$ rpki-client -vvf repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft File: E420F134FA1A6BA70588424BD4E862EE6C50C188.mft (raw, json) Hash identifier: ULC+fKSQhEiGqIi4jv01tlb2EhFz0kI1dEfILb99gek= Subject key identifier: 2D:B4:F0:DC:64:9D:EA:D4:13:0F:DD:90:1A:45:C9:19:A7:6F:01:28 Authority key identifier: E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88 Certificate issuer: /CN=E420F134FA1A6BA70588424BD4E862EE6C50C188 Certificate serial: 6FF04610D691CFDB63038300316CB1CB6BC06D4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft Manifest number: 04D8 Signing time: Mon 02 Jun 2025 02:04:32 +0000 Manifest this update: Mon 02 Jun 2025 01:59:32 +0000 Manifest next update: Thu 05 Jun 2025 07:36:32 +0000 Files and hashes: 1: 3130332e3139342e3137322e302f32322d3234203d3e203633383835.roa (hash: nIcaXDvKx2+XVxNFuL8CckiCEV48hFgqOSdn9qzzkF4=) 2: E420F134FA1A6BA70588424BD4E862EE6C50C188.crl (hash: 6Hq9wKwQTT6sPmArx14CZKF8CNZky1LvqEa1mDOfj7E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 07:36:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:f0:46:10:d6:91:cf:db:63:03:83:00:31:6c:b1:cb:6b:c0:6d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E420F134FA1A6BA70588424BD4E862EE6C50C188 Validity Not Before: Jun 2 01:59:32 2025 GMT Not After : Jun 5 07:36:32 2025 GMT Subject: CN=2DB4F0DC649DEAD4130FDD901A45C919A76F0128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:90:6e:4c:bd:38:21:56:7e:8a:7e:f7:a6:a4: 7f:1a:a5:58:69:fe:79:0e:ff:9a:a1:98:79:82:15: e4:76:f1:70:ae:07:2f:be:04:e4:59:2a:65:b9:09: bc:57:45:62:1e:66:2e:6e:9e:cb:79:1a:d8:f2:4e: 12:a5:28:99:ea:0b:5e:38:bd:bd:ce:89:65:24:93: 02:1b:89:03:c4:49:98:3f:6b:53:83:bb:5c:b4:b6: 81:30:65:6c:95:71:93:3a:8c:b1:4c:b5:29:a8:94: 96:51:61:b6:f8:32:90:14:4e:d2:f1:28:3a:90:9b: 21:67:9b:57:ae:4c:bb:8a:56:df:79:0a:b0:f8:04: 7c:96:32:56:17:9f:25:90:12:3a:7f:40:2d:56:ba: 85:3a:4a:5c:5d:9d:a9:87:0b:71:5a:13:6c:99:36: b2:9e:aa:5d:ef:2c:c4:cd:5f:e3:19:74:b1:8e:30: 25:9e:a2:fa:e4:da:b7:cf:f6:67:87:79:14:f1:56: 5e:7e:ac:ce:9a:78:e7:91:ff:65:08:84:7f:ac:ed: cf:58:45:a5:d0:28:d9:78:83:f0:9b:cf:92:c5:a4: bc:5a:4b:3e:18:40:c1:91:14:0b:41:13:2d:31:b2: 43:e7:f9:47:da:46:03:f8:dc:5e:9e:31:96:04:01: 4c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B4:F0:DC:64:9D:EA:D4:13:0F:DD:90:1A:45:C9:19:A7:6F:01:28 X509v3 Authority Key Identifier: keyid:E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e2:90:fa:61:5e:2c:83:34:e2:ec:24:70:d8:8d:72:97:fc: 42:b1:78:6c:42:a2:22:96:64:56:8f:63:7a:b2:89:24:a9:4f: d7:2b:f0:44:b4:70:35:4a:00:ec:37:88:17:39:e8:3b:42:2f: 78:cd:20:6c:b1:5e:dd:29:d7:e2:32:8a:e7:95:6a:03:a0:be: 7e:a6:b7:2e:1f:50:fd:e1:c4:2b:15:49:87:18:b4:bb:51:da: 4a:1c:2f:ff:9d:74:02:49:6a:5c:99:2d:1f:b6:82:87:84:79: c5:fc:89:14:b8:53:bf:fb:d3:9b:74:3c:cf:43:91:0e:57:4f: 28:f8:39:74:b5:cf:19:bf:b8:28:03:a2:e3:17:36:8b:26:a7: 14:6b:47:15:77:e7:21:81:1f:86:15:59:7f:0a:95:1c:2a:0c: b8:5d:6b:b1:42:0a:e7:57:b4:46:cd:19:c4:60:22:da:45:16: 4e:0c:83:68:d2:31:19:a8:94:42:77:1e:31:1f:59:cf:3d:ba: 84:cc:90:d9:f3:cc:37:1c:7f:c4:67:74:b8:d5:f5:21:6e:25: 9e:e2:54:4e:e0:62:52:86:6b:78:1f:92:83:1f:11:97:82:9f: 56:75:bb:3c:d8:71:a7:ec:cd:72:9a:d8:bb:dc:46:70:1c:df: b9:b3:36:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb/BGENaRz9tjA4MAMWyxy2vAbU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYyRUU2 QzUwQzE4ODAeFw0yNTA2MDIwMTU5MzJaFw0yNTA2MDUwNzM2MzJaMDMxMTAvBgNV BAMTKDJEQjRGMERDNjQ5REVBRDQxMzBGREQ5MDFBNDVDOTE5QTc2RjAxMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUkG5MvTghVn6KfvempH8apVhp /nkO/5qhmHmCFeR28XCuBy++BORZKmW5CbxXRWIeZi5unst5GtjyThKlKJnqC144 vb3OiWUkkwIbiQPESZg/a1ODu1y0toEwZWyVcZM6jLFMtSmolJZRYbb4MpAUTtLx KDqQmyFnm1euTLuKVt95CrD4BHyWMlYXnyWQEjp/QC1WuoU6SlxdnamHC3FaE2yZ NrKeql3vLMTNX+MZdLGOMCWeovrk2rfP9meHeRTxVl5+rM6aeOeR/2UIhH+s7c9Y RaXQKNl4g/Cbz5LFpLxaSz4YQMGRFAtBEy0xskPn+UfaRgP43F6eMZYEAUx5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULbTw3GSd6tQTD92QGkXJGadvASgwHwYDVR0j BBgwFoAU5CDxNPoaa6cFiEJL1Ohi7mxQwYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZmUzNWZhYS1lZDJiLTQyNzEtYjQ4Yy00ZWEyMWMzMDkzNTIvMC9FNDIwRjEzNEZB MUE2QkE3MDU4ODQyNEJENEU4NjJFRTZDNTBDMTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYyRUU2QzUw QzE4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZlMzVmYWEtZWQyYi00MjcxLWI0 OGMtNGVhMjFjMzA5MzUyLzAvRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYy RUU2QzUwQzE4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7ikPphXiyDNOLsJHDYjXKX/EKxeGxCoiKW ZFaPY3qyiSSpT9cr8ES0cDVKAOw3iBc56DtCL3jNIGyxXt0p1+IyiueVagOgvn6m ty4fUP3hxCsVSYcYtLtR2kocL/+ddAJJalyZLR+2goeEecX8iRS4U7/705t0PM9D kQ5XTyj4OXS1zxm/uCgDouMXNosmpxRrRxV35yGBH4YVWX8KlRwqDLhda7FCCudX tEbNGcRgItpFFk4Mg2jSMRmolEJ3HjEfWc89uoTMkNnzzDccf8RndLjV9SFuJZ7i VE7gYlKGa3gfkoMfEZeCn1Z1uzzYcafszXKa2LvcRnAc37mzNvQ= -----END CERTIFICATE-----Generated at Tue Jun 3 23:16:58 2025 by rpki-client