$ rpki-client -vvf repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft File: EC973BE13EF324E7D59046CF7690A12F9DF12932.mft (raw, json) Hash identifier: Y0jRAnR5ijhnLeFo/719RIbdrK+xCtWuGmV8w+bvres= Subject key identifier: 3D:5D:05:CF:89:B9:60:CE:C6:4D:74:DE:8D:A6:64:54:C4:5C:36:77 Authority key identifier: EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 Certificate issuer: /CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Certificate serial: 49C48FF3862214DEC90F9A791F765E7152FC431C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft Manifest number: 0201 Signing time: Thu 03 Apr 2025 21:21:18 +0000 Manifest this update: Thu 03 Apr 2025 21:16:18 +0000 Manifest next update: Mon 07 Apr 2025 04:17:18 +0000 Files and hashes: 1: EC973BE13EF324E7D59046CF7690A12F9DF12932.crl (hash: K+AZcDGJ6r2It2P5sRRpeoy6PIHX7o9zCm7C/I0NbAU=) 2: 3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (hash: Lkf5GtqCgpM0afLQQBUVM3+/AVTbtZLezFPI9dw/EXw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 04:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c4:8f:f3:86:22:14:de:c9:0f:9a:79:1f:76:5e:71:52:fc:43:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Validity Not Before: Apr 3 21:16:18 2025 GMT Not After : Apr 7 04:17:18 2025 GMT Subject: CN=3D5D05CF89B960CEC64D74DE8DA66454C45C3677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:47:f4:ed:6e:c5:af:5b:9b:48:19:e7:20:73: c0:a4:dd:d1:ac:c7:58:58:a6:86:4a:ec:70:06:f0: 1e:47:f7:aa:83:2c:da:fb:78:62:a5:fe:9f:a6:2f: f5:d9:5a:e3:ba:1e:ca:02:82:83:b5:dc:84:d3:d9: 40:16:f5:b4:6b:4c:6d:ec:cb:2e:31:48:a9:91:70: 16:da:f2:3c:e2:dc:b5:17:77:35:bf:71:ba:00:ca: d4:5a:3b:20:64:e6:cf:0c:8d:af:d0:df:37:60:58: 1d:a2:f6:bc:78:27:4d:b3:c8:88:67:35:69:bf:5b: 29:52:8a:d7:67:a4:fd:92:ce:ff:8b:5b:03:82:e0: cf:86:19:1a:e7:c4:2d:a6:7a:a4:2a:ee:ca:2f:f6: ad:d3:fa:92:49:03:e2:2e:fc:8c:e6:e3:fc:71:b5: d5:00:ff:32:0b:6a:cd:c5:cf:fe:66:da:62:bf:9d: 5c:d3:32:91:f1:14:6d:2c:bb:24:f3:e9:25:0f:de: ce:65:50:cd:87:99:27:6c:0b:de:83:45:64:9a:64: 2a:7b:35:fd:f5:87:93:f0:08:7f:d9:f7:01:e0:d0: a6:f1:98:37:d5:d6:1a:03:c7:dd:1e:02:08:23:61: 86:a9:e9:f9:bc:83:a9:84:95:47:8e:1b:b6:f8:d2: e2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5D:05:CF:89:B9:60:CE:C6:4D:74:DE:8D:A6:64:54:C4:5C:36:77 X509v3 Authority Key Identifier: keyid:EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:85:0c:21:9c:ef:3b:3c:18:01:0f:ea:bc:31:a2:3c:81:13: 12:b2:f6:6b:03:4c:95:11:6a:08:87:84:a2:cc:8b:c1:b6:0b: 55:fc:91:59:ed:df:42:04:79:54:89:14:7a:e6:b7:4f:9e:43: 4a:9f:eb:26:c4:da:c8:aa:09:22:cd:56:15:48:6c:80:7b:ed: 57:a7:e8:ee:9c:ad:8c:4c:72:1b:28:0f:8b:f9:74:fb:eb:cf: 73:e6:a4:3e:8f:c6:ea:ef:86:f7:f7:2b:87:5a:69:9d:7e:20: f5:96:66:6c:4e:ad:f6:aa:cc:91:ee:c3:5f:c3:b9:a3:98:8e: 59:d7:63:3a:91:2f:28:8d:66:81:61:0e:4a:a1:12:d3:dd:19: f2:5d:88:00:77:f9:d3:93:a2:41:7f:5f:e0:a3:56:a4:33:0d: b5:ef:61:f9:5e:72:ac:4a:39:4e:d1:c1:ca:30:bf:c8:b9:10: 6f:46:85:ca:6a:fa:17:75:a0:02:fc:54:92:c2:e5:22:25:8e: ac:fc:9c:45:60:43:97:f4:82:9c:31:75:8a:92:58:d8:64:c7: 3e:60:d4:d9:e6:f6:fb:16:0a:fe:be:23:9d:bd:fb:7c:af:91: 49:95:e5:6d:60:78:90:03:10:ab:93:25:81:15:78:e2:01:58: 01:8f:09:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUScSP84YiFN7JD5p5H3ZecVL8QxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5 REYxMjkzMjAeFw0yNTA0MDMyMTE2MThaFw0yNTA0MDcwNDE3MThaMDMxMTAvBgNV BAMTKDNENUQwNUNGODlCOTYwQ0VDNjRENzRERThEQTY2NDU0QzQ1QzM2NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+R/TtbsWvW5tIGecgc8Ck3dGs x1hYpoZK7HAG8B5H96qDLNr7eGKl/p+mL/XZWuO6HsoCgoO13ITT2UAW9bRrTG3s yy4xSKmRcBba8jzi3LUXdzW/cboAytRaOyBk5s8Mja/Q3zdgWB2i9rx4J02zyIhn NWm/WylSitdnpP2Szv+LWwOC4M+GGRrnxC2meqQq7sov9q3T+pJJA+Iu/Izm4/xx tdUA/zILas3Fz/5m2mK/nVzTMpHxFG0suyTz6SUP3s5lUM2HmSdsC96DRWSaZCp7 Nf31h5PwCH/Z9wHg0KbxmDfV1hoDx90eAggjYYap6fm8g6mElUeOG7b40uLzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPV0Fz4m5YM7GTXTejaZkVMRcNncwHwYDVR0j BBgwFoAU7Jc74T7zJOfVkEbPdpChL53xKTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTFjYmQ3OS04ZjI2LTRiMGUtOGIzYi1hYjllOTkzOGZjYWUvMC9FQzk3M0JFMTNF RjMyNEU3RDU5MDQ2Q0Y3NjkwQTEyRjlERjEyOTMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5REYx MjkzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmUxY2JkNzktOGYyNi00YjBlLThi M2ItYWI5ZTk5MzhmY2FlLzAvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEEx MkY5REYxMjkzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAByFDCGc7zs8GAEP6rwxojyBExKy9msDTJUR agiHhKLMi8G2C1X8kVnt30IEeVSJFHrmt0+eQ0qf6ybE2siqCSLNVhVIbIB77Ven 6O6crYxMchsoD4v5dPvrz3PmpD6Pxurvhvf3K4daaZ1+IPWWZmxOrfaqzJHuw1/D uaOYjlnXYzqRLyiNZoFhDkqhEtPdGfJdiAB3+dOTokF/X+CjVqQzDbXvYflecqxK OU7Rwcowv8i5EG9Ghcpq+hd1oAL8VJLC5SIljqz8nEVgQ5f0gpwxdYqSWNhkxz5g 1Nnm9vsWCv6+I529+3yvkUmV5W1geJADEKuTJYEVeOIBWAGPCQQ= -----END CERTIFICATE-----Generated at Sat Apr 5 17:50:07 2025 by rpki-client