$ rpki-client -vvf repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft File: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft (raw, json) Hash identifier: 2WrTc8dndZP+2H7RM71d15NCWx9u5PJ5oBJm0h585oQ= Subject key identifier: FA:9A:47:2F:CB:19:F5:AA:51:17:E3:A6:C8:B9:31:08:6C:4B:71:96 Authority key identifier: EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE Certificate issuer: /CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Certificate serial: 142C92B4EA3421B5B9278D4C8B46C2E85AD3BEC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft Manifest number: E5 Signing time: Fri 04 Apr 2025 17:31:32 +0000 Manifest this update: Fri 04 Apr 2025 17:26:32 +0000 Manifest next update: Tue 08 Apr 2025 02:38:32 +0000 Files and hashes: 1: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl (hash: cF2vzZFPvNwvLLSk/Zh9wkl+j+k9z+U9DdzzO9z0AQE=) 2: 3130332e35332e32382e302f32332d3234203d3e20313339393535.roa (hash: q71VZMkHYR/jrmXSyW/PQjNtLOj+pg8vLSA4wEcrXe8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:2c:92:b4:ea:34:21:b5:b9:27:8d:4c:8b:46:c2:e8:5a:d3:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Validity Not Before: Apr 4 17:26:32 2025 GMT Not After : Apr 8 02:38:32 2025 GMT Subject: CN=FA9A472FCB19F5AA5117E3A6C8B931086C4B7196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:a2:18:cc:3d:bc:e2:58:96:a2:83:6f:11: 3a:df:8b:b9:f4:8e:40:0f:0c:68:d8:20:1d:19:73: 2d:0a:df:a4:f7:d9:ba:ed:18:9c:44:42:5e:94:8d: 98:c3:c2:79:e3:11:41:fa:7f:b6:ef:44:f0:bf:96: 1c:6b:f4:cf:3e:56:4b:2f:e8:65:a0:b5:de:22:d3: 3f:83:18:f0:ab:94:8b:29:df:83:2b:f1:7b:e8:60: b6:05:6a:54:b7:05:21:b2:8e:1f:5f:ec:7c:0f:5b: 96:15:ec:7b:0f:db:84:b5:2a:17:2e:48:f5:a6:5e: af:ba:e1:0a:07:a3:56:65:6f:7b:46:b4:60:f6:19: eb:3c:65:9d:56:d6:73:89:89:2f:bb:ea:35:be:f5: 92:31:8e:8a:f5:b7:10:73:5e:1d:2c:a4:bf:c3:5e: e6:d7:21:e4:41:2f:b3:07:6d:1b:09:8c:28:b9:ab: 88:8e:de:0e:9e:26:42:0b:a9:de:cc:57:5c:d0:b3: 65:cb:cd:2d:73:5e:bf:de:8a:b5:6e:88:36:75:dc: fa:ab:9c:1c:39:e0:02:ce:18:41:12:c9:c4:fa:0f: bc:89:56:85:aa:73:76:34:33:07:13:17:bc:c6:d8: 13:f2:e7:ed:61:69:58:65:bc:09:c8:4e:ef:d2:50: 52:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9A:47:2F:CB:19:F5:AA:51:17:E3:A6:C8:B9:31:08:6C:4B:71:96 X509v3 Authority Key Identifier: keyid:EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:04:35:62:e7:db:2c:0c:96:30:da:ec:67:b8:a9:e1:69:f0: fd:60:d5:27:a6:77:29:aa:0a:7e:81:b2:6b:9d:75:19:0b:38: 3f:f9:3f:cc:40:b7:d6:d6:8d:16:11:94:54:cf:b5:dc:eb:7e: e4:8b:63:79:77:b2:12:05:1b:54:06:e3:65:85:cf:e1:7a:29: 40:2a:e8:5a:6c:a5:31:59:ba:c4:b7:4c:a3:de:ea:63:b5:fc: b5:62:db:94:a5:c3:72:38:f0:99:51:8a:d6:da:0c:f5:52:1c: 5a:03:f8:99:f6:b9:5a:e2:dc:10:93:df:c5:ec:6f:76:78:56: fd:24:82:d6:bf:d4:27:01:21:9c:63:ef:3f:c1:35:1e:8b:bd: f7:7c:37:9e:ec:d3:92:99:51:0e:4b:8a:8c:fa:22:41:ee:42: ab:40:7c:d2:b5:a5:62:99:1c:9a:d4:71:75:58:a2:59:7c:85: 4d:0d:1d:52:db:33:bc:d5:9d:2e:41:97:7a:03:e4:e1:ff:e3: 0e:dd:3e:d8:3e:53:c0:df:f2:42:6a:d4:2d:71:fe:aa:c4:28: 77:bf:87:b5:0e:47:43:13:31:49:a6:9c:5c:2b:4b:fc:0a:2f: 43:af:d5:f5:69:40:81:59:99:84:87:1f:72:bd:2b:9c:8a:9c: 10:be:ad:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFCyStOo0IbW5J41Mi0bC6FrTvsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0 NUYyOUVERTAeFw0yNTA0MDQxNzI2MzJaFw0yNTA0MDgwMjM4MzJaMDMxMTAvBgNV BAMTKEZBOUE0NzJGQ0IxOUY1QUE1MTE3RTNBNkM4QjkzMTA4NkM0QjcxOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC17qIYzD284liWooNvETrfi7n0 jkAPDGjYIB0Zcy0K36T32brtGJxEQl6UjZjDwnnjEUH6f7bvRPC/lhxr9M8+Vksv 6GWgtd4i0z+DGPCrlIsp34Mr8XvoYLYFalS3BSGyjh9f7HwPW5YV7HsP24S1Khcu SPWmXq+64QoHo1Zlb3tGtGD2Ges8ZZ1W1nOJiS+76jW+9ZIxjor1txBzXh0spL/D XubXIeRBL7MHbRsJjCi5q4iO3g6eJkILqd7MV1zQs2XLzS1zXr/eirVuiDZ13Pqr nBw54ALOGEESycT6D7yJVoWqc3Y0MwcTF7zG2BPy5+1haVhlvAnITu/SUFKPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+ppHL8sZ9apRF+OmyLkxCGxLcZYwHwYDVR0j BBgwFoAU7JqrkQBwU+Y84X+Y10/9iUXynt4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmI0M2VjOC1mNTgyLTQwMjUtOGYzNi0zY2VhNTM5ZDBiMDkvMC9FQzlBQUI5MTAw NzA1M0U2M0NFMTdGOThENzRGRkQ4OTQ1RjI5RURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0NUYy OUVERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJiNDNlYzgtZjU4Mi00MDI1LThm MzYtM2NlYTUzOWQwYjA5LzAvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZE ODk0NUYyOUVERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8ENWLn2ywMljDa7Ge4qeFp8P1g1Semdymq Cn6BsmuddRkLOD/5P8xAt9bWjRYRlFTPtdzrfuSLY3l3shIFG1QG42WFz+F6KUAq 6FpspTFZusS3TKPe6mO1/LVi25Slw3I48JlRitbaDPVSHFoD+Jn2uVri3BCT38Xs b3Z4Vv0kgta/1CcBIZxj7z/BNR6Lvfd8N57s05KZUQ5Lioz6IkHuQqtAfNK1pWKZ HJrUcXVYoll8hU0NHVLbM7zVnS5Bl3oD5OH/4w7dPtg+U8Df8kJq1C1x/qrEKHe/ h7UOR0MTMUmmnFwrS/wKL0Ov1fVpQIFZmYSHH3K9K5yKnBC+raY= -----END CERTIFICATE-----Generated at Sat Apr 5 19:06:29 2025 by rpki-client