$ rpki-client -vvf repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.mft File: EF4C4D45351DBB35C40C58769D718931B1AAD47D.mft (raw, json) Hash identifier: 9tlG+/LmTim6ACeajzCcxfmSrf6Y5DyQW0LaY1vEpEM= Subject key identifier: D3:89:F9:BB:F6:06:B4:0A:13:FC:B1:3F:5C:5B:2E:B6:3E:15:DE:D5 Authority key identifier: EF:4C:4D:45:35:1D:BB:35:C4:0C:58:76:9D:71:89:31:B1:AA:D4:7D Certificate issuer: /CN=EF4C4D45351DBB35C40C58769D718931B1AAD47D Certificate serial: 17D10E51CB806F7DA668D6BFA03C7BF19DF6C033 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF4C4D45351DBB35C40C58769D718931B1AAD47D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.mft Manifest number: 04C1 Signing time: Thu 03 Apr 2025 18:21:37 +0000 Manifest this update: Thu 03 Apr 2025 18:16:37 +0000 Manifest next update: Mon 07 Apr 2025 02:16:37 +0000 Files and hashes: 1: EF4C4D45351DBB35C40C58769D718931B1AAD47D.crl (hash: CijLxothoX1ufZzSYP8x2wjEsVjHCrUCsW+fmNHExYo=) 2: 3130332e35342e3133342e302f32342d3234203d3e203633383736.roa (hash: 0CbQfTPeAnBrUAt9K7mbtAEOAg4jYj6TSyAclEWNyE4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.crl rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF4C4D45351DBB35C40C58769D718931B1AAD47D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 02:16:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:d1:0e:51:cb:80:6f:7d:a6:68:d6:bf:a0:3c:7b:f1:9d:f6:c0:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF4C4D45351DBB35C40C58769D718931B1AAD47D Validity Not Before: Apr 3 18:16:37 2025 GMT Not After : Apr 7 02:16:37 2025 GMT Subject: CN=D389F9BBF606B40A13FCB13F5C5B2EB63E15DED5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cd:cc:89:4f:82:ca:18:eb:28:1b:67:5b:1d: 8f:9a:20:2f:e1:6b:f9:c0:5c:e5:16:04:2d:f7:54: 9d:7e:66:75:16:8e:00:05:b0:a8:51:4d:52:03:d9: 86:d4:c4:04:0a:83:61:2d:4f:db:9d:86:ce:9f:c9: 02:ff:43:96:1c:ce:96:fe:a1:b1:f9:81:69:fc:89: 73:2a:38:a7:6f:53:70:01:28:2e:3e:7c:65:9a:60: a9:c4:74:79:c9:4e:78:20:48:ee:0b:60:e8:37:82: 5f:4a:fb:2d:91:25:2a:19:b8:1a:6f:c6:25:3a:1b: c9:72:4d:e5:82:40:61:90:ee:60:e6:d1:24:1d:f5: f1:59:b6:b4:26:cf:37:63:d8:74:4a:e4:4b:42:24: 1b:8a:69:6c:8e:48:17:99:61:4e:07:cd:49:ad:4d: fc:05:7a:6a:df:84:7a:1a:2b:4d:31:04:92:21:ac: 4c:bd:91:2f:1d:00:7c:4d:2e:d8:70:f0:a5:8e:29: 65:bc:c6:73:ca:5c:73:b7:d4:12:60:1a:30:5b:50: ab:00:d0:a2:13:b0:81:d5:94:22:25:7e:83:66:27: af:4d:bd:d8:40:a0:a7:da:b2:f3:45:e4:ee:db:cf: 4c:1f:e5:3c:29:3e:af:0c:ee:4d:84:9d:26:eb:d1: 00:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:89:F9:BB:F6:06:B4:0A:13:FC:B1:3F:5C:5B:2E:B6:3E:15:DE:D5 X509v3 Authority Key Identifier: keyid:EF:4C:4D:45:35:1D:BB:35:C4:0C:58:76:9D:71:89:31:B1:AA:D4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF4C4D45351DBB35C40C58769D718931B1AAD47D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:0c:5a:80:1c:63:da:80:e7:14:bb:d5:69:ee:3d:3c:f1:4b: 86:ce:15:2f:a6:1c:4e:16:c0:45:69:ad:01:e3:53:19:72:cc: 8d:47:d2:33:63:e6:d1:f6:19:b1:b8:31:64:d2:58:ad:b6:85: 2f:15:cb:42:82:77:e0:03:f0:a8:99:9e:0a:72:ab:7e:0d:09: 23:89:f2:f9:3c:dc:1c:20:09:73:c5:7d:5f:75:d0:fb:a2:7c: 15:d2:df:ba:b7:0f:00:f7:3b:e1:e2:23:8d:7e:2b:47:61:3f: 4d:c9:0f:a0:43:59:c2:30:28:31:90:a9:a4:e0:bb:88:0c:ea: 85:30:84:09:ea:1c:96:b9:ec:7b:85:96:b9:e1:f4:06:16:ed: 5c:94:d5:e9:ff:82:b0:d5:48:34:d8:b0:29:cc:2d:bc:c4:46: d4:ad:99:4c:d7:b2:00:9c:c8:b6:2a:56:62:57:60:c3:80:a6: 61:fa:fd:ae:8f:a9:cf:c4:26:72:82:33:a8:d6:7b:6d:f3:42: 04:94:4a:6e:f7:d3:eb:c7:60:dc:7e:2b:9f:29:4a:ce:b4:92: 71:07:02:1a:1a:b4:60:01:b2:ec:fc:87:f3:9f:9e:56:de:e2: 45:95:50:18:61:66:bd:b2:45:c4:22:1e:23:7d:ec:bd:06:d3: 6a:84:d6:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF9EOUcuAb32maNa/oDx78Z32wDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY0QzRENDUzNTFEQkIzNUM0MEM1ODc2OUQ3MTg5MzFC MUFBRDQ3RDAeFw0yNTA0MDMxODE2MzdaFw0yNTA0MDcwMjE2MzdaMDMxMTAvBgNV BAMTKEQzODlGOUJCRjYwNkI0MEExM0ZDQjEzRjVDNUIyRUI2M0UxNURFRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZzcyJT4LKGOsoG2dbHY+aIC/h a/nAXOUWBC33VJ1+ZnUWjgAFsKhRTVID2YbUxAQKg2EtT9udhs6fyQL/Q5Yczpb+ obH5gWn8iXMqOKdvU3ABKC4+fGWaYKnEdHnJTnggSO4LYOg3gl9K+y2RJSoZuBpv xiU6G8lyTeWCQGGQ7mDm0SQd9fFZtrQmzzdj2HRK5EtCJBuKaWyOSBeZYU4HzUmt TfwFemrfhHoaK00xBJIhrEy9kS8dAHxNLthw8KWOKWW8xnPKXHO31BJgGjBbUKsA 0KITsIHVlCIlfoNmJ69NvdhAoKfasvNF5O7bz0wf5TwpPq8M7k2EnSbr0QABAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU04n5u/YGtAoT/LE/XFsutj4V3tUwHwYDVR0j BBgwFoAU70xNRTUduzXEDFh2nXGJMbGq1H0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzAyODJlZi0yNTAwLTRmZmItOGQ3ZC0xZjUwNTQzNTIyN2QvMC9FRjRDNEQ0NTM1 MURCQjM1QzQwQzU4NzY5RDcxODkzMUIxQUFENDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUY0QzRENDUzNTFEQkIzNUM0MEM1ODc2OUQ3MTg5MzFCMUFB RDQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzcwMjgyZWYtMjUwMC00ZmZiLThk N2QtMWY1MDU0MzUyMjdkLzAvRUY0QzRENDUzNTFEQkIzNUM0MEM1ODc2OUQ3MTg5 MzFCMUFBRDQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcMWoAcY9qA5xS71WnuPTzxS4bOFS+mHE4W wEVprQHjUxlyzI1H0jNj5tH2GbG4MWTSWK22hS8Vy0KCd+AD8KiZngpyq34NCSOJ 8vk83BwgCXPFfV910PuifBXS37q3DwD3O+HiI41+K0dhP03JD6BDWcIwKDGQqaTg u4gM6oUwhAnqHJa57HuFlrnh9AYW7VyU1en/grDVSDTYsCnMLbzERtStmUzXsgCc yLYqVmJXYMOApmH6/a6Pqc/EJnKCM6jWe23zQgSUSm730+vHYNx+K58pSs60knEH AhoatGABsuz8h/Ofnlbe4kWVUBhhZr2yRcQiHiN97L0G02qE1vE= -----END CERTIFICATE-----Generated at Sat Apr 5 19:09:02 2025 by rpki-client