$ rpki-client -vvf repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft File: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft (raw, json) Hash identifier: 7m/BDgsbZ2KrhKTN/APzR0QrKqMtHI3opfGp+9ji9Ek= Subject key identifier: A9:E2:CF:B5:F7:43:90:7A:51:C5:EC:C4:56:90:F9:AF:86:E8:46:CA Authority key identifier: E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F Certificate issuer: /CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Certificate serial: 58A3813232193809A6ED79BACA8F02ED6C1310E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft Manifest number: A1 Signing time: Thu 03 Apr 2025 05:41:48 +0000 Manifest this update: Thu 03 Apr 2025 05:36:48 +0000 Manifest next update: Sun 06 Apr 2025 16:55:48 +0000 Files and hashes: 1: 3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa (hash: PEcDYL2YEDwvOwIh2isXFSsdo3mWol6RplkSJ7kPOGI=) 2: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl (hash: EMpp30T8xniHmjzIaJF0putUnyxaXidLY/VMB4HslqU=) 3: 323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa (hash: k742tyOIX18+4IlFbV4FgY2xaEXxztUec+tXVFs15vs=) 4: 3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (hash: 0+ulOJPEXxfRU9rDzPOyAhCIeStaBB8o7bfVtpS93+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 16:55:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a3:81:32:32:19:38:09:a6:ed:79:ba:ca:8f:02:ed:6c:13:10:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Validity Not Before: Apr 3 05:36:48 2025 GMT Not After : Apr 6 16:55:48 2025 GMT Subject: CN=A9E2CFB5F743907A51C5ECC45690F9AF86E846CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:29:08:ab:9f:ad:f1:b0:35:60:24:08:a3:a9: 7b:ce:49:73:5d:30:aa:6b:7d:9c:4c:fe:20:d0:03: 0c:d4:b1:6b:51:9a:29:2a:64:a8:3f:ce:2d:98:f9: ec:9c:c4:4e:e5:a4:7e:d3:57:5f:19:0b:c5:ee:f9: 1f:b8:aa:20:2d:e9:1d:15:6b:02:41:cd:08:8c:08: 9d:b1:18:0d:16:75:05:09:8c:0c:68:00:69:80:30: 02:6b:21:b6:9d:14:04:b8:6b:ea:fe:d5:78:ba:90: 31:17:a6:1b:74:03:f0:95:1a:42:ad:64:94:7b:0e: 73:ef:87:c0:72:36:bb:dd:3d:b9:6c:52:35:bf:c6: e2:df:55:39:c3:aa:cd:f5:49:41:33:45:32:49:68: 45:5f:23:48:52:1a:ce:f9:e3:0b:21:b2:13:58:f1: 2d:0b:33:7b:71:8f:7d:d1:f1:7c:a1:0c:d6:d8:e7: 8c:29:6f:ce:50:72:15:84:fe:54:72:7a:c8:3d:2f: 4c:cb:17:f4:d2:d2:38:24:38:61:77:f2:9f:a6:58: 96:b0:5d:70:33:de:2e:20:04:22:ec:20:71:a4:12: 83:0a:13:e2:04:ef:2e:79:af:1e:f4:20:f9:79:66: d9:a4:cb:b8:9f:3b:a1:e1:7d:80:43:ad:c2:d4:cc: 98:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E2:CF:B5:F7:43:90:7A:51:C5:EC:C4:56:90:F9:AF:86:E8:46:CA X509v3 Authority Key Identifier: keyid:E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:64:12:6f:1a:b2:be:18:c1:62:d2:18:5f:08:1f:13:7a:f9: 86:43:b3:33:5c:0c:57:aa:4c:85:75:30:0b:de:15:59:82:b8: f6:bb:45:5a:50:03:a2:df:50:af:0e:35:cb:11:cd:e9:ff:5b: 92:29:ed:c0:ee:36:34:83:d5:09:17:39:e1:b3:47:7a:7f:de: 68:26:90:36:a1:9f:40:65:94:0c:a8:e3:9d:95:91:5e:bb:a8: e6:4a:70:b6:5d:53:d7:40:c0:7b:3b:59:5d:a9:86:7d:c2:ef: 65:94:bb:41:d8:eb:cc:bc:82:6d:7b:39:95:da:7b:30:98:db: fd:77:e1:4d:0a:73:e6:c3:94:d7:b9:26:fd:33:66:ab:c3:43: 09:8a:69:4d:fe:d4:55:8c:d0:1c:b7:f2:c5:d1:5f:e4:cf:bf: 29:8a:76:dd:01:15:a3:1c:43:82:8b:ed:15:b8:4c:0e:90:d9: cc:a3:78:cd:99:53:f8:6f:50:7e:87:4a:c4:6b:1b:d2:36:7b: f7:93:9e:5d:58:d4:2c:ee:62:ca:87:24:27:c9:44:f9:b6:24: 1a:6a:f0:64:6e:2c:c8:83:df:f9:29:16:f6:5d:10:a7:94:c2: 6d:19:9a:77:e3:19:77:ec:58:db:95:d0:f8:da:19:47:67:a2: 7d:39:60:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWKOBMjIZOAmm7Xm6yo8C7WwTEOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0Iy REJCRUQwRjAeFw0yNTA0MDMwNTM2NDhaFw0yNTA0MDYxNjU1NDhaMDMxMTAvBgNV BAMTKEE5RTJDRkI1Rjc0MzkwN0E1MUM1RUNDNDU2OTBGOUFGODZFODQ2Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFKQirn63xsDVgJAijqXvOSXNd MKprfZxM/iDQAwzUsWtRmikqZKg/zi2Y+eycxE7lpH7TV18ZC8Xu+R+4qiAt6R0V awJBzQiMCJ2xGA0WdQUJjAxoAGmAMAJrIbadFAS4a+r+1Xi6kDEXpht0A/CVGkKt ZJR7DnPvh8ByNrvdPblsUjW/xuLfVTnDqs31SUEzRTJJaEVfI0hSGs754wshshNY 8S0LM3txj33R8XyhDNbY54wpb85QchWE/lRyesg9L0zLF/TS0jgkOGF38p+mWJaw XXAz3i4gBCLsIHGkEoMKE+IE7y55rx70IPl5Ztmky7ifO6HhfYBDrcLUzJhxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqeLPtfdDkHpRxezEVpD5r4boRsowHwYDVR0j BBgwFoAU5M7BHyRL8Nq+wTb4Of1Tey277Q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmYzZjVkOS1jZmI4LTQxMjMtYTJiMS1iMGI1Mjk5ZjljNmUvMC9FNENFQzExRjI0 NEJGMERBQkVDMTM2RjgzOUZENTM3QjJEQkJFRDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0IyREJC RUQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJmM2Y1ZDktY2ZiOC00MTIzLWEy YjEtYjBiNTI5OWY5YzZlLzAvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUz N0IyREJCRUQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJNkEm8asr4YwWLSGF8IHxN6+YZDszNcDFeq TIV1MAveFVmCuPa7RVpQA6LfUK8ONcsRzen/W5Ip7cDuNjSD1QkXOeGzR3p/3mgm kDahn0BllAyo452VkV67qOZKcLZdU9dAwHs7WV2phn3C72WUu0HY68y8gm17OZXa ezCY2/134U0Kc+bDlNe5Jv0zZqvDQwmKaU3+1FWM0By38sXRX+TPvymKdt0BFaMc Q4KL7RW4TA6Q2cyjeM2ZU/hvUH6HSsRrG9I2e/eTnl1Y1CzuYsqHJCfJRPm2JBpq 8GRuLMiD3/kpFvZdEKeUwm0ZmnfjGXfsWNuV0PjaGUdnon05YJM= -----END CERTIFICATE-----Generated at Sat Apr 5 17:50:03 2025 by rpki-client