3e:4d:67:8b:e0:be:45:db:b1:e8:51:05:17:83:ca:4d:a4:a0: ae:07:44:38:b3:15:3d:d3:d5:13:78:8a:68:c8:ff:fb:1b:41: 05:a3:67:10:66:66:75:60:69:1f:07:31:cf:55:ea:0e:3f:24: a6:a3:78:57:0e:dc:cb:a5:1f:eb:b2:13:e2:4c:0d:ca:11:81: 13:4e:d3:9c:2b:7d:2a:b8:ea:51:50:0d:7b:79:f5:a5:1a:53: db:39:d1:74:a3:6e:a2:10:a4:31:62:b7:6d:74:e2:e4:b4:b6: 16:19:9f:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMvP8FHfhmq7IohwXnkHUtaiS3iwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VEMjEx QzlGMjFDOTAeFw0yNTAyMTkyMDI2MjhaFw0yNTAyMjMwNTE0MjhaMDMxMTAvBgNV BAMTKEFCQ0Y0NDcwOUEwM0Q5QUZCMUVEOTJDRUJCRjgyRTU0RTkzNjg0NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsKIfcluFcnuSXtfXU0hUKCANQ ooIMlwzZb0ZHGzCTBkhOaStkSLpGR/fFcoVKd61A71aZfRjMOoFvPPIsD3uYSe8q FbjLid8rtb+ohoiq4eFrqKhxnvG/ZDxESHfF4tS8LA0C7F4K2ji6WD5SUohxPdhQ fzMS0CZcp40bh8R8dFmD8RMmiim09KU45z1Wti+qV/1v5Qn5TQQWTENKKWX1dTcD czPBNhJIGntPoyB6XgQY7JNf3XWHrjpL08FrVK/XqpAm5Y3yBPKpKfmGgYRL327t 6/3EfU8y2vt1f+OohptPJsDn98/wXkVb/YZoXtid29k63UJEXJSRYD7qXXdDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq89EcJoD2a+x7ZLOu/guVOk2hEgwHwYDVR0j BBgwFoAU4s2qIjv7bysTlz64A1PtIRyfIckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGY0MTY0ZS03NGU1LTQwZDYtOWEzMC1iMzcyYTRkMmE0NTQvMC9FMkNEQUEyMjNC RkI2RjJCMTM5NzNFQjgwMzUzRUQyMTFDOUYyMUM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VEMjExQzlG MjFDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRmNDE2NGUtNzRlNS00MGQ2LTlh MzAtYjM3MmE0ZDJhNDU0LzAvRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VE MjExQzlGMjFDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAuIn3UDonGM3/HUssc7B1QXTIqMAxZnNH9 m3XiOktbDzTVDGV0SDy6J1Du+QVE6p7awQVoGameE+qSD8Gs9jHSJf+JeCTD57wP 03S2f4O5+E01xgYDPQpFS1YPP97z/klv8z46wSCztfcEnsr5RfEYfKtFcW+UpgjR xrGVCEVd40NelJs1qtk84TFTKmvWqD5NZ4vgvkXbsehRBReDyk2koK4HRDizFT3T 1RN4imjI//sbQQWjZxBmZnVgaR8HMc9V6g4/JKajeFcO3MulH+uyE+JMDcoRgRNO 05wrfSq46lFQDXt59aUaU9s50XSjbqIQpDFit2104uS0thYZn3M= -----END CERTIFICATE-----Generated at Wed Feb 19 21:56:57 2025 by rpki-client