$ rpki-client -vvf repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft File: E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft (raw, json) Hash identifier: LXqTz5UgQN6tu7A+UgtG5t9G/c8kt43yeUtuDRpLY/s= Subject key identifier: 34:E3:36:D3:1B:CE:BD:C6:D2:AC:7C:99:18:35:68:F5:17:51:5D:D1 Authority key identifier: E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12 Certificate issuer: /CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12 Certificate serial: 7D037F507B5D1285D41B353DF24833619678759F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft Manifest number: 0131 Signing time: Sat 15 Feb 2025 01:10:49 +0000 Manifest this update: Sat 15 Feb 2025 01:05:49 +0000 Manifest next update: Tue 18 Feb 2025 09:32:49 +0000 Files and hashes: 1: E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl (hash: MORdM6EErHyBBMxG9E+JGPW6pRq3XhnyulmAHZRV//A=) 2: 3130332e3131302e33342e302f32342d3234203d3e203438343635.roa (hash: hpDDjXhf9eocrb2aWJ0rrzVtERGsFI/jmmAXSbOPclw=) 3: 3130332e3131302e33342e302f32342d3234203d3e20313530393336.roa (hash: CzAMVi4LI/hA4dEq+gFLf1t2OAe5Bjc5LnZkwOWw6KQ=) 4: 3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa (hash: 1IkODvXidoD/gpowm8RlZSrde5VBfqIBySUSOGikSnc=) 5: 3130332e3131302e33352e302f32342d3234203d3e20313530393336.roa (hash: uQLjUBISMtz6q/VlBRFK79+EJlW80V1U4JVUQySqyvM=) 6: 3130332e3131302e33352e302f32342d3234203d3e203438343635.roa (hash: DzNgbtb37FHgf8PUTDgM1fK08dGiOXOjHj1Mn5GUPVY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Feb 2025 09:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:03:7f:50:7b:5d:12:85:d4:1b:35:3d:f2:48:33:61:96:78:75:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12 Validity Not Before: Feb 15 01:05:49 2025 GMT Not After : Feb 18 09:32:49 2025 GMT Subject: CN=34E336D31BCEBDC6D2AC7C99183568F517515DD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1c:07:10:af:48:ef:81:7b:c9:56:d8:d5:a7: 9d:1d:0c:2d:50:c6:5e:09:89:a3:50:f6:7d:00:b9: b5:4f:76:7d:d1:e3:a7:b9:83:05:c1:ae:3b:e7:d3: da:e4:f2:34:32:47:49:fe:b1:5d:8b:16:69:f9:6e: f1:1a:de:29:a5:c7:a6:05:36:55:14:d5:cb:ae:dc: 55:0d:e2:bf:96:ab:74:a7:de:7f:f2:e0:3d:91:a2: 96:03:44:1b:17:da:e9:be:be:87:20:9e:76:51:9a: 75:5c:49:63:68:a7:d2:2b:91:1e:5b:26:85:ef:97: 6b:d7:21:9e:03:d7:6c:23:7a:43:a2:7b:87:7e:ee: 03:01:a3:22:2d:86:9a:6a:24:da:9b:05:79:fb:72: 19:7f:5c:97:0b:e9:6a:9d:1e:23:3c:af:dd:6e:b8: df:d8:22:f4:9a:10:b0:b9:90:88:80:ec:19:04:23: 11:11:2a:e1:b0:e2:c0:cd:41:93:75:d7:9f:2f:8e: 8b:ee:68:30:18:c7:c7:d8:e7:17:56:ba:7f:03:2f: 4f:5c:fe:7a:19:31:e3:76:37:73:79:bd:98:58:e8: 2a:ec:26:db:5d:ce:41:f5:2d:ee:97:d3:2c:0a:51: 7c:5a:14:46:b0:61:b6:2d:28:92:6e:cf:f0:0d:9d: 44:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E3:36:D3:1B:CE:BD:C6:D2:AC:7C:99:18:35:68:F5:17:51:5D:D1 X509v3 Authority Key Identifier: keyid:E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:1e:f3:8b:07:fa:09:7c:7d:62:4f:f6:3c:d9:d9:a6:4a:a0: 75:e8:8c:fe:7b:94:a9:1f:1c:98:b9:1b:80:6c:2d:1e:07:b9: 43:92:f8:22:53:1d:31:76:4a:58:bb:7c:39:06:ef:33:f2:b7: a3:63:81:62:f8:c2:3e:df:36:ea:a2:5a:c7:6b:c4:24:34:2f: a4:23:5e:15:9a:a6:c6:09:6b:eb:73:26:14:1b:16:a5:88:ef: 1e:fc:a6:e3:68:fe:4e:cf:01:df:6e:68:88:3b:5a:7c:9e:82: 26:45:23:48:2e:1f:24:d4:96:78:0d:fd:d5:de:46:90:c1:a6: 5b:29:24:ec:8f:1e:7e:aa:c2:de:d0:a4:de:72:75:ec:3b:04: 92:e3:c7:65:17:66:5b:38:0b:58:8a:36:cb:81:11:9f:2f:e6: 27:c2:25:26:f8:a3:6c:81:8d:0d:3f:b6:55:92:13:e8:39:7f: ac:66:f6:89:a8:10:ba:61:77:ac:7c:da:43:f5:28:d1:b2:32: 66:97:82:f2:13:76:47:6f:1d:4a:37:bf:bd:7a:8e:c5:31:23: f7:44:74:ac:97:82:94:06:24:a9:2a:c7:f7:e1:37:d2:9c:80: fe:ee:4c:4b:1b:40:7e:a0:e8:65:f4:fa:be:ed:d8:36:9d:5a: f8:6d:64:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfQN/UHtdEoXUGzU98kgzYZZ4dZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFGN0U3MzlENUU5MkNFRkFBRjhEQjRGREUyNEI0MDJE RjJGNUYxMjAeFw0yNTAyMTUwMTA1NDlaFw0yNTAyMTgwOTMyNDlaMDMxMTAvBgNV BAMTKDM0RTMzNkQzMUJDRUJEQzZEMkFDN0M5OTE4MzU2OEY1MTc1MTVERDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPHAcQr0jvgXvJVtjVp50dDC1Q xl4JiaNQ9n0AubVPdn3R46e5gwXBrjvn09rk8jQyR0n+sV2LFmn5bvEa3imlx6YF NlUU1cuu3FUN4r+Wq3Sn3n/y4D2RopYDRBsX2um+vocgnnZRmnVcSWNop9IrkR5b JoXvl2vXIZ4D12wjekOie4d+7gMBoyIthppqJNqbBXn7chl/XJcL6WqdHiM8r91u uN/YIvSaELC5kIiA7BkEIxERKuGw4sDNQZN1158vjovuaDAYx8fY5xdWun8DL09c /noZMeN2N3N5vZhY6CrsJttdzkH1Le6X0ywKUXxaFEawYbYtKJJuz/ANnURPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNOM20xvOvcbSrHyZGDVo9RdRXdEwHwYDVR0j BBgwFoAU4ffnOdXpLO+q+NtP3iS0At8vXxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NGJmMDdjZi01MGE5LTQyOGEtOTBkMi1kNDRkNmI3NjJiNTUvMC9FMUY3RTczOUQ1 RTkyQ0VGQUFGOERCNEZERTI0QjQwMkRGMkY1RjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFGN0U3MzlENUU5MkNFRkFBRjhEQjRGREUyNEI0MDJERjJG NUYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzRiZjA3Y2YtNTBhOS00MjhhLTkw ZDItZDQ0ZDZiNzYyYjU1LzAvRTFGN0U3MzlENUU5MkNFRkFBRjhEQjRGREUyNEI0 MDJERjJGNUYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACEe84sH+gl8fWJP9jzZ2aZKoHXojP57lKkf HJi5G4BsLR4HuUOS+CJTHTF2Sli7fDkG7zPyt6NjgWL4wj7fNuqiWsdrxCQ0L6Qj XhWapsYJa+tzJhQbFqWI7x78puNo/k7PAd9uaIg7WnyegiZFI0guHyTUlngN/dXe RpDBplspJOyPHn6qwt7QpN5ydew7BJLjx2UXZls4C1iKNsuBEZ8v5ifCJSb4o2yB jQ0/tlWSE+g5f6xm9omoELphd6x82kP1KNGyMmaXgvITdkdvHUo3v716jsUxI/dE dKyXgpQGJKkqx/fhN9KcgP7uTEsbQH6g6GX0+r7t2DadWvhtZLY= -----END CERTIFICATE-----Generated at Sun Feb 16 22:09:31 2025 by rpki-client