$ rpki-client -vvf repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft File: 1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft (raw, json) Hash identifier: 14QRyiqURa3QRMmJrfAIvIjyBlEgNe0LugrN2oAEem0= Subject key identifier: BC:77:41:0F:08:EE:B3:68:4D:8D:7B:14:75:B1:31:E1:F9:74:E7:60 Authority key identifier: 1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9 Certificate issuer: /CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9 Certificate serial: 46692BC8363E5BD02037391D2D9A8E2F2391128F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft Manifest number: 0159 Signing time: Wed 04 Jun 2025 10:11:39 +0000 Manifest this update: Wed 04 Jun 2025 10:06:39 +0000 Manifest next update: Sat 07 Jun 2025 11:21:39 +0000 Files and hashes: 1: 1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl (hash: h97mLeJ2xwltEUFzyQqEeMemYVeu+ngRoVcUBmamJH8=) 2: 3130332e3136352e3235322e302f32342d3234203d3e20313531353231.roa (hash: ea9xX+sjo0TrPI9LqLlWLLsF36pbdmxUxQfCCeXAHFc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 11:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:69:2b:c8:36:3e:5b:d0:20:37:39:1d:2d:9a:8e:2f:23:91:12:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9 Validity Not Before: Jun 4 10:06:39 2025 GMT Not After : Jun 7 11:21:39 2025 GMT Subject: CN=BC77410F08EEB3684D8D7B1475B131E1F974E760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:17:3d:5a:c0:28:17:d8:40:b1:a3:af:e8:eb: 6d:ed:c4:3e:4c:d2:e2:35:3c:d9:43:ef:55:f5:9e: eb:eb:1b:7b:3e:8a:af:f3:0a:36:7a:87:07:89:2f: 3d:44:7a:09:3f:e1:db:3c:ff:03:85:6f:ce:80:0c: 64:f3:87:f1:f5:66:b4:13:de:d4:9d:d2:ae:a2:e6: 3b:c1:e6:8b:4b:b8:dc:c8:24:dc:09:57:75:6f:24: dc:f4:a3:0e:52:0a:c1:a5:6e:fb:a3:8b:57:d3:2f: 9b:a1:57:44:4c:11:b4:79:ca:47:3a:50:8a:43:4b: 75:4c:eb:dd:a9:63:30:ce:84:8a:f3:4e:ce:71:5c: 44:27:bc:92:51:d3:96:10:16:34:47:87:31:fd:94: 09:d8:c2:a9:ad:cb:da:37:98:26:cc:6f:e9:51:e7: fe:c3:44:bb:20:35:59:b0:f6:0b:83:3a:1f:d7:8e: 45:42:d3:3b:15:02:78:58:82:2f:61:eb:79:82:49: f5:7e:d3:dc:ca:3c:fe:19:00:ff:f9:6c:c4:4a:54: 2a:98:eb:b1:eb:59:41:67:40:49:82:92:a9:49:98: ef:a2:af:96:e5:ce:50:21:d0:dc:a1:68:b2:2a:d0: fd:7b:cb:ae:c6:0d:b3:89:b6:a3:69:6a:ef:87:00: f1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:77:41:0F:08:EE:B3:68:4D:8D:7B:14:75:B1:31:E1:F9:74:E7:60 X509v3 Authority Key Identifier: keyid:1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:7b:ec:7a:97:aa:7b:68:6d:6f:30:61:e9:67:72:50:29:61: 66:99:43:9e:6a:6b:c6:63:0b:fa:76:08:ed:42:a7:a9:45:02: 6c:c7:bd:cc:a6:73:63:93:3b:6d:b8:4d:87:42:70:17:f6:70: 4e:e8:7d:6d:df:f0:3a:0e:9b:82:5b:85:94:6e:5b:68:da:8d: 39:65:49:f4:de:39:80:ba:d3:33:86:ce:35:8c:cf:e7:21:94: f1:bf:22:fc:65:01:7c:bf:a1:41:b3:55:3a:6a:b0:7d:58:db: a1:fd:a5:ec:bc:de:a5:ae:47:fc:ed:cf:26:31:24:41:d0:27: 54:79:f5:3b:f1:92:22:af:9e:04:9b:af:b9:05:1b:ed:d3:f6: 79:8c:c0:ae:f3:0a:ea:91:da:6c:a3:c4:dd:1a:29:d4:97:b5: f5:88:51:f6:6d:be:9b:16:15:f9:a8:e9:c6:18:ec:d4:46:11: 8d:38:78:1c:ce:5f:f7:fa:dd:20:94:40:14:05:70:9b:b2:92: c7:14:0b:10:97:0f:36:66:66:2d:8f:4a:cf:80:8a:73:67:64: 22:50:b8:82:12:98:f5:cc:d6:43:1c:95:c0:50:9e:a2:d9:a2: bf:a1:2e:fc:7f:0f:95:48:ee:46:66:c8:5b:4c:8a:f4:52:f4: b8:0f:61:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURmkryDY+W9AgNzkdLZqOLyOREo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVBNTU2 QzE0RThFOTAeFw0yNTA2MDQxMDA2MzlaFw0yNTA2MDcxMTIxMzlaMDMxMTAvBgNV BAMTKEJDNzc0MTBGMDhFRUIzNjg0RDhEN0IxNDc1QjEzMUUxRjk3NEU3NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmFz1awCgX2ECxo6/o623txD5M 0uI1PNlD71X1nuvrG3s+iq/zCjZ6hweJLz1Eegk/4ds8/wOFb86ADGTzh/H1ZrQT 3tSd0q6i5jvB5otLuNzIJNwJV3VvJNz0ow5SCsGlbvuji1fTL5uhV0RMEbR5ykc6 UIpDS3VM692pYzDOhIrzTs5xXEQnvJJR05YQFjRHhzH9lAnYwqmty9o3mCbMb+lR 5/7DRLsgNVmw9guDOh/XjkVC0zsVAnhYgi9h63mCSfV+09zKPP4ZAP/5bMRKVCqY 67HrWUFnQEmCkqlJmO+ir5blzlAh0NyhaLIq0P17y67GDbOJtqNpau+HAPHLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvHdBDwjus2hNjXsUdbEx4fl052AwHwYDVR0j BBgwFoAUHo6FO9Cw7IssAguXWyBaVWwU6OkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTBiZGNjNS00Y2Q5LTQ2YjAtOWQ3Yi1kMjMxYTllNTdiNTAvMC8xRThFODUzQkQw QjBFQzhCMkMwMjBCOTc1QjIwNUE1NTZDMTRFOEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVBNTU2QzE0 RThFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWEwYmRjYzUtNGNkOS00NmIwLTlk N2ItZDIzMWE5ZTU3YjUwLzAvMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVB NTU2QzE0RThFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACF77HqXqntobW8wYelnclApYWaZQ55qa8Zj C/p2CO1Cp6lFAmzHvcymc2OTO224TYdCcBf2cE7ofW3f8DoOm4JbhZRuW2jajTll SfTeOYC60zOGzjWMz+chlPG/IvxlAXy/oUGzVTpqsH1Y26H9pey83qWuR/ztzyYx JEHQJ1R59TvxkiKvngSbr7kFG+3T9nmMwK7zCuqR2myjxN0aKdSXtfWIUfZtvpsW Ffmo6cYY7NRGEY04eBzOX/f63SCUQBQFcJuykscUCxCXDzZmZi2PSs+AinNnZCJQ uIISmPXM1kMclcBQnqLZor+hLvx/D5VI7kZmyFtMivRS9LgPYZ0= -----END CERTIFICATE-----Generated at Thu Jun 5 19:57:06 2025 by rpki-client