$ rpki-client -vvf repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft File: E42B0752D5FFAB254C3F0E221499F67420870FEB.mft (raw, json) Hash identifier: BhWO89x5CI51QyvO7jM+hIS5oj4lRK4q7B6NXva4adU= Subject key identifier: 06:05:F5:BE:08:F9:DA:3C:33:68:CB:58:03:60:64:AC:0B:3E:6E:87 Authority key identifier: E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB Certificate issuer: /CN=E42B0752D5FFAB254C3F0E221499F67420870FEB Certificate serial: 74C8586DE8EF8CE1FBC7E27524E270C77106A9BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft Manifest number: 0460 Signing time: Wed 04 Jun 2025 01:11:14 +0000 Manifest this update: Wed 04 Jun 2025 01:06:14 +0000 Manifest next update: Sat 07 Jun 2025 12:48:14 +0000 Files and hashes: 1: 3230322e35382e3136302e302f32302d3234203d3e203234353236.roa (hash: v44nTeNOx/KqdniK95QY0LHF9vkB+FOSNNbRKZTEdnM=) 2: 323430323a646130303a3a2f33322d3438203d3e203234353236.roa (hash: KXkQEzDE7eAOGwkwjqYSUBJ2gO8yBncemPnpiy3ztzA=) 3: E42B0752D5FFAB254C3F0E221499F67420870FEB.crl (hash: vcX6nzEpLKCjwU86nUUOyRNvWK4SKO6ZSBDGjjr6XGM=) 4: 3230322e35382e3137362e302f32312d3234203d3e203234353236.roa (hash: hoFhirnLUQz/p84odzqMxw9tsnTuNV/GRFdBFOkjvGI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.crl rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 12:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c8:58:6d:e8:ef:8c:e1:fb:c7:e2:75:24:e2:70:c7:71:06:a9:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E42B0752D5FFAB254C3F0E221499F67420870FEB Validity Not Before: Jun 4 01:06:14 2025 GMT Not After : Jun 7 12:48:14 2025 GMT Subject: CN=0605F5BE08F9DA3C3368CB58036064AC0B3E6E87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:96:4c:46:dd:2c:86:74:4c:83:3f:cd:fb:6e: 8f:b3:fb:d3:71:cc:5e:54:ae:b8:9b:6a:73:2e:f2: d9:07:89:24:8b:7d:5b:58:54:2d:39:b6:17:e3:27: 6a:81:a0:0f:d1:32:a9:09:bf:c2:67:51:0f:f8:c8: ff:2a:c4:98:a6:7e:81:fe:19:1d:9d:4b:9e:31:a5: c7:1c:46:8b:c6:b7:01:c9:18:a7:5f:f3:87:d9:b7: 1f:3d:86:f9:46:b7:5a:10:54:96:bc:86:5b:6a:03: 0b:9f:f7:84:fd:64:87:be:7a:b4:06:46:5f:39:40: c4:b8:08:10:a6:95:e6:3b:45:05:2b:19:f2:b4:a2: d4:65:2f:42:fc:96:79:a5:35:38:93:99:1a:a6:bb: 28:c8:b6:21:cf:52:24:03:98:66:d3:d4:87:de:ab: 5d:2e:43:ac:7a:c6:d0:65:1d:67:c2:ae:5e:10:d3: 59:20:0a:e4:9f:9d:0c:19:40:d2:6d:d5:65:ff:e4: f3:17:d2:6f:f7:4c:71:b0:31:6c:9b:18:09:7d:d0: 1c:58:69:84:f9:d0:9d:42:7b:90:f7:10:22:54:aa: 0c:0c:25:d9:68:55:38:10:02:7e:4d:79:a5:4e:ee: f4:c0:dc:10:45:3e:ce:13:9c:d9:96:62:b1:57:b1: ee:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:05:F5:BE:08:F9:DA:3C:33:68:CB:58:03:60:64:AC:0B:3E:6E:87 X509v3 Authority Key Identifier: keyid:E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:c3:2a:d6:dc:88:83:e5:57:32:ab:3d:38:a4:62:3f:4a:f6: cc:bc:c9:ed:cb:92:16:ce:ed:23:94:84:f3:bb:3b:e8:74:60: 77:a6:05:30:4e:4a:b5:3a:48:2a:77:27:5e:58:0c:10:cf:bd: cd:41:c0:85:70:cb:39:61:74:ab:49:44:a7:b6:f2:8b:38:50: 8e:48:7a:38:67:d9:a6:ca:bc:31:17:8d:a1:05:01:c6:e3:d6: 27:df:ed:18:9b:92:a1:17:d9:e0:9b:32:9f:c6:14:4c:5b:97: c2:cd:f8:8a:7b:f6:e8:b2:43:b3:6f:0d:ae:20:7b:4f:54:95: 1b:d1:11:07:5d:cf:04:00:dc:1e:53:8f:ad:be:25:7f:23:f6: ab:47:16:ef:f3:bb:67:c8:ff:6d:07:a8:90:2e:18:38:43:ba: 68:c3:dd:96:49:14:a9:6a:3b:f3:19:68:d5:25:31:89:5a:ce: 29:a3:81:dc:ae:87:77:08:49:c1:e2:30:52:e8:31:be:4e:17: 7d:04:13:f2:fd:c6:5d:54:3e:c7:70:a8:7d:3a:f3:8f:e3:cc: 1a:75:4f:37:4f:8c:92:d9:5c:4e:48:15:db:18:7b:d2:21:4a: ba:c1:52:d5:a9:a0:02:65:d8:22:84:a0:9d:85:7d:6e:dd:ec: 3d:18:90:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdMhYbejvjOH7x+J1JOJwx3EGqbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2NzQy MDg3MEZFQjAeFw0yNTA2MDQwMTA2MTRaFw0yNTA2MDcxMjQ4MTRaMDMxMTAvBgNV BAMTKDA2MDVGNUJFMDhGOURBM0MzMzY4Q0I1ODAzNjA2NEFDMEIzRTZFODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9lkxG3SyGdEyDP837bo+z+9Nx zF5UrribanMu8tkHiSSLfVtYVC05thfjJ2qBoA/RMqkJv8JnUQ/4yP8qxJimfoH+ GR2dS54xpcccRovGtwHJGKdf84fZtx89hvlGt1oQVJa8hltqAwuf94T9ZIe+erQG Rl85QMS4CBCmleY7RQUrGfK0otRlL0L8lnmlNTiTmRqmuyjItiHPUiQDmGbT1Ife q10uQ6x6xtBlHWfCrl4Q01kgCuSfnQwZQNJt1WX/5PMX0m/3THGwMWybGAl90BxY aYT50J1Ce5D3ECJUqgwMJdloVTgQAn5NeaVO7vTA3BBFPs4TnNmWYrFXse4lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBgX1vgj52jwzaMtYA2BkrAs+bocwHwYDVR0j BBgwFoAU5CsHUtX/qyVMPw4iFJn2dCCHD+swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzUxMjllNC0yMzI4LTQzZDItYTQ1OC05ZDM4Mjk2MTQ4MTUvMC9FNDJCMDc1MkQ1 RkZBQjI1NEMzRjBFMjIxNDk5RjY3NDIwODcwRkVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2NzQyMDg3 MEZFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM1MTI5ZTQtMjMyOC00M2QyLWE0 NTgtOWQzODI5NjE0ODE1LzAvRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2 NzQyMDg3MEZFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLDKtbciIPlVzKrPTikYj9K9sy8ye3LkhbO 7SOUhPO7O+h0YHemBTBOSrU6SCp3J15YDBDPvc1BwIVwyzlhdKtJRKe28os4UI5I ejhn2abKvDEXjaEFAcbj1iff7RibkqEX2eCbMp/GFExbl8LN+Ip79uiyQ7NvDa4g e09UlRvREQddzwQA3B5Tj62+JX8j9qtHFu/zu2fI/20HqJAuGDhDumjD3ZZJFKlq O/MZaNUlMYlazimjgdyuh3cIScHiMFLoMb5OF30EE/L9xl1UPsdwqH0684/jzBp1 TzdPjJLZXE5IFdsYe9IhSrrBUtWpoAJl2CKEoJ2FfW7d7D0YkDw= -----END CERTIFICATE-----Generated at Thu Jun 5 18:23:38 2025 by rpki-client