$ rpki-client -vvf repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft File: E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft (raw, json) Hash identifier: 61AE7Yr0i9JlXqUH8e9uRGDtq4PYtcPz2ySuGL806ds= Subject key identifier: 2D:DC:27:86:43:6D:09:16:C6:E5:BA:F3:F2:46:6F:A5:D9:56:04:E4 Authority key identifier: E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A Certificate issuer: /CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A Certificate serial: 72FA7229FEE3FAD67FFFA67B434F6670902DBF4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft Manifest number: 0405 Signing time: Sun 06 Apr 2025 02:41:42 +0000 Manifest this update: Sun 06 Apr 2025 02:36:42 +0000 Manifest next update: Wed 09 Apr 2025 12:48:42 +0000 Files and hashes: 1: 323430353a633934303a3a2f33322d3332203d3e20313430303132.roa (hash: xj74juQcT+CUxiMh/vxPzjondMCg0pv/+MpCN6N8gS0=) 2: 3130332e3134382e32392e302f32342d3234203d3e20313430303132.roa (hash: 5eC7/I40aczbOTzlYXr05tpa3jo1C0J9l1xBueSDuOI=) 3: 3130332e3134382e32382e302f32342d3234203d3e20313430303132.roa (hash: +QupJ1EZByI+g6S06PODORTdzbTVZh4a1MkmGIToh1c=) 4: E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl (hash: tDiOO1jZo90i5Wsujnx/TLAuaY0GML6Y+6yuPfdIIK8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 10:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:fa:72:29:fe:e3:fa:d6:7f:ff:a6:7b:43:4f:66:70:90:2d:bf:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A Validity Not Before: Apr 6 02:36:42 2025 GMT Not After : Apr 9 12:48:42 2025 GMT Subject: CN=2DDC2786436D0916C6E5BAF3F2466FA5D95604E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6d:24:66:95:04:3f:95:00:c2:81:ff:67:68: bd:dc:69:c1:66:03:53:48:76:b9:8d:99:c8:9a:22: 11:cc:01:f2:6b:66:81:35:4e:9c:06:13:94:af:cc: 02:c0:26:43:e3:ad:aa:42:0f:8a:4e:da:8a:15:60: bb:fa:68:ed:1a:ad:59:a8:98:b0:7d:bc:3b:6f:d4: a4:ef:2b:6d:c2:70:e7:48:fb:00:7e:ad:a7:c1:e8: 88:e8:00:39:26:cd:ca:b7:02:dc:2f:91:c0:b0:f7: 40:7e:01:f1:65:89:98:a7:76:b8:07:6a:98:e8:e9: 2a:2c:aa:6b:0b:b0:35:89:13:33:5a:6c:65:e0:3a: 95:4f:25:2c:e2:5e:52:72:08:d9:58:21:83:a6:c4: 9e:32:2f:08:3a:16:65:02:f8:12:71:ec:27:b7:c3: 74:64:7f:a8:71:b4:1b:7c:81:9d:65:5d:c8:91:e8: f2:3e:3b:15:4c:f2:4f:91:84:62:6f:a3:76:a1:13: 3e:9c:d6:6f:b5:50:bf:c8:a7:b5:bf:b8:ec:d5:8c: 72:c1:04:31:e0:d1:dd:cc:ed:ef:fd:2e:79:83:e6: d8:40:1c:14:c8:8d:68:a4:a6:1b:48:e8:97:4b:83: f8:b7:2b:75:2a:a3:bd:4c:81:9c:90:91:97:19:6e: 37:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:DC:27:86:43:6D:09:16:C6:E5:BA:F3:F2:46:6F:A5:D9:56:04:E4 X509v3 Authority Key Identifier: keyid:E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:df:19:6e:7b:3c:f8:0f:4e:67:71:74:3d:5d:73:be:45:91: 1e:c1:24:ff:69:e0:4d:f1:19:08:7c:96:63:79:b0:65:7b:27: 1b:b5:6f:f1:fb:03:7a:bb:6e:18:87:99:3c:26:87:5b:4f:3b: 0c:5f:b9:12:ed:49:88:19:c1:5e:67:8f:bd:5a:21:11:21:f7: 4b:3a:be:d1:c9:af:62:4c:19:02:46:b4:e8:fd:aa:06:ac:5f: 7d:c9:30:70:7f:af:42:dd:fa:3b:ab:ed:c6:c2:c1:ea:3a:0b: 80:1c:d8:51:b8:06:80:76:cf:3b:e9:4d:7e:83:cb:eb:01:67: b6:ed:92:2d:a1:7e:90:3f:85:e2:46:56:f9:6f:47:af:6f:8c: 0e:0d:33:a2:de:be:07:cb:f2:c5:a0:30:67:e6:7e:58:18:95: 90:3d:73:76:03:2e:62:4e:11:43:8e:8a:0a:c7:0e:c8:80:90: 8d:48:dd:35:93:2b:a4:01:c9:3d:de:2a:06:f2:c5:2f:06:dd: 84:e0:98:d0:c8:1c:a5:ba:6f:42:7c:1a:20:46:a6:63:6e:9c: a9:b9:87:1e:45:0e:69:71:1a:09:20:84:86:71:9a:42:e1:82: 11:23:ed:0b:1d:48:7a:8a:7e:cd:85:67:a4:22:51:b8:c9:00: 10:46:b4:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcvpyKf7j+tZ//6Z7Q09mcJAtv0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEyOTM2 QjkxMTY1QTAeFw0yNTA0MDYwMjM2NDJaFw0yNTA0MDkxMjQ4NDJaMDMxMTAvBgNV BAMTKDJEREMyNzg2NDM2RDA5MTZDNkU1QkFGM0YyNDY2RkE1RDk1NjA0RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqbSRmlQQ/lQDCgf9naL3cacFm A1NIdrmNmciaIhHMAfJrZoE1TpwGE5SvzALAJkPjrapCD4pO2ooVYLv6aO0arVmo mLB9vDtv1KTvK23CcOdI+wB+rafB6IjoADkmzcq3AtwvkcCw90B+AfFliZindrgH apjo6SosqmsLsDWJEzNabGXgOpVPJSziXlJyCNlYIYOmxJ4yLwg6FmUC+BJx7Ce3 w3Rkf6hxtBt8gZ1lXciR6PI+OxVM8k+RhGJvo3ahEz6c1m+1UL/Ip7W/uOzVjHLB BDHg0d3M7e/9LnmD5thAHBTIjWikphtI6JdLg/i3K3Uqo71MgZyQkZcZbjc3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULdwnhkNtCRbG5brz8kZvpdlWBOQwHwYDVR0j BBgwFoAU4XNX5B82RNE+vHxLJbiik2uRFlowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmFjOWU2My05ODkwLTQyMmUtODhkYy03Y2I2ZGRhYzIyZmEvMC9FMTczNTdFNDFG MzY0NEQxM0VCQzdDNEIyNUI4QTI5MzZCOTExNjVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEyOTM2Qjkx MTY1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJhYzllNjMtOTg5MC00MjJlLTg4 ZGMtN2NiNmRkYWMyMmZhLzAvRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEy OTM2QjkxMTY1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM3fGW57PPgPTmdxdD1dc75FkR7BJP9p4E3x GQh8lmN5sGV7Jxu1b/H7A3q7bhiHmTwmh1tPOwxfuRLtSYgZwV5nj71aIREh90s6 vtHJr2JMGQJGtOj9qgasX33JMHB/r0Ld+jur7cbCweo6C4Ac2FG4BoB2zzvpTX6D y+sBZ7btki2hfpA/heJGVvlvR69vjA4NM6LevgfL8sWgMGfmflgYlZA9c3YDLmJO EUOOigrHDsiAkI1I3TWTK6QByT3eKgbyxS8G3YTgmNDIHKW6b0J8GiBGpmNunKm5 hx5FDmlxGgkghIZxmkLhghEj7QsdSHqKfs2FZ6QiUbjJABBGtHw= -----END CERTIFICATE-----Generated at Sun Apr 6 15:08:53 2025 by rpki-client