$ rpki-client -vvf repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft File: EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft (raw, json) Hash identifier: Fsdmx8369f3hdpqdxiGlXnh7J1sKwA3WAd5eyiSyvB8= Subject key identifier: 47:54:14:08:13:E8:32:45:29:C7:04:2C:E8:C4:2A:75:AA:4D:D5:CF Authority key identifier: EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3 Certificate issuer: /CN=EE12F179A5D1F52EC033677282AE7E2E72E0F2C3 Certificate serial: 7E4ADEF6CF1F138FD31F5DBF8B1F685888DE7960 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft Manifest number: 0129 Signing time: Fri 04 Apr 2025 17:21:17 +0000 Manifest this update: Fri 04 Apr 2025 17:16:17 +0000 Manifest next update: Tue 08 Apr 2025 02:31:17 +0000 Files and hashes: 1: 3130332e38352e35332e302f32342d3234203d3e20313530353535.roa (hash: QlX3LeWXW01kUKQTlpKY9X160zZbKB1LA4F5u2Eiojo=) 2: 3130332e38352e35322e302f32332d3233203d3e20313530353535.roa (hash: NceE1Gl9KqhiR2YQFfS5n58/EXQ01C8EDe6Rkx8w4+4=) 3: EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl (hash: I4awTRL5u+Dku4+fY3Tw0yozjMExZHxCQrgpDQGD0Vs=) 4: 3130332e38352e35322e302f32342d3234203d3e20313530353535.roa (hash: YVFxjyh9JwGOTUYvhKqPgehL2iwip/UIqtCfx2Ej+po=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:4a:de:f6:cf:1f:13:8f:d3:1f:5d:bf:8b:1f:68:58:88:de:79:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE12F179A5D1F52EC033677282AE7E2E72E0F2C3 Validity Not Before: Apr 4 17:16:17 2025 GMT Not After : Apr 8 02:31:17 2025 GMT Subject: CN=4754140813E8324529C7042CE8C42A75AA4DD5CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:46:c4:75:2d:5c:93:f7:d1:e6:b9:ed:aa:6d: 2f:0c:2a:fd:48:56:c4:3b:65:e8:36:62:ba:74:41: 00:88:35:8e:10:d6:ca:9f:8e:b5:0f:0a:30:3f:82: 9c:08:30:3c:06:44:2f:f6:17:33:ac:3f:d4:a3:ff: 5d:fc:1f:06:c5:e1:a5:0d:bc:e4:96:fc:f3:b0:9d: 5e:16:9d:14:82:dd:64:42:c0:ce:59:78:55:33:74: d9:36:55:1a:e6:ab:ca:a6:af:21:b8:46:5a:ea:5b: 5a:60:e8:16:cb:36:b4:f2:a3:b7:17:69:64:be:ad: 9e:3d:1a:29:c7:aa:4f:ab:8c:51:47:9d:15:84:99: 9f:bf:88:79:19:c8:b2:4d:46:d9:bd:b4:86:b6:11: 8c:ed:ec:22:5b:9e:da:eb:33:1e:93:3d:74:3b:de: 38:65:c5:0c:95:f9:dc:b6:d5:83:16:49:74:7a:5b: 1e:af:8a:d8:e4:a1:e1:5f:b9:ee:12:2c:43:4f:87: 1f:c0:79:cd:11:ef:98:76:26:53:af:23:10:8f:eb: be:8a:10:6e:38:fb:d4:95:a6:1d:92:7f:0b:24:19: 83:55:0c:73:09:7a:ae:b9:17:1f:de:60:cc:19:3d: 68:f7:78:e4:e9:27:47:c0:11:bc:81:42:0b:d4:f3: 3a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:54:14:08:13:E8:32:45:29:C7:04:2C:E8:C4:2A:75:AA:4D:D5:CF X509v3 Authority Key Identifier: keyid:EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:5a:93:2a:11:6a:da:2b:a6:b4:55:b6:05:51:06:3c:fe:e1: 5d:27:4d:75:58:76:c8:84:d1:5c:4f:f0:fb:34:63:9c:15:ff: 53:12:97:1f:c1:95:fb:c3:34:f5:7c:d8:fb:7f:b0:79:9f:5d: d3:1d:09:90:d6:74:c6:d4:df:50:7f:a0:c4:76:0a:07:f9:66: 85:4a:cc:98:1a:f1:95:47:80:40:9d:50:96:50:81:6c:9b:88: cf:c1:8b:a9:bc:91:d9:e9:a8:97:c2:96:a9:c8:f6:09:6c:54: 74:86:fb:6d:12:d9:f8:56:79:9f:46:4e:ca:9b:f8:f2:8a:c9: 92:05:2b:3a:07:33:72:23:14:46:72:fe:33:5c:9c:9a:82:17: c9:ba:c5:6f:b5:ac:e7:ca:ff:f2:ce:0e:f1:22:fa:c3:8c:87: 3c:1b:94:88:03:e4:d6:af:fa:e0:ba:63:ba:cc:95:1a:0a:5d: 07:e0:b5:32:75:c1:6b:e9:fc:38:56:c8:c3:b8:bf:a4:49:01: 5d:8c:52:79:40:bf:03:14:46:30:a6:0d:f4:4d:ce:e4:c7:b4: 68:f0:2c:41:ac:31:ad:76:17:0f:2a:33:f9:52:a6:df:fc:2b: 8e:2b:cb:67:15:2d:82:5a:6c:6a:ed:26:5f:4c:d8:42:b9:38: 95:83:15:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfkre9s8fE4/TH12/ix9oWIjeeWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdFMkU3 MkUwRjJDMzAeFw0yNTA0MDQxNzE2MTdaFw0yNTA0MDgwMjMxMTdaMDMxMTAvBgNV BAMTKDQ3NTQxNDA4MTNFODMyNDUyOUM3MDQyQ0U4QzQyQTc1QUE0REQ1Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmRsR1LVyT99Hmue2qbS8MKv1I VsQ7Zeg2Yrp0QQCINY4Q1sqfjrUPCjA/gpwIMDwGRC/2FzOsP9Sj/138HwbF4aUN vOSW/POwnV4WnRSC3WRCwM5ZeFUzdNk2VRrmq8qmryG4RlrqW1pg6BbLNrTyo7cX aWS+rZ49GinHqk+rjFFHnRWEmZ+/iHkZyLJNRtm9tIa2EYzt7CJbntrrMx6TPXQ7 3jhlxQyV+dy21YMWSXR6Wx6vitjkoeFfue4SLENPhx/Aec0R75h2JlOvIxCP676K EG44+9SVph2SfwskGYNVDHMJeq65Fx/eYMwZPWj3eOTpJ0fAEbyBQgvU8zoNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR1QUCBPoMkUpxwQs6MQqdapN1c8wHwYDVR0j BBgwFoAU7hLxeaXR9S7AM2dygq5+LnLg8sMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGQxZjRjZS0xNjliLTQzMWEtODI4Ni1jNWYzYTA3YmJiZTMvMC9FRTEyRjE3OUE1 RDFGNTJFQzAzMzY3NzI4MkFFN0UyRTcyRTBGMkMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdFMkU3MkUw RjJDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBkMWY0Y2UtMTY5Yi00MzFhLTgy ODYtYzVmM2EwN2JiYmUzLzAvRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdF MkU3MkUwRjJDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALBakyoRatorprRVtgVRBjz+4V0nTXVYdsiE 0VxP8Ps0Y5wV/1MSlx/BlfvDNPV82Pt/sHmfXdMdCZDWdMbU31B/oMR2Cgf5ZoVK zJga8ZVHgECdUJZQgWybiM/Bi6m8kdnpqJfClqnI9glsVHSG+20S2fhWeZ9GTsqb +PKKyZIFKzoHM3IjFEZy/jNcnJqCF8m6xW+1rOfK//LODvEi+sOMhzwblIgD5Nav +uC6Y7rMlRoKXQfgtTJ1wWvp/DhWyMO4v6RJAV2MUnlAvwMURjCmDfRNzuTHtGjw LEGsMa12Fw8qM/lSpt/8K44ry2cVLYJabGrtJl9M2EK5OJWDFQk= -----END CERTIFICATE-----Generated at Sat Apr 5 16:44:50 2025 by rpki-client