$ rpki-client -vvf repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft File: EC39D766063B56E5EA4DBFB2A502298FB995956A.mft (raw, json) Hash identifier: vC0mxeXevxbUXfv1PKheLlNZoQ7ZplEWv2M+QsjprZI= Subject key identifier: 9D:0D:91:DF:70:C8:85:DB:4A:E0:41:E7:B7:5A:38:8E:23:4A:A4:2E Authority key identifier: EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A Certificate issuer: /CN=EC39D766063B56E5EA4DBFB2A502298FB995956A Certificate serial: 094C1384211779E9EF02DF7B992E78047ABE2E3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft Manifest number: 04DA Signing time: Mon 02 Jun 2025 01:02:38 +0000 Manifest this update: Mon 02 Jun 2025 00:57:38 +0000 Manifest next update: Thu 05 Jun 2025 07:19:38 +0000 Files and hashes: 1: EC39D766063B56E5EA4DBFB2A502298FB995956A.crl (hash: bnv+pcsrT7tbCgJEuazm/wSt+PqhBNmCv+7ueRxCoxY=) 2: 3130332e3133392e32352e302f32342d3234203d3e20313338383738.roa (hash: fXYsqxCjsvIrOq+7nStBZ2/w2ahyZCjmKRe5J8m8wVg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 07:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:4c:13:84:21:17:79:e9:ef:02:df:7b:99:2e:78:04:7a:be:2e:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC39D766063B56E5EA4DBFB2A502298FB995956A Validity Not Before: Jun 2 00:57:38 2025 GMT Not After : Jun 5 07:19:38 2025 GMT Subject: CN=9D0D91DF70C885DB4AE041E7B75A388E234AA42E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:68:aa:dc:49:b3:a6:e2:d5:19:35:59:27:e1: 7f:b0:bf:85:bf:2c:fd:5d:f9:ca:03:d9:fa:e8:05: 86:32:b0:0f:ff:75:1c:51:cb:2b:62:c0:72:30:b9: 8e:5f:b7:bc:4e:74:08:0b:af:61:6d:1a:27:e2:d2: 9a:d1:4d:ee:5d:fc:d7:be:ee:5b:49:e6:d7:1e:55: fe:14:c8:9b:b7:9f:60:2d:52:41:60:b4:fe:8f:f4: 1f:7c:84:ae:d4:af:a9:4a:60:e5:92:00:76:2f:e0: 97:83:0a:1b:08:7a:f9:6f:35:69:2e:38:4c:eb:82: c2:3b:89:01:1d:35:a0:ea:7a:e7:71:2d:74:1e:63: b2:5f:34:4e:25:bb:91:ae:78:89:27:b0:73:8f:96: e3:a1:be:b1:98:56:1b:1f:94:59:e0:3d:ca:35:bb: 2c:f3:68:fc:95:65:e1:17:0e:5e:55:3e:25:ca:3b: e3:89:24:e4:94:b0:e5:7a:b8:75:53:a7:1f:17:bb: 29:94:f4:f0:bb:ea:b8:d5:7c:37:72:ce:bf:c3:a1: 8e:d5:32:c6:ca:20:aa:95:68:1c:bb:ff:7a:a6:c1: 4a:c6:8f:3e:e7:0c:b3:b8:45:79:d2:27:06:d6:e8: 4a:35:2f:93:36:d4:06:e4:bb:7b:af:0a:8d:42:34: 23:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0D:91:DF:70:C8:85:DB:4A:E0:41:E7:B7:5A:38:8E:23:4A:A4:2E X509v3 Authority Key Identifier: keyid:EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:4b:f3:78:b4:ed:1d:7a:c7:57:bb:84:c6:fe:b8:cb:2d:c5: 72:15:97:55:9e:7b:59:5a:17:6f:48:24:a9:ae:21:31:c2:8c: bd:93:7a:93:a0:c0:4e:df:b6:05:13:a5:4c:96:e1:d6:bf:e2: 2d:4e:3e:ab:0d:88:fd:e0:ec:49:24:f4:e5:92:79:14:61:51: 70:6d:58:b7:a3:ea:08:7a:07:7d:a3:77:78:d3:90:51:48:1f: b6:89:9b:91:8a:55:11:7b:e6:e1:30:1f:0a:ab:6c:70:85:cc: b9:ea:7d:19:55:06:c0:94:0f:0e:f3:f1:cb:de:d7:ca:d6:83: 8d:8b:2c:4f:f5:41:8a:f9:82:8d:e3:cf:c0:34:9f:f5:3a:a2: 82:14:95:1b:73:d5:f4:0c:d7:6b:66:59:42:ba:e5:02:0c:39: 33:f3:88:d2:34:f5:d1:91:a6:fb:98:af:e2:e8:46:0e:35:51: 58:33:84:15:ec:56:8d:9f:d3:39:c3:a6:73:7b:bb:25:9c:39: 49:b0:b0:65:5c:3c:9e:25:03:16:1f:4b:64:81:36:d9:e0:0e: 83:88:e4:fc:86:fc:6d:02:42:a5:28:43:dd:4d:65:45:85:6e: 76:a1:fa:a0:35:a0:14:8f:7b:62:f5:bf:16:79:00:2a:cf:28: e0:49:e5:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCUwThCEXeenvAt97mS54BHq+LjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5OEZC OTk1OTU2QTAeFw0yNTA2MDIwMDU3MzhaFw0yNTA2MDUwNzE5MzhaMDMxMTAvBgNV BAMTKDlEMEQ5MURGNzBDODg1REI0QUUwNDFFN0I3NUEzODhFMjM0QUE0MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnaKrcSbOm4tUZNVkn4X+wv4W/ LP1d+coD2froBYYysA//dRxRyytiwHIwuY5ft7xOdAgLr2FtGifi0prRTe5d/Ne+ 7ltJ5tceVf4UyJu3n2AtUkFgtP6P9B98hK7Ur6lKYOWSAHYv4JeDChsIevlvNWku OEzrgsI7iQEdNaDqeudxLXQeY7JfNE4lu5GueIknsHOPluOhvrGYVhsflFngPco1 uyzzaPyVZeEXDl5VPiXKO+OJJOSUsOV6uHVTpx8XuymU9PC76rjVfDdyzr/DoY7V MsbKIKqVaBy7/3qmwUrGjz7nDLO4RXnSJwbW6Eo1L5M21Abku3uvCo1CNCMPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnQ2R33DIhdtK4EHnt1o4jiNKpC4wHwYDVR0j BBgwFoAU7DnXZgY7VuXqTb+ypQIpj7mVlWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2ZlNDI1NS0xZDkxLTRmY2MtYmNlNC04YTQyYWRmZTNjMjkvMC9FQzM5RDc2NjA2 M0I1NkU1RUE0REJGQjJBNTAyMjk4RkI5OTU5NTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5OEZCOTk1 OTU2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNmZTQyNTUtMWQ5MS00ZmNjLWJj ZTQtOGE0MmFkZmUzYzI5LzAvRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5 OEZCOTk1OTU2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5L83i07R16x1e7hMb+uMstxXIVl1Wee1la F29IJKmuITHCjL2TepOgwE7ftgUTpUyW4da/4i1OPqsNiP3g7Ekk9OWSeRRhUXBt WLej6gh6B32jd3jTkFFIH7aJm5GKVRF75uEwHwqrbHCFzLnqfRlVBsCUDw7z8cve 18rWg42LLE/1QYr5go3jz8A0n/U6ooIUlRtz1fQM12tmWUK65QIMOTPziNI09dGR pvuYr+LoRg41UVgzhBXsVo2f0znDpnN7uyWcOUmwsGVcPJ4lAxYfS2SBNtngDoOI 5PyG/G0CQqUoQ91NZUWFbnah+qA1oBSPe2L1vxZ5ACrPKOBJ5bc= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:47 2025 by rpki-client