$ rpki-client -vvf repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft File: EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft (raw, json) Hash identifier: UiYu+XZNN06W9Jv+PP/4RxT4gTOP5fiO8P2iX1kyLt4= Subject key identifier: 2D:61:C6:BA:19:7F:A3:CA:EA:8D:5B:45:87:C7:FE:A7:70:00:25:C6 Authority key identifier: EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5 Certificate issuer: /CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5 Certificate serial: 6D24A7EE8AA08AB01DDF6413B66A99BF77624732 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft Manifest number: 04C8 Signing time: Fri 18 Apr 2025 21:01:34 +0000 Manifest this update: Fri 18 Apr 2025 20:56:34 +0000 Manifest next update: Tue 22 Apr 2025 01:01:34 +0000 Files and hashes: 1: EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl (hash: LDfj+37Zn0EAVI85/oqzLWR+KkjAOB9Xo6ISHZgFecg=) 2: 3130332e362e3231342e302f32342d3234203d3e20313331313132.roa (hash: wxhr1XRJclUw3rXb3dstQr5k0bYeJ5/Xkb24+3+fAGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 00:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:24:a7:ee:8a:a0:8a:b0:1d:df:64:13:b6:6a:99:bf:77:62:47:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5 Validity Not Before: Apr 18 20:56:34 2025 GMT Not After : Apr 22 01:01:34 2025 GMT Subject: CN=2D61C6BA197FA3CAEA8D5B4587C7FEA7700025C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fe:85:f0:fe:92:9d:f0:e2:d0:a7:b2:28:c3: 38:e3:d9:5c:74:46:45:4b:07:f6:87:77:44:df:4f: a5:ff:4e:1c:89:70:a3:4b:ad:8e:61:b3:f1:20:5c: 27:5f:c4:6e:9d:de:39:b1:0e:60:8f:20:88:49:e1: c6:eb:d5:cd:68:e7:08:19:81:8a:ec:c3:ac:8a:1e: 17:50:f7:89:56:3f:d4:fb:da:05:a4:75:85:dd:fa: 98:98:14:86:53:a2:f8:8f:29:6c:71:ca:50:8d:28: a9:08:95:5d:25:81:1a:76:d1:ca:78:18:84:80:e6: c3:9e:c9:d4:a7:26:9b:1b:55:25:f1:16:b7:f6:2d: 70:bf:6e:75:9d:77:81:ec:99:07:a1:f7:cd:27:1f: 84:ec:9e:9a:2d:73:db:33:ff:e8:2d:7f:09:30:6e: fb:4b:99:d3:38:25:f3:01:e3:ba:b8:30:08:6e:32: 4e:ad:5c:7b:91:21:23:77:f5:24:14:9b:21:e0:0d: 69:e6:f0:d2:a2:f6:b4:bb:0d:1d:57:87:17:2c:c8: db:46:6d:c0:db:28:7e:4d:75:32:e4:d4:7d:57:ff: c2:72:cc:b0:56:88:62:50:3b:e4:f5:08:06:02:69: 92:3e:33:1f:18:c7:e3:d3:5c:01:63:d8:46:ee:7f: 68:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:61:C6:BA:19:7F:A3:CA:EA:8D:5B:45:87:C7:FE:A7:70:00:25:C6 X509v3 Authority Key Identifier: keyid:EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:0e:64:06:c2:b3:09:bd:a4:d6:7e:4f:5f:8d:1f:4b:46:71: 03:4d:9e:d7:74:65:97:0c:98:f1:86:ea:81:05:c8:fb:d8:9d: 6d:62:73:68:2a:41:0d:d5:4f:69:4e:fa:6a:1e:bb:63:cf:c0: 79:ef:fd:74:1d:bd:4c:36:66:50:bf:72:64:20:3e:8b:c4:c6: cb:14:93:9c:fd:f2:09:38:62:fb:6c:9c:5e:2a:a3:e8:53:73: b0:78:f0:d8:c8:57:92:5b:1c:64:c7:7f:53:1e:1b:24:bd:58: 5b:e6:08:c5:18:09:cb:65:35:5a:12:90:2c:8a:c8:84:c5:de: a8:6b:d9:ee:3e:7b:1c:cf:8e:29:a3:74:b9:f4:0b:8a:f6:37: 67:d2:75:52:a4:ae:ce:59:a3:2b:9f:4c:83:19:b2:23:6e:05: 99:36:d6:70:66:00:85:d2:3d:02:56:b1:61:c1:d1:7d:4c:89: 56:8e:31:09:96:39:4b:21:39:e9:83:cf:21:64:03:43:e6:94: 8f:b7:47:71:c8:cb:46:53:20:75:e4:e0:c6:8f:35:94:ca:ab: 6f:3c:aa:5f:8f:02:e2:42:ea:d4:36:81:14:6f:ea:96:de:de: ca:38:cb:6e:67:da:2e:94:2e:47:aa:89:21:b2:57:56:23:57: 8b:32:14:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbSSn7oqgirAd32QTtmqZv3diRzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdFREJB M0QxMTZENTAeFw0yNTA0MTgyMDU2MzRaFw0yNTA0MjIwMTAxMzRaMDMxMTAvBgNV BAMTKDJENjFDNkJBMTk3RkEzQ0FFQThENUI0NTg3QzdGRUE3NzAwMDI1QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU/oXw/pKd8OLQp7Iowzjj2Vx0 RkVLB/aHd0TfT6X/ThyJcKNLrY5hs/EgXCdfxG6d3jmxDmCPIIhJ4cbr1c1o5wgZ gYrsw6yKHhdQ94lWP9T72gWkdYXd+piYFIZToviPKWxxylCNKKkIlV0lgRp20cp4 GISA5sOeydSnJpsbVSXxFrf2LXC/bnWdd4HsmQeh980nH4Tsnpotc9sz/+gtfwkw bvtLmdM4JfMB47q4MAhuMk6tXHuRISN39SQUmyHgDWnm8NKi9rS7DR1XhxcsyNtG bcDbKH5NdTLk1H1X/8JyzLBWiGJQO+T1CAYCaZI+Mx8Yx+PTXAFj2Ebuf2jpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULWHGuhl/o8rqjVtFh8f+p3AAJcYwHwYDVR0j BBgwFoAU7GKpSXDlasn+i4KKVCt+26PRFtUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODdmOGY4Mi0zN2JiLTQ5ODMtOTNjYS01ZTA2NzBhYjAyZTMvMC9FQzYyQTk0OTcw RTU2QUM5RkU4QjgyOEE1NDJCN0VEQkEzRDExNkQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdFREJBM0Qx MTZENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg3ZjhmODItMzdiYi00OTgzLTkz Y2EtNWUwNjcwYWIwMmUzLzAvRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdF REJBM0QxMTZENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwOZAbCswm9pNZ+T1+NH0tGcQNNntd0ZZcM mPGG6oEFyPvYnW1ic2gqQQ3VT2lO+moeu2PPwHnv/XQdvUw2ZlC/cmQgPovExssU k5z98gk4YvtsnF4qo+hTc7B48NjIV5JbHGTHf1MeGyS9WFvmCMUYCctlNVoSkCyK yITF3qhr2e4+exzPjimjdLn0C4r2N2fSdVKkrs5ZoyufTIMZsiNuBZk21nBmAIXS PQJWsWHB0X1MiVaOMQmWOUshOemDzyFkA0PmlI+3R3HIy0ZTIHXk4MaPNZTKq288 ql+PAuJC6tQ2gRRv6pbe3so4y25n2i6ULkeqiSGyV1YjV4syFDw= -----END CERTIFICATE-----Generated at Sat Apr 19 07:14:47 2025 by rpki-client