$ rpki-client -vvf repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft File: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft (raw, json) Hash identifier: KsMEIiDn172wcpKFgQkm7DJlhRvyddpjUma9mHaCS/U= Subject key identifier: 2E:9A:59:78:41:D7:AD:B6:F7:52:3B:25:49:DD:B6:7F:C6:82:54:F2 Authority key identifier: E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE Certificate issuer: /CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Certificate serial: 74F246A9B220D04A08381DCBDAAF8E5F9A2C1F02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft Manifest number: 9C Signing time: Sat 05 Apr 2025 09:32:05 +0000 Manifest this update: Sat 05 Apr 2025 09:27:05 +0000 Manifest next update: Tue 08 Apr 2025 09:49:05 +0000 Files and hashes: 1: 3130332e36302e38382e302f32342d3234203d3e20313531353732.roa (hash: jpn48nG0Ycj+1UdP2KBIiJehtvwWTXv0KyE63OCNOE4=) 2: 3130332e36302e38382e302f32332d3233203d3e20313531353732.roa (hash: sj/Mmz0IkuIImkgMrX5NfmBzqbmlEbbflvN0FkIxBO4=) 3: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl (hash: NQn9g9KipK+DFvTtX+djjb8nz3A7zqGxDxqbm3vID1Y=) 4: 3130332e36302e38392e302f32342d3234203d3e20313531353732.roa (hash: dREME5rMhbbjPdVs8CW4K6GuZprxe03mtvDCarXd6Sk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 09:49:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:f2:46:a9:b2:20:d0:4a:08:38:1d:cb:da:af:8e:5f:9a:2c:1f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Validity Not Before: Apr 5 09:27:05 2025 GMT Not After : Apr 8 09:49:05 2025 GMT Subject: CN=2E9A597841D7ADB6F7523B2549DDB67FC68254F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dd:e4:56:56:f1:3c:ba:6b:9d:90:0d:c8:1d: 22:3b:62:74:49:df:ea:8d:a2:23:4e:92:93:52:b6: df:f6:82:74:dc:c2:6e:8d:c1:5b:3d:f1:f6:de:ed: 7d:3e:6c:c8:f8:a7:9b:59:a4:3f:f8:db:e8:28:80: 8d:c4:3b:ec:05:d2:86:f8:ec:58:87:c4:60:8f:24: d2:3e:12:e7:5d:89:1f:51:a6:44:9b:42:c9:21:dc: 00:32:dc:cb:80:54:03:80:c9:98:f9:71:90:a5:24: 2f:ae:0b:9f:d5:26:11:90:d7:78:13:4b:74:c9:f3: 9a:84:1c:39:b9:65:61:4a:76:4c:e7:e8:33:34:40: 1b:5f:43:17:f2:c9:bf:30:d5:9b:ca:5b:45:29:cb: 50:f0:64:3d:b9:14:b4:54:4d:82:37:90:35:3a:53: 33:30:7d:64:3e:2b:66:de:0b:d4:5c:8e:39:92:0b: 9d:4c:50:d4:05:de:bd:eb:52:3b:6e:f8:28:4b:11: ae:ee:f9:ab:bb:a5:99:fb:fe:25:f2:19:05:a0:63: a7:de:1a:00:b1:da:96:71:04:4e:e2:1e:c1:3e:cd: 4e:36:9a:70:92:66:5e:91:ee:a1:b6:ff:76:b9:5c: 1d:49:ac:e9:82:76:24:b2:dc:95:ae:0e:04:33:f7: 88:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9A:59:78:41:D7:AD:B6:F7:52:3B:25:49:DD:B6:7F:C6:82:54:F2 X509v3 Authority Key Identifier: keyid:E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:8e:20:75:af:9c:1d:6d:62:f5:9e:b9:6d:94:d1:ce:cb:45: 68:4e:d0:6b:39:8d:42:5f:27:5d:c2:78:44:48:24:33:ec:01: 83:2f:3e:9c:18:25:3b:df:58:62:fd:28:65:ab:eb:b7:0e:dd: be:e4:48:81:8c:41:d5:34:97:3e:74:d5:ff:14:35:36:d1:c6: 5e:f6:0e:41:0a:b5:e2:98:ae:13:9d:85:66:6a:5d:81:6c:fb: 46:c1:d4:74:ec:a2:cb:f3:45:b2:87:d6:5a:e1:7b:d5:8a:7a: 61:a3:d3:e3:88:2c:6b:9c:0a:2f:9f:ae:fd:6d:59:44:28:42: ba:7f:be:83:07:f1:e8:d2:9c:38:66:97:78:6c:56:80:14:77: b6:16:58:2c:60:be:74:68:9d:71:ac:00:e8:64:8b:00:37:eb: d1:73:63:60:7c:3b:9a:39:36:89:ed:32:82:2c:b8:b1:d7:ef: b5:44:49:6d:8e:3b:ef:f5:48:4d:dc:e2:07:53:ce:3f:51:9d: 69:2c:18:34:43:3c:38:17:74:70:3e:23:f6:8c:c2:f8:93:4a: 58:75:44:e7:8d:2a:be:7d:7c:dd:24:53:4c:55:ee:f7:49:66: 1d:16:a3:15:11:f9:e0:47:7e:c8:0f:70:08:a6:f4:03:ff:91: a7:7f:f6:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdPJGqbIg0EoIOB3L2q+OX5osHwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZF ODIxMkRERTAeFw0yNTA0MDUwOTI3MDVaFw0yNTA0MDgwOTQ5MDVaMDMxMTAvBgNV BAMTKDJFOUE1OTc4NDFEN0FEQjZGNzUyM0IyNTQ5RERCNjdGQzY4MjU0RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv3eRWVvE8umudkA3IHSI7YnRJ 3+qNoiNOkpNStt/2gnTcwm6NwVs98fbe7X0+bMj4p5tZpD/42+gogI3EO+wF0ob4 7FiHxGCPJNI+EuddiR9RpkSbQskh3AAy3MuAVAOAyZj5cZClJC+uC5/VJhGQ13gT S3TJ85qEHDm5ZWFKdkzn6DM0QBtfQxfyyb8w1ZvKW0Upy1DwZD25FLRUTYI3kDU6 UzMwfWQ+K2beC9RcjjmSC51MUNQF3r3rUjtu+ChLEa7u+au7pZn7/iXyGQWgY6fe GgCx2pZxBE7iHsE+zU42mnCSZl6R7qG2/3a5XB1JrOmCdiSy3JWuDgQz94iNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULppZeEHXrbb3UjslSd22f8aCVPIwHwYDVR0j BBgwFoAU58nk5cjqmJ8P99b+bb1qT+ghLd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzExYWE0Ni1mMjhlLTRjNTUtYjliYS03ZDViZGM5NWI0ZjYvMC9FN0M5RTRFNUM4 RUE5ODlGMEZGN0Q2RkU2REJENkE0RkU4MjEyRERFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZFODIx MkRERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxMWFhNDYtZjI4ZS00YzU1LWI5 YmEtN2Q1YmRjOTViNGY2LzAvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZB NEZFODIxMkRERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmOIHWvnB1tYvWeuW2U0c7LRWhO0Gs5jUJf J13CeERIJDPsAYMvPpwYJTvfWGL9KGWr67cO3b7kSIGMQdU0lz501f8UNTbRxl72 DkEKteKYrhOdhWZqXYFs+0bB1HTsosvzRbKH1lrhe9WKemGj0+OILGucCi+frv1t WUQoQrp/voMH8ejSnDhml3hsVoAUd7YWWCxgvnRonXGsAOhkiwA369FzY2B8O5o5 NontMoIsuLHX77VESW2OO+/1SE3c4gdTzj9RnWksGDRDPDgXdHA+I/aMwviTSlh1 ROeNKr59fN0kU0xV7vdJZh0WoxUR+eBHfsgPcAim9AP/kad/9n4= -----END CERTIFICATE-----Generated at Mon Apr 7 11:43:18 2025 by rpki-client