$ rpki-client -vvf repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft File: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft (raw, json) Hash identifier: CNPVpVJDW9kjH3uEwZElQSqsSYD5VTDteWCW45pftcs= Subject key identifier: 24:2F:38:A3:1B:93:FF:2A:8B:20:E4:83:9B:81:05:2A:F9:33:6C:0B Authority key identifier: E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42 Certificate issuer: /CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42 Certificate serial: 71DD7B362921544A2F7B4C30F9478C0371490755 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft Manifest number: 04E2 Signing time: Mon 02 Jun 2025 02:04:14 +0000 Manifest this update: Mon 02 Jun 2025 01:59:14 +0000 Manifest next update: Thu 05 Jun 2025 07:27:14 +0000 Files and hashes: 1: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl (hash: yHJml7Wf4Ajo5WLaSb2VC28iZtPDP6q1IWgyqBzGNW8=) 2: 35392e3135332e32342e302f32332d3233203d3e203539323835.roa (hash: 1SizngiTVzIbRBWH1t3CjVmzzkPKhWLCfAxINTFYNoo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 07:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:dd:7b:36:29:21:54:4a:2f:7b:4c:30:f9:47:8c:03:71:49:07:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42 Validity Not Before: Jun 2 01:59:14 2025 GMT Not After : Jun 5 07:27:14 2025 GMT Subject: CN=242F38A31B93FF2A8B20E4839B81052AF9336C0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:97:1c:ed:9f:e6:e1:1a:58:a9:6c:1d:6a:9d: 8f:88:a2:f3:9a:05:ac:3c:1d:30:6a:eb:0d:60:0d: 11:ad:06:54:4b:1c:d6:ac:f0:fa:29:6f:21:a6:40: 0f:e2:93:98:d6:6e:58:1d:27:8d:e5:17:92:98:e5: 17:21:2e:5d:02:05:29:54:aa:e9:5e:39:c8:c6:1e: 53:6e:ed:6b:8b:f9:fb:39:7b:04:b0:4c:28:96:e0: 0f:a6:06:5f:92:fe:ea:22:69:e9:11:a9:3c:22:8c: 10:d5:8d:77:a4:8b:47:8a:5c:b5:3f:c3:a0:c4:5b: ba:eb:36:f0:1e:f0:40:d9:48:0d:6d:10:af:8d:4e: 3b:8a:3c:b3:9b:93:a8:93:fc:59:ee:03:d8:a2:12: 1c:1b:68:d1:29:06:ec:70:e2:11:ed:84:f0:40:e2: 4f:74:45:34:b2:10:7b:d5:fa:2b:17:ff:89:5f:9a: 33:c7:4f:eb:62:8b:41:3d:1c:64:4b:b5:8c:27:ae: 83:44:b5:68:48:f7:c1:2d:16:6a:04:70:ff:c0:e9: 4c:77:48:a9:d0:15:ae:64:c3:af:dd:d0:16:6a:36: e7:ad:43:b6:9c:cd:8f:6e:d4:38:ed:06:5c:f6:b5: 3b:a9:ef:f7:7b:c4:47:cd:d8:ee:37:80:3b:fc:2e: a1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2F:38:A3:1B:93:FF:2A:8B:20:E4:83:9B:81:05:2A:F9:33:6C:0B X509v3 Authority Key Identifier: keyid:E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:c2:74:48:be:9f:db:97:94:a8:87:40:d0:9c:05:25:a4:76: 45:6d:40:83:dc:22:b0:ce:bc:1c:d2:82:6e:eb:5d:4d:e9:73: 53:b5:7a:d2:c1:c5:38:0b:43:29:96:40:cf:b0:14:d8:4c:5b: 5a:2f:06:b5:69:51:e8:9e:a2:f0:f9:57:6f:66:42:6b:a6:4a: 9e:83:93:d0:19:86:b3:c1:91:c6:50:13:37:5c:69:68:1a:23: 9d:f9:5a:42:fa:77:b4:1c:56:56:5e:39:b2:b1:20:ce:18:76: cb:49:4e:98:35:71:8e:9e:6b:0a:ee:43:1e:f5:47:1b:76:7e: 46:7f:cf:84:02:ee:b0:c3:d2:39:83:50:30:f1:16:ee:f6:50: fd:ff:ac:23:af:38:f3:45:d9:46:c4:19:e0:1b:3e:bc:46:d4: 21:ba:6c:e6:06:48:8a:3f:1d:e0:09:11:50:2a:a7:e2:2c:82: 5a:97:77:ab:03:2c:d5:df:56:21:60:dd:dc:f0:42:93:5c:e2: f2:90:f4:7b:1e:f6:49:9c:dc:4c:0f:f1:47:2f:03:67:94:4a: 5c:b7:61:d3:74:6b:2f:92:ee:06:8d:50:ee:60:ef:6f:f8:18: e4:69:4a:76:27:79:e4:85:c7:6b:b1:38:5a:8d:5f:d4:6a:f8: 23:71:ab:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcd17NikhVEove0ww+UeMA3FJB1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRDNTYw MUJERUE0MjAeFw0yNTA2MDIwMTU5MTRaFw0yNTA2MDUwNzI3MTRaMDMxMTAvBgNV BAMTKDI0MkYzOEEzMUI5M0ZGMkE4QjIwRTQ4MzlCODEwNTJBRjkzMzZDMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCllxztn+bhGlipbB1qnY+IovOa Baw8HTBq6w1gDRGtBlRLHNas8PopbyGmQA/ik5jWblgdJ43lF5KY5RchLl0CBSlU quleOcjGHlNu7WuL+fs5ewSwTCiW4A+mBl+S/uoiaekRqTwijBDVjXeki0eKXLU/ w6DEW7rrNvAe8EDZSA1tEK+NTjuKPLObk6iT/FnuA9iiEhwbaNEpBuxw4hHthPBA 4k90RTSyEHvV+isX/4lfmjPHT+tii0E9HGRLtYwnroNEtWhI98EtFmoEcP/A6Ux3 SKnQFa5kw6/d0BZqNuetQ7aczY9u1DjtBlz2tTup7/d7xEfN2O43gDv8LqFZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJC84oxuT/yqLIOSDm4EFKvkzbAswHwYDVR0j BBgwFoAU4PugPWtolc61NyLO/blMVgG96kIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTFmM2IzNy1iZDU0LTQ5MTEtOTA1Yi0zNjU0OTY2ODdjOGQvMC9FMEZCQTAzRDZC Njg5NUNFQjUzNzIyQ0VGREI5NEM1NjAxQkRFQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRDNTYwMUJE RUE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExZjNiMzctYmQ1NC00OTExLTkw NWItMzY1NDk2Njg3YzhkLzAvRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRD NTYwMUJERUE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXCdEi+n9uXlKiHQNCcBSWkdkVtQIPcIrDO vBzSgm7rXU3pc1O1etLBxTgLQymWQM+wFNhMW1ovBrVpUeieovD5V29mQmumSp6D k9AZhrPBkcZQEzdcaWgaI535WkL6d7QcVlZeObKxIM4YdstJTpg1cY6eawruQx71 Rxt2fkZ/z4QC7rDD0jmDUDDxFu72UP3/rCOvOPNF2UbEGeAbPrxG1CG6bOYGSIo/ HeAJEVAqp+IsglqXd6sDLNXfViFg3dzwQpNc4vKQ9Hse9kmc3EwP8UcvA2eUSly3 YdN0ay+S7gaNUO5g72/4GORpSnYneeSFx2uxOFqNX9Rq+CNxq1A= -----END CERTIFICATE-----Generated at Tue Jun 3 23:39:21 2025 by rpki-client