$ rpki-client -vvf repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft File: E5B2AB049E75667C8F00ECB0EBF617859558571D.mft (raw, json) Hash identifier: nyboXVg/LZNwa5t7ng0JEceoNGo9jeg3BhsopexsmWI= Subject key identifier: 9F:8E:BC:2A:FB:2B:C1:C9:5C:32:96:13:F3:AE:B4:8E:91:35:F5:7F Authority key identifier: E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D Certificate issuer: /CN=E5B2AB049E75667C8F00ECB0EBF617859558571D Certificate serial: 7F0CC3E9CF1C5146C3F3FB6267EF58D67E1D9F85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft Manifest number: E9 Signing time: Wed 12 Mar 2025 13:40:33 +0000 Manifest this update: Wed 12 Mar 2025 13:35:33 +0000 Manifest next update: Sat 15 Mar 2025 22:51:33 +0000 Files and hashes: 1: 3130332e3232342e37372e302f32342d3234203d3e203536323535.roa (hash: MHqEWkxk0lcqHf0DHOOzzwqgpatowmuSY53tgbg1pfo=) 2: 3130332e3232342e37362e302f32342d3234203d3e203536323535.roa (hash: Zqpcy0ugk8HAE+GYWRNcHEByrdTEefMutc7Cf14qofA=) 3: E5B2AB049E75667C8F00ECB0EBF617859558571D.crl (hash: ctCBQ1gp+b9FkolAWONNf1P5f+K2BT46aHPFTAsjkYY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 22:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:0c:c3:e9:cf:1c:51:46:c3:f3:fb:62:67:ef:58:d6:7e:1d:9f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5B2AB049E75667C8F00ECB0EBF617859558571D Validity Not Before: Mar 12 13:35:33 2025 GMT Not After : Mar 15 22:51:33 2025 GMT Subject: CN=9F8EBC2AFB2BC1C95C329613F3AEB48E9135F57F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:76:e8:f7:cc:26:83:00:7d:13:18:76:5e:a1: 0a:be:bb:5e:6b:7d:95:0f:80:40:bf:38:6b:05:b1: dc:4a:ad:d7:a7:54:9c:46:79:4c:2f:77:26:8b:29: 3f:62:55:1f:b1:77:5c:fa:08:bf:94:78:ec:92:33: ae:93:f7:9d:11:04:b5:b9:3d:2e:45:84:ac:14:45: b4:71:a5:60:38:76:f2:aa:bd:7c:8c:5d:c4:66:06: c3:b0:3b:37:51:f8:5d:46:43:cb:3e:06:71:44:22: 3b:f5:32:66:37:1a:5b:96:69:5c:f0:f0:1e:65:ab: b9:6c:14:81:a7:80:3a:3e:b4:55:76:d8:97:61:7d: 5a:ce:b3:52:fd:b1:0e:1e:98:bc:e5:f2:37:fd:94: 3e:cd:19:ed:17:da:a5:a6:cb:2c:35:e2:d2:db:18: 37:83:fe:15:de:b7:28:fd:c3:8b:e4:65:ac:0d:7b: 40:52:23:de:90:2d:14:e8:de:7c:37:c2:a5:63:9f: 39:77:51:28:be:5d:77:d9:26:1e:5d:c9:b4:93:eb: db:a5:54:c9:7a:e3:26:4b:38:37:8b:cb:00:30:ce: 7a:5b:b5:92:83:f9:fb:46:43:b6:f2:6b:91:e0:ff: ff:fc:4b:0e:78:d4:a1:f8:00:89:61:f1:db:3f:7b: ff:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8E:BC:2A:FB:2B:C1:C9:5C:32:96:13:F3:AE:B4:8E:91:35:F5:7F X509v3 Authority Key Identifier: keyid:E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:b5:14:01:58:18:23:a2:8d:77:c1:07:bf:12:14:40:6e:34: 7e:6a:79:0f:c9:c4:44:bc:33:ac:98:2b:47:6a:65:94:1e:0d: 3c:ec:f3:90:ef:70:6e:3e:3b:4b:af:b9:88:5a:91:4c:dc:5e: 6e:c4:10:fa:77:96:9a:ca:6c:fc:76:87:ba:90:80:f4:df:41: 98:71:bf:29:62:12:b2:c4:92:2d:d4:96:3f:16:c5:3e:51:ea: 93:8f:7d:2f:a1:6e:64:5d:09:8d:5c:4d:16:54:c8:07:dd:21: 18:83:c7:cb:9d:89:26:b6:06:ec:44:a4:8d:6d:7b:ce:ef:8b: dc:8d:67:d9:88:7f:21:21:c2:9c:df:21:a9:a6:ea:05:6b:7f: 60:98:70:1d:a4:1f:07:ad:37:33:8f:c8:6e:f5:a5:61:4e:95: e8:a9:9c:60:e1:a6:18:53:96:dc:05:e6:08:6d:ed:9b:05:ad: 75:1c:81:9c:f8:0f:3c:8f:c8:55:02:94:ac:ac:15:d7:7b:e4: 3d:89:ec:b0:81:66:77:d1:ae:0f:4a:f5:cf:b6:f3:d4:b1:e0: ca:0c:97:56:7a:35:f3:bc:23:eb:25:fe:92:d3:7b:94:a5:3e: 66:67:3e:b5:fe:2b:06:8d:85:be:36:74:53:e9:de:35:f3:27: 38:da:f0:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfwzD6c8cUUbD8/tiZ+9Y1n4dn4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3ODU5 NTU4NTcxRDAeFw0yNTAzMTIxMzM1MzNaFw0yNTAzMTUyMjUxMzNaMDMxMTAvBgNV BAMTKDlGOEVCQzJBRkIyQkMxQzk1QzMyOTYxM0YzQUVCNDhFOTEzNUY1N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6duj3zCaDAH0TGHZeoQq+u15r fZUPgEC/OGsFsdxKrdenVJxGeUwvdyaLKT9iVR+xd1z6CL+UeOySM66T950RBLW5 PS5FhKwURbRxpWA4dvKqvXyMXcRmBsOwOzdR+F1GQ8s+BnFEIjv1MmY3GluWaVzw 8B5lq7lsFIGngDo+tFV22JdhfVrOs1L9sQ4emLzl8jf9lD7NGe0X2qWmyyw14tLb GDeD/hXetyj9w4vkZawNe0BSI96QLRTo3nw3wqVjnzl3USi+XXfZJh5dybST69ul VMl64yZLODeLywAwznpbtZKD+ftGQ7bya5Hg///8Sw541KH4AIlh8ds/e//RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn468KvsrwclcMpYT8660jpE19X8wHwYDVR0j BBgwFoAU5bKrBJ51ZnyPAOyw6/YXhZVYVx0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjI2YjNlMS1kN2Y2LTQ2NWUtODMwMi03ZDUyZjVjMzQwZmYvMC9FNUIyQUIwNDlF NzU2NjdDOEYwMEVDQjBFQkY2MTc4NTk1NTg1NzFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3ODU5NTU4 NTcxRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIyNmIzZTEtZDdmNi00NjVlLTgz MDItN2Q1MmY1YzM0MGZmLzAvRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3 ODU5NTU4NTcxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFG1FAFYGCOijXfBB78SFEBuNH5qeQ/JxES8 M6yYK0dqZZQeDTzs85DvcG4+O0uvuYhakUzcXm7EEPp3lprKbPx2h7qQgPTfQZhx vyliErLEki3Ulj8WxT5R6pOPfS+hbmRdCY1cTRZUyAfdIRiDx8udiSa2BuxEpI1t e87vi9yNZ9mIfyEhwpzfIamm6gVrf2CYcB2kHwetNzOPyG71pWFOleipnGDhphhT ltwF5ght7ZsFrXUcgZz4DzyPyFUClKysFdd75D2J7LCBZnfRrg9K9c+289Sx4MoM l1Z6NfO8I+sl/pLTe5SlPmZnPrX+KwaNhb42dFPp3jXzJzja8CM= -----END CERTIFICATE-----Generated at Thu Mar 13 21:30:45 2025 by rpki-client