$ rpki-client -vvf repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft File: 04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft (raw, json) Hash identifier: yLmxoAIZV1KYe+TbsnYUj6Q/NIqPZJ/yOTXY6c0Byzo= Subject key identifier: D9:94:0A:93:73:A1:71:D5:14:14:3B:B7:F7:7D:EF:3D:2F:92:80:33 Authority key identifier: 04:EE:3B:C3:69:17:32:E0:69:DF:0D:9D:29:DE:36:06:11:CC:F0:DB Certificate issuer: /CN=04EE3BC3691732E069DF0D9D29DE360611CCF0DB Certificate serial: 1343F21DF3A3F58713D5B3CD51EFA01F61387384 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft Manifest number: 0196 Signing time: Tue 08 Apr 2025 07:21:40 +0000 Manifest this update: Tue 08 Apr 2025 07:16:40 +0000 Manifest next update: Fri 11 Apr 2025 10:08:40 +0000 Files and hashes: 1: 3130332e38382e39302e302f32332d3234203d3e20313530323232.roa (hash: mgCVjomXQMnFAcUzEYIqhnBEpG3Ap0N94FFecN/bKB0=) 2: 04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl (hash: SyC5v7MK5muaCE10qeGZ6Wc+BYWp/jIWOnxufDNmp9M=) 3: 3130332e38382e39312e302f32342d3234203d3e20313530323232.roa (hash: Ey+hAeMC3FZdl/vgDwtSv8s2kkOb2B/dnDhrf0lue/o=) 4: 3130332e38382e39302e302f32342d3234203d3e20313530323232.roa (hash: MYQMONKpGPj3bOstGyVvXnBKB1cjxaxprR+RC7x3cvc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 10:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:43:f2:1d:f3:a3:f5:87:13:d5:b3:cd:51:ef:a0:1f:61:38:73:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04EE3BC3691732E069DF0D9D29DE360611CCF0DB Validity Not Before: Apr 8 07:16:40 2025 GMT Not After : Apr 11 10:08:40 2025 GMT Subject: CN=D9940A9373A171D514143BB7F77DEF3D2F928033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6f:71:77:27:db:49:f1:66:9e:0d:84:97:1b: 11:23:14:7f:3a:97:6c:5b:78:bd:9c:1e:81:28:8a: 2d:7b:c5:6d:f4:6a:1e:5a:21:ed:dd:27:09:e5:9d: d8:e9:d8:a9:a7:8c:1b:80:bf:4c:ac:3e:ee:65:fe: 09:42:28:fd:54:e2:32:d2:e0:6b:1c:ae:04:20:e4: 57:c9:f0:89:5d:b6:46:35:92:da:d1:50:86:ca:8d: 57:ea:ce:6f:c7:fb:54:44:4a:74:9d:85:c1:8c:f6: b3:2b:b9:7f:26:95:3c:90:10:67:47:1c:c6:5d:12: 6a:f3:03:25:06:29:f7:81:8b:fa:5c:bd:6e:54:b8: 63:e5:df:5d:b6:20:10:5b:34:62:e1:61:15:ca:05: 65:c7:4d:07:33:0c:8e:f1:cf:90:00:17:f1:07:b3: fd:4f:20:d5:7b:9e:cb:e3:00:b9:a4:c0:24:ba:37: 1e:3a:41:bf:49:6d:3f:1e:a0:03:99:b6:ae:45:96: bd:e9:5d:8f:1d:b2:69:5d:45:84:23:e6:66:9a:3a: 86:75:83:7e:18:86:8f:81:71:c3:16:64:00:f1:07: 74:56:fc:15:dc:df:aa:80:77:46:36:41:e2:88:9b: c4:f8:3f:1d:11:78:74:09:1a:c5:ac:2e:96:bf:a2: bf:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:94:0A:93:73:A1:71:D5:14:14:3B:B7:F7:7D:EF:3D:2F:92:80:33 X509v3 Authority Key Identifier: keyid:04:EE:3B:C3:69:17:32:E0:69:DF:0D:9D:29:DE:36:06:11:CC:F0:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:66:3b:66:1b:65:80:71:f2:16:fc:98:ba:f8:6c:7e:2b:43: 03:be:70:d0:87:da:37:d8:84:d3:32:7e:29:4c:f8:bf:84:be: f1:29:d4:40:8f:bd:fc:e5:1b:5b:72:5d:bb:88:d3:4d:6f:bf: 15:99:9c:13:b9:75:8d:f0:41:d9:e9:8e:2d:e5:d9:a4:db:cd: 7a:f8:c4:77:44:47:c0:61:9c:d1:2c:e5:27:94:17:9c:3c:fc: 91:e5:bf:10:4a:ba:77:f4:94:b3:ff:d6:38:20:27:5e:ce:57: cb:07:01:8d:43:a4:c1:17:ca:f9:00:fc:82:1d:68:80:52:8f: cf:c7:c0:f8:93:e9:f2:1a:65:36:ea:01:c0:f3:bf:de:34:4a: 83:c3:7e:0a:18:62:e8:6a:95:89:0f:f6:22:b1:8e:86:87:e1: 2b:79:91:d9:00:51:47:6e:35:72:f0:a5:71:cb:63:b6:92:fd: 96:62:46:d9:02:d5:88:6c:ad:1f:1e:9a:77:85:8f:4f:b5:89: ea:1d:e3:54:62:8d:af:13:18:cf:11:32:56:8f:89:23:a2:86: e4:f8:fe:bd:19:6a:d6:41:43:ac:b3:68:ba:6e:6e:af:c7:83: fe:73:49:5b:f9:57:e7:56:02:40:df:78:24:0c:c1:72:7a:58: 03:62:4a:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE0PyHfOj9YcT1bPNUe+gH2E4c4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2MDYx MUNDRjBEQjAeFw0yNTA0MDgwNzE2NDBaFw0yNTA0MTExMDA4NDBaMDMxMTAvBgNV BAMTKEQ5OTQwQTkzNzNBMTcxRDUxNDE0M0JCN0Y3N0RFRjNEMkY5MjgwMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdb3F3J9tJ8WaeDYSXGxEjFH86 l2xbeL2cHoEoii17xW30ah5aIe3dJwnlndjp2KmnjBuAv0ysPu5l/glCKP1U4jLS 4GscrgQg5FfJ8IldtkY1ktrRUIbKjVfqzm/H+1RESnSdhcGM9rMruX8mlTyQEGdH HMZdEmrzAyUGKfeBi/pcvW5UuGPl3122IBBbNGLhYRXKBWXHTQczDI7xz5AAF/EH s/1PINV7nsvjALmkwCS6Nx46Qb9JbT8eoAOZtq5Flr3pXY8dsmldRYQj5maaOoZ1 g34Yho+BccMWZADxB3RW/BXc36qAd0Y2QeKIm8T4Px0ReHQJGsWsLpa/or9FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2ZQKk3OhcdUUFDu3933vPS+SgDMwHwYDVR0j BBgwFoAUBO47w2kXMuBp3w2dKd42BhHM8NswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTkxODA5ZS1kZDQ5LTRjNTItYjExZi0yYTUxOGMzYWE4NTYvMC8wNEVFM0JDMzY5 MTczMkUwNjlERjBEOUQyOURFMzYwNjExQ0NGMERCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2MDYxMUND RjBEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5MTgwOWUtZGQ0OS00YzUyLWIx MWYtMmE1MThjM2FhODU2LzAvMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2 MDYxMUNDRjBEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtmO2YbZYBx8hb8mLr4bH4rQwO+cNCH2jfY hNMyfilM+L+EvvEp1ECPvfzlG1tyXbuI001vvxWZnBO5dY3wQdnpji3l2aTbzXr4 xHdER8BhnNEs5SeUF5w8/JHlvxBKunf0lLP/1jggJ17OV8sHAY1DpMEXyvkA/IId aIBSj8/HwPiT6fIaZTbqAcDzv940SoPDfgoYYuhqlYkP9iKxjoaH4St5kdkAUUdu NXLwpXHLY7aS/ZZiRtkC1YhsrR8emneFj0+1ieod41Rija8TGM8RMlaPiSOihuT4 /r0ZatZBQ6yzaLpubq/Hg/5zSVv5V+dWAkDfeCQMwXJ6WANiSiY= -----END CERTIFICATE-----Generated at Tue Apr 8 18:13:55 2025 by rpki-client