$ rpki-client -vvf repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft File: E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft (raw, json) Hash identifier: Qy4kq0zZhO4Fn++dof8Wa4p7BzuXUaEN9KiSrDXcBeg= Subject key identifier: DA:65:58:91:AA:2C:93:BF:49:36:48:FA:71:5E:58:32:B6:B5:79:17 Authority key identifier: E9:C6:90:C5:1E:9B:F1:B5:97:83:32:FD:5B:A9:4A:85:01:92:F5:4C Certificate issuer: /CN=E9C690C51E9BF1B5978332FD5BA94A850192F54C Certificate serial: 29CD4BA1D0057585459CE42817CEE5E4CD478FE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft Manifest number: 73 Signing time: Mon 07 Apr 2025 08:40:41 +0000 Manifest this update: Mon 07 Apr 2025 08:35:41 +0000 Manifest next update: Thu 10 Apr 2025 09:20:41 +0000 Files and hashes: 1: 3136302e32352e3234322e302f32332d3234203d3e20313432333437.roa (hash: m4R7Ce56iUMCFFJmIywelaWPhUdSv/TM5oh18sVU0yg=) 2: E9C690C51E9BF1B5978332FD5BA94A850192F54C.crl (hash: BGDRLSJ0IMfu4ls5/EXNKrQhVnGIshu7eo7p100buiE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.crl rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:cd:4b:a1:d0:05:75:85:45:9c:e4:28:17:ce:e5:e4:cd:47:8f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9C690C51E9BF1B5978332FD5BA94A850192F54C Validity Not Before: Apr 7 08:35:41 2025 GMT Not After : Apr 10 09:20:41 2025 GMT Subject: CN=DA655891AA2C93BF493648FA715E5832B6B57917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:36:0f:e5:d1:dc:7a:7e:7c:fd:8c:c1:4c:97: bf:09:a5:64:71:c7:06:d0:6b:f7:4e:e1:56:fa:a4: b5:ed:0c:36:f2:af:4c:46:e1:1b:85:35:3d:db:1e: 99:d9:b6:5b:e7:49:65:11:37:84:50:72:b2:13:3c: 7a:cc:51:3c:ab:2f:b1:5d:32:24:7d:11:90:19:0c: d5:92:c3:0e:02:ce:0a:b1:3a:34:ca:97:4a:3b:a4: 3b:5e:fb:e6:c5:59:80:9a:e0:0f:c4:c2:0c:5a:0b: 87:25:0d:39:8d:c5:44:a6:37:8d:52:b8:5c:6d:c4: a5:4f:df:10:31:df:e8:69:7d:e7:e2:d6:f4:94:79: c1:75:e3:f3:06:d9:5d:97:20:d0:80:29:75:6c:e2: 68:d4:f4:78:ab:80:81:4d:ae:e4:53:60:3a:b3:ec: 1f:63:81:3e:f6:20:9e:63:c2:84:6f:8d:1e:8c:87: e1:ad:e1:e4:65:ad:40:4d:01:ef:c1:93:5f:2d:3f: 1e:e7:a0:9f:64:bc:0b:35:ae:18:dd:62:6c:5d:00: 9a:e2:7d:4d:a4:c3:a3:d2:71:e0:8f:9d:21:08:c3: b1:ab:30:93:54:75:c5:0b:88:c9:1e:1e:f0:b2:b7: 10:87:a4:54:cd:e7:58:4f:ed:44:d8:14:c2:62:aa: e6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:65:58:91:AA:2C:93:BF:49:36:48:FA:71:5E:58:32:B6:B5:79:17 X509v3 Authority Key Identifier: keyid:E9:C6:90:C5:1E:9B:F1:B5:97:83:32:FD:5B:A9:4A:85:01:92:F5:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:83:cb:6b:0b:bc:05:78:26:ad:e6:69:27:65:8d:bb:6f:e2: 7b:8f:8c:b4:f8:3e:f7:c0:e2:17:e2:ed:88:26:3b:6f:f5:b9: 00:f6:a8:7b:c0:72:14:c8:f8:86:73:ed:4f:2f:f4:eb:10:37: 47:71:f2:80:d6:c4:8b:25:1f:61:a0:e5:d8:80:d5:65:e1:e5: 23:a1:20:1f:be:5e:31:9d:29:e9:2f:49:ca:37:6c:64:6d:ef: 7f:55:24:ad:c1:51:49:27:20:ad:27:64:09:3d:b6:0f:02:79: bd:16:22:06:61:fb:ba:cb:cf:1e:18:90:85:a2:47:db:95:4d: b0:3e:c7:84:f9:f6:06:86:a9:7c:69:e2:fb:e9:57:72:3f:3e: 04:8b:21:fc:71:aa:36:4a:da:08:6d:05:34:c8:52:a9:3a:a7: b9:4a:cd:b3:2e:02:a6:c3:f3:8c:66:f5:cc:ef:4f:17:76:74: 0c:c3:cf:75:8a:0a:8f:df:05:13:19:12:09:4e:22:a7:43:44: d0:86:27:ba:78:51:02:3c:7e:4b:af:2b:4b:e8:47:8f:f2:9a: 2c:ee:a2:2e:76:66:e7:bc:9d:85:ab:bb:b7:51:0f:c7:83:8e: 43:1f:df:4b:f6:43:a7:47:b6:d7:d9:da:1b:28:c2:52:de:68: 71:8d:fe:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKc1LodAFdYVFnOQoF87l5M1Hj+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlDNjkwQzUxRTlCRjFCNTk3ODMzMkZENUJBOTRBODUw MTkyRjU0QzAeFw0yNTA0MDcwODM1NDFaFw0yNTA0MTAwOTIwNDFaMDMxMTAvBgNV BAMTKERBNjU1ODkxQUEyQzkzQkY0OTM2NDhGQTcxNUU1ODMyQjZCNTc5MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXNg/l0dx6fnz9jMFMl78JpWRx xwbQa/dO4Vb6pLXtDDbyr0xG4RuFNT3bHpnZtlvnSWURN4RQcrITPHrMUTyrL7Fd MiR9EZAZDNWSww4CzgqxOjTKl0o7pDte++bFWYCa4A/EwgxaC4clDTmNxUSmN41S uFxtxKVP3xAx3+hpfefi1vSUecF14/MG2V2XINCAKXVs4mjU9HirgIFNruRTYDqz 7B9jgT72IJ5jwoRvjR6Mh+Gt4eRlrUBNAe/Bk18tPx7noJ9kvAs1rhjdYmxdAJri fU2kw6PSceCPnSEIw7GrMJNUdcULiMkeHvCytxCHpFTN51hP7UTYFMJiqubVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2mVYkaosk79JNkj6cV5YMra1eRcwHwYDVR0j BBgwFoAU6caQxR6b8bWXgzL9W6lKhQGS9UwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDUzODhmNC0xMDdiLTQ0YTktOWQ4Zi0xNjAzZmVjZmRlZTkvMC9FOUM2OTBDNTFF OUJGMUI1OTc4MzMyRkQ1QkE5NEE4NTAxOTJGNTRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTlDNjkwQzUxRTlCRjFCNTk3ODMzMkZENUJBOTRBODUwMTky RjU0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA1Mzg4ZjQtMTA3Yi00NGE5LTlk OGYtMTYwM2ZlY2ZkZWU5LzAvRTlDNjkwQzUxRTlCRjFCNTk3ODMzMkZENUJBOTRB ODUwMTkyRjU0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6Dy2sLvAV4Jq3maSdljbtv4nuPjLT4PvfA 4hfi7YgmO2/1uQD2qHvAchTI+IZz7U8v9OsQN0dx8oDWxIslH2Gg5diA1WXh5SOh IB++XjGdKekvSco3bGRt739VJK3BUUknIK0nZAk9tg8Ceb0WIgZh+7rLzx4YkIWi R9uVTbA+x4T59gaGqXxp4vvpV3I/PgSLIfxxqjZK2ghtBTTIUqk6p7lKzbMuAqbD 84xm9czvTxd2dAzDz3WKCo/fBRMZEglOIqdDRNCGJ7p4UQI8fkuvK0voR4/ymizu oi52Zue8nYWru7dRD8eDjkMf30v2Q6dHttfZ2hsowlLeaHGN/s8= -----END CERTIFICATE-----Generated at Tue Apr 8 13:23:20 2025 by rpki-client