$ rpki-client -vvf repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft File: 2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft (raw, json) Hash identifier: 0r/caIQ6CY+DPRv0zqO2nciEvq8+8I3zqccN3RwmzF4= Subject key identifier: A0:15:78:06:A6:AD:73:9B:A1:DF:F6:D4:32:BC:20:E1:14:BE:F4:13 Authority key identifier: 2E:EF:78:44:53:62:AF:4F:7C:AE:B2:41:FA:E6:B9:74:7E:C2:D2:F9 Certificate issuer: /CN=2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9 Certificate serial: 734E96A1C52588305029E916B7DE93FFE9F0A48C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft Manifest number: 0450 Signing time: Sat 05 Apr 2025 04:51:04 +0000 Manifest this update: Sat 05 Apr 2025 04:46:04 +0000 Manifest next update: Tue 08 Apr 2025 09:47:04 +0000 Files and hashes: 1: 2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl (hash: 1Ayt2rX9uuoGjGEPYSS+4LiFrJPUYmmMyaTODvH8r8M=) 2: 3130332e3135382e3130332e302f32342d3234203d3e203435333137.roa (hash: 3JdVRKPzu9yTBFIl95w9qsQ9IgBVgcqYpN67jfM6hwA=) 3: 3130332e3135382e3130322e302f32342d3234203d3e20313431313239.roa (hash: mevAhM5443uB5w78f++4hcwTY8vcOKFPl7i6kYttnO4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:4e:96:a1:c5:25:88:30:50:29:e9:16:b7:de:93:ff:e9:f0:a4:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9 Validity Not Before: Apr 5 04:46:04 2025 GMT Not After : Apr 8 09:47:04 2025 GMT Subject: CN=A0157806A6AD739BA1DFF6D432BC20E114BEF413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f3:2f:76:57:30:27:13:83:58:a3:55:b1:c7: 3d:cd:4a:6a:47:64:1b:24:60:9a:08:ff:ee:52:87: de:fc:fe:95:71:5b:c2:b5:ee:c9:a4:81:d1:aa:3f: 15:35:31:c3:96:71:9f:ad:19:9c:f9:2d:fe:dd:86: cd:0c:fe:ec:5b:5c:eb:20:63:6f:ba:4b:89:11:89: d8:0b:28:60:f1:2a:77:80:80:b5:44:9a:28:d9:2d: a0:e9:02:bb:e0:97:97:50:10:b8:37:40:ac:46:bc: 43:a6:3c:91:df:54:66:87:17:ba:54:c2:bc:55:0c: b6:01:d6:a9:08:96:c2:de:6d:f6:e0:81:d5:06:34: 27:63:a5:b2:94:96:1b:04:0b:2a:0b:75:90:7f:35: 24:e5:b5:07:bb:a6:a3:90:bd:be:e0:a1:4b:66:5b: 0d:94:82:de:9d:d8:a4:37:8d:49:b4:9e:3f:6e:26: 67:84:40:70:6b:d0:e5:a7:6f:ea:e5:3b:08:86:07: dd:bd:42:66:a2:4f:60:04:f5:4c:cb:5d:22:44:09: 60:c3:9c:c7:d1:f4:c7:c4:83:cb:26:e6:7a:48:95: 25:f3:75:07:7c:08:7f:69:b3:18:96:b3:38:fa:4a: 26:f2:c2:42:6c:2c:f5:5b:7c:c5:7a:72:ac:00:a4: 39:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:15:78:06:A6:AD:73:9B:A1:DF:F6:D4:32:BC:20:E1:14:BE:F4:13 X509v3 Authority Key Identifier: keyid:2E:EF:78:44:53:62:AF:4F:7C:AE:B2:41:FA:E6:B9:74:7E:C2:D2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:16:97:35:92:0b:a8:30:3d:97:92:d9:45:26:96:3b:b1:a1: cb:b5:20:ce:07:79:c4:e0:0b:22:5f:2d:1a:43:03:83:fb:ec: 6b:81:10:28:69:bc:2a:14:91:56:24:95:f9:c4:27:64:de:ed: 7d:71:9f:a1:23:48:45:6c:ee:63:c2:a7:a9:ec:e9:b3:a3:b8: e9:64:01:e6:87:e2:f6:f5:a8:05:8f:21:a2:02:d3:9b:e9:16: 5f:c6:cf:84:09:51:06:16:d8:64:ed:c5:ac:41:1a:18:d0:2a: d9:cb:db:41:11:3c:5e:79:96:c3:ec:97:9e:fd:82:35:be:03: d3:ba:85:c1:8a:cc:3b:a2:41:21:62:1f:0c:36:5d:a2:ac:1a: 17:2b:22:4d:02:b0:e6:0a:0f:d9:ec:d2:2f:75:e7:ff:bd:3e: 55:48:bd:3d:8e:04:bd:ed:a1:36:db:18:e8:43:3d:70:ac:6f: 29:5b:e4:5b:71:4f:8f:e1:51:d4:c8:a3:74:fb:5c:f7:80:cb: f5:cb:40:d0:70:4a:42:38:15:60:14:56:e4:af:56:9e:59:3d: 50:45:d1:66:b3:65:83:8f:af:01:00:4d:4b:9c:ba:93:31:94: 83:fd:3a:c8:45:05:73:9b:1a:93:54:7b:fd:78:ac:07:e9:7b: 5b:45:ba:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc06WocUliDBQKekWt96T/+nwpIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5NzQ3 RUMyRDJGOTAeFw0yNTA0MDUwNDQ2MDRaFw0yNTA0MDgwOTQ3MDRaMDMxMTAvBgNV BAMTKEEwMTU3ODA2QTZBRDczOUJBMURGRjZENDMyQkMyMEUxMTRCRUY0MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ8y92VzAnE4NYo1Wxxz3NSmpH ZBskYJoI/+5Sh978/pVxW8K17smkgdGqPxU1McOWcZ+tGZz5Lf7dhs0M/uxbXOsg Y2+6S4kRidgLKGDxKneAgLVEmijZLaDpArvgl5dQELg3QKxGvEOmPJHfVGaHF7pU wrxVDLYB1qkIlsLebfbggdUGNCdjpbKUlhsECyoLdZB/NSTltQe7pqOQvb7goUtm Ww2Ugt6d2KQ3jUm0nj9uJmeEQHBr0OWnb+rlOwiGB929QmaiT2AE9UzLXSJECWDD nMfR9MfEg8sm5npIlSXzdQd8CH9psxiWszj6SibywkJsLPVbfMV6cqwApDkHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoBV4Bqatc5uh3/bUMrwg4RS+9BMwHwYDVR0j BBgwFoAULu94RFNir098rrJB+ua5dH7C0vkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzI0ZTQ1Yi0yNTRiLTRmZWItYmY4ZS03YmYxMjA5MTJhZjcvMC8yRUVGNzg0NDUz NjJBRjRGN0NBRUIyNDFGQUU2Qjk3NDdFQzJEMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5NzQ3RUMy RDJGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjcyNGU0NWItMjU0Yi00ZmViLWJm OGUtN2JmMTIwOTEyYWY3LzAvMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5 NzQ3RUMyRDJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQWlzWSC6gwPZeS2UUmljuxocu1IM4HecTg CyJfLRpDA4P77GuBEChpvCoUkVYklfnEJ2Te7X1xn6EjSEVs7mPCp6ns6bOjuOlk AeaH4vb1qAWPIaIC05vpFl/Gz4QJUQYW2GTtxaxBGhjQKtnL20ERPF55lsPsl579 gjW+A9O6hcGKzDuiQSFiHww2XaKsGhcrIk0CsOYKD9ns0i915/+9PlVIvT2OBL3t oTbbGOhDPXCsbylb5FtxT4/hUdTIo3T7XPeAy/XLQNBwSkI4FWAUVuSvVp5ZPVBF 0WazZYOPrwEATUucupMxlIP9OshFBXObGpNUe/14rAfpe1tFup0= -----END CERTIFICATE-----Generated at Sat Apr 5 15:31:20 2025 by rpki-client