$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft File: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft (raw, json) Hash identifier: 9+iu33B3ueHrqX/2SkoEWKRswcvAwEu22DBZsTVCU2I= Subject key identifier: 27:90:41:9C:99:E1:A7:C4:14:61:9B:57:5F:B8:27:9D:4A:F1:42:56 Authority key identifier: EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 Certificate issuer: /CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Certificate serial: 36B1FA53DEFA8B5A1D61D4DFF23B9383E1F6DDCD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft Manifest number: 01A8 Signing time: Thu 05 Jun 2025 06:20:46 +0000 Manifest this update: Thu 05 Jun 2025 06:15:46 +0000 Manifest next update: Sun 08 Jun 2025 18:13:46 +0000 Files and hashes: 1: 3130332e32302e38372e302f32342d3234203d3e2039333431.roa (hash: nU+kB+NyHUbVoehF82OX5jrQgK7DFWejShKduq8TLqc=) 2: 3130332e32302e38362e302f32332d3233203d3e2039333431.roa (hash: X0XLAhvGZfiRvCVCUyNsPxOOwPw6McDgsETmSQQOHuM=) 3: 3130332e32302e38362e302f32342d3234203d3e2039333431.roa (hash: VkkcM1AqEwXsS/hQawzqHg+YyvXNA8/GMbHDz4dyi9o=) 4: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl (hash: SwqqtCOqJL6nuFZPC+F1OKsnffVz2CLxytgSVFxewWs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 18:13:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:b1:fa:53:de:fa:8b:5a:1d:61:d4:df:f2:3b:93:83:e1:f6:dd:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Validity Not Before: Jun 5 06:15:46 2025 GMT Not After : Jun 8 18:13:46 2025 GMT Subject: CN=2790419C99E1A7C414619B575FB8279D4AF14256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b2:ac:63:0c:46:05:55:c8:fb:98:a0:1e:3f: cb:98:4e:b4:93:a0:37:e9:28:23:c1:ff:a3:e6:e9: 54:40:22:5a:8d:c8:fd:c3:08:c4:20:48:96:8f:93: 5b:9a:51:04:3a:7c:52:b6:29:2e:cf:70:00:85:62: 21:ee:9a:e8:b1:a8:35:2e:c2:a8:95:b8:ed:3a:a5: c9:4a:d1:2c:4b:3f:d1:12:04:9a:3e:0e:81:af:4b: f3:26:c5:d4:dc:89:e4:a5:77:28:02:49:7f:a9:8f: f5:3c:27:ab:14:40:59:f5:54:05:61:73:39:f0:a0: a4:12:6e:5b:4b:75:ef:cd:89:52:8c:f9:ea:09:53: 9d:63:e2:5d:e7:d1:f8:c8:75:59:f9:70:cc:66:fb: 00:f0:05:55:11:16:4f:74:f9:e3:bc:40:e0:50:b9: 7d:40:27:2c:2c:49:da:d5:bf:4d:1f:6b:a5:1c:70: 00:87:cd:4a:b7:82:43:29:7a:77:33:55:26:4f:1d: aa:87:c2:7b:06:07:61:e1:c9:96:32:34:13:8f:33: c6:61:f8:71:a8:0c:e3:21:c2:4b:d6:04:93:86:16: 21:3d:75:85:95:94:e4:cd:cf:81:2a:4a:8b:ed:73: 92:c4:f5:0f:3d:93:d6:aa:c1:4a:95:eb:ce:d1:b0: 98:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:90:41:9C:99:E1:A7:C4:14:61:9B:57:5F:B8:27:9D:4A:F1:42:56 X509v3 Authority Key Identifier: keyid:EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:31:0f:2b:6f:7b:ec:0e:0f:0b:d2:80:76:8c:be:51:c3:8f: d5:af:81:5f:ea:e3:b7:c3:47:45:52:71:57:90:d4:70:8f:2a: 88:45:fe:06:73:8f:c7:2c:c8:29:e0:b6:cb:c5:b8:9f:3e:a0: 53:8b:07:2b:45:b1:8a:b6:ce:0f:df:e2:56:33:d3:41:9b:21: 38:d1:47:de:81:cf:34:30:64:7c:c9:85:55:37:5e:9f:fb:5b: 3b:08:3e:d0:b3:e5:73:b6:69:de:52:fc:2c:a7:ce:24:b7:06: 83:6a:1e:f6:24:6d:71:a0:13:eb:10:47:ee:91:fa:53:f5:a2: cb:b2:f0:b2:df:99:0c:16:a6:ff:d9:f9:65:06:37:84:82:4a: ba:ba:40:d0:9c:88:c4:27:98:a7:52:32:ff:68:22:d7:27:f5: 87:00:80:37:5e:04:b5:24:a0:07:be:2f:36:2a:55:96:67:d4: 8e:39:b4:bc:f7:20:71:f5:4d:9b:b2:3d:59:7d:5a:eb:7a:a6: a9:35:f4:2f:7c:39:4d:ea:1d:21:a3:b5:06:1d:51:ae:02:46: 0d:7b:fe:c3:ba:66:5f:da:61:70:53:0c:dd:45:71:24:b0:4a: 45:db:2a:74:56:17:10:99:f7:2e:41:a2:73:c9:60:2a:18:f3: 7e:85:d3:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNrH6U976i1odYdTf8juTg+H23c0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVF N0U0NUQ2ODAeFw0yNTA2MDUwNjE1NDZaFw0yNTA2MDgxODEzNDZaMDMxMTAvBgNV BAMTKDI3OTA0MTlDOTlFMUE3QzQxNDYxOUI1NzVGQjgyNzlENEFGMTQyNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYsqxjDEYFVcj7mKAeP8uYTrST oDfpKCPB/6Pm6VRAIlqNyP3DCMQgSJaPk1uaUQQ6fFK2KS7PcACFYiHumuixqDUu wqiVuO06pclK0SxLP9ESBJo+DoGvS/MmxdTcieSldygCSX+pj/U8J6sUQFn1VAVh cznwoKQSbltLde/NiVKM+eoJU51j4l3n0fjIdVn5cMxm+wDwBVURFk90+eO8QOBQ uX1AJywsSdrVv00fa6UccACHzUq3gkMpenczVSZPHaqHwnsGB2HhyZYyNBOPM8Zh +HGoDOMhwkvWBJOGFiE9dYWVlOTNz4EqSovtc5LE9Q89k9aqwUqV687RsJgjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ5BBnJnhp8QUYZtXX7gnnUrxQlYwHwYDVR0j BBgwFoAU7ixS975SoOtpWlSaQucB7ufkXWgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWE0ODlhNi01NDg1LTQ4N2YtYjVkZC04ZjRlZGViNDZiY2IvMC9FRTJDNTJGN0JF NTJBMEVCNjk1QTU0OUE0MkU3MDFFRUU3RTQ1RDY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVFN0U0 NUQ2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhNDg5YTYtNTQ4NS00ODdmLWI1 ZGQtOGY0ZWRlYjQ2YmNiLzAvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAx RUVFN0U0NUQ2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUxDytve+wODwvSgHaMvlHDj9WvgV/q47fD R0VScVeQ1HCPKohF/gZzj8csyCngtsvFuJ8+oFOLBytFsYq2zg/f4lYz00GbITjR R96BzzQwZHzJhVU3Xp/7WzsIPtCz5XO2ad5S/CynziS3BoNqHvYkbXGgE+sQR+6R +lP1osuy8LLfmQwWpv/Z+WUGN4SCSrq6QNCciMQnmKdSMv9oItcn9YcAgDdeBLUk oAe+LzYqVZZn1I45tLz3IHH1TZuyPVl9Wut6pqk19C98OU3qHSGjtQYdUa4CRg17 /sO6Zl/aYXBTDN1FcSSwSkXbKnRWFxCZ9y5BonPJYCoY836F05c= -----END CERTIFICATE-----Generated at Sat Jun 7 04:02:19 2025 by rpki-client