$ rpki-client -vvf repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft File: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft (raw, json) Hash identifier: UvLaQ4LdFSj5Frs7Had2FHtdvgT/RQwXvfyEZXb2v2I= Subject key identifier: EA:0A:7D:90:3F:4F:62:18:EB:E3:AC:95:7F:0E:C6:70:A9:FF:28:C4 Authority key identifier: E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 Certificate issuer: /CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Certificate serial: 75C8657C33E3897A17442A5B79A105D887FB0613 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft Manifest number: 014C Signing time: Thu 17 Apr 2025 21:02:07 +0000 Manifest this update: Thu 17 Apr 2025 20:57:07 +0000 Manifest next update: Mon 21 Apr 2025 03:51:07 +0000 Files and hashes: 1: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl (hash: YnZWT4W8enCmBjcPwbXL8yDyZIouyDaULxJfAwXTSCI=) 2: 3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa (hash: zvs63z9VCpiCzE9F7SS2YuDrGUS8w4FG4VYk90PMazI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 03:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:c8:65:7c:33:e3:89:7a:17:44:2a:5b:79:a1:05:d8:87:fb:06:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Validity Not Before: Apr 17 20:57:07 2025 GMT Not After : Apr 21 03:51:07 2025 GMT Subject: CN=EA0A7D903F4F6218EBE3AC957F0EC670A9FF28C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e5:68:06:6b:6b:60:a6:44:41:7e:7e:3c:c4: af:1b:a9:48:ba:30:30:4d:ec:99:16:5f:a1:15:3d: 47:0a:6c:78:0b:17:b4:3a:1c:5c:fc:1d:2a:fa:02: 75:e2:cf:72:50:8c:ac:d2:d0:85:32:4a:15:dc:54: 9b:53:13:6d:5e:33:b3:59:a6:ee:1b:91:f9:9b:ce: 42:a8:47:f0:80:45:72:14:a9:c7:b1:75:4d:ab:0f: 7d:4f:3e:23:be:66:fd:1b:ac:06:17:e5:b2:60:be: c2:a0:cf:5b:81:c1:10:5b:d9:5c:4d:8c:f7:e9:81: f8:4c:11:8f:2f:c0:d9:2e:28:9e:99:e2:3f:bf:1c: 80:76:01:b1:b3:37:e8:79:78:16:47:8b:d8:5c:f5: a2:78:31:63:c6:71:0b:50:52:71:0c:f5:84:b7:cd: 45:0a:24:ff:32:34:0a:18:55:1b:4d:79:85:f4:ea: 08:98:ae:14:bd:30:77:53:c2:13:a8:48:23:18:87: e7:bd:c3:1e:d9:44:80:dc:98:50:bc:f1:43:67:ad: 96:80:1a:35:d5:aa:99:e1:fb:64:0f:8a:0a:8e:e4: 42:fa:8a:b6:78:46:a6:ec:90:54:60:68:6c:f2:ed: e4:e4:62:6e:a7:46:ed:b8:c9:85:1b:79:26:7a:b6: ba:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:0A:7D:90:3F:4F:62:18:EB:E3:AC:95:7F:0E:C6:70:A9:FF:28:C4 X509v3 Authority Key Identifier: keyid:E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:8a:d4:d0:fd:1f:76:82:85:b5:25:c8:5f:90:bc:cf:d4:f4: 60:9e:bc:0b:1d:7c:6a:84:ea:f1:62:bd:ec:79:52:91:67:3f: 0f:1b:ea:27:ac:7f:ec:b6:95:97:32:c0:e5:c5:95:cb:e3:f9: 8c:32:8b:05:c7:a5:95:5e:06:01:42:6b:7c:ec:94:cc:d5:1c: 8b:20:7a:d3:2f:c8:9d:bf:4d:fe:30:19:f0:f2:a9:d7:96:d8: 78:a0:7e:49:37:d9:b7:04:b3:e7:e9:f2:5f:1b:dc:f8:45:fc: ce:f5:a9:13:c4:3a:c4:cb:4f:3e:ab:c9:00:9c:90:56:21:9d: 14:d5:07:70:1b:4b:61:ef:d9:37:db:a8:d5:38:b6:c3:60:5f: b7:5c:11:57:5a:b6:2d:05:35:2f:77:4b:b2:ac:56:2c:5c:63: 87:11:b6:4b:9e:cb:0d:31:18:0b:46:65:11:2e:06:80:c6:1e: 9f:c1:8a:a5:72:35:4f:8f:27:f4:cb:c2:fe:4a:bb:40:f5:bf: ac:de:1a:b1:30:28:17:9d:b9:88:f4:24:ff:55:cd:a6:cc:88: 34:2f:ce:23:a7:78:fd:0b:76:73:bd:c2:bb:59:1f:ce:ff:51: bd:da:fe:3b:b4:84:5c:83:85:2f:f7:81:57:a5:60:6a:5d:45: a1:59:bd:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdchlfDPjiXoXRCpbeaEF2If7BhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlG QkZGMTVDOTAeFw0yNTA0MTcyMDU3MDdaFw0yNTA0MjEwMzUxMDdaMDMxMTAvBgNV BAMTKEVBMEE3RDkwM0Y0RjYyMThFQkUzQUM5NTdGMEVDNjcwQTlGRjI4QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW5WgGa2tgpkRBfn48xK8bqUi6 MDBN7JkWX6EVPUcKbHgLF7Q6HFz8HSr6AnXiz3JQjKzS0IUyShXcVJtTE21eM7NZ pu4bkfmbzkKoR/CARXIUqcexdU2rD31PPiO+Zv0brAYX5bJgvsKgz1uBwRBb2VxN jPfpgfhMEY8vwNkuKJ6Z4j+/HIB2AbGzN+h5eBZHi9hc9aJ4MWPGcQtQUnEM9YS3 zUUKJP8yNAoYVRtNeYX06giYrhS9MHdTwhOoSCMYh+e9wx7ZRIDcmFC88UNnrZaA GjXVqpnh+2QPigqO5EL6irZ4RqbskFRgaGzy7eTkYm6nRu24yYUbeSZ6trpJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6gp9kD9PYhjr46yVfw7GcKn/KMQwHwYDVR0j BBgwFoAU6H2RT6U2zdocBIbwkj0r6fv/FckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Yjg0M2YwMC0yODIzLTQ3MzItOWI3Yy1kOGNmZTYzMDEwZGMvMC9FODdEOTE0RkE1 MzZDRERBMUMwNDg2RjA5MjNEMkJFOUZCRkYxNUM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlGQkZG MTVDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4NDNmMDAtMjgyMy00NzMyLTli N2MtZDhjZmU2MzAxMGRjLzAvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJC RTlGQkZGMTVDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABCK1ND9H3aChbUlyF+QvM/U9GCevAsdfGqE 6vFivex5UpFnPw8b6iesf+y2lZcywOXFlcvj+YwyiwXHpZVeBgFCa3zslMzVHIsg etMvyJ2/Tf4wGfDyqdeW2Higfkk32bcEs+fp8l8b3PhF/M71qRPEOsTLTz6ryQCc kFYhnRTVB3AbS2Hv2TfbqNU4tsNgX7dcEVdati0FNS93S7KsVixcY4cRtkueyw0x GAtGZREuBoDGHp/BiqVyNU+PJ/TLwv5Ku0D1v6zeGrEwKBeduYj0JP9VzabMiDQv ziOneP0LdnO9wrtZH87/Ub3a/ju0hFyDhS/3gVelYGpdRaFZva4= -----END CERTIFICATE-----Generated at Sat Apr 19 17:13:52 2025 by rpki-client