$ rpki-client -vvf repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft File: E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft (raw, json) Hash identifier: 7OUnFvZADMY5MHKMnM/TYkeUbEVsJDrHNPw6xgpugKI= Subject key identifier: D6:B7:5F:03:2E:81:AA:18:20:FB:1E:03:49:C2:35:07:71:EF:04:B3 Authority key identifier: E3:5D:44:33:8E:59:37:B4:AE:26:9D:DD:CD:A4:0A:28:F8:7F:3E:C8 Certificate issuer: /CN=E35D44338E5937B4AE269DDDCDA40A28F87F3EC8 Certificate serial: 1B35181C4E3B39FD0112675D820104A5E12E4425 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft Manifest number: 01B2 Signing time: Sat 19 Apr 2025 09:51:49 +0000 Manifest this update: Sat 19 Apr 2025 09:46:49 +0000 Manifest next update: Tue 22 Apr 2025 13:33:49 +0000 Files and hashes: 1: E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl (hash: JPnpyklnl400owZ0Z5GAjZgWGa+hl+1n1nqHS/LCjMU=) 2: 3130332e32312e3139352e302f32342d3234203d3e20313439393637.roa (hash: S0p/daZGbVg/6osVTIYUqF7J3lXGwRxwBETpqSAS5qY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 13:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:35:18:1c:4e:3b:39:fd:01:12:67:5d:82:01:04:a5:e1:2e:44:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E35D44338E5937B4AE269DDDCDA40A28F87F3EC8 Validity Not Before: Apr 19 09:46:49 2025 GMT Not After : Apr 22 13:33:49 2025 GMT Subject: CN=D6B75F032E81AA1820FB1E0349C2350771EF04B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:de:3b:61:f9:67:e7:a1:8c:03:ef:be:73:eb: 5e:e4:b6:7e:f5:d2:96:ab:66:f6:71:4e:6a:a4:2b: 38:94:c2:23:03:4c:7e:80:18:92:06:92:22:bc:08: 10:58:d9:38:af:93:ce:00:83:58:51:9d:75:cf:eb: 94:2f:32:8f:ce:de:95:63:26:5f:5a:50:fe:b5:06: 84:3d:25:d3:c3:37:7d:8d:8e:a7:61:77:19:79:2a: f5:c6:a5:cc:7b:41:9b:5e:33:3b:5a:8c:50:28:17: e9:3f:11:b6:0d:00:09:a7:2f:cd:c6:3f:64:25:12: 83:71:4c:f8:b6:9d:f0:c3:70:a2:c0:82:b3:09:76: 5b:2a:00:0a:dd:cc:d7:af:73:20:64:22:1f:4d:e9: 8e:9c:e0:22:60:fb:d4:a6:fe:ec:ee:33:ac:c2:57: b8:ec:00:b0:cb:43:8c:14:53:20:c2:30:d5:cd:b5: b3:c5:56:7e:33:22:16:b7:89:c5:b7:1d:43:3b:69: 47:2a:53:af:78:46:31:54:c0:d6:08:ce:6b:41:c4: 94:eb:6b:f3:8c:bc:bc:da:ac:58:b7:f6:dc:55:01: 18:17:f1:8d:8e:17:1b:e4:3a:88:7f:ae:ed:ae:a8: f4:ac:25:80:12:4e:00:47:7d:b4:4b:f7:8d:68:b3: 05:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B7:5F:03:2E:81:AA:18:20:FB:1E:03:49:C2:35:07:71:EF:04:B3 X509v3 Authority Key Identifier: keyid:E3:5D:44:33:8E:59:37:B4:AE:26:9D:DD:CD:A4:0A:28:F8:7F:3E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f3:c2:e7:48:8b:ff:8a:e1:84:18:4c:98:03:57:b0:3d:97: 7f:2a:00:b5:83:94:63:1f:30:6f:bc:12:ba:37:69:7e:2d:94: b9:bd:2c:9b:ae:8c:41:e2:82:f9:7a:4e:ae:af:db:e4:d9:b0: f5:3d:f8:4e:c3:04:fd:92:e0:35:c9:c4:b3:dc:6c:ad:0d:d1: ca:54:a0:e8:61:27:53:ff:e6:af:5a:fc:f3:fe:c1:58:a5:6e: 54:f4:46:27:81:cd:ac:78:ad:3d:2f:7f:a2:07:d9:b3:4a:59: b1:a7:77:e3:73:c4:96:90:f2:ba:72:81:13:8a:6f:bb:63:f0: 6d:5d:c0:a2:58:10:35:e9:dc:9b:3e:82:8b:d7:23:91:6f:60: 55:30:31:61:09:ae:e2:9e:87:91:aa:7c:a4:a7:0f:ef:d6:cb: ed:6e:17:b0:d6:eb:dc:6c:a0:21:74:a6:88:9d:e9:57:dd:1e: 57:94:59:86:78:c3:74:e7:46:61:61:d3:42:94:f5:85:fc:9e: 0a:6f:25:0b:e3:6a:e0:9a:19:2f:78:f7:28:a5:e8:d9:c6:9d: ac:2d:2a:e7:e8:bc:a0:02:a8:6c:1f:19:78:b5:01:d6:25:62: 16:db:8a:03:ff:00:99:34:1a:94:b1:a5:8d:a6:38:8e:ac:b4: bd:01:9a:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGzUYHE47Of0BEmddggEEpeEuRCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBBMjhG ODdGM0VDODAeFw0yNTA0MTkwOTQ2NDlaFw0yNTA0MjIxMzMzNDlaMDMxMTAvBgNV BAMTKEQ2Qjc1RjAzMkU4MUFBMTgyMEZCMUUwMzQ5QzIzNTA3NzFFRjA0QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe3jth+WfnoYwD775z617ktn71 0parZvZxTmqkKziUwiMDTH6AGJIGkiK8CBBY2Tivk84Ag1hRnXXP65QvMo/O3pVj Jl9aUP61BoQ9JdPDN32Njqdhdxl5KvXGpcx7QZteMztajFAoF+k/EbYNAAmnL83G P2QlEoNxTPi2nfDDcKLAgrMJdlsqAArdzNevcyBkIh9N6Y6c4CJg+9Sm/uzuM6zC V7jsALDLQ4wUUyDCMNXNtbPFVn4zIha3icW3HUM7aUcqU694RjFUwNYIzmtBxJTr a/OMvLzarFi39txVARgX8Y2OFxvkOoh/ru2uqPSsJYASTgBHfbRL941oswVvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1rdfAy6Bqhgg+x4DScI1B3HvBLMwHwYDVR0j BBgwFoAU411EM45ZN7SuJp3dzaQKKPh/PsgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjgzYjI3Yy1hNzMwLTQwMDItOTFiOC1kMDM2NmRmYWM3N2UvMC9FMzVENDQzMzhF NTkzN0I0QUUyNjlERERDREE0MEEyOEY4N0YzRUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBBMjhGODdG M0VDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY4M2IyN2MtYTczMC00MDAyLTkx YjgtZDAzNjZkZmFjNzdlLzAvRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBB MjhGODdGM0VDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzzwudIi/+K4YQYTJgDV7A9l38qALWDlGMf MG+8Ero3aX4tlLm9LJuujEHigvl6Tq6v2+TZsPU9+E7DBP2S4DXJxLPcbK0N0cpU oOhhJ1P/5q9a/PP+wVilblT0RieBzax4rT0vf6IH2bNKWbGnd+NzxJaQ8rpygROK b7tj8G1dwKJYEDXp3Js+govXI5FvYFUwMWEJruKeh5GqfKSnD+/Wy+1uF7DW69xs oCF0poid6VfdHleUWYZ4w3TnRmFh00KU9YX8ngpvJQvjauCaGS949yil6NnGnawt KufovKACqGwfGXi1AdYlYhbbigP/AJk0GpSxpY2mOI6stL0Bmu0= -----END CERTIFICATE-----Generated at Sun Apr 20 17:32:27 2025 by rpki-client