$ rpki-client -vvf repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft File: 0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft (raw, json) Hash identifier: 7D5y2W1xZEKzC6OYvn9HOh5Uy6uM8yEFoqrpgloFVa4= Subject key identifier: 10:C9:2A:67:AF:2F:8C:56:60:C9:54:A2:02:C1:3B:74:51:8E:02:26 Authority key identifier: 0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E Certificate issuer: /CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E Certificate serial: 41716A74DA483BF5C3D112B77A08BC5256E1C518 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft Manifest number: 0159 Signing time: Sat 05 Apr 2025 21:00:58 +0000 Manifest this update: Sat 05 Apr 2025 20:55:58 +0000 Manifest next update: Wed 09 Apr 2025 06:03:58 +0000 Files and hashes: 1: 0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl (hash: 6Pg+4a9mMLiB3sRnHkim9iVh2GrhMnCORkLom0Y8aZY=) 2: 3130332e342e38302e302f32342d3234203d3e20313530323034.roa (hash: uICRVqRri8R1EgyBPUsLQp4TscukJjiepoiJFR6/Ibc=) 3: 3130332e342e38312e302f32342d3234203d3e20313530323034.roa (hash: IgBk8nUZZ29ZSChbWhRLqEMkR6u+A1fqdcf9ejFY80Y=) 4: 3130332e342e38302e302f32332d3233203d3e20313530323034.roa (hash: AgLvlSE1smWWR/jE1YysJDc3mDL4n9sETXp5KZ0HtjU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:71:6a:74:da:48:3b:f5:c3:d1:12:b7:7a:08:bc:52:56:e1:c5:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E Validity Not Before: Apr 5 20:55:58 2025 GMT Not After : Apr 9 06:03:58 2025 GMT Subject: CN=10C92A67AF2F8C5660C954A202C13B74518E0226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:06:3b:fa:6d:f3:ee:8b:69:0e:73:ab:5c:e2: 8c:31:bc:c8:59:c1:6e:6f:3b:cf:22:cb:e0:19:81: 3c:77:84:64:59:c2:9d:89:f4:d5:65:af:1b:43:e1: a3:bd:fb:c1:36:1b:f5:e4:47:19:e3:b0:72:88:ba: ef:c3:6a:41:36:97:d6:7a:3e:ec:ca:4a:1d:e1:1a: 48:d3:b3:8f:0a:72:d8:b6:58:24:7f:6f:dc:7a:2e: 4d:25:ba:2b:99:78:f3:df:25:4e:3e:e2:3e:e3:2e: 45:97:07:98:27:fe:c6:1f:a0:3a:0f:8d:e5:d0:af: b9:44:a4:ee:74:37:37:70:6a:b7:a7:dc:03:f8:d1: 17:55:6c:63:ed:c0:c8:e1:3a:68:d5:d3:45:6f:00: 0a:7e:0e:2e:53:09:59:3e:13:d3:a1:ce:6b:a8:31: 90:bf:dc:5e:03:90:40:fe:e0:ed:b3:51:72:4b:58: 33:bd:b8:a2:84:2e:df:56:c8:89:48:9d:f9:06:b9: 7d:ff:a1:2b:92:0c:c6:80:7c:8f:0c:55:ac:50:c5: f3:e9:a3:ca:2f:a1:1c:63:6e:3d:a6:78:a1:fa:d2: ad:21:aa:26:7e:22:54:f9:05:fc:54:a7:54:ab:87: fc:11:60:f6:1c:ed:0f:f8:4f:98:88:8b:26:6b:2a: 26:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C9:2A:67:AF:2F:8C:56:60:C9:54:A2:02:C1:3B:74:51:8E:02:26 X509v3 Authority Key Identifier: keyid:0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:40:c7:5e:79:00:87:5e:fc:0f:fa:63:b4:fa:3d:5d:65:ae: 2c:df:57:86:5b:87:1c:cd:a9:e8:02:f3:e8:7e:cf:09:50:f3: 40:40:91:94:cf:00:70:23:af:6b:2d:6d:68:d0:fc:6b:c3:06: 92:24:21:34:f4:d0:be:98:00:16:df:ed:35:93:16:29:ee:d6: c3:48:6f:57:f5:4e:07:fc:af:74:d5:2b:44:51:76:33:e2:a5: 77:22:33:e1:b5:53:2d:1c:3b:b2:f6:da:18:cc:ea:6d:69:f7: b2:6d:a1:bc:e1:c4:10:b3:bb:d0:9a:73:c1:64:71:f6:05:27: 46:6b:9e:c6:7d:9d:60:d1:9f:c7:a3:23:03:d4:ff:9c:eb:fc: 0e:47:52:f3:b8:a2:b4:64:bd:9c:b4:d1:cb:57:72:ab:d5:b3: 77:8c:cf:2e:c4:47:64:31:1c:32:98:05:a8:8a:ec:b1:0a:77: 0e:32:64:3c:74:8d:3f:cc:7f:e7:1b:0c:61:a9:c7:0e:ff:6d: fc:21:0c:2a:cb:be:dd:26:98:93:46:d9:b9:a1:5c:ee:66:b8: c6:b9:9b:76:c0:30:db:36:23:e8:6f:99:14:27:2c:ee:11:66: d8:b8:f7:88:04:8d:fd:9a:96:00:83:e5:54:65:8d:56:0f:9a: 31:6d:39:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQXFqdNpIO/XD0RK3egi8UlbhxRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRGOTJG QTAwMUE0RTAeFw0yNTA0MDUyMDU1NThaFw0yNTA0MDkwNjAzNThaMDMxMTAvBgNV BAMTKDEwQzkyQTY3QUYyRjhDNTY2MEM5NTRBMjAyQzEzQjc0NTE4RTAyMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Bjv6bfPui2kOc6tc4owxvMhZ wW5vO88iy+AZgTx3hGRZwp2J9NVlrxtD4aO9+8E2G/XkRxnjsHKIuu/DakE2l9Z6 PuzKSh3hGkjTs48Kcti2WCR/b9x6Lk0luiuZePPfJU4+4j7jLkWXB5gn/sYfoDoP jeXQr7lEpO50Nzdwaren3AP40RdVbGPtwMjhOmjV00VvAAp+Di5TCVk+E9Ohzmuo MZC/3F4DkED+4O2zUXJLWDO9uKKELt9WyIlInfkGuX3/oSuSDMaAfI8MVaxQxfPp o8ovoRxjbj2meKH60q0hqiZ+IlT5BfxUp1Srh/wRYPYc7Q/4T5iIiyZrKiaNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEMkqZ68vjFZgyVSiAsE7dFGOAiYwHwYDVR0j BBgwFoAUDi56nPEcaS7I5W8DUnvfkvoAGk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDE5NTg5YS1kNTI1LTQwZmMtODk0YS0xMmU0NDAxMGUzZTQvMC8wRTJFN0E5Q0Yx MUM2OTJFQzhFNTZGMDM1MjdCREY5MkZBMDAxQTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRGOTJGQTAw MUE0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAxOTU4OWEtZDUyNS00MGZjLTg5 NGEtMTJlNDQwMTBlM2U0LzAvMEUyRTdBOUNGMTFDNjkyRUM4RTU2RjAzNTI3QkRG OTJGQTAwMUE0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlAx155AIde/A/6Y7T6PV1lrizfV4ZbhxzN qegC8+h+zwlQ80BAkZTPAHAjr2stbWjQ/GvDBpIkITT00L6YABbf7TWTFinu1sNI b1f1Tgf8r3TVK0RRdjPipXciM+G1Uy0cO7L22hjM6m1p97JtobzhxBCzu9Cac8Fk cfYFJ0ZrnsZ9nWDRn8ejIwPU/5zr/A5HUvO4orRkvZy00ctXcqvVs3eMzy7ER2Qx HDKYBaiK7LEKdw4yZDx0jT/Mf+cbDGGpxw7/bfwhDCrLvt0mmJNG2bmhXO5muMa5 m3bAMNs2I+hvmRQnLO4RZti494gEjf2algCD5VRljVYPmjFtOTE= -----END CERTIFICATE-----Generated at Sun Apr 6 00:25:47 2025 by rpki-client