$ rpki-client -vvf repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft File: E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft (raw, json) Hash identifier: sje7UTEEI9vjXNo0ZNnXF5b21AAf1lvEIpjJUESyQ9c= Subject key identifier: 77:A1:CF:99:3F:ED:EA:F9:8B:80:9B:18:95:F7:F5:2F:05:DD:05:01 Authority key identifier: E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81 Certificate issuer: /CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81 Certificate serial: 74032FBCC4E437C347F4B7851EF03F60A5EF8DCD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft Manifest number: 01E0 Signing time: Fri 04 Apr 2025 01:01:39 +0000 Manifest this update: Fri 04 Apr 2025 00:56:39 +0000 Manifest next update: Mon 07 Apr 2025 02:42:39 +0000 Files and hashes: 1: E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl (hash: H4MVNmMxyiKUuSjIl0rBXj9VnTgz4+/EEnMDbi1kdCQ=) 2: 3130332e3135362e37342e302f32332d3234203d3e20313431303832.roa (hash: +uanKrOlJ1inyxGrMVmi+UClp9vCCzs4JkeBJaqGWYc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 02:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:03:2f:bc:c4:e4:37:c3:47:f4:b7:85:1e:f0:3f:60:a5:ef:8d:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81 Validity Not Before: Apr 4 00:56:39 2025 GMT Not After : Apr 7 02:42:39 2025 GMT Subject: CN=77A1CF993FEDEAF98B809B1895F7F52F05DD0501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:80:c2:7d:53:36:8a:2b:32:55:e5:ea:4e:31: 48:8c:d3:8e:72:ac:e7:ee:6d:20:42:bf:3d:ac:27: 06:9c:47:2c:5f:c2:30:49:c1:a2:4c:f9:68:6b:92: 16:07:5c:7a:2d:4f:ad:30:73:06:bc:98:8a:99:25: 9c:02:8e:d0:54:b9:9b:af:64:95:07:b0:d2:02:18: f1:56:65:fa:4d:89:2d:67:84:96:da:b8:b4:34:08: b6:5e:e0:c8:09:64:99:07:d4:52:ae:95:86:34:2f: 8a:be:b6:a9:15:3f:1c:ad:f0:26:8e:b3:31:3e:fb: 20:35:dd:0a:69:81:73:ee:02:11:c4:95:82:87:36: c4:f7:ce:77:c9:8a:87:ee:16:1b:2e:14:c6:88:d7: c3:38:da:75:1c:ea:6d:8c:f2:4c:b8:c5:6a:76:14: a6:18:32:9e:17:2c:3d:82:74:81:36:4d:37:0c:5a: 95:24:75:be:0e:a7:fd:8b:ff:09:e3:43:44:5b:a6: 7c:36:fe:5a:1e:23:ea:1d:28:a6:ad:ae:df:12:c2: 45:77:09:cb:30:1e:ef:e8:78:0c:c4:cc:99:8b:3e: cf:f2:c8:9b:62:b7:11:f4:fc:82:db:78:ec:ed:1d: f1:f7:1a:7f:82:d6:45:26:b2:04:98:42:f4:90:d9: e2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A1:CF:99:3F:ED:EA:F9:8B:80:9B:18:95:F7:F5:2F:05:DD:05:01 X509v3 Authority Key Identifier: keyid:E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:19:0a:f7:7d:95:e1:0a:a8:06:83:12:a8:21:2b:f0:e2:29: 73:60:63:97:cb:88:0f:05:41:0a:ec:33:8b:4a:d3:22:9d:29: 0b:34:ee:57:c1:be:1f:f6:cd:84:43:a2:f2:36:ba:45:3b:4d: 09:32:42:8c:3c:74:35:ab:56:21:5a:27:23:df:2d:1a:74:cc: 9d:f3:36:2b:9b:99:62:ea:41:ba:b0:c0:94:a0:1b:5b:eb:7a: 9d:1a:32:b1:60:1d:45:c7:a5:64:08:0d:ae:d1:66:50:7f:ab: 64:43:9d:cf:4a:01:d3:9a:82:ea:68:15:7d:e6:e0:04:f6:d7: 5e:68:12:7e:d2:cc:f5:a7:38:c6:91:7e:26:20:7f:ca:6a:cc: 95:16:51:94:1c:fb:20:3c:71:3e:0e:69:ca:0b:03:52:6a:b7: bf:e1:e7:00:3f:d1:a4:44:23:cf:4f:33:08:8f:1c:bb:d2:0b: 46:1b:bf:54:77:70:04:58:61:5c:92:56:1f:31:ef:42:c3:5e: 3d:e0:7f:ad:ca:0c:46:3c:f6:83:b6:2f:63:59:c7:3f:93:3c: 80:46:97:29:52:2e:47:19:dc:06:24:22:27:30:15:ff:78:37: 89:2e:90:99:ee:d4:dc:4a:10:46:b8:f1:c1:d9:b1:b2:72:8d: 01:95:77:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdAMvvMTkN8NH9LeFHvA/YKXvjc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4NzY3 QjQxMUE4MTAeFw0yNTA0MDQwMDU2MzlaFw0yNTA0MDcwMjQyMzlaMDMxMTAvBgNV BAMTKDc3QTFDRjk5M0ZFREVBRjk4QjgwOUIxODk1RjdGNTJGMDVERDA1MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrgMJ9UzaKKzJV5epOMUiM045y rOfubSBCvz2sJwacRyxfwjBJwaJM+WhrkhYHXHotT60wcwa8mIqZJZwCjtBUuZuv ZJUHsNICGPFWZfpNiS1nhJbauLQ0CLZe4MgJZJkH1FKulYY0L4q+tqkVPxyt8CaO szE++yA13QppgXPuAhHElYKHNsT3znfJiofuFhsuFMaI18M42nUc6m2M8ky4xWp2 FKYYMp4XLD2CdIE2TTcMWpUkdb4Op/2L/wnjQ0Rbpnw2/loeI+odKKatrt8SwkV3 CcswHu/oeAzEzJmLPs/yyJtitxH0/ILbeOztHfH3Gn+C1kUmsgSYQvSQ2eKLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd6HPmT/t6vmLgJsYlff1LwXdBQEwHwYDVR0j BBgwFoAU4APoULd8dvDgJPHabvvYdntBGoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDAxMDJkMC03MTRmLTRiNTItOWJlNS1kZWQxNmVkZmU0YTIvMC9FMDAzRTg1MEI3 N0M3NkYwRTAyNEYxREE2RUZCRDg3NjdCNDExQTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4NzY3QjQx MUE4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjAwMTAyZDAtNzE0Zi00YjUyLTli ZTUtZGVkMTZlZGZlNGEyLzAvRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4 NzY3QjQxMUE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAZCvd9leEKqAaDEqghK/DiKXNgY5fLiA8F QQrsM4tK0yKdKQs07lfBvh/2zYRDovI2ukU7TQkyQow8dDWrViFaJyPfLRp0zJ3z NiubmWLqQbqwwJSgG1vrep0aMrFgHUXHpWQIDa7RZlB/q2RDnc9KAdOagupoFX3m 4AT2115oEn7SzPWnOMaRfiYgf8pqzJUWUZQc+yA8cT4OacoLA1Jqt7/h5wA/0aRE I89PMwiPHLvSC0Ybv1R3cARYYVySVh8x70LDXj3gf63KDEY89oO2L2NZxz+TPIBG lylSLkcZ3AYkIicwFf94N4kukJnu1NxKEEa48cHZsbJyjQGVdxo= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:34 2025 by rpki-client