$ rpki-client -vvf repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft File: EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft (raw, json) Hash identifier: axqfQzbQ6lhdRgGQmqH9+7n7Sr0fb/m3Vokvo8MkJY4= Subject key identifier: 4A:DA:06:8E:21:88:8E:66:E9:DD:C9:E5:AC:ED:A6:4F:89:A6:4A:AF Authority key identifier: EE:CC:4A:44:F0:95:94:EB:71:1E:A1:F6:F3:4B:95:8D:19:A3:B4:FD Certificate issuer: /CN=EECC4A44F09594EB711EA1F6F34B958D19A3B4FD Certificate serial: 3399862B4875A625C99E6A32F448624E162CB64A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft Manifest number: 0142 Signing time: Mon 17 Feb 2025 12:11:19 +0000 Manifest this update: Mon 17 Feb 2025 12:06:19 +0000 Manifest next update: Thu 20 Feb 2025 20:05:19 +0000 Files and hashes: 1: 3130332e3230342e31352e302f32342d3234203d3e20313530393230.roa (hash: 84mIKFs557T9blcI7/exXdbBapxr7Cu4g0VLqBjO/cg=) 2: EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.crl (hash: t6VBLOVGlDmEsykAH1PrxzhCDBbl5TMHEQNABk88V3I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.crl rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 20:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:99:86:2b:48:75:a6:25:c9:9e:6a:32:f4:48:62:4e:16:2c:b6:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EECC4A44F09594EB711EA1F6F34B958D19A3B4FD Validity Not Before: Feb 17 12:06:19 2025 GMT Not After : Feb 20 20:05:19 2025 GMT Subject: CN=4ADA068E21888E66E9DDC9E5ACEDA64F89A64AAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:37:4e:b6:a1:9a:cc:f8:41:b4:40:91:0d:90: 94:ed:2a:cc:8c:bb:e3:bd:f6:8d:1b:4e:63:7c:84: 26:51:ab:3e:43:27:0b:21:d3:7d:68:87:32:d1:e7: 7c:e4:d4:75:ea:0a:8e:a3:a4:7c:a5:92:8b:7a:ea: bd:f2:94:23:77:5f:fc:6f:75:ea:25:88:c7:d8:57: 74:3a:fc:55:62:89:fe:df:7d:3d:7c:28:1a:0d:53: 76:c0:b6:d1:24:e1:c5:fe:24:45:57:13:d0:a5:e6: f1:24:93:b2:0b:1e:b8:ac:7f:a5:7a:d0:d2:1f:af: 8b:51:fe:a9:c3:1c:45:a9:04:24:9a:f8:0e:8a:cd: 56:f9:be:67:82:fe:1d:77:03:9f:62:e6:c4:5d:bd: 08:9a:f2:2b:61:6e:ac:bc:15:3e:cf:5d:48:22:e1: ab:82:8b:30:61:b9:93:11:f8:b1:21:a3:b8:fc:54: 63:90:c3:bd:ba:88:c2:74:8c:8c:08:ae:a2:fb:32: d3:bd:9f:09:d9:40:81:5e:29:35:87:4f:11:f0:14: 8e:14:3a:dc:29:3f:0c:6e:18:af:46:c7:e5:7f:3b: 43:ea:9f:06:a9:b6:d6:5a:df:a2:5c:8d:f6:62:2e: 60:aa:e5:c6:6d:20:16:b2:77:76:8c:b1:c3:7d:5e: d6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:DA:06:8E:21:88:8E:66:E9:DD:C9:E5:AC:ED:A6:4F:89:A6:4A:AF X509v3 Authority Key Identifier: keyid:EE:CC:4A:44:F0:95:94:EB:71:1E:A1:F6:F3:4B:95:8D:19:A3:B4:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:85:93:d2:6b:54:10:20:b3:69:40:d8:81:24:6c:57:71:09: b7:96:8c:a3:26:4b:4c:a9:29:af:31:fd:44:aa:8f:1e:c5:cf: 55:d0:6d:6f:e4:08:b6:2c:9b:fb:ed:cf:16:9f:36:38:10:c7: a6:75:aa:c6:a0:24:af:3a:92:2b:d8:3f:80:29:b5:cb:74:d5: f8:a9:81:e5:cf:d8:5f:b0:ab:9c:63:86:de:21:99:68:16:5e: cd:46:12:57:1d:83:2a:93:d6:64:e5:bf:be:a1:9e:4c:44:69: ba:fc:40:cb:09:87:7b:fe:63:76:16:44:5b:1a:54:b6:eb:b3: 61:ff:77:1b:51:45:cc:28:0f:b4:d6:75:a2:13:2d:da:5c:47: 49:23:7e:97:df:f0:86:29:80:72:fe:0b:95:dc:6c:b7:22:cf: ba:98:43:2c:8d:c4:e3:3d:db:3f:ed:1d:6e:54:3f:df:d7:be: be:ea:a8:04:ce:a0:7a:e9:84:dd:46:e8:06:0a:fb:72:8a:77: 39:b5:3e:93:69:6d:c3:8e:39:14:12:77:6c:a1:9a:37:e4:13: e9:fb:77:8b:a9:35:ef:57:70:59:10:49:12:ac:f4:1c:9b:13: ef:8e:72:94:5c:ca:03:9b:7f:40:61:a2:57:9e:97:30:8d:cd: 89:b0:28:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM5mGK0h1piXJnmoy9EhiThYstkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVDQzRBNDRGMDk1OTRFQjcxMUVBMUY2RjM0Qjk1OEQx OUEzQjRGRDAeFw0yNTAyMTcxMjA2MTlaFw0yNTAyMjAyMDA1MTlaMDMxMTAvBgNV BAMTKDRBREEwNjhFMjE4ODhFNjZFOUREQzlFNUFDRURBNjRGODlBNjRBQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3N062oZrM+EG0QJENkJTtKsyM u+O99o0bTmN8hCZRqz5DJwsh031ohzLR53zk1HXqCo6jpHylkot66r3ylCN3X/xv deoliMfYV3Q6/FViif7ffT18KBoNU3bAttEk4cX+JEVXE9Cl5vEkk7ILHrisf6V6 0NIfr4tR/qnDHEWpBCSa+A6KzVb5vmeC/h13A59i5sRdvQia8ithbqy8FT7PXUgi 4auCizBhuZMR+LEho7j8VGOQw726iMJ0jIwIrqL7MtO9nwnZQIFeKTWHTxHwFI4U OtwpPwxuGK9Gx+V/O0PqnwapttZa36JcjfZiLmCq5cZtIBayd3aMscN9XtYDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUStoGjiGIjmbp3cnlrO2mT4mmSq8wHwYDVR0j BBgwFoAU7sxKRPCVlOtxHqH280uVjRmjtP0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWZjOTk2Zi03MmNhLTRkNmItYTBlNy1mZjViYzQyYjA1ODkvMC9FRUNDNEE0NEYw OTU5NEVCNzExRUExRjZGMzRCOTU4RDE5QTNCNEZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUVDQzRBNDRGMDk1OTRFQjcxMUVBMUY2RjM0Qjk1OEQxOUEz QjRGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjlmYzk5NmYtNzJjYS00ZDZiLWEw ZTctZmY1YmM0MmIwNTg5LzAvRUVDQzRBNDRGMDk1OTRFQjcxMUVBMUY2RjM0Qjk1 OEQxOUEzQjRGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyFk9JrVBAgs2lA2IEkbFdxCbeWjKMmS0yp Ka8x/USqjx7Fz1XQbW/kCLYsm/vtzxafNjgQx6Z1qsagJK86kivYP4Aptct01fip geXP2F+wq5xjht4hmWgWXs1GElcdgyqT1mTlv76hnkxEabr8QMsJh3v+Y3YWRFsa VLbrs2H/dxtRRcwoD7TWdaITLdpcR0kjfpff8IYpgHL+C5XcbLciz7qYQyyNxOM9 2z/tHW5UP9/Xvr7qqATOoHrphN1G6AYK+3KKdzm1PpNpbcOOORQSd2yhmjfkE+n7 d4upNe9XcFkQSRKs9BybE++OcpRcygObf0BholeelzCNzYmwKI4= -----END CERTIFICATE-----Generated at Wed Feb 19 22:18:46 2025 by rpki-client