$ rpki-client -vvf repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft File: E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft (raw, json) Hash identifier: tMl3F8zDuIpxDhCK8i5ClWRTSPpEGA0E4gtTRH7OJOM= Subject key identifier: E8:F9:4C:6D:71:C1:BB:D6:7B:85:5F:2F:A5:BA:27:4F:F0:75:20:07 Authority key identifier: E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 Certificate issuer: /CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Certificate serial: 33999C670CB490F0180A75700D931DEA062E5ED1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft Manifest number: 04CB Signing time: Fri 04 Apr 2025 01:12:16 +0000 Manifest this update: Fri 04 Apr 2025 01:07:16 +0000 Manifest next update: Mon 07 Apr 2025 04:06:16 +0000 Files and hashes: 1: 323430323a366163303a3a2f33332d3333203d3e20313337333036.roa (hash: JzyhQGTzUeLnEUHXH7NE0CSKgoPX1wzlUT6xD8+rNxs=) 2: E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl (hash: AhoCvEl/edW10x8lFLp4PwIx3G2b3Ietv806p0d5rck=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 04:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:99:9c:67:0c:b4:90:f0:18:0a:75:70:0d:93:1d:ea:06:2e:5e:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Validity Not Before: Apr 4 01:07:16 2025 GMT Not After : Apr 7 04:06:16 2025 GMT Subject: CN=E8F94C6D71C1BBD67B855F2FA5BA274FF0752007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d2:6f:87:14:82:eb:0a:a5:d6:46:51:f4:50: 4f:6c:45:e2:a1:07:df:1e:ad:b3:50:d9:23:75:b6: bc:be:fb:ec:27:b9:9e:55:5a:57:7b:cb:55:e4:e7: 45:e5:b2:5c:40:46:56:c3:72:05:55:56:da:8e:34: f9:4a:bf:c9:32:d7:24:27:2e:a7:29:d8:40:44:8b: 69:28:1f:ac:04:fc:54:e5:a1:3e:f3:d3:37:3d:9b: 8f:e6:6f:69:3e:03:48:97:63:a3:c4:e2:42:70:88: 4b:b7:15:c0:a8:b4:a3:72:76:28:65:da:38:7e:b3: 2f:e0:a7:e9:fc:63:91:59:b8:6a:e0:ec:50:6a:d9: 3b:7c:a6:b1:b6:ca:6f:8b:06:2c:f8:f0:cd:4d:10: b3:73:4d:6c:20:85:bd:5d:cd:ae:cc:a0:de:89:24: f0:46:f7:8f:ca:48:6e:c9:10:5b:46:9b:83:09:32: a5:7e:89:32:3a:6c:13:f1:94:d4:5e:11:8d:09:07: 94:a7:05:52:a3:90:6d:5a:0c:ff:c3:dc:43:55:31: 2e:b6:11:d2:30:27:fb:4f:d1:77:77:53:56:ff:86: a7:83:22:eb:77:1a:3d:b0:d7:e5:4b:43:89:41:48: 31:86:77:e7:1d:8e:09:77:87:37:d5:c0:7c:8d:3a: 21:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F9:4C:6D:71:C1:BB:D6:7B:85:5F:2F:A5:BA:27:4F:F0:75:20:07 X509v3 Authority Key Identifier: keyid:E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:bc:a7:f1:7e:63:e8:60:44:a2:25:89:ed:49:e8:72:6c:09: 2d:3c:54:d1:bf:fa:12:87:66:25:75:1a:11:f8:ae:66:7d:60: 76:45:d2:9c:2e:d7:5e:9b:bc:62:b3:c9:e0:46:20:8a:c9:4a: 92:f9:bb:3d:5c:83:e8:98:d2:cd:a3:13:9c:26:78:c1:e9:10: d7:0e:87:cd:24:eb:b3:1f:ba:e3:a2:d7:1c:26:e4:58:44:b7: b8:ef:4f:6e:29:99:c1:5d:4b:29:90:ce:ee:3b:94:bf:03:69: dc:a1:55:6c:43:1c:5f:5c:a6:63:6f:a6:9a:77:a5:35:16:b9: 28:b5:01:e0:8f:48:d3:51:75:c7:ff:32:d6:9a:ee:cb:28:a0: e7:36:18:c8:f3:d3:a5:91:df:87:7a:30:e0:92:92:df:a6:9e: 5c:c4:a4:f4:7f:3b:45:24:0f:b2:83:06:99:b9:2b:eb:f5:20: ba:36:1a:2b:17:12:0a:2d:60:bc:0f:ac:2f:32:17:9f:7f:02: 53:05:36:5c:e2:84:6b:b4:20:32:cd:f4:13:e7:c6:3b:74:25: 2e:bc:1d:4b:4d:a7:ac:c3:86:b2:64:7f:4d:8f:fa:4e:f4:c6: 05:82:e1:d7:7e:06:55:95:12:d7:b2:db:42:75:f9:64:17:38: 07:21:01:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM5mcZwy0kPAYCnVwDZMd6gYuXtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdE QzVFMTAxNDAeFw0yNTA0MDQwMTA3MTZaFw0yNTA0MDcwNDA2MTZaMDMxMTAvBgNV BAMTKEU4Rjk0QzZENzFDMUJCRDY3Qjg1NUYyRkE1QkEyNzRGRjA3NTIwMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC70m+HFILrCqXWRlH0UE9sReKh B98erbNQ2SN1try+++wnuZ5VWld7y1Xk50XlslxARlbDcgVVVtqONPlKv8ky1yQn Lqcp2EBEi2koH6wE/FTloT7z0zc9m4/mb2k+A0iXY6PE4kJwiEu3FcCotKNydihl 2jh+sy/gp+n8Y5FZuGrg7FBq2Tt8prG2ym+LBiz48M1NELNzTWwghb1dza7MoN6J JPBG94/KSG7JEFtGm4MJMqV+iTI6bBPxlNReEY0JB5SnBVKjkG1aDP/D3ENVMS62 EdIwJ/tP0Xd3U1b/hqeDIut3Gj2w1+VLQ4lBSDGGd+cdjgl3hzfVwHyNOiEbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6PlMbXHBu9Z7hV8vpbonT/B1IAcwHwYDVR0j BBgwFoAU5yYirg9ptM2ryc0iOz4Gx9xeEBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1YmY3OS1lODRhLTQwZTAtOGZkNC1mMTY5YzE4NmJlOGYvMC9FNzI2MjJBRTBG NjlCNENEQUJDOUNEMjIzQjNFMDZDN0RDNUUxMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdEQzVF MTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQzNWJmNzktZTg0YS00MGUwLThm ZDQtZjE2OWMxODZiZThmLzAvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2 QzdEQzVFMTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADu8p/F+Y+hgRKIlie1J6HJsCS08VNG/+hKH ZiV1GhH4rmZ9YHZF0pwu116bvGKzyeBGIIrJSpL5uz1cg+iY0s2jE5wmeMHpENcO h80k67MfuuOi1xwm5FhEt7jvT24pmcFdSymQzu47lL8DadyhVWxDHF9cpmNvppp3 pTUWuSi1AeCPSNNRdcf/Mtaa7ssooOc2GMjz06WR34d6MOCSkt+mnlzEpPR/O0Uk D7KDBpm5K+v1ILo2GisXEgotYLwPrC8yF59/AlMFNlzihGu0IDLN9BPnxjt0JS68 HUtNp6zDhrJkf02P+k70xgWC4dd+BlWVEtey20J1+WQXOAchAYE= -----END CERTIFICATE-----Generated at Sat Apr 5 15:30:37 2025 by rpki-client