$ rpki-client -vvf repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.mft File: EED8A9475E4020DA0F2BEF589D15102EB06B658F.mft (raw, json) Hash identifier: ahfFwTo7BZ0FuJQCbGlDC7YKwOHS2ZNoelF5cbRF//4= Subject key identifier: BA:D8:39:44:38:00:9B:06:C6:C6:E4:A6:CE:28:9F:AF:0F:CF:B5:01 Authority key identifier: EE:D8:A9:47:5E:40:20:DA:0F:2B:EF:58:9D:15:10:2E:B0:6B:65:8F Certificate issuer: /CN=EED8A9475E4020DA0F2BEF589D15102EB06B658F Certificate serial: 0B13CFBE54D584C288341D28027D10C3A6308C8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EED8A9475E4020DA0F2BEF589D15102EB06B658F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.mft Manifest number: 04AA Signing time: Mon 17 Feb 2025 15:50:42 +0000 Manifest this update: Mon 17 Feb 2025 15:45:42 +0000 Manifest next update: Thu 20 Feb 2025 23:23:42 +0000 Files and hashes: 1: 3130332e37392e39312e302f32342d3234203d3e203634333035.roa (hash: lu1woKtXGxLYbsNewGx2MXHyYoNQR+oU6U4ADWthtVs=) 2: EED8A9475E4020DA0F2BEF589D15102EB06B658F.crl (hash: P3rvxcILe5bqKlBmTYAhFBQVTfs5OnsaN0X8mWhshE8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.crl rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EED8A9475E4020DA0F2BEF589D15102EB06B658F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 23:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:13:cf:be:54:d5:84:c2:88:34:1d:28:02:7d:10:c3:a6:30:8c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EED8A9475E4020DA0F2BEF589D15102EB06B658F Validity Not Before: Feb 17 15:45:42 2025 GMT Not After : Feb 20 23:23:42 2025 GMT Subject: CN=BAD8394438009B06C6C6E4A6CE289FAF0FCFB501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d2:3e:7d:9d:db:37:c4:e8:93:67:6c:ea:99: 25:39:47:78:d5:a3:d7:29:71:25:8e:41:0b:2e:22: 88:f1:72:e0:cd:df:f6:9f:d0:7f:fe:a6:19:0f:43: 6b:6e:08:db:92:94:76:31:49:6e:c3:8a:b7:14:ae: 5f:62:2c:a9:bd:66:f9:ac:be:82:12:9c:ec:de:09: 45:3a:13:01:cc:df:3c:8b:be:cc:68:a2:c4:58:53: 96:b0:26:7f:cd:a0:71:99:13:44:58:a6:99:c1:ca: 6a:09:ed:2a:67:a7:6b:82:00:9f:0b:75:3c:5b:fe: eb:9d:35:59:2e:df:18:43:1c:07:43:78:76:ef:e7: 7c:d3:8e:2e:16:4d:e4:5a:b9:45:14:bd:a3:bb:8f: 1f:fd:e3:88:b1:e8:a3:81:08:28:e2:2d:b7:64:24: b4:09:d0:2f:6d:ad:89:4e:73:50:d3:c8:75:28:eb: 16:6d:d0:64:66:cb:e5:72:cf:68:f4:ac:53:72:2d: 69:76:3a:97:7e:bf:d7:6d:ec:44:f1:9a:40:12:04: 59:60:19:25:97:b1:3b:38:59:d4:f3:27:fd:49:1a: 4f:ac:0f:b5:31:de:b0:bf:9a:7f:e9:f4:13:e9:dd: dc:13:0d:e5:d7:95:07:db:cc:dc:1c:82:35:0a:4b: 74:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D8:39:44:38:00:9B:06:C6:C6:E4:A6:CE:28:9F:AF:0F:CF:B5:01 X509v3 Authority Key Identifier: keyid:EE:D8:A9:47:5E:40:20:DA:0F:2B:EF:58:9D:15:10:2E:B0:6B:65:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EED8A9475E4020DA0F2BEF589D15102EB06B658F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:4d:4b:13:59:a0:64:9a:16:ad:40:3c:4f:12:94:82:f6:47: 4c:55:9e:a7:8a:e5:43:23:b6:f3:1e:cc:ea:65:d9:35:98:87: f2:e9:61:3d:d9:61:3d:5c:e6:64:02:7b:48:2a:49:71:f3:ca: 0d:5a:dd:43:7c:80:0c:f5:51:b0:dd:25:e7:f3:e5:92:69:fb: 1d:0c:d7:29:2a:22:63:6f:f4:c0:bf:09:c0:18:3a:b7:03:2d: a3:89:5b:1e:40:78:01:3c:34:e6:f2:33:7a:0e:4a:f0:9c:a7: 8a:db:e6:06:d0:50:d5:a6:b8:e2:5d:0b:f1:84:46:75:9a:ef: 8e:df:77:7f:26:88:78:15:10:63:e0:d7:f1:e2:ad:2d:04:87: 10:7c:8d:19:0a:de:26:42:5d:4a:62:0d:1c:a9:54:ea:85:e0: aa:22:e0:87:57:c8:47:b5:24:a1:56:7b:07:d5:51:4b:ca:9d: 3e:14:73:4d:6c:25:98:29:1c:8d:4f:de:c8:fd:f5:37:43:d8: b9:2a:c2:c4:15:48:b1:70:9d:fd:ae:6d:21:fb:88:28:b2:7e: 0b:a9:04:46:15:70:a6:09:a9:c7:21:2b:05:27:b9:3a:0a:9e: c8:a7:7f:8e:d4:f9:66:00:37:4c:08:a8:d8:51:2a:6d:c7:00: d9:9c:be:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCxPPvlTVhMKINB0oAn0Qw6YwjIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVEOEE5NDc1RTQwMjBEQTBGMkJFRjU4OUQxNTEwMkVC MDZCNjU4RjAeFw0yNTAyMTcxNTQ1NDJaFw0yNTAyMjAyMzIzNDJaMDMxMTAvBgNV BAMTKEJBRDgzOTQ0MzgwMDlCMDZDNkM2RTRBNkNFMjg5RkFGMEZDRkI1MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe0j59nds3xOiTZ2zqmSU5R3jV o9cpcSWOQQsuIojxcuDN3/af0H/+phkPQ2tuCNuSlHYxSW7DircUrl9iLKm9Zvms voISnOzeCUU6EwHM3zyLvsxoosRYU5awJn/NoHGZE0RYppnBymoJ7Spnp2uCAJ8L dTxb/uudNVku3xhDHAdDeHbv53zTji4WTeRauUUUvaO7jx/944ix6KOBCCjiLbdk JLQJ0C9trYlOc1DTyHUo6xZt0GRmy+Vyz2j0rFNyLWl2Opd+v9dt7ETxmkASBFlg GSWXsTs4WdTzJ/1JGk+sD7Ux3rC/mn/p9BPp3dwTDeXXlQfbzNwcgjUKS3SrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUutg5RDgAmwbGxuSmziifrw/PtQEwHwYDVR0j BBgwFoAU7tipR15AINoPK+9YnRUQLrBrZY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NjAzMWZkMC01ODQwLTRhYzEtYmZiMS0zNWY3MWZkMjQwNGMvMC9FRUQ4QTk0NzVF NDAyMERBMEYyQkVGNTg5RDE1MTAyRUIwNkI2NThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUVEOEE5NDc1RTQwMjBEQTBGMkJFRjU4OUQxNTEwMkVCMDZC NjU4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTYwMzFmZDAtNTg0MC00YWMxLWJm YjEtMzVmNzFmZDI0MDRjLzAvRUVEOEE5NDc1RTQwMjBEQTBGMkJFRjU4OUQxNTEw MkVCMDZCNjU4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9NSxNZoGSaFq1APE8SlIL2R0xVnqeK5UMj tvMezOpl2TWYh/LpYT3ZYT1c5mQCe0gqSXHzyg1a3UN8gAz1UbDdJefz5ZJp+x0M 1ykqImNv9MC/CcAYOrcDLaOJWx5AeAE8NObyM3oOSvCcp4rb5gbQUNWmuOJdC/GE RnWa747fd38miHgVEGPg1/HirS0EhxB8jRkK3iZCXUpiDRypVOqF4Koi4IdXyEe1 JKFWewfVUUvKnT4Uc01sJZgpHI1P3sj99TdD2LkqwsQVSLFwnf2ubSH7iCiyfgup BEYVcKYJqcchKwUnuToKnsinf47U+WYAN0wIqNhRKm3HANmcvvI= -----END CERTIFICATE-----Generated at Wed Feb 19 22:09:13 2025 by rpki-client