$ rpki-client -vvf repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft File: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft (raw, json) Hash identifier: D6B8tU8PQEuZmb/cPnLhceF+4wvwlpJaAJgvsp+AcjI= Subject key identifier: 33:EE:55:D5:C9:56:B0:72:1B:11:5E:73:38:CB:CF:36:37:EE:1B:44 Authority key identifier: E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 Certificate issuer: /CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Certificate serial: 60E4030C228724724BFE864415627A5E2722ACA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft Manifest number: D4 Signing time: Tue 03 Jun 2025 13:53:21 +0000 Manifest this update: Tue 03 Jun 2025 13:48:21 +0000 Manifest next update: Fri 06 Jun 2025 21:45:21 +0000 Files and hashes: 1: 3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa (hash: geAKj9+TOtyfNH9PasUiph/Br+j89slGEUwYIqBnSpQ=) 2: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl (hash: UOUCEv4VvsdqRiHjS1KNwhkEuLBlWR3kIP+CJcowXiw=) 3: 3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (hash: RhGN57E/ZSjGvHHK5MWz3epa97gXAk4w6YjAbvPV0fg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:e4:03:0c:22:87:24:72:4b:fe:86:44:15:62:7a:5e:27:22:ac:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Validity Not Before: Jun 3 13:48:21 2025 GMT Not After : Jun 6 21:45:21 2025 GMT Subject: CN=33EE55D5C956B0721B115E7338CBCF3637EE1B44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d3:7a:4e:5e:e4:15:f6:4b:a3:75:83:00:70: 19:6f:ad:78:3e:94:78:d8:5c:3c:e7:bc:7f:4d:29: 61:90:9e:c8:dc:2a:99:c6:64:bb:90:71:61:3e:03: 8c:83:35:26:47:48:48:bb:0d:76:54:03:2a:2a:6b: 89:17:a1:a1:89:92:ff:8d:74:05:54:89:38:b7:f2: 44:a8:e5:52:50:07:4f:76:9a:a2:03:0c:f4:80:73: ce:db:f5:fe:72:d1:74:ab:36:2a:60:12:7b:b7:e3: f7:97:cf:86:0e:f1:4f:1a:ec:e1:e0:75:54:89:e3: a1:01:b8:81:a0:3e:6a:b2:8b:dd:58:97:3d:37:e8: e1:7b:81:51:a9:8a:f5:26:62:1a:4e:7b:62:04:48: 0e:01:0c:9e:f4:fa:98:88:97:b8:05:74:dd:a6:8f: ec:3d:16:84:a6:3a:52:16:14:0d:92:2a:ff:77:63: fa:18:b4:b2:2b:7b:9e:6e:60:5d:d1:e9:ac:d3:37: 89:58:11:71:17:9d:bf:2b:d8:d2:4f:ba:d3:41:fe: 69:42:20:24:6f:b4:de:6c:16:c6:ba:e2:63:38:02: d5:54:a1:e8:3d:7a:d4:fe:81:a0:d3:2c:de:8f:7f: 64:61:08:83:ac:30:3b:a8:2b:1b:03:b2:6b:c7:73: f1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EE:55:D5:C9:56:B0:72:1B:11:5E:73:38:CB:CF:36:37:EE:1B:44 X509v3 Authority Key Identifier: keyid:E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c1:ff:b5:ef:93:f7:96:30:e6:9d:07:41:cc:a6:db:23:19: 22:da:1f:4b:a0:ff:cc:6b:d5:cd:61:ac:44:61:10:3d:ca:20: 70:18:40:de:57:7f:09:e8:5a:ca:31:d4:fe:cd:86:61:58:7a: 60:88:a7:a2:a4:2f:de:45:e1:55:bf:fd:5a:ad:5c:01:a8:f3: 7a:b4:35:56:28:36:82:63:8d:e0:e7:44:26:b3:15:5d:d7:57: c9:90:29:2b:de:f9:3c:1a:ec:a5:7b:46:0a:49:11:eb:e8:25: a2:67:de:1a:59:2d:a1:93:b9:4b:4b:85:02:d6:9f:20:c2:29: cf:42:ec:f8:81:31:52:cc:8d:ca:d1:39:d7:a5:d7:e6:d3:bc: 6c:0d:91:57:41:a8:af:97:c4:09:99:28:af:90:09:2d:92:36: 2b:e2:98:d3:1d:d8:b4:c1:17:90:fb:19:5f:59:ef:88:f9:d4: 2f:3d:47:22:59:38:92:72:57:33:79:d5:84:56:1f:6f:7d:87: 71:c0:e7:ce:04:ea:33:14:bf:59:0a:44:4e:3f:6f:2f:e5:6a: 17:d2:20:53:0f:11:7d:ec:bd:79:48:09:6e:45:25:e0:e5:5f: 9c:ce:34:12:8f:3f:c3:b1:b7:ba:12:3d:fe:2a:fa:32:a4:0a: 94:3a:2f:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYOQDDCKHJHJL/oZEFWJ6XicirKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUz MkI4RTk0MzAeFw0yNTA2MDMxMzQ4MjFaFw0yNTA2MDYyMTQ1MjFaMDMxMTAvBgNV BAMTKDMzRUU1NUQ1Qzk1NkIwNzIxQjExNUU3MzM4Q0JDRjM2MzdFRTFCNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp03pOXuQV9kujdYMAcBlvrXg+ lHjYXDznvH9NKWGQnsjcKpnGZLuQcWE+A4yDNSZHSEi7DXZUAyoqa4kXoaGJkv+N dAVUiTi38kSo5VJQB092mqIDDPSAc87b9f5y0XSrNipgEnu34/eXz4YO8U8a7OHg dVSJ46EBuIGgPmqyi91Ylz036OF7gVGpivUmYhpOe2IESA4BDJ70+piIl7gFdN2m j+w9FoSmOlIWFA2SKv93Y/oYtLIre55uYF3R6azTN4lYEXEXnb8r2NJPutNB/mlC ICRvtN5sFsa64mM4AtVUoeg9etT+gaDTLN6Pf2RhCIOsMDuoKxsDsmvHc/HxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM+5V1clWsHIbEV5zOMvPNjfuG0QwHwYDVR0j BBgwFoAU4p6DwsWJf6T2zv48N+4aZTK46UMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTdjZjlhMC1lOTI3LTQ4MTQtODQ0Ny04YjNhMDAyNzYwYTgvMC9FMjlFODNDMkM1 ODk3RkE0RjZDRUZFM0MzN0VFMUE2NTMyQjhFOTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUzMkI4 RTk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk3Y2Y5YTAtZTkyNy00ODE0LTg0 NDctOGIzYTAwMjc2MGE4LzAvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFB NjUzMkI4RTk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvB/7Xvk/eWMOadB0HMptsjGSLaH0ug/8xr 1c1hrERhED3KIHAYQN5XfwnoWsox1P7NhmFYemCIp6KkL95F4VW//VqtXAGo83q0 NVYoNoJjjeDnRCazFV3XV8mQKSve+Twa7KV7RgpJEevoJaJn3hpZLaGTuUtLhQLW nyDCKc9C7PiBMVLMjcrROdel1+bTvGwNkVdBqK+XxAmZKK+QCS2SNivimNMd2LTB F5D7GV9Z74j51C89RyJZOJJyVzN51YRWH299h3HA584E6jMUv1kKRE4/by/lahfS IFMPEX3svXlICW5FJeDlX5zONBKPP8Oxt7oSPf4q+jKkCpQ6L+w= -----END CERTIFICATE-----Generated at Tue Jun 3 23:30:10 2025 by rpki-client