$ rpki-client -vvf repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft File: E44D4DE701D932713536A084F76894A6B0473F5E.mft (raw, json) Hash identifier: oiPT+Ua7wlFKlmIUTJfCzWYvVlC7j56TbHT1vaw1b2o= Subject key identifier: 7E:BD:C2:F0:64:91:AF:B5:97:48:3F:58:21:7D:6A:CB:DB:CD:39:D3 Authority key identifier: E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E Certificate issuer: /CN=E44D4DE701D932713536A084F76894A6B0473F5E Certificate serial: 68D455FD9BA73AE995E62665CEBA0D02EEE2F7BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft Manifest number: 01ED Signing time: Tue 08 Apr 2025 00:52:07 +0000 Manifest this update: Tue 08 Apr 2025 00:47:07 +0000 Manifest next update: Fri 11 Apr 2025 04:02:07 +0000 Files and hashes: 1: 3130332e3136322e3232322e302f32332d3233203d3e20313431363635.roa (hash: h89XOamgDwDWi9rCwFtXxPdArOyMK97fbJVb4EWM5BY=) 2: E44D4DE701D932713536A084F76894A6B0473F5E.crl (hash: tuGUgT0/MdJRmOaq8r50y4hTQftsF8eqNiJ/K5szK4Y=) 3: 3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa (hash: QXc5SZ2mcrzRGa7HMiuP65CO59Id/j9bwy5WhnEqFAY=) 4: 3130332e3136322e3232332e302f32342d3234203d3e203438343635.roa (hash: q0ye9IL2cKy0eD0AHe3su2hyH0j+nhTCUAcAGoeDzcA=) 5: 3130332e3136322e3232332e302f32342d3234203d3e20313431363635.roa (hash: C4f9HONqCoFunKMMLWS01Us6Ynh/U9XTu69kgsosFEI=) 6: 3130332e3136322e3232322e302f32342d3234203d3e203438343635.roa (hash: ZcyzUqd1mm5B0d2i3HXw5r3ChXyjazYskOg4oPaP1PQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 04:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:d4:55:fd:9b:a7:3a:e9:95:e6:26:65:ce:ba:0d:02:ee:e2:f7:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E44D4DE701D932713536A084F76894A6B0473F5E Validity Not Before: Apr 8 00:47:07 2025 GMT Not After : Apr 11 04:02:07 2025 GMT Subject: CN=7EBDC2F06491AFB597483F58217D6ACBDBCD39D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:15:0d:b9:d1:43:c9:27:1c:a7:84:5c:29:3b: ac:4d:0a:8c:e5:9f:22:6a:cc:23:66:a9:e3:cd:81: b9:1f:a1:89:52:42:cb:58:7c:c2:be:fa:6e:3d:18: 84:be:ca:9d:57:d9:c3:f4:b5:13:3b:ac:19:85:01: 8d:69:65:53:16:f6:6c:bd:21:d0:74:6d:fb:57:e9: aa:09:ea:b3:8a:62:4c:8d:de:9e:df:c1:0b:7e:04: 91:0a:81:8f:af:c6:3a:5c:73:d9:f1:64:64:69:1a: 82:ca:60:43:10:6c:06:1b:02:e2:4b:38:aa:51:b2: 44:46:34:5d:92:bb:9e:fc:c9:59:8e:24:1c:4a:f5: ef:34:bf:5b:d9:d8:d3:11:40:a6:1a:c6:b5:94:e2: 69:73:7c:43:c2:16:01:6b:c8:84:4c:b6:84:4d:7d: 40:e8:dc:dd:d3:e9:96:c6:43:d7:2d:49:bf:1c:56: 7d:2a:a7:9e:5f:86:cb:58:c4:85:23:1c:c8:23:54: dd:e4:33:ac:5b:55:1c:4a:aa:6d:fd:61:39:7c:58: ec:4a:1c:67:e2:be:59:d5:cf:e3:94:54:54:2d:e8: f9:0d:e5:e3:64:c5:1b:a4:02:1f:a5:e8:df:53:1d: d2:a6:26:14:f2:62:c7:20:6e:c7:d6:31:3a:c9:6e: 5b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BD:C2:F0:64:91:AF:B5:97:48:3F:58:21:7D:6A:CB:DB:CD:39:D3 X509v3 Authority Key Identifier: keyid:E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:08:b8:09:38:d6:a8:ce:85:75:77:b6:04:5f:10:68:a4:97: 85:88:71:c5:14:fd:e9:83:98:8e:bf:0b:f6:60:db:09:2b:c4: 74:77:37:87:a0:b9:44:3a:86:32:7f:fe:74:5e:4b:c4:7e:10: d3:70:42:2e:f8:82:5c:0b:6c:fc:3e:09:34:85:11:f9:ae:fa: 12:65:3d:e3:ae:54:b3:ec:66:42:c2:4f:52:f1:05:64:53:e0: 9e:4f:97:4a:8e:f9:a6:1a:8b:cf:4b:94:20:db:4b:51:f9:75: 24:05:63:b9:ff:f4:11:1d:fc:0f:ec:41:7f:a0:9f:80:7a:8d: 35:01:24:53:72:b4:b4:8d:20:d4:7a:ec:f0:a7:e2:a7:6c:e4: 8d:25:98:64:9f:b6:0a:ab:af:6b:0c:df:1a:2e:af:c9:ef:47: e5:8b:e6:8a:84:a1:51:5c:e7:08:67:7f:ea:a6:3c:d3:e8:05: d2:da:29:cd:fa:e1:de:46:7c:27:b5:3b:11:16:19:70:9a:aa: c9:3f:63:fc:79:a7:a3:b9:71:df:4d:b5:64:3d:0a:6d:95:0c: 88:96:77:f7:41:fa:b1:04:27:26:0b:34:9d:18:2b:f8:c4:f7: 60:3b:3b:be:87:83:d4:42:b5:32:b3:20:56:22:0e:d2:72:ad: a1:7b:ce:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaNRV/ZunOumV5iZlzroNAu7i97swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ0RDRERTcwMUQ5MzI3MTM1MzZBMDg0Rjc2ODk0QTZC MDQ3M0Y1RTAeFw0yNTA0MDgwMDQ3MDdaFw0yNTA0MTEwNDAyMDdaMDMxMTAvBgNV BAMTKDdFQkRDMkYwNjQ5MUFGQjU5NzQ4M0Y1ODIxN0Q2QUNCREJDRDM5RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWFQ250UPJJxynhFwpO6xNCozl nyJqzCNmqePNgbkfoYlSQstYfMK++m49GIS+yp1X2cP0tRM7rBmFAY1pZVMW9my9 IdB0bftX6aoJ6rOKYkyN3p7fwQt+BJEKgY+vxjpcc9nxZGRpGoLKYEMQbAYbAuJL OKpRskRGNF2Su578yVmOJBxK9e80v1vZ2NMRQKYaxrWU4mlzfEPCFgFryIRMtoRN fUDo3N3T6ZbGQ9ctSb8cVn0qp55fhstYxIUjHMgjVN3kM6xbVRxKqm39YTl8WOxK HGfivlnVz+OUVFQt6PkN5eNkxRukAh+l6N9THdKmJhTyYscgbsfWMTrJbltnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfr3C8GSRr7WXSD9YIX1qy9vNOdMwHwYDVR0j BBgwFoAU5E1N5wHZMnE1NqCE92iUprBHP14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjRmMGZmYS1lMDMxLTRlZTEtYmYwZi02NGJhY2ZjZjI5NDIvMC9FNDRENERFNzAx RDkzMjcxMzUzNkEwODRGNzY4OTRBNkIwNDczRjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ0RDRERTcwMUQ5MzI3MTM1MzZBMDg0Rjc2ODk0QTZCMDQ3 M0Y1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0ZjBmZmEtZTAzMS00ZWUxLWJm MGYtNjRiYWNmY2YyOTQyLzAvRTQ0RDRERTcwMUQ5MzI3MTM1MzZBMDg0Rjc2ODk0 QTZCMDQ3M0Y1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAIuAk41qjOhXV3tgRfEGikl4WIccUU/emD mI6/C/Zg2wkrxHR3N4eguUQ6hjJ//nReS8R+ENNwQi74glwLbPw+CTSFEfmu+hJl PeOuVLPsZkLCT1LxBWRT4J5Pl0qO+aYai89LlCDbS1H5dSQFY7n/9BEd/A/sQX+g n4B6jTUBJFNytLSNINR67PCn4qds5I0lmGSftgqrr2sM3xour8nvR+WL5oqEoVFc 5whnf+qmPNPoBdLaKc364d5GfCe1OxEWGXCaqsk/Y/x5p6O5cd9NtWQ9Cm2VDIiW d/dB+rEEJyYLNJ0YK/jE92A7O76Hg9RCtTKzIFYiDtJyraF7ztA= -----END CERTIFICATE-----Generated at Tue Apr 8 17:12:09 2025 by rpki-client