$ rpki-client -vvf repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft File: E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft (raw, json) Hash identifier: RnCo4oeVxrSAgwfnt9Bh8Z6WYo2U3FLh6k/IWaTz5cw= Subject key identifier: 88:6C:EA:71:BB:9A:AE:B4:73:52:D4:B3:55:B3:FE:38:A8:F7:B6:57 Authority key identifier: E4:C5:17:8B:DB:BD:EF:7B:7D:D4:1B:AF:58:EB:3D:25:B2:13:27:71 Certificate issuer: /CN=E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771 Certificate serial: 316AF81332A0AD594E88B6E569FF7CFB7DBF118D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft Manifest number: 0198 Signing time: Sat 05 Apr 2025 10:01:16 +0000 Manifest this update: Sat 05 Apr 2025 09:56:16 +0000 Manifest next update: Tue 08 Apr 2025 18:30:16 +0000 Files and hashes: 1: E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.crl (hash: Zbdvgt7S4AIdURjosuRtqBOihFdSvnBuZf65eK6SZS8=) 2: 3130332e36362e33362e302f32342d3234203d3e20313530323233.roa (hash: 92CiTC3Van4+3+BldVCHuJ3vdr0S/LlPDMeB7hF5ajE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.crl rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:6a:f8:13:32:a0:ad:59:4e:88:b6:e5:69:ff:7c:fb:7d:bf:11:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771 Validity Not Before: Apr 5 09:56:16 2025 GMT Not After : Apr 8 18:30:16 2025 GMT Subject: CN=886CEA71BB9AAEB47352D4B355B3FE38A8F7B657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:66:87:d7:f2:00:96:bb:35:68:74:9a:1f:7f: fc:99:9e:0c:0f:c0:8a:2d:19:6e:fc:ed:88:80:62: 04:eb:e5:d8:7e:0e:9d:86:97:28:5b:f4:a0:49:19: b6:5e:2c:91:a6:79:07:2b:93:94:50:69:49:c6:6e: a7:c1:7c:2b:01:e6:c4:80:6f:e4:3c:aa:1f:84:80: e9:b8:e4:1e:6e:69:88:99:a5:e5:f0:83:13:dc:01: 30:70:8a:56:e2:79:6b:d7:91:3b:3c:5f:9f:d3:5c: b1:e8:e0:00:03:f7:f0:ae:36:83:75:f7:55:2d:97: c1:01:99:3a:49:dd:44:68:4b:75:b5:73:1d:ea:ab: 33:70:5d:ef:82:4d:9b:8a:ee:91:d2:e6:cc:6b:53: fa:8d:63:4b:f1:19:55:54:a4:a5:27:76:34:9d:8d: 0b:fe:c0:8f:c0:cc:b6:74:3a:87:56:d9:b8:4a:50: 1e:71:6e:f0:b1:ff:c7:16:97:da:13:33:74:7e:5c: be:2c:03:4f:f7:49:4a:3d:63:85:66:5b:27:d4:d2: 3f:27:81:ef:e8:a0:72:c8:d6:47:30:e0:b0:ba:ca: 01:df:3a:29:5e:4a:09:5e:14:0b:1e:c3:c3:a7:d2: a2:f5:3b:1c:50:2c:54:bd:ed:50:1e:52:f6:d0:1b: f2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6C:EA:71:BB:9A:AE:B4:73:52:D4:B3:55:B3:FE:38:A8:F7:B6:57 X509v3 Authority Key Identifier: keyid:E4:C5:17:8B:DB:BD:EF:7B:7D:D4:1B:AF:58:EB:3D:25:B2:13:27:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:9a:85:7c:7b:ce:27:17:a0:1d:4e:7a:42:3c:ad:f4:a9:36: 2b:da:4a:de:56:23:60:6b:57:94:f7:56:5c:33:10:52:47:4f: 62:b2:5c:56:c7:56:a3:6e:18:47:ab:37:4f:62:25:01:2f:46: ce:bb:f8:6f:49:a5:48:57:5c:1d:85:54:30:0b:5c:27:3d:bb: f6:aa:16:83:7c:aa:d2:49:74:08:15:5c:a9:21:ed:e3:66:71: 1a:55:30:83:de:c9:ca:5b:5e:51:12:1b:24:dc:88:63:ff:88: c0:f4:4a:39:65:d3:5d:c9:ce:e2:a3:67:e9:69:99:3c:c7:11: 14:51:82:1b:d3:69:1a:ee:aa:b1:7e:89:c7:8f:e0:2c:ec:9d: c6:dd:fb:13:fe:d5:96:fb:03:ea:2a:2d:d6:67:5b:8e:18:ac: 51:16:29:ac:ec:96:62:84:fd:8b:1b:e9:bc:91:db:89:96:06: 00:6b:4b:ca:ad:55:cd:12:27:e3:b3:74:57:f1:cd:b5:cc:84: 77:ce:3a:fd:a9:6f:71:4b:58:95:f6:10:dd:b4:e6:57:d7:50: 45:0d:10:6b:a9:95:82:00:9b:ba:e0:7c:6e:56:30:c9:a7:c7: 3e:7c:29:27:f2:59:1d:ba:42:87:c1:6b:2f:4c:bd:d0:b9:b0: 1b:bc:dd:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMWr4EzKgrVlOiLblaf98+32/EY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDNTE3OEJEQkJERUY3QjdERDQxQkFGNThFQjNEMjVC MjEzMjc3MTAeFw0yNTA0MDUwOTU2MTZaFw0yNTA0MDgxODMwMTZaMDMxMTAvBgNV BAMTKDg4NkNFQTcxQkI5QUFFQjQ3MzUyRDRCMzU1QjNGRTM4QThGN0I2NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcZofX8gCWuzVodJoff/yZngwP wIotGW787YiAYgTr5dh+Dp2Glyhb9KBJGbZeLJGmeQcrk5RQaUnGbqfBfCsB5sSA b+Q8qh+EgOm45B5uaYiZpeXwgxPcATBwilbieWvXkTs8X5/TXLHo4AAD9/CuNoN1 91Utl8EBmTpJ3URoS3W1cx3qqzNwXe+CTZuK7pHS5sxrU/qNY0vxGVVUpKUndjSd jQv+wI/AzLZ0OodW2bhKUB5xbvCx/8cWl9oTM3R+XL4sA0/3SUo9Y4VmWyfU0j8n ge/ooHLI1kcw4LC6ygHfOileSgleFAsew8On0qL1OxxQLFS97VAeUvbQG/K/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiGzqcbuarrRzUtSzVbP+OKj3tlcwHwYDVR0j BBgwFoAU5MUXi9u973t91BuvWOs9JbITJ3EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmRiZDc4NS02YmNhLTQ5M2ItOGE2NS0zYjUyNzcwMDdmZWQvMC9FNEM1MTc4QkRC QkRFRjdCN0RENDFCQUY1OEVCM0QyNUIyMTMyNzcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDNTE3OEJEQkJERUY3QjdERDQxQkFGNThFQjNEMjVCMjEz Mjc3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJkYmQ3ODUtNmJjYS00OTNiLThh NjUtM2I1Mjc3MDA3ZmVkLzAvRTRDNTE3OEJEQkJERUY3QjdERDQxQkFGNThFQjNE MjVCMjEzMjc3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmahXx7zicXoB1OekI8rfSpNivaSt5WI2Br V5T3VlwzEFJHT2KyXFbHVqNuGEerN09iJQEvRs67+G9JpUhXXB2FVDALXCc9u/aq FoN8qtJJdAgVXKkh7eNmcRpVMIPeycpbXlESGyTciGP/iMD0Sjll013JzuKjZ+lp mTzHERRRghvTaRruqrF+iceP4Czsncbd+xP+1Zb7A+oqLdZnW44YrFEWKazslmKE /Ysb6byR24mWBgBrS8qtVc0SJ+OzdFfxzbXMhHfOOv2pb3FLWJX2EN205lfXUEUN EGuplYIAm7rgfG5WMMmnxz58KSfyWR26QofBay9MvdC5sBu83Vs= -----END CERTIFICATE-----Generated at Sat Apr 5 18:20:15 2025 by rpki-client