$ rpki-client -vvf repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft File: E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft (raw, json) Hash identifier: go92JUssD5vNL1FtZFWt0auwymaXSRM6ZbhBtG9wTxI= Subject key identifier: A9:F4:50:C7:A1:2F:F9:F2:68:81:10:AF:9F:B3:C7:89:21:EE:92:19 Authority key identifier: E4:81:3B:FD:9F:D2:7C:9C:A2:2A:77:0F:5D:84:6B:50:FC:78:3A:3C Certificate issuer: /CN=E4813BFD9FD27C9CA22A770F5D846B50FC783A3C Certificate serial: 1A31414D4D30C8C5E41BAD00B8A087F7EB9088CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft Manifest number: 018F Signing time: Fri 09 May 2025 10:40:42 +0000 Manifest this update: Fri 09 May 2025 10:35:42 +0000 Manifest next update: Mon 12 May 2025 14:51:42 +0000 Files and hashes: 1: E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl (hash: Hi9yiIIHSOMUaMY+JL0/DpBVplOYZEpKKbHWsxL29vM=) 2: 3130332e3134372e37342e302f32332d3234203d3e203137373639.roa (hash: O88yPYmN6xDUFSj/RxvbUkag/UKNDi1pEvsS211Q2AQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 14:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:31:41:4d:4d:30:c8:c5:e4:1b:ad:00:b8:a0:87:f7:eb:90:88:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4813BFD9FD27C9CA22A770F5D846B50FC783A3C Validity Not Before: May 9 10:35:42 2025 GMT Not After : May 12 14:51:42 2025 GMT Subject: CN=A9F450C7A12FF9F2688110AF9FB3C78921EE9219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:df:52:ff:a2:59:9a:af:44:4b:1b:02:6b:31: a9:0a:07:42:34:4d:d9:49:ec:60:4f:60:fc:ec:6e: 9a:19:b2:2b:20:f9:c2:53:4b:5b:6f:7b:77:7a:b3: 0d:9a:a1:85:12:03:70:ce:5c:69:f3:02:d0:40:2c: 1b:93:5c:79:9c:fb:e9:43:a9:0e:3d:4c:a5:9b:ed: d8:0a:e7:25:84:96:e3:de:2a:73:f7:e9:8d:72:ec: 6a:aa:d5:15:28:43:cf:a5:c4:85:d9:53:5e:be:f4: 0c:42:c6:ba:56:31:54:ba:cf:06:31:98:96:02:a5: c3:65:16:1d:62:0a:90:cc:73:f1:b0:99:e0:34:ea: 09:80:b2:8e:d5:8a:54:c0:67:51:90:8e:46:b1:36: e4:91:45:dc:43:be:f8:d6:d0:b7:3c:00:12:d0:6f: 30:b6:67:a4:b5:90:9a:44:cd:0c:45:2d:61:33:ca: 51:59:5a:e4:aa:d9:e4:c0:91:97:b9:e8:e3:02:f6: d6:6f:b3:25:a0:43:65:71:09:e1:1b:06:ff:a6:bf: f2:a3:41:5a:d0:8b:bc:47:a3:7a:98:d2:b8:ca:29: 23:08:a3:8a:23:6a:b1:d6:6f:8a:ad:4b:86:50:a3: 38:27:26:02:cb:90:8d:3b:6f:f3:2c:3c:88:b5:07: d8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F4:50:C7:A1:2F:F9:F2:68:81:10:AF:9F:B3:C7:89:21:EE:92:19 X509v3 Authority Key Identifier: keyid:E4:81:3B:FD:9F:D2:7C:9C:A2:2A:77:0F:5D:84:6B:50:FC:78:3A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:dc:b3:c8:b4:aa:83:a7:ae:fd:05:b9:9a:5e:75:fd:e5:8e: fa:f0:cc:b8:5a:70:39:bd:df:94:15:11:be:f1:97:c7:76:0e: f0:d5:c2:f2:c5:b5:cd:8a:9f:39:83:03:76:ce:ef:fe:2f:41: 92:a8:bc:13:cb:f0:93:9e:c0:52:08:c4:15:78:b7:9e:b6:a4: ec:4e:de:70:5f:34:8a:04:ee:c7:bb:54:25:6a:69:c4:d6:a2: d9:6d:ff:34:01:91:fb:41:d6:9e:35:41:31:d5:d7:65:82:46: 5f:45:40:f4:3e:d2:2b:a0:84:ca:fe:c8:e2:9f:46:bc:88:b6: b2:7a:ad:cb:a3:d5:ff:25:11:98:e8:c9:c3:c3:d5:ad:81:43: fa:7f:2d:60:aa:9e:68:9e:79:a6:83:4b:38:a8:ae:2f:63:3c: 90:01:be:a2:12:20:26:60:9e:48:6b:e7:57:3d:02:2a:43:83: 7b:3c:08:27:aa:2c:7d:b8:eb:89:8e:ab:6a:cb:a2:fd:0d:9d: 88:6b:36:84:2f:98:dd:25:07:d2:4a:6b:26:b0:24:fe:70:a1: ac:da:a7:7d:98:2e:f8:52:c3:1b:e4:01:1f:2b:94:1e:81:5c: 70:b0:82:9a:18:34:d1:15:a0:1d:d5:43:82:1c:fa:0e:98:3f: c5:5d:8e:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGjFBTU0wyMXkG60AuKCH9+uQiMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3NzBGNUQ4NDZCNTBG Qzc4M0EzQzAeFw0yNTA1MDkxMDM1NDJaFw0yNTA1MTIxNDUxNDJaMDMxMTAvBgNV BAMTKEE5RjQ1MEM3QTEyRkY5RjI2ODgxMTBBRjlGQjNDNzg5MjFFRTkyMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU31L/olmar0RLGwJrMakKB0I0 TdlJ7GBPYPzsbpoZsisg+cJTS1tve3d6sw2aoYUSA3DOXGnzAtBALBuTXHmc++lD qQ49TKWb7dgK5yWEluPeKnP36Y1y7Gqq1RUoQ8+lxIXZU16+9AxCxrpWMVS6zwYx mJYCpcNlFh1iCpDMc/GwmeA06gmAso7VilTAZ1GQjkaxNuSRRdxDvvjW0Lc8ABLQ bzC2Z6S1kJpEzQxFLWEzylFZWuSq2eTAkZe56OMC9tZvsyWgQ2VxCeEbBv+mv/Kj QVrQi7xHo3qY0rjKKSMIo4ojarHWb4qtS4ZQozgnJgLLkI07b/MsPIi1B9hBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqfRQx6Ev+fJogRCvn7PHiSHukhkwHwYDVR0j BBgwFoAU5IE7/Z/SfJyiKncPXYRrUPx4OjwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzI5MDdkMy1iZTI0LTRkYTgtOTZiYi1mMTIyOGZjOTkyMDUvMC9FNDgxM0JGRDlG RDI3QzlDQTIyQTc3MEY1RDg0NkI1MEZDNzgzQTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3NzBGNUQ4NDZCNTBGQzc4 M0EzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjcyOTA3ZDMtYmUyNC00ZGE4LTk2 YmItZjEyMjhmYzk5MjA1LzAvRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3NzBGNUQ4NDZC NTBGQzc4M0EzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjcs8i0qoOnrv0FuZpedf3ljvrwzLhacDm9 35QVEb7xl8d2DvDVwvLFtc2KnzmDA3bO7/4vQZKovBPL8JOewFIIxBV4t562pOxO 3nBfNIoE7se7VCVqacTWotlt/zQBkftB1p41QTHV12WCRl9FQPQ+0iughMr+yOKf RryItrJ6rcuj1f8lEZjoycPD1a2BQ/p/LWCqnmieeaaDSziori9jPJABvqISICZg nkhr51c9AipDg3s8CCeqLH2464mOq2rLov0NnYhrNoQvmN0lB9JKayawJP5woaza p32YLvhSwxvkAR8rlB6BXHCwgpoYNNEVoB3VQ4Ic+g6YP8Vdjpg= -----END CERTIFICATE-----Generated at Sun May 11 01:06:54 2025 by rpki-client