$ rpki-client -vvf repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft File: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft (raw, json) Hash identifier: XsOUfc6IxcQQ3iqnl7YLf0MzoGYfr5xtiPjOxF2FbOU= Subject key identifier: 16:C4:67:87:1C:36:CD:7D:59:2A:20:85:B4:F4:8D:F5:E6:FD:78:45 Authority key identifier: E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE Certificate issuer: /CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE Certificate serial: 19115DDD3268573FFA769C32C03665DB5F92AEB9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft Manifest number: 01E2 Signing time: Thu 03 Apr 2025 17:30:50 +0000 Manifest this update: Thu 03 Apr 2025 17:25:50 +0000 Manifest next update: Sun 06 Apr 2025 20:11:50 +0000 Files and hashes: 1: 3130332e3137322e3139342e302f32332d3233203d3e20313437303735.roa (hash: xYxxyrQkuQeP1ZXr19Z8s6G5oCtciWVbaGSbTT9Dbxg=) 2: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl (hash: oNEO9REceVSG8aecMU31mnq7WZfQ2VD/Dzm04BlgezU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 20:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:11:5d:dd:32:68:57:3f:fa:76:9c:32:c0:36:65:db:5f:92:ae:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE Validity Not Before: Apr 3 17:25:50 2025 GMT Not After : Apr 6 20:11:50 2025 GMT Subject: CN=16C467871C36CD7D592A2085B4F48DF5E6FD7845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:79:92:b4:bb:ce:e4:18:11:88:d6:c8:37:f6: 93:37:2c:18:f1:e6:ea:81:b1:20:07:72:5b:50:5c: 2f:f2:6d:de:9a:1a:c1:06:46:6a:50:77:6a:fd:8b: e6:f8:b6:09:e7:50:38:cb:1b:bf:81:1e:8e:7d:44: bd:b6:e0:fe:50:05:c1:cd:e4:7c:32:cf:e6:96:4a: df:4a:39:54:81:f9:9f:b4:1c:4f:66:d6:90:8e:de: b7:c4:12:8c:a6:74:c9:73:cd:dc:8e:56:0a:bc:90: c9:9b:e1:3d:02:fd:81:b9:47:ac:a4:ca:8c:e1:e9: ba:e5:b6:b7:06:e2:66:56:03:85:6e:d1:83:6c:09: 1c:e1:99:1e:2c:8e:24:03:5d:62:0c:e5:68:11:c1: 87:78:a3:41:c6:83:7e:e3:06:3e:65:ff:64:f2:0f: 04:6b:19:34:f7:ad:0b:30:9d:57:bd:ad:cd:f7:a0: 53:54:8b:99:29:06:2e:56:ff:fc:83:3c:4d:16:b3: 1e:b8:32:96:91:49:04:71:38:77:85:ee:f0:bf:f3: 19:4e:2e:c2:14:76:9a:a0:35:00:91:54:20:bf:3e: 4c:fd:84:1e:31:93:4b:96:d2:75:b7:e4:65:90:28: 9b:ce:78:8e:63:e8:6e:aa:ae:44:3a:f3:b5:b4:22: 6f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C4:67:87:1C:36:CD:7D:59:2A:20:85:B4:F4:8D:F5:E6:FD:78:45 X509v3 Authority Key Identifier: keyid:E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:75:6e:c1:23:fc:91:33:88:04:23:f1:5b:35:c9:52:33:4d: d8:c2:92:e7:0f:0a:ed:61:91:c2:ff:4f:2f:5d:f9:41:47:7c: dd:7a:90:f8:e3:07:0a:4e:49:73:eb:15:2c:6b:af:cf:07:06: 65:9e:6b:1c:89:52:65:4e:89:22:54:69:a7:e2:9f:b5:04:51: af:3a:ac:b4:a5:27:8c:12:4c:3d:be:e2:f0:eb:20:31:b8:f1: 49:2c:e9:44:9e:0d:bc:63:87:b1:d6:22:c5:94:1e:41:b4:79: 7c:2e:ea:05:b6:70:88:0b:93:2b:7f:4e:3c:b6:69:0e:8c:98: d5:ed:fa:ce:3c:ed:b6:cc:fd:66:e7:7b:bb:d9:aa:57:aa:21: 48:b4:3a:c8:2c:e5:e0:f9:d0:ca:44:66:cb:a6:59:9f:3b:ff: 83:9f:f9:91:fb:3e:3b:9f:52:f2:86:4c:ca:04:a5:e9:ee:59: 9f:63:04:46:89:a8:93:a0:24:2f:1a:50:08:06:31:98:89:6f: 25:b1:ea:d7:3e:98:af:73:7f:65:ca:9a:37:3a:f1:c1:9b:83: a1:64:5e:8f:ef:eb:a7:f5:4a:74:0d:39:5a:60:f4:39:62:73: 52:a7:0d:cc:19:c1:2e:ff:33:d6:db:12:fd:27:dc:cd:ea:07: d9:71:90:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGRFd3TJoVz/6dpwywDZl21+SrrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3 QjJBRTRCRTAeFw0yNTA0MDMxNzI1NTBaFw0yNTA0MDYyMDExNTBaMDMxMTAvBgNV BAMTKDE2QzQ2Nzg3MUMzNkNEN0Q1OTJBMjA4NUI0RjQ4REY1RTZGRDc4NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBeZK0u87kGBGI1sg39pM3LBjx 5uqBsSAHcltQXC/ybd6aGsEGRmpQd2r9i+b4tgnnUDjLG7+BHo59RL224P5QBcHN 5Hwyz+aWSt9KOVSB+Z+0HE9m1pCO3rfEEoymdMlzzdyOVgq8kMmb4T0C/YG5R6yk yozh6brltrcG4mZWA4Vu0YNsCRzhmR4sjiQDXWIM5WgRwYd4o0HGg37jBj5l/2Ty DwRrGTT3rQswnVe9rc33oFNUi5kpBi5W//yDPE0Wsx64MpaRSQRxOHeF7vC/8xlO LsIUdpqgNQCRVCC/Pkz9hB4xk0uW0nW35GWQKJvOeI5j6G6qrkQ687W0Im/3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFsRnhxw2zX1ZKiCFtPSN9eb9eEUwHwYDVR0j BBgwFoAU5IY04db7LooGpIgltNfuxHsq5L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2VjMmNiNi0zNWFkLTQxMDEtOTgyZS0yZTM0ZDU2NmVmZGEvMC9FNDg2MzRFMUQ2 RkIyRThBMDZBNDg4MjVCNEQ3RUVDNDdCMkFFNEJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3QjJB RTRCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNlYzJjYjYtMzVhZC00MTAxLTk4 MmUtMmUzNGQ1NjZlZmRhLzAvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VF QzQ3QjJBRTRCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB11bsEj/JEziAQj8Vs1yVIzTdjCkucPCu1h kcL/Ty9d+UFHfN16kPjjBwpOSXPrFSxrr88HBmWeaxyJUmVOiSJUaafin7UEUa86 rLSlJ4wSTD2+4vDrIDG48Uks6USeDbxjh7HWIsWUHkG0eXwu6gW2cIgLkyt/Tjy2 aQ6MmNXt+s487bbM/Wbne7vZqleqIUi0Osgs5eD50MpEZsumWZ87/4Of+ZH7Pjuf UvKGTMoEpenuWZ9jBEaJqJOgJC8aUAgGMZiJbyWx6tc+mK9zf2XKmjc68cGbg6Fk Xo/v66f1SnQNOVpg9Dlic1KnDcwZwS7/M9bbEv0n3M3qB9lxkDU= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:23 2025 by rpki-client