$ rpki-client -vvf repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft File: E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft (raw, json) Hash identifier: krJN5do6fJQPvinveMM3+dKKwN38gG8WtorPE5OIUtk= Subject key identifier: 4B:AB:AC:EC:34:A5:0B:28:15:78:2E:E8:06:7D:EF:A3:78:2D:D9:C2 Authority key identifier: E7:DC:BB:5E:91:2C:56:AB:C8:9C:BB:C8:FA:42:B5:E6:3D:15:2A:F4 Certificate issuer: /CN=E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4 Certificate serial: 5B6E9A5F91B863AE0A5215CB879A6EE198E37509 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft Manifest number: 04D1 Signing time: Sun 04 May 2025 02:02:17 +0000 Manifest this update: Sun 04 May 2025 01:57:17 +0000 Manifest next update: Wed 07 May 2025 12:17:17 +0000 Files and hashes: 1: E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl (hash: JsvHXEPDqOlZbxlTgveltVdzpEISC4vDS52IoGfZZMM=) 2: 3130332e3133392e3138362e302f32342d3234203d3e20313338383634.roa (hash: DoOOyUoa2urhEQnU2nkw2nuMVM/frvBM41YZ8gZsp2M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 12:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:6e:9a:5f:91:b8:63:ae:0a:52:15:cb:87:9a:6e:e1:98:e3:75:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4 Validity Not Before: May 4 01:57:17 2025 GMT Not After : May 7 12:17:17 2025 GMT Subject: CN=4BABACEC34A50B2815782EE8067DEFA3782DD9C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0a:64:cf:c3:cd:ff:03:6f:30:7a:30:3c:1e: 26:cb:19:ed:a0:33:57:b4:15:11:dd:04:c9:3a:82: 2e:32:18:26:0f:58:e1:15:15:80:86:0d:74:09:54: d0:c1:8d:0b:1e:b3:bc:07:eb:ad:d0:46:3b:a9:c0: c7:d4:23:6f:70:9f:05:bb:b4:0b:28:f4:97:53:c0: 59:11:12:c3:5e:a6:98:41:b7:c2:11:04:a5:62:59: 0a:17:08:41:20:a3:33:1d:e9:49:b5:89:9f:0c:44: 59:84:34:3f:b1:d8:fc:5b:5e:89:d3:90:f2:bd:6e: 7c:d8:e3:b9:91:6a:b0:5a:ec:8b:14:25:6e:24:ad: 71:e4:11:5b:cf:e9:d9:02:6e:1a:4f:11:05:5c:8d: 29:d6:ca:6b:e1:b6:f7:f1:6b:96:69:48:8e:d0:00: 3e:2a:d7:50:9c:71:f3:d1:f1:48:d3:5e:30:1d:8c: d3:43:a8:9c:3a:e0:75:e5:7a:d6:72:0f:91:7d:8a: 5a:59:09:a4:62:71:a5:90:60:8d:cd:c9:65:af:0c: d0:93:15:8d:06:77:fb:b2:88:57:6d:3a:81:d4:46: 4d:e1:6e:1b:bf:b9:a6:c4:49:72:c9:df:a3:d3:fc: 5d:0e:6c:37:09:6e:63:58:4f:32:6a:3f:ac:c9:97: 23:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AB:AC:EC:34:A5:0B:28:15:78:2E:E8:06:7D:EF:A3:78:2D:D9:C2 X509v3 Authority Key Identifier: keyid:E7:DC:BB:5E:91:2C:56:AB:C8:9C:BB:C8:FA:42:B5:E6:3D:15:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d1:a8:d0:64:33:36:59:cf:6c:e6:35:86:2f:12:b8:39:eb: 0b:89:9a:3c:ef:6b:47:27:d2:52:6f:7d:33:8e:31:dc:b7:c9: 39:23:0c:6f:f4:62:72:d2:c8:59:a6:fc:fa:02:5c:89:61:26: cd:ed:4c:0e:bc:ff:90:b4:fc:8c:26:1c:c9:65:40:38:6e:7a: e7:73:ff:4b:40:81:0e:8a:88:a5:72:65:ce:d2:7b:45:66:b6: 8f:48:5f:ef:14:2b:1b:97:97:7a:f3:23:9b:43:5f:33:d4:d5: 98:5d:07:f5:14:ef:55:a2:16:ca:ab:12:ae:9e:38:e1:9c:a5: bf:db:38:32:ad:4b:0b:ac:31:b4:c1:e5:23:a0:cb:36:26:06: 10:30:c8:86:66:aa:3f:8a:02:58:8b:00:9d:2d:b1:1b:d0:17: 6c:91:9d:5a:6b:d6:69:2a:c5:4b:67:93:78:b1:a7:0f:f8:fb: 6c:70:aa:07:39:ad:5e:ce:d1:95:86:4e:29:d3:e0:d1:8c:1a: cb:ba:c3:de:8c:2c:64:40:d7:6f:1d:3f:2f:76:92:2a:c8:e2: 85:aa:8f:25:7e:7b:1c:ed:e0:c7:46:fe:f1:d2:a6:99:a9:ca: 3b:0d:aa:aa:07:66:33:f7:f7:80:96:dc:fb:b3:8a:13:e2:5c: 52:49:d5:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW26aX5G4Y64KUhXLh5pu4ZjjdQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdEQ0JCNUU5MTJDNTZBQkM4OUNCQkM4RkE0MkI1RTYz RDE1MkFGNDAeFw0yNTA1MDQwMTU3MTdaFw0yNTA1MDcxMjE3MTdaMDMxMTAvBgNV BAMTKDRCQUJBQ0VDMzRBNTBCMjgxNTc4MkVFODA2N0RFRkEzNzgyREQ5QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDECmTPw83/A28wejA8HibLGe2g M1e0FRHdBMk6gi4yGCYPWOEVFYCGDXQJVNDBjQses7wH663QRjupwMfUI29wnwW7 tAso9JdTwFkREsNepphBt8IRBKViWQoXCEEgozMd6Um1iZ8MRFmEND+x2PxbXonT kPK9bnzY47mRarBa7IsUJW4krXHkEVvP6dkCbhpPEQVcjSnWymvhtvfxa5ZpSI7Q AD4q11CccfPR8UjTXjAdjNNDqJw64HXletZyD5F9ilpZCaRicaWQYI3NyWWvDNCT FY0Gd/uyiFdtOoHURk3hbhu/uabESXLJ36PT/F0ObDcJbmNYTzJqP6zJlyOnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS6us7DSlCygVeC7oBn3vo3gt2cIwHwYDVR0j BBgwFoAU59y7XpEsVqvInLvI+kK15j0VKvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDM1OGIwMC0zMWNkLTQxYTMtOTUzNi1kYmIxOTNlN2Y0ZDAvMC9FN0RDQkI1RTkx MkM1NkFCQzg5Q0JCQzhGQTQyQjVFNjNEMTUyQUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdEQ0JCNUU5MTJDNTZBQkM4OUNCQkM4RkE0MkI1RTYzRDE1 MkFGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQzNThiMDAtMzFjZC00MWEzLTk1 MzYtZGJiMTkzZTdmNGQwLzAvRTdEQ0JCNUU5MTJDNTZBQkM4OUNCQkM4RkE0MkI1 RTYzRDE1MkFGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrRqNBkMzZZz2zmNYYvErg56wuJmjzva0cn 0lJvfTOOMdy3yTkjDG/0YnLSyFmm/PoCXIlhJs3tTA68/5C0/IwmHMllQDhueudz /0tAgQ6KiKVyZc7Se0Vmto9IX+8UKxuXl3rzI5tDXzPU1ZhdB/UU71WiFsqrEq6e OOGcpb/bODKtSwusMbTB5SOgyzYmBhAwyIZmqj+KAliLAJ0tsRvQF2yRnVpr1mkq xUtnk3ixpw/4+2xwqgc5rV7O0ZWGTinT4NGMGsu6w96MLGRA128dPy92kirI4oWq jyV+exzt4MdG/vHSppmpyjsNqqoHZjP394CW3PuzihPiXFJJ1bo= -----END CERTIFICATE-----Generated at Wed May 7 12:10:46 2025 by rpki-client