$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft File: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft (raw, json) Hash identifier: waV7/Mg9cx/ZvdXwwL0reNDo1X74+naeKHxBQEsxc48= Subject key identifier: 28:ED:4D:A2:2D:39:6F:3A:76:B4:88:F6:C7:55:C7:67:FA:5F:9F:93 Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 Certificate issuer: /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Certificate serial: 0FE78ADA955017904ADF49DBFB05776A9AF7403D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft Manifest number: 04D7 Signing time: Mon 02 Jun 2025 02:03:29 +0000 Manifest this update: Mon 02 Jun 2025 01:58:29 +0000 Manifest next update: Thu 05 Jun 2025 12:56:29 +0000 Files and hashes: 1: 3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa (hash: gA/G4KU0S654m0JbYV6SpYNvybqVwcWtbGvUC8YnGdc=) 2: 3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa (hash: 8GAdTJuNR1Zetl+ziDhBJwBFLCcefBc1zOZpq/utdAc=) 3: 3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa (hash: t1GlQPTqCX0tSN2oGwnozLwYbWtyVQRe58xqkUEfAuQ=) 4: 3130332e3133302e36332e302f32342d3234203d3e20313338303739.roa (hash: BTJyyClQJ2ooNN9EN9agUZZ+ml+xViKf+qFHMjyGIK0=) 5: 3130332e3133302e36302e302f32322d3232203d3e20313338303739.roa (hash: dr1CQsFDr+grBIANLd3KqKBw7/lJxKh8r7O2jOMsoyE=) 6: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl (hash: qHjSdiNCYcgrBLlllVB3ibHH7EBSJtwIRoLsWfRkPms=) 7: 3130332e3133302e36312e302f32342d3234203d3e20313338303739.roa (hash: VmKn4H92OZlUtnRAAPlH3DAWvPgKEL7aXZz1kY1YrQ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 12:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e7:8a:da:95:50:17:90:4a:df:49:db:fb:05:77:6a:9a:f7:40:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Validity Not Before: Jun 2 01:58:29 2025 GMT Not After : Jun 5 12:56:29 2025 GMT Subject: CN=28ED4DA22D396F3A76B488F6C755C767FA5F9F93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b1:55:00:7f:fa:e4:ef:e5:94:fb:01:a8:29: 20:ce:d1:dc:06:ef:3e:b1:5a:6b:dc:df:73:11:7d: f0:e7:86:6d:e7:a8:15:f9:dd:b8:5f:13:14:58:1f: 0e:3e:69:b0:ce:dd:ec:2f:62:bb:ee:03:f2:f7:13: 33:fa:2d:81:33:e7:bf:1b:17:df:e2:f6:f7:44:e6: 70:ef:93:eb:47:27:0a:e0:c0:ff:ff:16:e2:94:c6: 18:b7:73:25:16:9d:20:e8:2d:42:8d:7f:df:ea:3b: 6f:69:ab:ec:92:b3:d5:a0:dd:0e:94:31:a9:e1:c5: 79:4b:c9:e0:18:11:d3:00:8e:de:27:45:8b:92:2a: 7f:09:6b:a0:15:10:01:91:93:bc:a4:49:8e:0f:69: a9:5c:93:08:1a:74:2f:e3:e4:92:fd:84:f3:e4:f3: 6b:94:e7:39:43:43:28:c4:0c:df:17:d0:04:65:e5: 52:ae:0e:23:ab:ca:3d:b0:2b:68:75:89:50:74:ac: 0f:8a:c3:32:18:29:ed:5a:51:1c:f1:13:ef:d6:16: d6:55:42:ef:23:94:ef:fd:7f:5b:1c:87:e6:4c:02: 15:ce:1b:e8:59:4a:df:c7:2d:44:96:ed:17:87:a1: 8f:43:77:e7:fa:45:bc:61:42:20:dc:ce:7e:63:45: 9a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:ED:4D:A2:2D:39:6F:3A:76:B4:88:F6:C7:55:C7:67:FA:5F:9F:93 X509v3 Authority Key Identifier: keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:fe:fb:50:ff:d1:4e:49:dd:67:df:5a:0f:5d:3c:db:18:87: 7e:fc:09:3c:4a:2f:ad:1b:37:4c:f4:31:7f:4d:a4:7e:88:2d: 42:91:e6:e8:5f:6a:bd:ee:09:15:96:82:a4:6e:ba:19:27:19: 83:56:00:d3:71:42:e5:93:2c:16:eb:35:cd:af:27:67:08:0f: 89:8d:86:08:d8:6d:ee:5f:3e:7b:5d:27:2d:2a:c6:0f:41:c6: 0b:79:61:19:ee:ed:0e:27:de:40:f4:ea:b3:a5:67:89:dc:88: 22:a0:28:82:e3:fb:fc:ab:50:6c:4d:ac:e0:3e:21:1f:17:bc: 3b:d9:34:5f:c3:d8:e4:97:c2:68:f7:8f:25:18:d0:35:ca:4f: 7c:c8:e1:f9:60:59:64:d1:36:6d:26:a6:3b:1b:4c:1f:25:b0: 45:b7:63:7e:16:0e:72:ec:37:09:45:22:3d:f5:b1:a7:f4:cc: 6c:0e:44:b1:08:24:fc:1a:aa:f5:13:7e:12:db:86:4b:07:42: b5:6a:25:e4:95:e5:73:7d:d9:d6:21:08:73:b5:d9:71:ce:7c: 4e:67:95:22:56:14:a7:0a:70:dc:df:d0:af:ec:61:d4:20:74: e0:63:62:56:46:89:d6:01:a7:38:18:a3:d6:19:0e:61:d2:4d: 88:8e:5e:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD+eK2pVQF5BK30nb+wV3apr3QD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVE Q0YwOEY1MjAeFw0yNTA2MDIwMTU4MjlaFw0yNTA2MDUxMjU2MjlaMDMxMTAvBgNV BAMTKDI4RUQ0REEyMkQzOTZGM0E3NkI0ODhGNkM3NTVDNzY3RkE1RjlGOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5sVUAf/rk7+WU+wGoKSDO0dwG 7z6xWmvc33MRffDnhm3nqBX53bhfExRYHw4+abDO3ewvYrvuA/L3EzP6LYEz578b F9/i9vdE5nDvk+tHJwrgwP//FuKUxhi3cyUWnSDoLUKNf9/qO29pq+ySs9Wg3Q6U ManhxXlLyeAYEdMAjt4nRYuSKn8Ja6AVEAGRk7ykSY4PaalckwgadC/j5JL9hPPk 82uU5zlDQyjEDN8X0ARl5VKuDiOryj2wK2h1iVB0rA+KwzIYKe1aURzxE+/WFtZV Qu8jlO/9f1sch+ZMAhXOG+hZSt/HLUSW7ReHoY9Dd+f6RbxhQiDczn5jRZpVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKO1Noi05bzp2tIj2x1XHZ/pfn5MwHwYDVR0j BBgwFoAU4XpeuUFW3iP83I8pshD83tzwj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTJhM2YyOC04MjczLTRkZDUtODdmYy0xZWYwMGFjYWM5YjYvMC9FMTdBNUVCOTQx NTZERTIzRkNEQzhGMjlCMjEwRkNERURDRjA4RjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVEQ0Yw OEY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTEyYTNmMjgtODI3My00ZGQ1LTg3 ZmMtMWVmMDBhY2FjOWI2LzAvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZD REVEQ0YwOEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGL++1D/0U5J3WffWg9dPNsYh378CTxKL60b N0z0MX9NpH6ILUKR5uhfar3uCRWWgqRuuhknGYNWANNxQuWTLBbrNc2vJ2cID4mN hgjYbe5fPntdJy0qxg9Bxgt5YRnu7Q4n3kD06rOlZ4nciCKgKILj+/yrUGxNrOA+ IR8XvDvZNF/D2OSXwmj3jyUY0DXKT3zI4flgWWTRNm0mpjsbTB8lsEW3Y34WDnLs NwlFIj31saf0zGwORLEIJPwaqvUTfhLbhksHQrVqJeSV5XN92dYhCHO12XHOfE5n lSJWFKcKcNzf0K/sYdQgdOBjYlZGidYBpzgYo9YZDmHSTYiOXtg= -----END CERTIFICATE-----Generated at Tue Jun 3 23:26:29 2025 by rpki-client