$ rpki-client -vvf repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft File: E89C93F089A07D03B5794B0C02239EF67E1D721C.mft (raw, json) Hash identifier: FToG0ulsvdPQelSWrxofYts1DEbXRgYW58N/VhkE9/k= Subject key identifier: 10:E6:CD:EC:F3:7C:FD:A0:FD:21:0E:93:EE:3E:8F:67:22:9A:71:8C Authority key identifier: E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C Certificate issuer: /CN=E89C93F089A07D03B5794B0C02239EF67E1D721C Certificate serial: 6C4589A9CF56D58BDE9AD94A53C9A0D343352036 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft Manifest number: 49 Signing time: Fri 04 Apr 2025 17:31:53 +0000 Manifest this update: Fri 04 Apr 2025 17:26:53 +0000 Manifest next update: Mon 07 Apr 2025 19:33:53 +0000 Files and hashes: 1: 3130332e37342e3134332e302f32342d3234203d3e203436303334.roa (hash: JENEpsaygQnZfGVyo5B3YcYBAcWsk2wulHjqbKHp5Ko=) 2: 3130332e35332e32302e302f32342d3234203d3e203436303334.roa (hash: YHAiLGhk7A6ZE4X7obU+oz12qWeh7X0M2hlk6hYX8jU=) 3: 3130332e37342e3136342e302f32342d3234203d3e203436303334.roa (hash: QbAeIT3Ks6znT3hg7T+AnddPc66+/tThEc2QldGCSpw=) 4: E89C93F089A07D03B5794B0C02239EF67E1D721C.crl (hash: v2imUpwpBTIapwUTp27T+l9XoFaX5nXxMrdzJAh+VxQ=) 5: 3230322e37302e3133362e302f32342d3234203d3e203436303334.roa (hash: 4RAp4F/7XGUDJWluz8ukd4JUDTUiL5R6CUgISPZWwHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:45:89:a9:cf:56:d5:8b:de:9a:d9:4a:53:c9:a0:d3:43:35:20:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E89C93F089A07D03B5794B0C02239EF67E1D721C Validity Not Before: Apr 4 17:26:53 2025 GMT Not After : Apr 7 19:33:53 2025 GMT Subject: CN=10E6CDECF37CFDA0FD210E93EE3E8F67229A718C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2d:e1:22:84:d7:dd:fb:24:5e:82:e3:42:db: e9:9f:dd:df:ed:ac:08:c1:d9:60:46:7d:ee:8c:a4: c7:8b:b9:53:ae:99:a3:3e:cd:3f:9e:c7:e3:27:fc: ea:6e:4b:ee:8f:d9:12:f1:3b:3f:78:01:57:ae:59: dd:73:c7:e0:53:69:ba:4b:8a:a0:69:54:58:1d:65: ed:5d:58:8b:b6:26:ed:c9:9b:fd:92:b0:4d:88:ed: 6e:3c:b9:df:14:5e:b0:67:dc:b2:30:e9:a0:13:f0: 82:86:28:71:7d:a0:7a:16:f5:67:9e:6a:29:48:0a: df:7b:93:00:9e:ec:7a:73:83:4a:16:46:64:e8:93: e8:81:25:4e:57:f7:9e:7f:93:e2:39:37:21:a3:66: 08:99:3c:30:08:ed:a7:1e:45:fa:30:f5:40:b7:3a: 7e:39:a2:d8:aa:ba:e4:bb:1a:2c:38:9b:a7:8d:b4: f5:03:64:43:d5:27:c8:3e:4c:36:74:7a:f9:9f:0d: 39:3f:b4:93:f5:b8:db:89:03:00:a7:28:27:44:60: 1a:74:52:2a:b2:d1:31:d0:f7:4d:23:5a:50:e9:d6: 93:11:ba:73:fe:32:40:49:0d:7e:20:4c:c3:09:1a: 12:f0:4b:eb:4b:bf:c4:07:04:51:f7:fa:e2:f8:54: 41:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E6:CD:EC:F3:7C:FD:A0:FD:21:0E:93:EE:3E:8F:67:22:9A:71:8C X509v3 Authority Key Identifier: keyid:E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:8c:79:0c:6b:11:68:d5:a1:0f:8a:ec:ac:17:53:4a:63:31: dc:7a:1d:d2:2e:24:ac:b4:c0:77:e8:14:6a:10:b8:f8:e5:6d: 5d:97:fb:e6:da:68:51:0c:c5:4a:00:70:04:ee:6d:20:4d:74: a6:8d:57:81:52:81:fd:be:5b:a6:6f:e5:2b:95:5e:da:e8:5c: 37:b4:bc:a0:e8:e8:9a:c3:9e:19:df:ed:77:8e:44:e8:12:25: 56:6c:d3:0e:b9:71:4e:06:00:38:19:a5:0b:a4:65:7c:7f:70: 40:ef:4f:2b:64:99:52:a6:a7:1f:82:4f:dc:1a:f8:14:88:85: eb:13:4b:4d:82:3f:68:47:f4:8a:57:9d:21:30:ab:b4:d0:ec: 3f:6d:6f:bb:92:f7:14:72:d4:c6:38:c1:52:fb:1e:74:35:fa: d7:db:7f:ca:a8:35:6f:d8:47:33:10:90:11:64:c1:b4:14:a7: 6e:f9:0e:3b:b1:05:9b:4e:7b:9c:fd:68:f6:34:0e:85:95:26: 98:04:56:46:2b:37:39:ec:8d:be:3a:fb:3e:70:23:6d:51:63: 9a:49:24:e2:c6:e2:bb:ea:e0:89:3a:31:04:83:e1:79:dc:2b: 4f:4a:3d:f7:f8:b0:ac:a3:4a:c7:90:18:33:7e:3a:4c:1f:6a: ed:8a:dd:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbEWJqc9W1YvemtlKU8mg00M1IDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3 RTFENzIxQzAeFw0yNTA0MDQxNzI2NTNaFw0yNTA0MDcxOTMzNTNaMDMxMTAvBgNV BAMTKDEwRTZDREVDRjM3Q0ZEQTBGRDIxMEU5M0VFM0U4RjY3MjI5QTcxOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgLeEihNfd+yReguNC2+mf3d/t rAjB2WBGfe6MpMeLuVOumaM+zT+ex+Mn/OpuS+6P2RLxOz94AVeuWd1zx+BTabpL iqBpVFgdZe1dWIu2Ju3Jm/2SsE2I7W48ud8UXrBn3LIw6aAT8IKGKHF9oHoW9Wee ailICt97kwCe7Hpzg0oWRmTok+iBJU5X955/k+I5NyGjZgiZPDAI7aceRfow9UC3 On45otiquuS7Giw4m6eNtPUDZEPVJ8g+TDZ0evmfDTk/tJP1uNuJAwCnKCdEYBp0 Uiqy0THQ900jWlDp1pMRunP+MkBJDX4gTMMJGhLwS+tLv8QHBFH3+uL4VEEbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEObN7PN8/aD9IQ6T7j6PZyKacYwwHwYDVR0j BBgwFoAU6JyT8ImgfQO1eUsMAiOe9n4dchwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Zjg4NTFlNS1lZTViLTQxZTEtOWFiYy00NDI2NTFkMjcyOTQvMC9FODlDOTNGMDg5 QTA3RDAzQjU3OTRCMEMwMjIzOUVGNjdFMUQ3MjFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3RTFE NzIxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY4ODUxZTUtZWU1Yi00MWUxLTlh YmMtNDQyNjUxZDI3Mjk0LzAvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlF RjY3RTFENzIxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWMeQxrEWjVoQ+K7KwXU0pjMdx6HdIuJKy0 wHfoFGoQuPjlbV2X++baaFEMxUoAcATubSBNdKaNV4FSgf2+W6Zv5SuVXtroXDe0 vKDo6JrDnhnf7XeOROgSJVZs0w65cU4GADgZpQukZXx/cEDvTytkmVKmpx+CT9wa +BSIhesTS02CP2hH9IpXnSEwq7TQ7D9tb7uS9xRy1MY4wVL7HnQ1+tfbf8qoNW/Y RzMQkBFkwbQUp275DjuxBZtOe5z9aPY0DoWVJpgEVkYrNznsjb46+z5wI21RY5pJ JOLG4rvq4Ik6MQSD4XncK09KPff4sKyjSseQGDN+Okwfau2K3bc= -----END CERTIFICATE-----Generated at Sun Apr 6 00:16:44 2025 by rpki-client