$ rpki-client -vvf repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft File: E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft (raw, json) Hash identifier: MH4oDfeAcEe43z679g3ETdXJCOpIw71CSEaV/Z0a9H0= Subject key identifier: 96:01:BE:65:35:46:84:8F:20:BC:A8:DC:5F:BA:D8:33:59:E5:93:F6 Authority key identifier: E8:4D:B4:4F:00:08:62:4F:8E:76:93:BC:3B:E1:F9:BF:CD:DF:A2:80 Certificate issuer: /CN=E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280 Certificate serial: 01857ABE10ADFAFE1F43EA8CDF9CAA6C7F318BF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft Manifest number: 049F Signing time: Sat 10 May 2025 17:41:04 +0000 Manifest this update: Sat 10 May 2025 17:36:04 +0000 Manifest next update: Tue 13 May 2025 18:14:04 +0000 Files and hashes: 1: E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.crl (hash: vXJzIQAiUdQwlksp4IU9XUxE3pwU8hhGFYaVPtrH64M=) 2: 3130332e3132302e3133382e302f32342d3234203d3e20313338303537.roa (hash: qgHn9Y12FiiqTXi239X+b42tdZRddWDqEjwQugEWxV0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.crl rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 18:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:85:7a:be:10:ad:fa:fe:1f:43:ea:8c:df:9c:aa:6c:7f:31:8b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280 Validity Not Before: May 10 17:36:04 2025 GMT Not After : May 13 18:14:04 2025 GMT Subject: CN=9601BE653546848F20BCA8DC5FBAD83359E593F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d1:41:31:a0:63:5f:a0:7b:31:88:0f:97:b2: a9:8f:c3:a2:07:a5:d7:3d:9c:f3:f7:e1:63:20:c3: 5c:f7:db:47:09:58:ce:54:5b:d9:67:29:42:ab:c4: 0e:51:b4:dd:ae:36:e4:d1:7b:da:5e:4a:b4:7a:20: 64:51:ce:4f:32:72:96:98:04:91:d2:19:56:c8:4c: 1d:07:07:dc:a9:b6:a3:1c:ae:d4:bf:a0:90:b8:c1: ea:af:78:8b:5d:c6:27:bf:de:12:85:2f:07:54:8a: 1d:d0:7a:f7:8b:09:1f:a9:e8:ff:28:21:5a:a7:a5: 26:b9:7e:6b:7f:da:27:53:32:6b:b1:73:0c:51:b7: dd:37:91:9c:2b:e8:61:2b:05:41:e5:5b:ee:43:5f: f0:44:23:92:f9:b1:11:20:7f:2d:d0:09:83:e9:a3: 7a:77:c0:82:18:75:c6:09:c2:a5:75:55:8c:41:94: e2:fe:d4:e7:35:73:3b:bf:62:87:b0:30:04:d5:f3: af:af:cd:2f:f5:8c:38:fc:be:08:2f:f1:99:9a:31: 90:6c:c0:76:f9:8f:77:50:74:b0:87:e5:41:93:39: d4:87:85:16:1d:93:13:74:8a:94:0f:db:94:32:48: 17:f8:77:ec:80:de:58:e0:af:aa:80:19:87:5c:26: 6d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:01:BE:65:35:46:84:8F:20:BC:A8:DC:5F:BA:D8:33:59:E5:93:F6 X509v3 Authority Key Identifier: keyid:E8:4D:B4:4F:00:08:62:4F:8E:76:93:BC:3B:E1:F9:BF:CD:DF:A2:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:cf:f3:8b:71:9d:a7:53:80:62:a7:49:f8:02:85:74:be:8b: fe:01:1c:d8:be:f1:ac:a8:44:c6:a5:6a:4b:bf:54:61:18:36: 86:76:8e:ca:90:9e:fe:12:4d:6c:42:bc:cd:d9:72:9c:46:36: 44:b8:b6:da:b9:d4:f0:ba:7e:c7:63:8c:09:86:49:3e:54:61: 5a:66:1f:f1:88:d9:08:81:ce:3d:a2:6c:dd:0b:d2:2a:c0:81: ab:42:f9:41:66:2c:b8:1c:6c:a9:ac:d9:d4:24:d8:97:88:4e: 2d:2b:75:77:db:ad:74:f9:ae:ea:85:0e:72:8c:c7:f5:ee:a3: 50:0c:f9:03:43:46:04:5b:50:8d:a1:55:20:b9:00:22:c2:50: dd:00:af:a9:e6:74:45:44:74:90:e3:67:64:95:88:94:70:f6: 4c:27:44:0e:71:38:ff:2c:d3:6a:51:b4:6b:40:fa:04:ca:42: af:4f:9b:da:59:32:48:ce:8f:5f:52:f6:24:ee:88:84:d6:d9: 6e:1a:71:92:65:60:ef:1c:a9:dc:ff:c8:76:6c:e9:05:34:1f: a5:69:a8:17:c8:c0:91:35:72:19:bc:3c:fc:f5:d1:a1:6d:d6: fc:e2:7a:25:5d:b0:bb:b8:72:c2:5e:43:7f:57:56:79:e0:c7: a0:9f:3a:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAYV6vhCt+v4fQ+qM35yqbH8xi/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg0REI0NEYwMDA4NjI0RjhFNzY5M0JDM0JFMUY5QkZD RERGQTI4MDAeFw0yNTA1MTAxNzM2MDRaFw0yNTA1MTMxODE0MDRaMDMxMTAvBgNV BAMTKDk2MDFCRTY1MzU0Njg0OEYyMEJDQThEQzVGQkFEODMzNTlFNTkzRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI0UExoGNfoHsxiA+XsqmPw6IH pdc9nPP34WMgw1z320cJWM5UW9lnKUKrxA5RtN2uNuTRe9peSrR6IGRRzk8ycpaY BJHSGVbITB0HB9yptqMcrtS/oJC4weqveItdxie/3hKFLwdUih3QeveLCR+p6P8o IVqnpSa5fmt/2idTMmuxcwxRt903kZwr6GErBUHlW+5DX/BEI5L5sREgfy3QCYPp o3p3wIIYdcYJwqV1VYxBlOL+1Oc1czu/YoewMATV86+vzS/1jDj8vggv8ZmaMZBs wHb5j3dQdLCH5UGTOdSHhRYdkxN0ipQP25QySBf4d+yA3ljgr6qAGYdcJm3VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlgG+ZTVGhI8gvKjcX7rYM1nlk/YwHwYDVR0j BBgwFoAU6E20TwAIYk+OdpO8O+H5v83fooAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWI5NjAwNS04M2E5LTQxZTQtYWY1Yi1mM2VhYThmMjM2NTEvMC9FODREQjQ0RjAw MDg2MjRGOEU3NjkzQkMzQkUxRjlCRkNEREZBMjgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg0REI0NEYwMDA4NjI0RjhFNzY5M0JDM0JFMUY5QkZDRERG QTI4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGViOTYwMDUtODNhOS00MWU0LWFm NWItZjNlYWE4ZjIzNjUxLzAvRTg0REI0NEYwMDA4NjI0RjhFNzY5M0JDM0JFMUY5 QkZDRERGQTI4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXP84txnadTgGKnSfgChXS+i/4BHNi+8ayo RMalaku/VGEYNoZ2jsqQnv4STWxCvM3ZcpxGNkS4ttq51PC6fsdjjAmGST5UYVpm H/GI2QiBzj2ibN0L0irAgatC+UFmLLgcbKms2dQk2JeITi0rdXfbrXT5ruqFDnKM x/Xuo1AM+QNDRgRbUI2hVSC5ACLCUN0Ar6nmdEVEdJDjZ2SViJRw9kwnRA5xOP8s 02pRtGtA+gTKQq9Pm9pZMkjOj19S9iTuiITW2W4acZJlYO8cqdz/yHZs6QU0H6Vp qBfIwJE1chm8PPz10aFt1vzieiVdsLu4csJeQ39XVnngx6CfOlc= -----END CERTIFICATE-----Generated at Mon May 12 11:01:27 2025 by rpki-client