$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft File: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft (raw, json) Hash identifier: TybuN+Pq3tuTt/nUDO22ippPXl+pwFPdXARoIIhCTB4= Subject key identifier: DC:CC:EA:F3:E6:3A:AD:39:2D:2B:D4:47:40:48:26:E0:98:B3:97:C2 Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 Certificate issuer: /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Certificate serial: 15C4F3C3A3A20B02615BDA2F41EC52B6CBC9B30A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft Manifest number: 04BD Signing time: Fri 04 Apr 2025 14:42:04 +0000 Manifest this update: Fri 04 Apr 2025 14:37:04 +0000 Manifest next update: Tue 08 Apr 2025 00:50:04 +0000 Files and hashes: 1: 3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa (hash: hMJmJ4dw/81IwDHXcdYCEbx1mMe88CEi44Qr1Pj1eBk=) 2: 3130332e3133302e36312e302f32342d3234203d3e20313338303739.roa (hash: 4L2FKCQFOJ6ZvWKgXal0nfrZkHMJOZOY4pyCilWNqJg=) 3: 3130332e3133302e36302e302f32322d3232203d3e20313338303739.roa (hash: C1HlnOYNkbj9dYN+GVNsy5Ocwp8L1tuS754SnYYyHlE=) 4: 3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa (hash: KEI56K2u3NEnRDvHwfwup/lXLtIuuqQa4o+pfORoJU4=) 5: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl (hash: OeAdAcFElcCnXqmNrFM+AwnN9GwIOmb28jZhJ8bJNbY=) 6: 3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa (hash: dghjU1zZ9kGjcMRT5/T9O0//sXRfgHxldxyPdO36eG8=) 7: 3130332e3133302e36332e302f32342d3234203d3e20313338303739.roa (hash: UPqZTtFOgF+jDRv2CvFxqECXCbrw1aEaPzgtFmgsijs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:c4:f3:c3:a3:a2:0b:02:61:5b:da:2f:41:ec:52:b6:cb:c9:b3:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Validity Not Before: Apr 4 14:37:04 2025 GMT Not After : Apr 8 00:50:04 2025 GMT Subject: CN=DCCCEAF3E63AAD392D2BD447404826E098B397C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:de:de:5e:c8:79:bd:a8:b1:61:f1:80:07:07: d0:0d:fd:e5:4e:9b:4a:ac:31:f5:9d:c8:f0:b1:f0: b3:b9:7c:55:a0:13:23:32:5d:6b:b3:c6:ae:41:60: 41:c5:83:28:55:a6:4a:1c:0d:38:44:70:c7:d1:2b: 94:12:7c:83:8e:ee:e0:1c:91:48:0c:43:7d:5d:63: 63:6c:03:4b:f4:f0:42:43:fb:92:d8:3c:fc:be:82: 67:cc:07:0a:42:42:dd:39:47:5b:74:40:67:f2:73: 72:cb:a0:72:b3:06:dd:fe:8f:d7:af:9e:bd:bc:ec: 92:86:8e:0f:48:ef:fc:ad:1f:28:6e:b1:5e:43:86: c9:7b:44:cc:48:33:c4:e5:15:7d:08:51:cb:70:a4: 4b:15:4c:ef:b4:88:4a:9d:85:c8:68:d1:3c:41:3a: ae:52:cf:69:52:24:28:9a:b4:ad:ff:d8:47:e2:cb: 04:e7:3a:d9:24:c0:8b:10:9c:ad:a9:36:5b:c7:53: 97:d8:91:6a:e2:3c:fd:19:78:bf:3d:9a:b1:11:a0: 24:b7:cd:42:a1:37:1a:f9:9f:df:55:30:d9:34:c4: 0f:51:6f:cd:c0:5a:f7:7f:15:ca:b4:75:68:16:f6: bc:5c:f2:8b:90:84:25:f9:74:0e:a7:8e:2f:4c:4a: 23:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:CC:EA:F3:E6:3A:AD:39:2D:2B:D4:47:40:48:26:E0:98:B3:97:C2 X509v3 Authority Key Identifier: keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:a1:1f:8c:7a:0e:24:af:52:8e:1a:f2:f0:2b:4b:88:2a:6a: 6a:55:8d:a6:52:f3:95:cc:7f:10:fc:24:47:01:d9:98:de:07: 13:f6:d2:44:f2:0a:f0:5c:c7:07:c3:d4:78:e1:7c:c0:cc:6d: 87:c2:c6:64:96:01:70:82:39:36:ee:45:2d:f0:e7:a1:af:03: 37:23:93:a7:2d:f2:48:3a:33:a7:46:02:2f:84:e4:d0:80:d7: 61:d6:44:3e:1e:85:f6:f2:33:77:df:88:82:c6:fa:7f:67:c9: 4e:e1:a4:4b:a6:4f:9b:02:e9:d3:d2:d3:d9:d3:4c:b2:bb:13: 83:1f:bc:16:2f:61:de:f3:41:56:e7:8e:ef:cc:a8:9d:3c:8b: 50:68:37:5e:10:88:9c:c6:99:27:20:df:f9:e8:00:76:b0:68: 90:3e:8b:ae:c6:de:f9:76:ed:b4:21:c9:26:1d:28:82:66:6c: 93:f3:de:85:8f:fc:2f:49:14:2b:89:c7:9e:1a:1f:70:dc:e7: f3:b8:c5:a6:d8:5a:92:6d:60:67:4f:2d:9f:f0:06:5e:61:cf: cc:b1:fd:7a:e5:6c:59:7b:47:ea:0c:c2:38:cb:1e:33:e3:44: fa:ea:c6:55:29:2d:89:8a:43:50:ee:83:49:bf:9f:4d:91:e7: 24:81:56:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFcTzw6OiCwJhW9ovQexStsvJswowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVE Q0YwOEY1MjAeFw0yNTA0MDQxNDM3MDRaFw0yNTA0MDgwMDUwMDRaMDMxMTAvBgNV BAMTKERDQ0NFQUYzRTYzQUFEMzkyRDJCRDQ0NzQwNDgyNkUwOThCMzk3QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp3t5eyHm9qLFh8YAHB9AN/eVO m0qsMfWdyPCx8LO5fFWgEyMyXWuzxq5BYEHFgyhVpkocDThEcMfRK5QSfIOO7uAc kUgMQ31dY2NsA0v08EJD+5LYPPy+gmfMBwpCQt05R1t0QGfyc3LLoHKzBt3+j9ev nr287JKGjg9I7/ytHyhusV5Dhsl7RMxIM8TlFX0IUctwpEsVTO+0iEqdhcho0TxB Oq5Sz2lSJCiatK3/2EfiywTnOtkkwIsQnK2pNlvHU5fYkWriPP0ZeL89mrERoCS3 zUKhNxr5n99VMNk0xA9Rb83AWvd/Fcq0dWgW9rxc8ouQhCX5dA6nji9MSiNxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Mzq8+Y6rTktK9RHQEgm4Jizl8IwHwYDVR0j BBgwFoAU4XpeuUFW3iP83I8pshD83tzwj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTJhM2YyOC04MjczLTRkZDUtODdmYy0xZWYwMGFjYWM5YjYvMC9FMTdBNUVCOTQx NTZERTIzRkNEQzhGMjlCMjEwRkNERURDRjA4RjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVEQ0Yw OEY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTEyYTNmMjgtODI3My00ZGQ1LTg3 ZmMtMWVmMDBhY2FjOWI2LzAvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZD REVEQ0YwOEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJihH4x6DiSvUo4a8vArS4gqampVjaZS85XM fxD8JEcB2ZjeBxP20kTyCvBcxwfD1HjhfMDMbYfCxmSWAXCCOTbuRS3w56GvAzcj k6ct8kg6M6dGAi+E5NCA12HWRD4ehfbyM3ffiILG+n9nyU7hpEumT5sC6dPS09nT TLK7E4MfvBYvYd7zQVbnju/MqJ08i1BoN14QiJzGmScg3/noAHawaJA+i67G3vl2 7bQhySYdKIJmbJPz3oWP/C9JFCuJx54aH3Dc5/O4xabYWpJtYGdPLZ/wBl5hz8yx /XrlbFl7R+oMwjjLHjPjRPrqxlUpLYmKQ1Dug0m/n02R5ySBVi4= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:39 2025 by rpki-client