$ rpki-client -vvf repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft File: EC39D766063B56E5EA4DBFB2A502298FB995956A.mft (raw, json) Hash identifier: bVBJKPSJAplGO3X8RiT2kcNeacC2RusqyodHevu34Qg= Subject key identifier: 17:41:03:26:32:D4:E3:5C:41:D4:BC:74:76:1D:74:AB:32:F7:EF:48 Authority key identifier: EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A Certificate issuer: /CN=EC39D766063B56E5EA4DBFB2A502298FB995956A Certificate serial: 11A3E39A1FABE668BD600E42AFFAE1B6C5E90354 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft Manifest number: 04C6 Signing time: Thu 17 Apr 2025 20:10:36 +0000 Manifest this update: Thu 17 Apr 2025 20:05:36 +0000 Manifest next update: Mon 21 Apr 2025 05:31:36 +0000 Files and hashes: 1: EC39D766063B56E5EA4DBFB2A502298FB995956A.crl (hash: ZV3+6PlszH7fpVvmatb/6J2/tP7cWxAKV20r2zOpiZo=) 2: 3130332e3133392e32352e302f32342d3234203d3e20313338383738.roa (hash: RYbwzoZNVEeCPZF43gFAZgtRg296MShKXDHjj7JKutI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 05:31:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a3:e3:9a:1f:ab:e6:68:bd:60:0e:42:af:fa:e1:b6:c5:e9:03:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC39D766063B56E5EA4DBFB2A502298FB995956A Validity Not Before: Apr 17 20:05:36 2025 GMT Not After : Apr 21 05:31:36 2025 GMT Subject: CN=1741032632D4E35C41D4BC74761D74AB32F7EF48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fa:6c:a7:12:47:24:27:b9:3b:54:7b:94:6a: cc:40:6b:9b:4b:a0:0e:ba:25:98:2e:3a:16:e2:4a: 24:c1:8e:a8:7e:5e:9c:d9:b9:7c:0a:9a:bb:3a:4e: da:1c:dc:f5:57:b6:a9:dd:51:7c:58:28:49:aa:ab: 06:75:20:35:66:75:ba:6e:52:de:08:ef:6b:1b:b0: 24:f7:23:53:af:89:00:ae:fb:fc:9f:36:70:a4:ec: ba:48:2a:a6:7d:c1:94:3a:32:b1:a6:c0:1f:8f:b0: 47:14:48:45:1f:0d:80:ca:8c:30:d8:65:81:46:62: ea:68:f8:ae:b8:4f:5a:cf:4d:46:8e:ac:62:21:e7: 16:ab:fc:e6:23:e3:54:a9:7a:dd:5a:60:d4:09:82: b8:12:0b:76:f6:02:7f:e5:c7:b2:46:03:39:8c:38: 05:70:18:be:69:48:10:aa:75:31:8b:b9:ea:eb:d3: 9f:1b:51:da:70:67:db:c8:9d:b7:53:4d:b7:62:ad: d0:fe:f4:c8:9c:be:c7:fd:ad:19:ce:1d:9e:8b:6f: ca:97:ef:7c:b5:ab:cb:4c:21:cd:49:8b:be:8c:bb: 88:bd:3a:75:76:3d:a6:93:f5:9a:17:1f:32:67:b8: 82:e0:52:44:69:70:70:45:b9:3e:67:9c:d3:81:f5: b1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:41:03:26:32:D4:E3:5C:41:D4:BC:74:76:1D:74:AB:32:F7:EF:48 X509v3 Authority Key Identifier: keyid:EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:69:3f:7a:1c:42:73:7b:63:05:d0:a8:f9:b7:fb:00:1c:ba: 12:f8:d0:87:7b:3c:de:64:fe:33:99:fc:6d:a5:9d:3d:4d:2d: 3f:2b:d0:e2:62:a0:79:15:00:aa:6b:10:b1:d1:15:d3:76:a4: 4e:04:67:17:99:75:ee:55:1c:dd:70:ff:26:9a:2d:57:25:32: 77:3f:cf:82:e7:25:24:2b:24:b5:6a:02:aa:55:65:fc:34:cc: 1b:75:5a:1f:05:00:c5:a9:a5:7b:b4:f0:70:b9:24:0c:4e:97: ae:cd:5d:16:fb:76:d8:0f:f9:db:48:f6:f2:37:c2:c7:28:5d: e1:1f:d5:1f:12:05:d5:e0:53:b7:73:6f:bf:cb:cb:ca:fc:ad: ac:9a:f4:50:c1:09:92:f2:80:d7:aa:36:72:b3:5e:e0:55:0a: a3:66:9b:e2:c8:b5:8c:93:f3:bd:49:d9:e0:75:48:24:26:6d: b6:7d:c8:03:66:2f:c5:dd:08:cd:e9:71:02:90:fe:3e:04:e7: ef:5c:a0:31:00:35:df:0b:d9:30:29:e5:e4:d5:04:64:f4:d9: eb:5b:81:8d:c7:13:6d:e9:e7:80:b5:b1:d5:d3:2c:fb:57:49: 98:a3:dd:0a:4e:58:3d:60:70:1e:5b:5b:c3:cb:a2:78:a9:5e: cf:6b:a1:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEaPjmh+r5mi9YA5Cr/rhtsXpA1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5OEZC OTk1OTU2QTAeFw0yNTA0MTcyMDA1MzZaFw0yNTA0MjEwNTMxMzZaMDMxMTAvBgNV BAMTKDE3NDEwMzI2MzJENEUzNUM0MUQ0QkM3NDc2MUQ3NEFCMzJGN0VGNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM+mynEkckJ7k7VHuUasxAa5tL oA66JZguOhbiSiTBjqh+XpzZuXwKmrs6Ttoc3PVXtqndUXxYKEmqqwZ1IDVmdbpu Ut4I72sbsCT3I1OviQCu+/yfNnCk7LpIKqZ9wZQ6MrGmwB+PsEcUSEUfDYDKjDDY ZYFGYupo+K64T1rPTUaOrGIh5xar/OYj41Spet1aYNQJgrgSC3b2An/lx7JGAzmM OAVwGL5pSBCqdTGLuerr058bUdpwZ9vInbdTTbdirdD+9Micvsf9rRnOHZ6Lb8qX 73y1q8tMIc1Ji76Mu4i9OnV2PaaT9ZoXHzJnuILgUkRpcHBFuT5nnNOB9bFXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF0EDJjLU41xB1Lx0dh10qzL370gwHwYDVR0j BBgwFoAU7DnXZgY7VuXqTb+ypQIpj7mVlWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2ZlNDI1NS0xZDkxLTRmY2MtYmNlNC04YTQyYWRmZTNjMjkvMC9FQzM5RDc2NjA2 M0I1NkU1RUE0REJGQjJBNTAyMjk4RkI5OTU5NTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5OEZCOTk1 OTU2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNmZTQyNTUtMWQ5MS00ZmNjLWJj ZTQtOGE0MmFkZmUzYzI5LzAvRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5 OEZCOTk1OTU2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtpP3ocQnN7YwXQqPm3+wAcuhL40Id7PN5k /jOZ/G2lnT1NLT8r0OJioHkVAKprELHRFdN2pE4EZxeZde5VHN1w/yaaLVclMnc/ z4LnJSQrJLVqAqpVZfw0zBt1Wh8FAMWppXu08HC5JAxOl67NXRb7dtgP+dtI9vI3 wscoXeEf1R8SBdXgU7dzb7/Ly8r8raya9FDBCZLygNeqNnKzXuBVCqNmm+LItYyT 871J2eB1SCQmbbZ9yANmL8XdCM3pcQKQ/j4E5+9coDEANd8L2TAp5eTVBGT02etb gY3HE23p54C1sdXTLPtXSZij3QpOWD1gcB5bW8PLonipXs9roRA= -----END CERTIFICATE-----Generated at Fri Apr 18 06:05:49 2025 by rpki-client