$ rpki-client -vvf repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft File: E380AA52674666F5E074BF511BB72FA0713E5270.mft (raw, json) Hash identifier: ylPzbd9tp79omvoWEOcob1DodeT6lmEv+wKlt0S2j8Q= Subject key identifier: 45:10:45:84:5E:E5:84:69:9F:B0:0C:38:BA:4B:12:C1:9D:44:CF:6B Authority key identifier: E3:80:AA:52:67:46:66:F5:E0:74:BF:51:1B:B7:2F:A0:71:3E:52:70 Certificate issuer: /CN=E380AA52674666F5E074BF511BB72FA0713E5270 Certificate serial: 798789F6E683ADEBFB594572A4B302188CAB0A43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft Manifest number: B9 Signing time: Thu 08 May 2025 04:01:09 +0000 Manifest this update: Thu 08 May 2025 03:56:09 +0000 Manifest next update: Sun 11 May 2025 04:44:09 +0000 Files and hashes: 1: 33362e35302e34362e302f32332d3233203d3e20313338383838.roa (hash: mxtXjA73LS1mZhkBSLMdwKqT16ev1fS5k+J/P85pAXY=) 2: E380AA52674666F5E074BF511BB72FA0713E5270.crl (hash: Zi3T3hNGfBPUq8gT4ppfePN2pTQwiyi0tNxhPPyaX4c=) 3: 33362e35302e34372e302f32342d3234203d3e20313338383838.roa (hash: fz83fAQNZ6LIg2KoJilnb9N/Vfy7mhurHRooAOvm+QY=) 4: 33362e35302e34362e302f32342d3234203d3e20313338383838.roa (hash: thuZAYiRf9cIoV+ku3A0Gac0iLlUZNRvonSPzOtwW4g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.crl rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 04:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:87:89:f6:e6:83:ad:eb:fb:59:45:72:a4:b3:02:18:8c:ab:0a:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E380AA52674666F5E074BF511BB72FA0713E5270 Validity Not Before: May 8 03:56:09 2025 GMT Not After : May 11 04:44:09 2025 GMT Subject: CN=451045845EE584699FB00C38BA4B12C19D44CF6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:64:52:49:a0:73:4b:83:72:e8:0f:bf:e2:40: 73:96:38:f0:bd:c4:7a:bf:96:85:aa:06:05:d6:c6: fa:32:76:c5:60:ad:18:c4:aa:11:79:79:85:d7:6c: 73:b4:68:d5:7a:a6:e6:b1:f0:d6:02:b1:fb:44:03: 70:e3:35:16:dd:15:8f:2e:f3:83:20:47:ee:c5:6b: b7:fd:9e:7c:22:3f:2d:dc:ae:2d:ef:3f:fb:da:21: 87:e1:22:52:48:c0:6d:8f:e9:c4:40:f8:94:8c:ea: 68:2c:f2:04:30:f9:9b:ab:ad:66:09:2d:af:71:68: c8:48:26:9c:11:ce:cf:cf:0e:d9:39:2b:77:10:74: 45:c0:fa:98:6e:ee:bd:1c:6e:b4:3a:a1:c6:dc:c2: 6c:fa:9e:b9:3f:66:3c:85:0b:1d:c8:00:ac:47:36: 11:d7:7f:34:33:46:a7:86:35:0d:fb:cf:15:57:07: a5:ed:31:37:79:d7:a1:a8:79:33:3d:e4:3a:f9:89: 25:da:60:3b:24:71:6e:f9:ec:0a:cc:59:de:13:1c: e3:07:2e:2c:bb:c4:a1:9f:80:95:17:e8:6f:b6:54: 17:1c:8c:f2:59:bf:0e:0d:87:03:a0:4f:25:a1:12: de:84:7f:0e:72:94:22:3c:32:21:7d:71:62:bf:ed: 00:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:10:45:84:5E:E5:84:69:9F:B0:0C:38:BA:4B:12:C1:9D:44:CF:6B X509v3 Authority Key Identifier: keyid:E3:80:AA:52:67:46:66:F5:E0:74:BF:51:1B:B7:2F:A0:71:3E:52:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ab:cd:40:9e:cd:53:cf:9f:97:65:74:76:85:e2:00:26:ee: f4:91:c3:88:6f:f0:83:ba:a3:7b:d1:22:1a:06:de:a2:ec:fa: 3c:a5:4e:29:46:a5:61:c7:c4:57:b3:5e:d4:ca:5d:ff:6b:c1: ed:fd:5e:43:7f:f6:48:ee:ce:3c:29:90:53:d9:05:a8:15:9d: d2:a6:d8:af:af:f3:67:6e:79:53:ef:ae:43:09:c1:c2:e8:62: 79:c8:2a:f4:cf:f0:57:f0:0e:83:3c:1d:ed:2b:89:f8:80:de: 86:62:43:82:b9:0d:c8:1c:0e:2d:c8:63:5e:fb:e1:7e:9f:bf: 53:1f:fd:4e:80:57:2e:ad:cf:f9:a9:15:78:5d:85:c0:f1:a9: 83:52:63:03:f9:a6:f1:94:84:db:3a:f1:c4:cd:de:53:bb:8e: d9:06:e7:8b:95:ff:d3:8a:bf:e3:38:80:0a:94:8c:31:c3:5d: 75:e9:e0:c7:c1:19:0d:5b:88:ba:5e:86:b4:1b:72:58:d9:96: db:be:96:7a:1b:14:7a:da:55:b7:3c:f8:99:15:7c:85:19:7c: d7:8f:a0:c2:64:d8:e9:a5:4c:dc:34:96:01:a8:5d:2d:71:36: da:bf:b4:5b:57:cb:01:23:f0:cf:9f:f6:56:e8:26:db:67:2f: 48:77:91:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeYeJ9uaDrev7WUVypLMCGIyrCkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM4MEFBNTI2NzQ2NjZGNUUwNzRCRjUxMUJCNzJGQTA3 MTNFNTI3MDAeFw0yNTA1MDgwMzU2MDlaFw0yNTA1MTEwNDQ0MDlaMDMxMTAvBgNV BAMTKDQ1MTA0NTg0NUVFNTg0Njk5RkIwMEMzOEJBNEIxMkMxOUQ0NENGNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyZFJJoHNLg3LoD7/iQHOWOPC9 xHq/loWqBgXWxvoydsVgrRjEqhF5eYXXbHO0aNV6puax8NYCsftEA3DjNRbdFY8u 84MgR+7Fa7f9nnwiPy3cri3vP/vaIYfhIlJIwG2P6cRA+JSM6mgs8gQw+ZurrWYJ La9xaMhIJpwRzs/PDtk5K3cQdEXA+phu7r0cbrQ6ocbcwmz6nrk/ZjyFCx3IAKxH NhHXfzQzRqeGNQ37zxVXB6XtMTd516GoeTM95Dr5iSXaYDskcW757ArMWd4THOMH Liy7xKGfgJUX6G+2VBccjPJZvw4NhwOgTyWhEt6Efw5ylCI8MiF9cWK/7QDRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURRBFhF7lhGmfsAw4uksSwZ1Ez2swHwYDVR0j BBgwFoAU44CqUmdGZvXgdL9RG7cvoHE+UnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjY4NDYyZS1iZmE1LTQzMzctOTE1My1jNTU2ZDlkNzcxZmEvMC9FMzgwQUE1MjY3 NDY2NkY1RTA3NEJGNTExQkI3MkZBMDcxM0U1MjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM4MEFBNTI2NzQ2NjZGNUUwNzRCRjUxMUJCNzJGQTA3MTNF NTI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI2ODQ2MmUtYmZhNS00MzM3LTkx NTMtYzU1NmQ5ZDc3MWZhLzAvRTM4MEFBNTI2NzQ2NjZGNUUwNzRCRjUxMUJCNzJG QTA3MTNFNTI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHurzUCezVPPn5dldHaF4gAm7vSRw4hv8IO6 o3vRIhoG3qLs+jylTilGpWHHxFezXtTKXf9rwe39XkN/9kjuzjwpkFPZBagVndKm 2K+v82dueVPvrkMJwcLoYnnIKvTP8FfwDoM8He0rifiA3oZiQ4K5DcgcDi3IY177 4X6fv1Mf/U6AVy6tz/mpFXhdhcDxqYNSYwP5pvGUhNs68cTN3lO7jtkG54uV/9OK v+M4gAqUjDHDXXXp4MfBGQ1biLpehrQbcljZltu+lnobFHraVbc8+JkVfIUZfNeP oMJk2OmlTNw0lgGoXS1xNtq/tFtXywEj8M+f9lboJttnL0h3kTg= -----END CERTIFICATE-----Generated at Thu May 8 10:04:38 2025 by rpki-client