$ rpki-client -vvf repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft File: E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft (raw, json) Hash identifier: pFNGZxUvRK+csAvVhFApr8NTEVEycVak35oHVu/6b1I= Subject key identifier: 0C:48:4C:7F:26:BE:F5:67:4E:79:C4:EE:8A:C6:63:E0:7E:D7:93:54 Authority key identifier: E4:81:3B:FD:9F:D2:7C:9C:A2:2A:77:0F:5D:84:6B:50:FC:78:3A:3C Certificate issuer: /CN=E4813BFD9FD27C9CA22A770F5D846B50FC783A3C Certificate serial: 33FDA2D88B83D5F712B47AA7D61E810486204248 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft Manifest number: 019A Signing time: Tue 03 Jun 2025 13:40:42 +0000 Manifest this update: Tue 03 Jun 2025 13:35:42 +0000 Manifest next update: Fri 06 Jun 2025 23:53:42 +0000 Files and hashes: 1: 3130332e3134372e37342e302f32332d3234203d3e203137373639.roa (hash: O88yPYmN6xDUFSj/RxvbUkag/UKNDi1pEvsS211Q2AQ=) 2: E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl (hash: nVWPqioXoOVujzpOmDkpg0mltYD2fAfxZUUBALfdBRU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:fd:a2:d8:8b:83:d5:f7:12:b4:7a:a7:d6:1e:81:04:86:20:42:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4813BFD9FD27C9CA22A770F5D846B50FC783A3C Validity Not Before: Jun 3 13:35:42 2025 GMT Not After : Jun 6 23:53:42 2025 GMT Subject: CN=0C484C7F26BEF5674E79C4EE8AC663E07ED79354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2c:6a:3e:73:69:d3:a3:d0:17:39:0c:24:5a: 0a:62:cd:cf:cb:74:cc:2f:a1:f5:4a:84:87:e0:0a: fe:45:13:af:3b:f5:72:53:c3:ed:5e:95:cb:f0:30: 04:86:18:c0:a6:98:2f:ea:14:41:81:33:a7:6a:b9: 13:61:9f:03:6f:37:d3:58:ac:cd:57:1c:5a:a6:b7: fb:ab:82:36:42:21:be:1c:1e:68:3c:25:e0:76:a9: 8b:12:ef:3e:f5:c1:11:2e:71:dd:f0:da:09:d6:9b: 8d:f1:3f:84:13:e4:ae:59:dc:96:a4:09:e7:36:98: d8:b5:68:bc:d8:97:fc:57:59:91:e9:e7:62:c2:8b: 91:6f:a7:2c:08:96:b1:5a:be:69:aa:a4:0f:51:50: a1:5e:6b:51:2c:0a:88:dc:06:b1:29:be:12:0d:9b: f0:0f:11:0c:f2:5d:b8:22:45:6a:93:90:1e:0f:aa: b1:7a:fe:6c:da:1a:db:86:95:70:3f:71:72:98:d9: 6d:fe:2c:54:be:42:b9:78:75:ba:ff:e3:13:72:2c: 83:bf:48:e1:85:d7:e2:4a:70:7b:96:17:18:3d:b0: a5:a8:99:63:e6:f0:84:7b:b2:0f:ce:af:ef:d6:53: 88:90:66:20:50:b2:44:38:1f:06:f0:18:e6:c6:7c: eb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:48:4C:7F:26:BE:F5:67:4E:79:C4:EE:8A:C6:63:E0:7E:D7:93:54 X509v3 Authority Key Identifier: keyid:E4:81:3B:FD:9F:D2:7C:9C:A2:2A:77:0F:5D:84:6B:50:FC:78:3A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:cd:9c:d3:f4:6d:1b:9d:30:05:b1:9c:11:11:ce:5e:6d:a5: 83:df:86:0e:4f:af:37:90:05:bb:0d:85:60:3f:ee:29:fe:0e: 2f:0d:02:60:43:24:70:2f:01:43:32:09:7a:59:0b:a5:5f:84: 91:5a:8e:3c:68:b3:c2:f0:01:2d:fa:a4:12:c0:b1:f4:87:78: d8:51:ca:73:1e:f2:3b:53:99:32:f4:31:94:1b:1b:34:e9:68: 1b:d9:bd:5d:4b:30:db:8f:ff:21:57:53:b2:3c:16:34:92:ad: fb:c1:8d:b0:df:53:f0:b1:ba:26:6f:80:b4:f4:9d:8c:36:69: 07:e1:6e:ef:82:2f:85:80:0a:30:6b:eb:4c:31:c7:e8:8f:13: fa:70:5b:02:c2:6f:b1:f8:9f:de:82:58:77:fd:69:80:d7:3e: 48:de:1b:c3:ec:eb:3c:b1:42:4d:51:89:63:77:23:3b:af:30: 56:b1:06:ff:29:d4:ae:cd:5e:f2:d7:dd:ad:cc:ec:3d:ef:c4: 67:82:5a:9a:c9:a9:25:f4:bd:d0:06:a8:5f:96:98:62:ae:3f: c1:f6:f0:ea:22:6e:6d:0e:52:4f:c2:96:14:50:d7:dd:8a:b6: 26:14:f7:71:bc:db:e6:b1:c9:8f:01:c9:23:dc:e4:41:64:56: 61:22:8c:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM/2i2IuD1fcStHqn1h6BBIYgQkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3NzBGNUQ4NDZCNTBG Qzc4M0EzQzAeFw0yNTA2MDMxMzM1NDJaFw0yNTA2MDYyMzUzNDJaMDMxMTAvBgNV BAMTKDBDNDg0QzdGMjZCRUY1Njc0RTc5QzRFRThBQzY2M0UwN0VENzkzNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwLGo+c2nTo9AXOQwkWgpizc/L dMwvofVKhIfgCv5FE6879XJTw+1elcvwMASGGMCmmC/qFEGBM6dquRNhnwNvN9NY rM1XHFqmt/urgjZCIb4cHmg8JeB2qYsS7z71wREucd3w2gnWm43xP4QT5K5Z3Jak Cec2mNi1aLzYl/xXWZHp52LCi5FvpywIlrFavmmqpA9RUKFea1EsCojcBrEpvhIN m/APEQzyXbgiRWqTkB4PqrF6/mzaGtuGlXA/cXKY2W3+LFS+Qrl4dbr/4xNyLIO/ SOGF1+JKcHuWFxg9sKWomWPm8IR7sg/Or+/WU4iQZiBQskQ4HwbwGObGfOtPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDEhMfya+9WdOecTuisZj4H7Xk1QwHwYDVR0j BBgwFoAU5IE7/Z/SfJyiKncPXYRrUPx4OjwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzI5MDdkMy1iZTI0LTRkYTgtOTZiYi1mMTIyOGZjOTkyMDUvMC9FNDgxM0JGRDlG RDI3QzlDQTIyQTc3MEY1RDg0NkI1MEZDNzgzQTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3NzBGNUQ4NDZCNTBGQzc4 M0EzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjcyOTA3ZDMtYmUyNC00ZGE4LTk2 YmItZjEyMjhmYzk5MjA1LzAvRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3NzBGNUQ4NDZC NTBGQzc4M0EzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLNnNP0bRudMAWxnBERzl5tpYPfhg5PrzeQ BbsNhWA/7in+Di8NAmBDJHAvAUMyCXpZC6VfhJFajjxos8LwAS36pBLAsfSHeNhR ynMe8jtTmTL0MZQbGzTpaBvZvV1LMNuP/yFXU7I8FjSSrfvBjbDfU/CxuiZvgLT0 nYw2aQfhbu+CL4WACjBr60wxx+iPE/pwWwLCb7H4n96CWHf9aYDXPkjeG8Ps6zyx Qk1RiWN3IzuvMFaxBv8p1K7NXvLX3a3M7D3vxGeCWprJqSX0vdAGqF+WmGKuP8H2 8Ooibm0OUk/ClhRQ192KtiYU93G82+axyY8BySPc5EFkVmEijBQ= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:42 2025 by rpki-client