$ rpki-client -vvf repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft File: 0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft (raw, json) Hash identifier: VzTWAI9qvZptPJ7QJjwkvmP0MDNsfViKKut2x/BTOks= Subject key identifier: 09:EF:B4:3D:88:81:AC:A9:01:52:9B:0C:1B:CD:A5:F3:40:06:9E:E1 Authority key identifier: 0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C Certificate issuer: /CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C Certificate serial: 22E6107762F06B004CBFCB723B450E1628BCD618 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft Manifest number: 04C5 Signing time: Thu 17 Apr 2025 12:41:15 +0000 Manifest this update: Thu 17 Apr 2025 12:36:15 +0000 Manifest next update: Sun 20 Apr 2025 16:34:15 +0000 Files and hashes: 1: 323430373a396338303a3a2f33322d3438203d3e20313335343834.roa (hash: n5BgEkTxLwtJUZihnJWVAnPuV9guSfKe7HeHpe21Ps8=) 2: 0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl (hash: 55U5TCD0iSTWRtRkgnvgRN6WCFjljFy/nzardVPlqT0=) 3: 3130332e37372e3135362e302f32322d3234203d3e20313335343834.roa (hash: vlDIC/lMXwB1lSYV52oEq30trZJO4UYf8/53n6LO/vI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 16:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e6:10:77:62:f0:6b:00:4c:bf:cb:72:3b:45:0e:16:28:bc:d6:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C Validity Not Before: Apr 17 12:36:15 2025 GMT Not After : Apr 20 16:34:15 2025 GMT Subject: CN=09EFB43D8881ACA901529B0C1BCDA5F340069EE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bc:ba:b7:41:2f:1e:bd:0f:43:61:a2:9b:6e: a8:07:f1:59:85:15:f5:38:61:ee:b3:cc:08:b0:8c: 84:ec:e5:e3:ae:da:34:86:47:87:8f:b6:06:d1:ef: c4:b7:cb:33:40:10:99:48:e3:af:5a:c8:47:31:59: f8:9b:a3:cc:24:fd:5b:07:d4:99:ea:a5:a2:79:84: de:d1:f6:52:69:f7:f1:43:e8:f1:6c:79:10:ab:13: a0:af:d8:c8:51:7f:5c:a7:d4:ac:65:ff:54:44:2f: 15:54:fd:d2:50:13:0b:ff:1f:dd:85:36:22:e8:6e: 22:1c:53:97:e4:85:b0:6b:07:68:f8:08:08:71:7e: 63:3c:a2:35:75:32:53:10:f5:92:c8:51:e8:03:17: 57:d5:d5:b5:87:4e:b6:19:d7:70:c2:54:b0:b3:e9: 45:eb:85:9d:68:7a:60:b0:0d:d6:3a:4d:cc:e4:ee: 3c:1a:51:f8:46:14:1c:cb:72:48:0f:95:20:05:34: e7:28:15:13:bf:42:34:c1:0a:4c:80:f8:e7:01:79: a6:b4:ef:a6:4b:01:30:00:5d:13:2f:40:9e:ac:80: b8:10:ee:b6:c6:10:24:3a:88:c6:48:b5:2f:48:5e: 7e:73:e2:7e:fb:2d:37:aa:aa:7b:c6:74:f7:61:95: e9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EF:B4:3D:88:81:AC:A9:01:52:9B:0C:1B:CD:A5:F3:40:06:9E:E1 X509v3 Authority Key Identifier: keyid:0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c4:f9:50:64:2b:f2:f7:86:11:ac:57:d6:e7:7e:41:a7:5a: 14:59:fb:9d:09:70:e4:4d:6f:c8:31:75:7d:24:15:ba:32:75: 2f:64:1f:6e:ec:ab:10:4f:04:65:4e:f1:d5:55:e0:88:56:0b: b0:19:24:5a:30:22:05:09:96:c8:cb:f4:2a:8a:12:37:87:10: d1:31:5f:9a:88:a4:ec:77:f2:0d:c4:5a:c9:89:3e:b4:db:ba: 75:5e:c2:c5:61:47:04:76:46:74:2e:40:a7:d7:6c:6f:20:03: 4d:a3:50:07:7a:f6:8a:0f:fd:b2:6b:db:dd:dd:b9:b6:23:82: 69:39:ba:2b:64:de:be:0c:fd:04:b8:a2:48:3f:9a:4e:c4:24: 72:b4:2f:a6:2a:92:e1:66:00:2e:40:a5:ce:76:7d:d5:55:2b: 05:bd:94:5d:27:b6:fe:88:7e:fc:20:d8:45:47:c6:fe:5f:e6: 7a:ed:e9:0a:3b:a4:2d:90:b0:85:31:ec:c7:42:76:19:52:fc: d2:08:ca:95:17:55:75:7b:f5:48:60:17:a6:b8:7e:38:f5:2b: 1b:2c:58:57:d8:39:d2:3a:38:40:c0:1a:e3:e2:55:ba:4c:cb: 72:02:2f:7b:84:43:25:b9:48:1a:2a:ac:75:9f:82:a0:ce:9b: 6d:27:f8:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIuYQd2LwawBMv8tyO0UOFii81hgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5 Nzk3RUE2QzAeFw0yNTA0MTcxMjM2MTVaFw0yNTA0MjAxNjM0MTVaMDMxMTAvBgNV BAMTKDA5RUZCNDNEODg4MUFDQTkwMTUyOUIwQzFCQ0RBNUYzNDAwNjlFRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCovLq3QS8evQ9DYaKbbqgH8VmF FfU4Ye6zzAiwjITs5eOu2jSGR4ePtgbR78S3yzNAEJlI469ayEcxWfibo8wk/VsH 1JnqpaJ5hN7R9lJp9/FD6PFseRCrE6Cv2MhRf1yn1Kxl/1RELxVU/dJQEwv/H92F NiLobiIcU5fkhbBrB2j4CAhxfmM8ojV1MlMQ9ZLIUegDF1fV1bWHTrYZ13DCVLCz 6UXrhZ1oemCwDdY6Tczk7jwaUfhGFBzLckgPlSAFNOcoFRO/QjTBCkyA+OcBeaa0 76ZLATAAXRMvQJ6sgLgQ7rbGECQ6iMZItS9IXn5z4n77LTeqqnvGdPdhlenNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCe+0PYiBrKkBUpsMG82l80AGnuEwHwYDVR0j BBgwFoAUDoY3wj/X/Rq/kbAl5IBAkJeX6mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzNmMjI4OC04OGNmLTRkMmItYmJhNi1hMDNkZDVmODM3NjEvMC8wRTg2MzdDMjNG RDdGRDFBQkY5MUIwMjVFNDgwNDA5MDk3OTdFQTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5Nzk3 RUE2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWMzZjIyODgtODhjZi00ZDJiLWJi YTYtYTAzZGQ1ZjgzNzYxLzAvMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQw OTA5Nzk3RUE2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD3E+VBkK/L3hhGsV9bnfkGnWhRZ+50JcORN b8gxdX0kFboydS9kH27sqxBPBGVO8dVV4IhWC7AZJFowIgUJlsjL9CqKEjeHENEx X5qIpOx38g3EWsmJPrTbunVewsVhRwR2RnQuQKfXbG8gA02jUAd69ooP/bJr293d ubYjgmk5uitk3r4M/QS4okg/mk7EJHK0L6YqkuFmAC5Apc52fdVVKwW9lF0ntv6I fvwg2EVHxv5f5nrt6Qo7pC2QsIUx7MdCdhlS/NIIypUXVXV79UhgF6a4fjj1Kxss WFfYOdI6OEDAGuPiVbpMy3ICL3uEQyW5SBoqrHWfgqDOm20n+E8= -----END CERTIFICATE-----Generated at Thu Apr 17 22:32:47 2025 by rpki-client