$ rpki-client -vvf repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft File: E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft (raw, json) Hash identifier: nGCzuvjkw98/ONweAuK7waSKILqh/7bR7NF6k6E6c/8= Subject key identifier: 5D:26:80:1F:8D:D8:84:01:2A:70:C1:18:90:4F:90:CB:07:6D:23:3B Authority key identifier: E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27 Certificate issuer: /CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27 Certificate serial: 3B371591BB94C800A568C9858D95C21DD3C0FC02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft Manifest number: 017E Signing time: Mon 07 Apr 2025 03:51:02 +0000 Manifest this update: Mon 07 Apr 2025 03:46:02 +0000 Manifest next update: Thu 10 Apr 2025 14:27:02 +0000 Files and hashes: 1: 3130332e34372e31302e302f32332d3233203d3e203539323733.roa (hash: rlKPT6Sw2+EZPDLUv/m04ksSr2kbhw7VmVT/BAYmQMM=) 2: 3130332e34372e31312e302f32342d3234203d3e203539323733.roa (hash: HBlBl4qnEWmFIIHkU9MPENaLHFOkHGNLtTU92POPS9Q=) 3: E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl (hash: HAX6bTk3t9+4yGHPekoXlOLsYOq4e2+rML3chg9V8R0=) 4: 3130332e34372e31302e302f32342d3234203d3e203539323733.roa (hash: dFHjmVg8iByyDE0AoUz/kaQtWk08pnPg8xzNojTvhm0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 14:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:37:15:91:bb:94:c8:00:a5:68:c9:85:8d:95:c2:1d:d3:c0:fc:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27 Validity Not Before: Apr 7 03:46:02 2025 GMT Not After : Apr 10 14:27:02 2025 GMT Subject: CN=5D26801F8DD884012A70C118904F90CB076D233B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:55:2d:ff:19:43:0e:19:60:2a:8d:16:93:2e: 23:ad:1e:bb:08:96:e0:2e:bf:17:ca:46:bb:df:d1: d7:73:2a:ec:f7:35:6c:d1:6d:33:48:a2:b6:f4:c9: bd:d0:f0:30:8e:cd:27:d5:92:47:8d:b4:7e:c2:98: 0e:82:64:b2:b8:ff:99:58:fb:31:5e:ee:f1:32:dd: 01:65:c1:96:0c:84:6f:12:2d:83:15:09:42:c1:17: 9d:f2:43:69:7b:5b:86:04:f2:69:96:89:8e:cd:15: 5e:f7:c9:bb:f3:b5:77:a8:2d:53:8c:8f:d0:d6:13: f8:a6:fd:54:88:db:fc:c4:4d:54:57:a4:a4:9a:52: 29:f7:28:bd:19:35:54:6d:a7:ec:69:9c:ed:09:d7: 1f:65:ad:7b:07:cb:19:b5:3b:ca:87:84:b8:d3:0a: 16:fe:2e:98:5f:7a:ca:8f:e5:47:1b:01:84:c8:fa: d5:f2:dd:9b:d0:eb:11:56:c1:63:b4:40:38:80:29: 38:e7:c4:d3:0d:87:4e:d6:e5:08:b2:94:a9:da:35: f5:cf:52:a0:99:a2:6d:d2:26:b2:f1:1e:64:bf:2b: 57:a4:39:77:18:f2:ca:ce:bd:8d:47:88:f5:3c:f6: 95:e7:ef:9f:93:f7:b9:b6:75:a8:a1:ac:3a:a7:91: fc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:26:80:1F:8D:D8:84:01:2A:70:C1:18:90:4F:90:CB:07:6D:23:3B X509v3 Authority Key Identifier: keyid:E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:11:3f:56:3d:b9:e9:55:ce:5f:33:93:17:b5:05:02:48:db: 1a:56:d0:40:02:00:dc:5c:1a:a0:dc:4e:6d:39:e4:4c:f5:25: 84:42:d5:7b:c6:ad:ae:7b:c4:ac:21:6c:d4:f7:c9:a7:83:2b: d7:c9:aa:46:68:90:63:37:bc:93:e7:c5:3c:d5:f0:05:bf:ea: 18:94:39:79:b3:cf:36:39:01:4e:ea:28:e0:6f:62:91:45:bc: ea:0c:08:c8:73:f8:4d:84:bf:07:74:0c:a9:ba:da:6e:e6:f3: a6:d0:04:13:76:9d:be:1f:73:b6:19:dc:11:69:1c:08:a7:9a: 9e:11:9b:1f:3b:60:61:be:8c:ac:2c:df:76:1a:6c:9e:9c:4b: 54:14:82:99:88:11:53:9d:ae:08:6a:e2:18:67:15:a6:21:b4: 6f:29:96:11:bb:23:67:2e:4d:fc:a3:27:32:da:73:3b:24:79: a7:78:c3:7b:19:8f:da:8b:96:d1:00:c8:49:63:40:a5:3b:dd: f9:61:33:65:e9:31:f7:3f:a3:f6:1d:bb:59:62:21:90:83:cf: e8:12:41:0a:ec:08:82:9d:bc:32:f6:08:22:56:6a:8f:14:60: 24:71:09:25:83:81:41:1e:48:c9:4b:05:20:03:6a:71:9b:f8: f4:e2:bc:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOzcVkbuUyAClaMmFjZXCHdPA/AIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZG QTI5QUIyNzAeFw0yNTA0MDcwMzQ2MDJaFw0yNTA0MTAxNDI3MDJaMDMxMTAvBgNV BAMTKDVEMjY4MDFGOEREODg0MDEyQTcwQzExODkwNEY5MENCMDc2RDIzM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0VS3/GUMOGWAqjRaTLiOtHrsI luAuvxfKRrvf0ddzKuz3NWzRbTNIorb0yb3Q8DCOzSfVkkeNtH7CmA6CZLK4/5lY +zFe7vEy3QFlwZYMhG8SLYMVCULBF53yQ2l7W4YE8mmWiY7NFV73ybvztXeoLVOM j9DWE/im/VSI2/zETVRXpKSaUin3KL0ZNVRtp+xpnO0J1x9lrXsHyxm1O8qHhLjT Chb+LphfesqP5UcbAYTI+tXy3ZvQ6xFWwWO0QDiAKTjnxNMNh07W5QiylKnaNfXP UqCZom3SJrLxHmS/K1ekOXcY8srOvY1HiPU89pXn75+T97m2daihrDqnkfx9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXSaAH43YhAEqcMEYkE+QywdtIzswHwYDVR0j BBgwFoAU6R1R5UqJwN29V/AKE+luNvopqycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWE3MmViOS04ZTUzLTQ0NzItYTM1YS1mZWU4YmYwYWY0NmYvMC9FOTFENTFFNTRB ODlDMEREQkQ1N0YwMEExM0U5NkUzNkZBMjlBQjI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZGQTI5 QUIyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVhNzJlYjktOGU1My00NDcyLWEz NWEtZmVlOGJmMGFmNDZmLzAvRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZF MzZGQTI5QUIyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsRP1Y9uelVzl8zkxe1BQJI2xpW0EACANxc GqDcTm055Ez1JYRC1XvGra57xKwhbNT3yaeDK9fJqkZokGM3vJPnxTzV8AW/6hiU OXmzzzY5AU7qKOBvYpFFvOoMCMhz+E2Evwd0DKm62m7m86bQBBN2nb4fc7YZ3BFp HAinmp4Rmx87YGG+jKws33YabJ6cS1QUgpmIEVOdrghq4hhnFaYhtG8plhG7I2cu TfyjJzLaczskead4w3sZj9qLltEAyEljQKU73flhM2XpMfc/o/Ydu1liIZCDz+gS QQrsCIKdvDL2CCJWao8UYCRxCSWDgUEeSMlLBSADanGb+PTivD8= -----END CERTIFICATE-----Generated at Tue Apr 8 16:01:30 2025 by rpki-client