$ rpki-client -vvf repo-rpki.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/432AE9E2B00941EF8925409E82CA40508A4688B1.mft File: 432AE9E2B00941EF8925409E82CA40508A4688B1.mft (raw, json) Hash identifier: FfwJJqfoF7+x861W96OBN97N55XBm5TtBcng7Y1uEPk= Subject key identifier: FE:CA:63:19:C7:D2:36:63:81:D2:8A:14:87:FF:FA:D3:B4:B4:D3:D6 Authority key identifier: 43:2A:E9:E2:B0:09:41:EF:89:25:40:9E:82:CA:40:50:8A:46:88:B1 Certificate issuer: /CN=432AE9E2B00941EF8925409E82CA40508A4688B1 Certificate serial: 57728606B35E58D45A345355C18806A6DD1025D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/432AE9E2B00941EF8925409E82CA40508A4688B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/432AE9E2B00941EF8925409E82CA40508A4688B1.mft Manifest number: E6 Signing time: Wed 04 Jun 2025 19:41:54 +0000 Manifest this update: Wed 04 Jun 2025 19:36:54 +0000 Manifest next update: Sun 08 Jun 2025 01:42:54 +0000 Files and hashes: 1: 3135372e31302e3136302e302f32332d3234203d3e20313336303532.roa (hash: xeW9Q+jrWgb1kNw9Ck6owBJ7nXg3E26nbn0fhXlo6qI=) 2: 432AE9E2B00941EF8925409E82CA40508A4688B1.crl (hash: V7eUm1IMQ9Gv2Y5iVKlkxB5kyCm/r53dvAVvORhN7Mc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/432AE9E2B00941EF8925409E82CA40508A4688B1.crl rsync://repo-rpki.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/432AE9E2B00941EF8925409E82CA40508A4688B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/432AE9E2B00941EF8925409E82CA40508A4688B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 01:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:72:86:06:b3:5e:58:d4:5a:34:53:55:c1:88:06:a6:dd:10:25:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432AE9E2B00941EF8925409E82CA40508A4688B1 Validity Not Before: Jun 4 19:36:54 2025 GMT Not After : Jun 8 01:42:54 2025 GMT Subject: CN=FECA6319C7D2366381D28A1487FFFAD3B4B4D3D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0b:1c:8a:36:60:30:e7:e4:fc:50:e9:2b:1b: 99:db:2c:7b:ce:7d:d9:72:0b:03:7e:44:9b:0c:4b: 7c:5d:99:ad:c8:d0:3f:20:a5:da:07:8f:6b:af:b6: 1e:61:25:12:c0:ca:06:45:06:99:80:eb:7e:e8:7d: 3c:57:dd:ec:95:06:fb:6c:10:f1:46:de:7e:fb:a9: 74:b1:31:61:58:19:a3:43:ca:ef:fa:f5:b5:43:85: f5:e7:84:9d:a3:30:28:20:80:1c:5e:48:ec:7a:51: 98:c9:2e:9d:fb:96:8d:5f:db:d1:de:59:cf:b5:70: b8:01:f8:11:11:2d:00:cc:e3:77:6d:71:72:c9:d3: 8f:cb:1e:75:00:7b:f1:fa:33:98:11:95:fd:ec:f6: b2:c1:d1:18:a7:bc:d9:41:d0:4b:a3:61:06:77:9a: dc:a5:28:6c:68:e2:a5:e7:35:22:b5:15:42:a1:19: 54:7e:4c:54:eb:33:35:d5:99:98:71:d6:ba:c2:62: b2:f5:54:18:05:5e:49:20:4c:bf:9e:ad:a5:14:94: 57:4b:fa:a9:51:ae:c8:76:5f:02:db:17:69:9f:9d: 32:65:30:7c:6e:53:e9:f9:64:4b:bb:1f:21:cf:b0: e6:c8:4c:60:de:7f:48:54:60:7c:e8:5c:28:e7:3e: 28:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CA:63:19:C7:D2:36:63:81:D2:8A:14:87:FF:FA:D3:B4:B4:D3:D6 X509v3 Authority Key Identifier: keyid:43:2A:E9:E2:B0:09:41:EF:89:25:40:9E:82:CA:40:50:8A:46:88:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/432AE9E2B00941EF8925409E82CA40508A4688B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/432AE9E2B00941EF8925409E82CA40508A4688B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/432AE9E2B00941EF8925409E82CA40508A4688B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:51:6f:24:ba:0a:cf:ae:d8:19:22:d5:a7:81:10:0e:46:62: 5a:65:70:00:74:fc:86:dc:d4:b5:96:1d:0e:d7:13:53:6c:5e: b3:eb:27:1c:32:18:f6:00:69:b6:05:dd:ee:51:4a:75:8c:a3: 81:86:42:de:60:ca:47:de:6d:2a:03:1f:42:f1:9d:23:9a:8a: 1c:d6:27:83:ee:c4:94:f6:f3:57:1f:d3:e0:5e:7c:39:68:38: 14:44:34:53:df:7b:0b:13:00:75:48:97:f9:5b:d4:6e:f9:9d: 60:bf:5e:48:3b:7b:a9:0c:26:eb:11:9d:95:87:e7:52:29:8c: 54:8d:00:3c:42:6a:80:8f:ba:b0:83:6b:fc:6f:d4:95:5e:a2: fe:06:02:3f:ed:23:cb:26:c4:50:e3:05:f2:30:a4:cb:b6:87: 3c:57:51:28:9c:40:e8:c5:0e:7e:bf:62:a7:71:4f:46:21:2a: 99:d6:ae:1c:ef:2c:63:f5:fd:fb:cb:16:d0:c1:e3:60:c9:e0: 99:f7:77:85:85:67:2e:5b:20:7b:1d:8b:30:3a:d7:61:ce:f9: 08:82:b2:c2:bc:6d:4d:0e:19:f1:61:00:79:5a:e8:96:28:32: 47:91:84:47:fd:2d:dd:30:0c:44:d5:b5:ea:e4:17:b6:16:2e: 4e:b2:b9:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV3KGBrNeWNRaNFNVwYgGpt0QJdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMyQUU5RTJCMDA5NDFFRjg5MjU0MDlFODJDQTQwNTA4 QTQ2ODhCMTAeFw0yNTA2MDQxOTM2NTRaFw0yNTA2MDgwMTQyNTRaMDMxMTAvBgNV BAMTKEZFQ0E2MzE5QzdEMjM2NjM4MUQyOEExNDg3RkZGQUQzQjRCNEQzRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFCxyKNmAw5+T8UOkrG5nbLHvO fdlyCwN+RJsMS3xdma3I0D8gpdoHj2uvth5hJRLAygZFBpmA637ofTxX3eyVBvts EPFG3n77qXSxMWFYGaNDyu/69bVDhfXnhJ2jMCgggBxeSOx6UZjJLp37lo1f29He Wc+1cLgB+BERLQDM43dtcXLJ04/LHnUAe/H6M5gRlf3s9rLB0RinvNlB0EujYQZ3 mtylKGxo4qXnNSK1FUKhGVR+TFTrMzXVmZhx1rrCYrL1VBgFXkkgTL+eraUUlFdL +qlRrsh2XwLbF2mfnTJlMHxuU+n5ZEu7HyHPsObITGDef0hUYHzoXCjnPihpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/spjGcfSNmOB0ooUh//607S009YwHwYDVR0j BBgwFoAUQyrp4rAJQe+JJUCegspAUIpGiLEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzJmYzFkNC0zN2E2LTQ5NDMtYjRjNi02ZDhlOWI0ZTU1OTEvMC80MzJBRTlFMkIw MDk0MUVGODkyNTQwOUU4MkNBNDA1MDhBNDY4OEIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDMyQUU5RTJCMDA5NDFFRjg5MjU0MDlFODJDQTQwNTA4QTQ2 ODhCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWMyZmMxZDQtMzdhNi00OTQzLWI0 YzYtNmQ4ZTliNGU1NTkxLzAvNDMyQUU5RTJCMDA5NDFFRjg5MjU0MDlFODJDQTQw NTA4QTQ2ODhCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxRbyS6Cs+u2Bki1aeBEA5GYlplcAB0/Ibc 1LWWHQ7XE1NsXrPrJxwyGPYAabYF3e5RSnWMo4GGQt5gykfebSoDH0LxnSOaihzW J4PuxJT281cf0+BefDloOBRENFPfewsTAHVIl/lb1G75nWC/Xkg7e6kMJusRnZWH 51IpjFSNADxCaoCPurCDa/xv1JVeov4GAj/tI8smxFDjBfIwpMu2hzxXUSicQOjF Dn6/YqdxT0YhKpnWrhzvLGP1/fvLFtDB42DJ4Jn3d4WFZy5bIHsdizA612HO+QiC ssK8bU0OGfFhAHla6JYoMkeRhEf9Ld0wDETVterkF7YWLk6yuf4= -----END CERTIFICATE-----Generated at Fri Jun 6 19:44:26 2025 by rpki-client