$ rpki-client -vvf repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft File: 1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft (raw, json) Hash identifier: udQTUzFc6h3pPKPxdsTuW4xK/Wad47AMjXAVnDNmCQA= Subject key identifier: 5D:73:FC:38:8F:07:33:C5:F1:44:40:EB:1F:57:6A:20:A9:5B:81:44 Authority key identifier: 1E:AF:FD:F7:6C:26:1A:0C:98:01:D9:F2:B0:2D:5B:A1:49:67:F3:CD Certificate issuer: /CN=1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD Certificate serial: 0F9F94D9B52F4342BAA98513E50B274335C23D29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft Manifest number: 0156 Signing time: Fri 04 Apr 2025 09:31:18 +0000 Manifest this update: Fri 04 Apr 2025 09:26:18 +0000 Manifest next update: Mon 07 Apr 2025 14:42:18 +0000 Files and hashes: 1: 1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl (hash: 5QqWK8zWe1yOYjwNR4thXZOrN68CzpkN5bx2nDJPM3A=) 2: 3130332e3139302e39342e302f32342d3234203d3e20313530353531.roa (hash: ZLit+8UW98ngBL2LPf2rRbdHr7opbJkANqxKGJG/n4c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 14:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:9f:94:d9:b5:2f:43:42:ba:a9:85:13:e5:0b:27:43:35:c2:3d:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD Validity Not Before: Apr 4 09:26:18 2025 GMT Not After : Apr 7 14:42:18 2025 GMT Subject: CN=5D73FC388F0733C5F14440EB1F576A20A95B8144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:03:c4:64:40:d6:10:50:f1:ec:63:50:27:50: b8:db:9b:63:12:03:6d:19:6c:b2:23:79:69:37:77: 2f:07:9e:f8:f1:e5:1c:2e:30:57:86:c2:1f:6b:a2: 7f:01:da:79:2c:ec:59:c0:6e:12:df:c1:1c:61:12: 50:91:55:28:4e:d5:55:bd:6c:5c:cf:d0:24:1a:28: 51:4d:96:09:54:a4:b4:3d:7b:27:df:b2:b9:e3:62: da:f0:a0:71:af:7b:6e:5a:23:46:e0:52:75:15:3b: 2f:2e:6e:1c:b1:df:b4:7d:38:e9:3b:f7:72:42:20: d1:ee:b8:b0:78:cd:cb:12:f6:cc:ef:ca:7c:8b:e6: 31:56:19:47:0b:d8:e1:6a:dc:f5:38:af:32:27:83: db:0d:91:e8:ba:26:78:4d:98:e4:43:0f:6e:15:db: b3:c6:cf:5a:24:35:41:ae:e7:e5:9c:cc:9f:b7:92: 1f:0d:66:ab:66:2b:e7:3c:98:b4:ad:c5:cd:fd:66: 17:18:c5:6a:d7:b0:d7:18:29:48:a0:1c:ac:f0:43: a8:80:a8:16:cd:3f:16:c5:97:a8:9b:6b:56:20:53: 9b:7b:ec:4f:02:09:84:69:98:4f:2a:5c:ae:8b:97: 45:71:51:35:c8:b5:b0:67:f6:52:6a:46:05:5d:25: dc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:73:FC:38:8F:07:33:C5:F1:44:40:EB:1F:57:6A:20:A9:5B:81:44 X509v3 Authority Key Identifier: keyid:1E:AF:FD:F7:6C:26:1A:0C:98:01:D9:F2:B0:2D:5B:A1:49:67:F3:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:6f:03:e2:27:44:bf:ae:8e:d6:dd:33:14:b4:db:82:34:f7: a6:54:fd:54:ad:bf:e5:c5:25:28:5e:57:6c:69:38:31:76:4f: c7:9d:0c:a5:c3:05:ab:7f:ed:5f:c3:f5:94:8f:53:12:a8:d1: 10:e8:1b:40:8e:8c:28:9e:37:a0:20:1c:3f:d5:42:a1:46:ad: 8f:21:08:78:ff:51:01:39:30:28:5d:d0:c0:b5:d3:4f:60:d4: d4:c5:c0:17:b4:e3:db:cc:c4:c7:48:e8:51:2b:59:fa:02:f8: e7:f8:b2:63:41:5f:2f:83:48:71:a4:f4:9e:6f:1a:ff:c3:f3: 28:2e:f4:5f:e8:8a:4e:93:df:6f:75:f6:57:a7:0d:de:61:48: 70:a1:e4:8c:1b:2d:c8:5a:fa:9f:71:64:b1:c9:04:dd:20:4c: 19:c0:4d:b8:5a:2e:94:9a:3f:19:3d:4e:d2:36:65:d7:64:78: f3:35:f0:55:e5:7b:3f:8b:51:65:ec:f2:58:3a:42:5c:5e:7c: 43:3e:89:70:91:0a:c4:b9:f0:67:5c:ea:71:7b:bb:3c:53:85: 45:8e:1e:ef:c3:71:27:6a:78:80:dd:10:54:26:e7:20:7d:f1: d6:72:d4:64:9b:82:27:9d:d0:84:44:03:f9:dd:a5:e7:a8:bf: 6b:cc:89:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD5+U2bUvQ0K6qYUT5QsnQzXCPSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVCQTE0 OTY3RjNDRDAeFw0yNTA0MDQwOTI2MThaFw0yNTA0MDcxNDQyMThaMDMxMTAvBgNV BAMTKDVENzNGQzM4OEYwNzMzQzVGMTQ0NDBFQjFGNTc2QTIwQTk1QjgxNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5A8RkQNYQUPHsY1AnULjbm2MS A20ZbLIjeWk3dy8Hnvjx5RwuMFeGwh9ron8B2nks7FnAbhLfwRxhElCRVShO1VW9 bFzP0CQaKFFNlglUpLQ9eyffsrnjYtrwoHGve25aI0bgUnUVOy8ubhyx37R9OOk7 93JCINHuuLB4zcsS9szvynyL5jFWGUcL2OFq3PU4rzIng9sNkei6JnhNmORDD24V 27PGz1okNUGu5+WczJ+3kh8NZqtmK+c8mLStxc39ZhcYxWrXsNcYKUigHKzwQ6iA qBbNPxbFl6iba1YgU5t77E8CCYRpmE8qXK6Ll0VxUTXItbBn9lJqRgVdJdwxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXXP8OI8HM8XxREDrH1dqIKlbgUQwHwYDVR0j BBgwFoAUHq/992wmGgyYAdnysC1boUln880wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Nzk4MDkxZS1jMWFlLTQwNDktOTZkMi1jNGNlMzdmZGMzNWIvMC8xRUFGRkRGNzZD MjYxQTBDOTgwMUQ5RjJCMDJENUJBMTQ5NjdGM0NELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVCQTE0OTY3 RjNDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc5ODA5MWUtYzFhZS00MDQ5LTk2 ZDItYzRjZTM3ZmRjMzViLzAvMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVC QTE0OTY3RjNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxvA+InRL+ujtbdMxS024I096ZU/VStv+XF JSheV2xpODF2T8edDKXDBat/7V/D9ZSPUxKo0RDoG0COjCieN6AgHD/VQqFGrY8h CHj/UQE5MChd0MC1009g1NTFwBe049vMxMdI6FErWfoC+Of4smNBXy+DSHGk9J5v Gv/D8ygu9F/oik6T32919lenDd5hSHCh5IwbLcha+p9xZLHJBN0gTBnATbhaLpSa Pxk9TtI2ZddkePM18FXlez+LUWXs8lg6QlxefEM+iXCRCsS58Gdc6nF7uzxThUWO Hu/DcSdqeIDdEFQm5yB98dZy1GSbgied0IREA/ndpeeov2vMiUM= -----END CERTIFICATE-----Generated at Sat Apr 5 15:30:37 2025 by rpki-client