$ rpki-client -vvf repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft File: E0D54A271CD04583E0304613C7075C15FA03E497.mft (raw, json) Hash identifier: VFp7GLbiiBgtKLpR2ZaZY727NL53ydqpuARCAE0cCBU= Subject key identifier: ED:85:FD:C9:99:C3:4F:EB:DA:0E:4E:DD:AB:E0:50:1C:24:E9:A7:90 Authority key identifier: E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 Certificate issuer: /CN=E0D54A271CD04583E0304613C7075C15FA03E497 Certificate serial: 22E7CB9E78056515B552D97A856A9931FCC3EA1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft Manifest number: 0392 Signing time: Sat 05 Apr 2025 11:42:14 +0000 Manifest this update: Sat 05 Apr 2025 11:37:14 +0000 Manifest next update: Tue 08 Apr 2025 12:49:14 +0000 Files and hashes: 1: 3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa (hash: iaC5WCoK/QU+xKaB0vnR2mTORiwDsx2/t1ElkG42yQ8=) 2: 323430343a636263303a3a2f33322d3332203d3e20313338383433.roa (hash: CUX/FZUFqFLVmfqcGn4Uxf38ndBFpWWkwqBCc1O0Nwg=) 3: E0D54A271CD04583E0304613C7075C15FA03E497.crl (hash: 0+sRNncLDtetzeDSsD2eH67s1vyqhaEsOgFqvSaKhBc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e7:cb:9e:78:05:65:15:b5:52:d9:7a:85:6a:99:31:fc:c3:ea:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0D54A271CD04583E0304613C7075C15FA03E497 Validity Not Before: Apr 5 11:37:14 2025 GMT Not After : Apr 8 12:49:14 2025 GMT Subject: CN=ED85FDC999C34FEBDA0E4EDDABE0501C24E9A790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:57:36:ac:9c:90:02:b8:8f:40:10:7d:8a:a2: 42:b6:0d:cd:92:3e:ce:b6:1f:95:99:c8:5b:9d:3f: 2b:69:70:a9:5c:21:39:7f:11:6d:c3:bf:0c:1c:ce: d4:ac:7c:2d:1e:ac:c9:6f:ca:3a:af:97:44:d4:eb: 83:8e:a8:67:d7:ee:7a:bd:48:61:75:c3:42:b7:c7: 8b:c6:ad:e5:31:04:22:d2:6b:69:1c:be:42:fe:3d: 2c:f6:79:0d:08:ef:58:61:5a:d5:d5:2f:3f:3d:d7: 32:f5:e8:09:58:c4:c0:69:26:5d:86:e5:32:76:09: 6f:cb:01:d5:87:6f:5e:32:ce:da:6f:75:44:f5:d8: b1:d9:87:b8:35:29:65:45:6b:41:5d:a2:14:3f:49: b1:ea:95:22:a8:25:4d:c2:a8:10:8e:f1:7c:d7:a5: 37:d9:b2:c3:4d:25:a1:c0:45:66:59:10:7b:2d:50: 55:49:ec:c1:fe:1d:e9:e9:5e:60:6e:0e:8f:d2:4c: 4f:4c:97:44:14:55:0a:f2:ef:40:b4:82:26:4c:48: 7c:6d:51:a5:a2:47:f6:e9:1d:ee:76:ce:b4:40:f0: 20:27:9c:1b:66:0b:2e:dc:f8:65:9f:40:6a:cd:2d: 71:8c:d7:8b:1f:36:d2:bd:8e:81:ac:33:4b:87:f2: a6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:85:FD:C9:99:C3:4F:EB:DA:0E:4E:DD:AB:E0:50:1C:24:E9:A7:90 X509v3 Authority Key Identifier: keyid:E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:88:e2:45:d8:54:d3:6a:b7:49:bb:5a:7b:1f:1f:1d:47:fd: 4f:a8:35:95:c2:b4:51:bb:6a:ec:e9:39:23:18:15:a0:13:e0: 1f:5b:48:cd:7c:0b:77:5e:c3:55:e1:72:94:a3:c1:86:d7:71: d2:9b:00:a0:3e:aa:21:c5:12:91:39:bb:55:5c:b4:82:95:2d: 45:9e:60:a1:32:da:3b:29:93:8d:50:60:78:54:c1:54:21:87: a4:c4:ac:ba:73:70:00:c9:4d:ce:f7:29:bb:af:07:87:26:88: 77:86:1c:8a:37:8c:69:8d:c3:60:50:b4:09:d2:cf:c4:8d:37: b4:4b:25:c1:c7:de:f0:c3:fd:a9:ef:1b:3c:8d:83:52:d6:e6: cd:ad:8c:1b:81:54:8a:10:70:dc:d0:bf:59:08:c4:75:bc:dc: e1:ef:dd:bc:d5:b5:a4:0d:58:e6:8c:38:6b:9b:8a:06:6f:01: 2a:2f:31:30:7d:76:fb:7d:e8:a5:2c:82:c6:1b:7d:7b:d2:2d: d8:2e:86:52:e7:31:2f:39:38:eb:1e:e4:43:98:9f:b3:ff:a1: 08:58:6c:55:67:16:29:f1:61:3d:7d:e5:a7:ec:e0:7e:05:d8: 55:b4:99:c4:5c:d7:e2:ef:86:d9:ea:b9:03:42:4c:be:52:d8: 6a:20:32:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIufLnngFZRW1Utl6hWqZMfzD6hwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVG QTAzRTQ5NzAeFw0yNTA0MDUxMTM3MTRaFw0yNTA0MDgxMjQ5MTRaMDMxMTAvBgNV BAMTKEVEODVGREM5OTlDMzRGRUJEQTBFNEVEREFCRTA1MDFDMjRFOUE3OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuVzasnJACuI9AEH2KokK2Dc2S Ps62H5WZyFudPytpcKlcITl/EW3DvwwcztSsfC0erMlvyjqvl0TU64OOqGfX7nq9 SGF1w0K3x4vGreUxBCLSa2kcvkL+PSz2eQ0I71hhWtXVLz891zL16AlYxMBpJl2G 5TJ2CW/LAdWHb14yztpvdUT12LHZh7g1KWVFa0FdohQ/SbHqlSKoJU3CqBCO8XzX pTfZssNNJaHARWZZEHstUFVJ7MH+HenpXmBuDo/STE9Ml0QUVQry70C0giZMSHxt UaWiR/bpHe52zrRA8CAnnBtmCy7c+GWfQGrNLXGM14sfNtK9joGsM0uH8qafAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7YX9yZnDT+vaDk7dq+BQHCTpp5AwHwYDVR0j BBgwFoAU4NVKJxzQRYPgMEYTxwdcFfoD5JcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzU4NjdkOC0zZDZmLTQ4MTYtYjg0Zi1mZGQ1YzUwMmI2MzQvMC9FMEQ1NEEyNzFD RDA0NTgzRTAzMDQ2MTNDNzA3NUMxNUZBMDNFNDk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVGQTAz RTQ5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmM1ODY3ZDgtM2Q2Zi00ODE2LWI4 NGYtZmRkNWM1MDJiNjM0LzAvRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVD MTVGQTAzRTQ5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCI4kXYVNNqt0m7WnsfHx1H/U+oNZXCtFG7 auzpOSMYFaAT4B9bSM18C3dew1XhcpSjwYbXcdKbAKA+qiHFEpE5u1VctIKVLUWe YKEy2jspk41QYHhUwVQhh6TErLpzcADJTc73KbuvB4cmiHeGHIo3jGmNw2BQtAnS z8SNN7RLJcHH3vDD/anvGzyNg1LW5s2tjBuBVIoQcNzQv1kIxHW83OHv3bzVtaQN WOaMOGubigZvASovMTB9dvt96KUsgsYbfXvSLdguhlLnMS85OOse5EOYn7P/oQhY bFVnFinxYT195afs4H4F2FW0mcRc1+LvhtnquQNCTL5S2GogMrw= -----END CERTIFICATE-----Generated at Sat Apr 5 23:19:38 2025 by rpki-client