$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft File: E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft (raw, json) Hash identifier: uENhcPxyPdx+DBifAao9tw1QB0Fsdabed3/jyLPiIHU= Subject key identifier: 4F:00:4F:44:E1:B6:59:A6:83:BB:6F:B0:64:8F:27:F5:CE:2F:DE:67 Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98 Certificate issuer: /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98 Certificate serial: 5851BC3113203775FE8A2FA1DB10E33D15A4B60D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft Manifest number: 04DB Signing time: Mon 07 Apr 2025 04:21:31 +0000 Manifest this update: Mon 07 Apr 2025 04:16:31 +0000 Manifest next update: Thu 10 Apr 2025 14:55:31 +0000 Files and hashes: 1: 3130332e32302e39312e302f32342d3234203d3e203538333831.roa (hash: euk9OJMoqKJ/PoRjzKpkFgAP821pupDkAT5Pdi0akjA=) 2: 3136332e35332e3139322e302f32322d3234203d3e203538333831.roa (hash: /OfdPYALZiupMxs8iF6+SD24UB/8ZrzibAD0LeJLOAs=) 3: 3130332e32302e39302e302f32332d3234203d3e203538333831.roa (hash: 3bTLU0r/kGjXKDq/4CyYvhxk4DKQ0m82aKinCx3VEv4=) 4: 3136332e35332e3139322e302f32342d3234203d3e203538333831.roa (hash: yZc1iS4QoDixBleI5zCzNqJxlWUKStGiBLindHs1iEI=) 5: 3130332e32302e39302e302f32342d3234203d3e203538333831.roa (hash: U8zMaSQ7+KDj9JX6Jxw28z4BWL6cFt7T425dsrSW9yo=) 6: 3130332e352e35302e302f32342d3234203d3e203538333831.roa (hash: it/SzipXfJLThyc3J7HfzvzUSlGSxUAWhA/O+pawjWg=) 7: E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl (hash: 4usiP/u2vICBpFYmw6lv9ij/UQouzE6n0Q9IM+2eiAc=) 8: 3130332e352e35312e302f32342d3234203d3e203538333831.roa (hash: 8JW2i4QARgl0zJX/bSzH4du3GV59x2527JCrnJKQbAc=) 9: 3136332e35332e3139342e302f32342d3234203d3e203538333831.roa (hash: sWFHDQkTsVJom3rOu9Mf9y3OJpTKgRwn5bDfHA2Pw9Y=) 10: 3136332e35332e3139352e302f32342d3234203d3e203538333831.roa (hash: hvbDj3oW0Ulg1k85u9jkPnoGdFUSrxAWB+C8nIEEK6o=) 11: 3130332e352e35302e302f32332d3234203d3e203538333831.roa (hash: n6DP+hj0ytP63iMEg7QfxbSfnpN9qL6B51j5r569ips=) 12: 3136332e35332e3139332e302f32342d3234203d3e203538333831.roa (hash: vA7wUsbitPXQ/g+uEYWZCPKwK0C5BXMnrLidIFEb1Os=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 14:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:51:bc:31:13:20:37:75:fe:8a:2f:a1:db:10:e3:3d:15:a4:b6:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98 Validity Not Before: Apr 7 04:16:31 2025 GMT Not After : Apr 10 14:55:31 2025 GMT Subject: CN=4F004F44E1B659A683BB6FB0648F27F5CE2FDE67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:76:af:d3:c3:a4:ab:3b:30:78:9a:90:34:e9: df:18:ad:65:4e:6d:e7:99:7a:9e:c2:99:df:a9:8f: e8:8a:83:fb:20:03:8f:c8:11:e0:55:2e:4d:60:c1: c2:82:1a:03:43:5d:f5:b9:26:8e:18:88:c6:5d:17: f6:3d:04:c5:4a:af:d8:30:cc:00:ae:a9:ed:1c:7b: 4b:d6:75:e4:86:9a:40:cf:71:87:f4:4b:25:ad:f6: be:d1:f8:d5:c0:15:0c:67:56:2c:60:8e:cc:40:b3: e8:c3:93:d5:1d:29:22:b5:02:f6:76:74:65:f6:c1: 70:e0:c5:92:77:39:2a:9b:38:b7:06:a5:a6:6d:32: e0:f9:7f:74:04:87:7e:0f:6a:54:18:81:4c:d8:fb: 71:9d:84:6f:9d:c7:b9:ac:49:a7:15:7c:1f:87:b5: d1:0d:7c:a5:11:d5:e7:d6:3a:b8:c0:b6:b4:35:7f: 51:e6:94:bf:b4:40:0e:39:7a:f0:0e:93:0a:79:3c: 5d:9e:d9:ed:af:89:f7:ed:7b:83:86:ea:d5:b8:c3: 00:9c:88:4d:1e:04:69:02:c0:75:b2:82:2a:eb:36: c1:17:a3:a4:f1:09:29:27:83:7b:38:85:87:27:5a: 9f:76:9e:98:2d:18:47:e4:86:64:ba:46:95:6b:02: 38:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:00:4F:44:E1:B6:59:A6:83:BB:6F:B0:64:8F:27:F5:CE:2F:DE:67 X509v3 Authority Key Identifier: keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:19:87:c8:bf:f9:96:51:fa:a4:bd:59:36:79:ac:52:8a:8f: a3:61:b7:45:da:15:7c:40:23:03:ac:0e:ea:93:29:75:01:70: 10:cc:00:1c:11:09:20:39:1c:73:d8:08:55:dd:b3:2b:9f:fc: 0e:10:d4:37:bf:8c:8a:f1:53:a6:84:89:45:b4:2c:56:43:5e: a8:1c:d9:87:58:08:4d:07:67:b6:d5:97:13:18:f7:c3:57:d0: c3:d1:4a:1d:dd:07:42:42:b1:79:e9:08:1f:25:19:5b:dd:47: 35:81:c4:63:c8:54:b7:57:98:70:70:7f:c9:00:68:1d:55:1f: 30:c4:61:7f:d4:f1:11:a3:64:1a:10:ba:eb:ab:37:3d:55:cc: b0:be:44:0b:24:c8:2b:01:ec:dd:5f:e9:ca:9d:4d:0d:f3:f2: f5:39:53:cc:56:ce:f6:3a:ce:30:fc:ed:b2:49:bf:77:9f:d2: ec:93:5f:8d:ef:4e:f8:f7:c1:97:86:99:51:25:de:60:18:29: a8:1b:01:f0:a3:10:95:c7:11:33:1d:26:d7:54:d9:68:37:d5: 58:d3:2d:21:9d:8e:2b:19:54:f2:f2:2b:bb:01:49:bc:d6:d9: 07:62:cd:0a:d5:fe:6d:84:b2:4e:dc:ae:f2:9b:b4:b1:25:a3: 8b:6a:19:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWFG8MRMgN3X+ii+h2xDjPRWktg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVBOTA3QzRFQzZEQTZEOTM0MjYxMzI4MENDQUYyNkU5 OERCRUI5ODAeFw0yNTA0MDcwNDE2MzFaFw0yNTA0MTAxNDU1MzFaMDMxMTAvBgNV BAMTKDRGMDA0RjQ0RTFCNjU5QTY4M0JCNkZCMDY0OEYyN0Y1Q0UyRkRFNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcdq/Tw6SrOzB4mpA06d8YrWVO beeZep7Cmd+pj+iKg/sgA4/IEeBVLk1gwcKCGgNDXfW5Jo4YiMZdF/Y9BMVKr9gw zACuqe0ce0vWdeSGmkDPcYf0SyWt9r7R+NXAFQxnVixgjsxAs+jDk9UdKSK1AvZ2 dGX2wXDgxZJ3OSqbOLcGpaZtMuD5f3QEh34PalQYgUzY+3GdhG+dx7msSacVfB+H tdENfKUR1efWOrjAtrQ1f1HmlL+0QA45evAOkwp5PF2e2e2viffte4OG6tW4wwCc iE0eBGkCwHWygirrNsEXo6TxCSkng3s4hYcnWp92npgtGEfkhmS6RpVrAjghAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTwBPROG2WaaDu2+wZI8n9c4v3mcwHwYDVR0j BBgwFoAU5akHxOxtptk0JhMoDMrybpjb65gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzhkMjc1NS0zODBkLTQ3N2UtYmYyNS0wYWYyOTAyNmJkNzAvMC9FNUE5MDdDNEVD NkRBNkQ5MzQyNjEzMjgwQ0NBRjI2RTk4REJFQjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTVBOTA3QzRFQzZEQTZEOTM0MjYxMzI4MENDQUYyNkU5OERC RUI5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM4ZDI3NTUtMzgwZC00NzdlLWJm MjUtMGFmMjkwMjZiZDcwLzAvRTVBOTA3QzRFQzZEQTZEOTM0MjYxMzI4MENDQUYy NkU5OERCRUI5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIZh8i/+ZZR+qS9WTZ5rFKKj6Nht0XaFXxA IwOsDuqTKXUBcBDMABwRCSA5HHPYCFXdsyuf/A4Q1De/jIrxU6aEiUW0LFZDXqgc 2YdYCE0HZ7bVlxMY98NX0MPRSh3dB0JCsXnpCB8lGVvdRzWBxGPIVLdXmHBwf8kA aB1VHzDEYX/U8RGjZBoQuuurNz1VzLC+RAskyCsB7N1f6cqdTQ3z8vU5U8xWzvY6 zjD87bJJv3ef0uyTX43vTvj3wZeGmVEl3mAYKagbAfCjEJXHETMdJtdU2Wg31VjT LSGdjisZVPLyK7sBSbzW2QdizQrV/m2Esk7crvKbtLElo4tqGZw= -----END CERTIFICATE-----Generated at Tue Apr 8 13:20:39 2025 by rpki-client