$ rpki-client -vvf repo-rpki.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/EE0318C1CF5D037492EFBC172300E2E062AFEFCB.mft File: EE0318C1CF5D037492EFBC172300E2E062AFEFCB.mft (raw, json) Hash identifier: 6zPKRjAE4p9C1f+WeApGgwpbRslN3sk/eINW2Wb4fZQ= Subject key identifier: C6:D4:30:D9:0E:1E:FE:A3:68:C1:3E:1F:D5:27:E6:52:62:9A:3D:33 Authority key identifier: EE:03:18:C1:CF:5D:03:74:92:EF:BC:17:23:00:E2:E0:62:AF:EF:CB Certificate issuer: /CN=EE0318C1CF5D037492EFBC172300E2E062AFEFCB Certificate serial: 602DEEA9B7CF0F3433CD667AB49BED2231230A7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE0318C1CF5D037492EFBC172300E2E062AFEFCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/EE0318C1CF5D037492EFBC172300E2E062AFEFCB.mft Manifest number: E1 Signing time: Fri 04 Apr 2025 12:11:53 +0000 Manifest this update: Fri 04 Apr 2025 12:06:53 +0000 Manifest next update: Mon 07 Apr 2025 12:51:53 +0000 Files and hashes: 1: EE0318C1CF5D037492EFBC172300E2E062AFEFCB.crl (hash: AZw+rtTsL3TrEW7EggHPd3LDskrMioJse4alShYf1zI=) 2: 34332e3232382e3137352e302f32342d3234203d3e20313532303235.roa (hash: +IXwOqF4yCbBj9uwGmBxcenGGFnRPZxkHawvMosNR04=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/EE0318C1CF5D037492EFBC172300E2E062AFEFCB.crl rsync://repo-rpki.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/EE0318C1CF5D037492EFBC172300E2E062AFEFCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE0318C1CF5D037492EFBC172300E2E062AFEFCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 12:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:2d:ee:a9:b7:cf:0f:34:33:cd:66:7a:b4:9b:ed:22:31:23:0a:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE0318C1CF5D037492EFBC172300E2E062AFEFCB Validity Not Before: Apr 4 12:06:53 2025 GMT Not After : Apr 7 12:51:53 2025 GMT Subject: CN=C6D430D90E1EFEA368C13E1FD527E652629A3D33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:31:91:4d:d8:82:1a:8f:8e:fb:fb:a0:9f:7c: c8:5f:4e:9d:2f:d8:a1:25:c0:9d:fa:2c:4e:6f:bc: 29:42:e1:fc:7d:88:ac:76:47:e6:63:23:d0:82:90: f0:19:d6:96:d8:fc:37:b2:96:c4:cb:4b:75:d5:dd: 57:ea:fc:cb:40:73:0c:f9:69:d4:59:bb:9a:fd:7d: b8:8b:59:37:47:cf:a3:c5:f3:17:2e:62:c1:94:d1: 95:10:ec:ea:92:ac:09:3a:67:b8:7c:b9:93:74:29: 22:ae:0d:a1:28:90:56:44:b7:24:af:fb:91:88:49: d5:6a:b4:d0:c8:55:ea:25:b4:bd:89:11:25:4d:6f: 84:d9:47:52:e4:5d:f4:fc:5d:7a:b6:89:17:9a:ba: b0:23:39:bc:ea:04:a7:d6:f6:f6:ad:ed:53:7f:38: f3:c5:6f:5a:0a:43:b9:1d:aa:f3:83:a8:19:05:fa: 7d:5f:b5:81:6e:18:bf:18:f1:20:4e:7b:4b:96:1e: 55:f0:db:23:6f:9d:d3:0f:b6:61:32:eb:5d:50:e7: 1a:c5:50:ad:fe:89:fa:3b:88:da:0e:e5:99:55:87: c3:63:62:2f:85:09:00:92:2c:67:82:a5:13:f1:07: 5e:8e:e3:0d:16:a3:12:67:68:8c:4d:93:40:f6:d7: 4c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D4:30:D9:0E:1E:FE:A3:68:C1:3E:1F:D5:27:E6:52:62:9A:3D:33 X509v3 Authority Key Identifier: keyid:EE:03:18:C1:CF:5D:03:74:92:EF:BC:17:23:00:E2:E0:62:AF:EF:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/EE0318C1CF5D037492EFBC172300E2E062AFEFCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE0318C1CF5D037492EFBC172300E2E062AFEFCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/EE0318C1CF5D037492EFBC172300E2E062AFEFCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:24:94:68:0f:d8:1e:d3:f7:a3:e7:90:65:6a:c6:0a:a6:14: 7f:ec:f9:8d:f4:35:04:55:12:70:3e:dd:79:b1:f0:ba:35:97: 1a:1b:12:38:ff:7d:cc:dd:1d:23:2f:f9:72:fa:ad:1e:b9:75: 28:18:47:60:0d:05:c2:ba:af:09:ee:54:43:62:63:dc:aa:75: f3:db:65:d7:ba:9b:14:28:b4:e1:6f:fe:6b:d4:16:e5:04:ca: f5:81:c2:1d:ea:cd:9d:97:c2:6a:09:6a:ff:0b:43:ea:e7:a0: 9f:74:12:9e:34:bd:bd:c1:82:54:99:1a:a9:75:96:56:4d:bc: d2:69:43:2f:54:ae:30:c2:18:2b:0f:ca:d5:11:9d:71:b9:3e: e5:dd:ea:b8:b7:e5:14:1c:d6:b8:29:0c:63:90:ea:18:58:84: 9b:4c:1a:ae:96:ef:e9:ce:73:8b:07:65:3c:ba:6e:83:cc:f3: 3c:29:a4:1d:48:22:cd:a0:60:a9:9a:50:17:d1:72:93:f9:09: 9c:81:97:7e:c5:73:aa:08:1a:0a:e0:5a:ca:95:c1:cc:88:e3: df:82:0e:d5:ac:92:bf:1b:f9:d4:a1:1b:3a:71:33:65:ce:dc: 1d:b7:ac:c3:70:be:bb:bc:88:9b:2e:02:fb:f9:a7:96:c7:e2: 49:a1:4b:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYC3uqbfPDzQzzWZ6tJvtIjEjCnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUwMzE4QzFDRjVEMDM3NDkyRUZCQzE3MjMwMEUyRTA2 MkFGRUZDQjAeFw0yNTA0MDQxMjA2NTNaFw0yNTA0MDcxMjUxNTNaMDMxMTAvBgNV BAMTKEM2RDQzMEQ5MEUxRUZFQTM2OEMxM0UxRkQ1MjdFNjUyNjI5QTNEMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFMZFN2IIaj477+6CffMhfTp0v 2KElwJ36LE5vvClC4fx9iKx2R+ZjI9CCkPAZ1pbY/DeylsTLS3XV3Vfq/MtAcwz5 adRZu5r9fbiLWTdHz6PF8xcuYsGU0ZUQ7OqSrAk6Z7h8uZN0KSKuDaEokFZEtySv +5GISdVqtNDIVeoltL2JESVNb4TZR1LkXfT8XXq2iReaurAjObzqBKfW9vat7VN/ OPPFb1oKQ7kdqvODqBkF+n1ftYFuGL8Y8SBOe0uWHlXw2yNvndMPtmEy611Q5xrF UK3+ifo7iNoO5ZlVh8NjYi+FCQCSLGeCpRPxB16O4w0WoxJnaIxNk0D210whAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxtQw2Q4e/qNowT4f1SfmUmKaPTMwHwYDVR0j BBgwFoAU7gMYwc9dA3SS77wXIwDi4GKv78swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTFhMzk4MC1hMzJlLTRkZjktOGU1Mi0wYmUwZDM0M2NjMGIvMC9FRTAzMThDMUNG NUQwMzc0OTJFRkJDMTcyMzAwRTJFMDYyQUZFRkNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUUwMzE4QzFDRjVEMDM3NDkyRUZCQzE3MjMwMEUyRTA2MkFG RUZDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjExYTM5ODAtYTMyZS00ZGY5LThl NTItMGJlMGQzNDNjYzBiLzAvRUUwMzE4QzFDRjVEMDM3NDkyRUZCQzE3MjMwMEUy RTA2MkFGRUZDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkklGgP2B7T96PnkGVqxgqmFH/s+Y30NQRV EnA+3Xmx8Lo1lxobEjj/fczdHSMv+XL6rR65dSgYR2ANBcK6rwnuVENiY9yqdfPb Zde6mxQotOFv/mvUFuUEyvWBwh3qzZ2XwmoJav8LQ+rnoJ90Ep40vb3BglSZGql1 llZNvNJpQy9UrjDCGCsPytURnXG5PuXd6ri35RQc1rgpDGOQ6hhYhJtMGq6W7+nO c4sHZTy6boPM8zwppB1IIs2gYKmaUBfRcpP5CZyBl37Fc6oIGgrgWsqVwcyI49+C DtWskr8b+dShGzpxM2XO3B23rMNwvru8iJsuAvv5p5bH4kmhS48= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:36 2025 by rpki-client