$ rpki-client -vvf repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft File: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft (raw, json) Hash identifier: FTGRSrwZLKwz1cKeqV95muQnIkqnDvqExUZBgc7Vlo8= Subject key identifier: A3:9B:C8:57:90:2B:5B:97:5A:1A:D2:FB:6F:D7:43:F9:CD:2D:7B:B7 Authority key identifier: E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70 Certificate issuer: /CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70 Certificate serial: 0232CC37B1414ECF36B3CE999FE753A9C1975615 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft Manifest number: 01FE Signing time: Wed 04 Jun 2025 06:31:26 +0000 Manifest this update: Wed 04 Jun 2025 06:26:26 +0000 Manifest next update: Sat 07 Jun 2025 11:36:26 +0000 Files and hashes: 1: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl (hash: JrihTZYBOzoyDprrMnumEG0wutHLONGauAc0Rtq12Io=) 2: 3130332e3138362e302e302f32332d3234203d3e20313336303532.roa (hash: YlWhhG5+SXJ+RtEZrRBNLk9BnFzp5Av7c11ptEycGe4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 11:36:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:32:cc:37:b1:41:4e:cf:36:b3:ce:99:9f:e7:53:a9:c1:97:56:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70 Validity Not Before: Jun 4 06:26:26 2025 GMT Not After : Jun 7 11:36:26 2025 GMT Subject: CN=A39BC857902B5B975A1AD2FB6FD743F9CD2D7BB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c4:b6:4f:93:b0:7f:b6:14:84:db:ae:78:73: 4d:6a:55:a8:3d:fe:e4:92:56:fd:4f:fc:13:5a:a7: 47:e0:a3:db:eb:d7:26:9f:4a:79:91:69:45:b5:0c: f7:f2:bd:a8:a6:5c:1a:62:10:a2:98:63:96:c9:b1: fd:59:d0:f5:81:cd:f1:80:34:80:ad:57:48:26:23: 32:2f:58:dd:1a:57:ba:b7:df:3d:18:57:ed:d1:11: f5:cd:c0:00:93:e0:54:12:04:25:ab:6a:01:d8:ec: 3c:e3:c5:7a:51:88:bd:00:29:21:d2:17:8e:2e:4b: df:bd:76:cc:7f:97:fd:60:60:4e:24:de:33:b0:d6: b6:24:6a:1c:7d:7d:fa:99:d3:1e:ca:f9:bd:09:af: d0:eb:83:bf:e4:5a:de:1b:1b:e8:a3:3f:49:ff:48: dd:ec:d9:c6:dc:5f:5d:0d:79:05:9b:ee:a8:87:a8: f7:60:63:5d:fe:1b:07:f5:b5:57:ab:dd:dc:6b:16: 59:ec:b8:5b:f0:57:44:80:3e:f6:49:8c:7c:c0:a8: 46:62:ef:85:f9:f0:2a:42:72:51:c7:c0:90:4c:db: 5f:a8:2a:dd:52:47:4a:9f:82:f6:6c:9f:df:16:a3: 68:ec:0f:01:1a:89:7e:d1:d8:94:9c:8f:c2:1e:e1: aa:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9B:C8:57:90:2B:5B:97:5A:1A:D2:FB:6F:D7:43:F9:CD:2D:7B:B7 X509v3 Authority Key Identifier: keyid:E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:23:0c:c8:10:a7:b5:00:ab:9f:e2:2d:6f:0e:0a:d7:13:9d: f6:2a:f8:aa:00:46:7f:d0:6e:03:36:69:d3:27:49:d2:45:a7: 17:16:17:0a:c5:c3:5b:e0:b8:99:f7:8e:ab:fd:dc:14:a7:67: ab:50:57:8b:b1:a2:c5:84:22:81:c7:91:b3:1b:de:86:71:46: ff:77:af:fa:00:30:99:34:6b:63:88:c7:3c:6b:94:37:f7:10: 06:5a:6c:11:ec:38:18:4c:49:2b:87:db:84:2c:44:17:f7:03: 53:f9:14:21:3c:c2:fd:48:11:fe:34:8f:bf:b6:8c:3f:ef:d2: 4d:c5:88:7d:ea:53:a3:2c:e5:43:d5:be:c3:af:93:50:c3:1a: 4c:89:2d:3e:54:c3:be:3d:b9:11:02:f1:4f:90:3a:0e:fc:62: a6:77:cf:f0:3a:1d:41:0a:09:24:38:23:76:0a:13:7a:47:e8: 16:20:18:f7:8d:fa:44:4f:a3:f5:76:63:87:03:f0:9b:ef:7b: 43:da:7c:33:7c:78:10:c7:1b:85:da:96:bb:a0:c7:07:6f:53: 0d:3d:55:6b:53:b4:74:99:12:f7:57:18:c3:d6:96:70:34:ad: 3d:f5:a6:02:1a:e6:af:af:c5:53:45:b1:0b:aa:2a:5a:f8:9f: 57:fb:81:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAjLMN7FBTs82s86Zn+dTqcGXVhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0Ex QURBNUQ3MDAeFw0yNTA2MDQwNjI2MjZaFw0yNTA2MDcxMTM2MjZaMDMxMTAvBgNV BAMTKEEzOUJDODU3OTAyQjVCOTc1QTFBRDJGQjZGRDc0M0Y5Q0QyRDdCQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoxLZPk7B/thSE2654c01qVag9 /uSSVv1P/BNap0fgo9vr1yafSnmRaUW1DPfyvaimXBpiEKKYY5bJsf1Z0PWBzfGA NICtV0gmIzIvWN0aV7q33z0YV+3REfXNwACT4FQSBCWragHY7DzjxXpRiL0AKSHS F44uS9+9dsx/l/1gYE4k3jOw1rYkahx9ffqZ0x7K+b0Jr9Drg7/kWt4bG+ijP0n/ SN3s2cbcX10NeQWb7qiHqPdgY13+Gwf1tVer3dxrFlnsuFvwV0SAPvZJjHzAqEZi 74X58CpCclHHwJBM21+oKt1SR0qfgvZsn98Wo2jsDwEaiX7R2JScj8Ie4aqlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo5vIV5ArW5daGtL7b9dD+c0te7cwHwYDVR0j BBgwFoAU4JZ1Se8y2J6f8WOPzxg0ehraXXAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzdhNmRkOC1hODQzLTQ2OTgtYTVmMy0zZWVjNDY4ZDE0YTQvMC9FMDk2NzU0OUVG MzJEODlFOUZGMTYzOEZDRjE4MzQ3QTFBREE1RDcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0ExQURB NUQ3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM3YTZkZDgtYTg0My00Njk4LWE1 ZjMtM2VlYzQ2OGQxNGE0LzAvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0 N0ExQURBNUQ3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEjDMgQp7UAq5/iLW8OCtcTnfYq+KoARn/Q bgM2adMnSdJFpxcWFwrFw1vguJn3jqv93BSnZ6tQV4uxosWEIoHHkbMb3oZxRv93 r/oAMJk0a2OIxzxrlDf3EAZabBHsOBhMSSuH24QsRBf3A1P5FCE8wv1IEf40j7+2 jD/v0k3FiH3qU6Ms5UPVvsOvk1DDGkyJLT5Uw749uREC8U+QOg78YqZ3z/A6HUEK CSQ4I3YKE3pH6BYgGPeN+kRPo/V2Y4cD8Jvve0PafDN8eBDHG4XalrugxwdvUw09 VWtTtHSZEvdXGMPWlnA0rT31pgIa5q+vxVNFsQuqKlr4n1f7gTw= -----END CERTIFICATE-----Generated at Thu Jun 5 18:20:08 2025 by rpki-client