$ rpki-client -vvf repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft File: EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft (raw, json) Hash identifier: 7E/iMZO5Kogpn5h3Yo5P7sptgEnGUpRWEnUdexOg2xw= Subject key identifier: 85:7B:2B:A9:AC:5E:25:44:21:A3:4A:E7:8C:C8:16:AB:2E:C3:E5:5E Authority key identifier: EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5 Certificate issuer: /CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5 Certificate serial: 38B03807993879EC13A1793953A0DFDA882CDABB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft Manifest number: 04D1 Signing time: Fri 09 May 2025 00:31:35 +0000 Manifest this update: Fri 09 May 2025 00:26:35 +0000 Manifest next update: Mon 12 May 2025 06:03:35 +0000 Files and hashes: 1: 3130332e362e3231342e302f32342d3234203d3e20313331313132.roa (hash: wxhr1XRJclUw3rXb3dstQr5k0bYeJ5/Xkb24+3+fAGU=) 2: EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl (hash: RzGzY2xO8wnAjUv3d6dlPIzPFcU8ck0vMiNSGEdr4CI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 06:03:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:b0:38:07:99:38:79:ec:13:a1:79:39:53:a0:df:da:88:2c:da:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5 Validity Not Before: May 9 00:26:35 2025 GMT Not After : May 12 06:03:35 2025 GMT Subject: CN=857B2BA9AC5E254421A34AE78CC816AB2EC3E55E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d2:1d:dc:79:f5:69:04:d5:ea:5d:43:c7:6e: 9f:a7:4f:a6:fb:86:dc:84:01:01:40:a8:a1:ba:b7: 42:2f:1a:35:47:35:f2:68:89:47:b0:2c:3e:d3:41: 4f:50:fd:48:8e:f4:76:bf:9b:b4:ca:a5:eb:de:1f: 7d:60:e0:35:8a:0a:32:97:ff:77:22:a1:17:7f:27: 2d:2b:55:b3:b0:05:6d:54:4a:76:dc:14:aa:82:c6: 0d:76:71:08:41:cc:a9:85:ea:5d:bb:0b:4e:d3:c6: a6:79:63:ad:88:a5:a7:6b:14:2e:ff:28:59:94:5b: 0a:27:96:43:cc:94:42:e9:e9:d8:01:c8:15:ab:f8: b1:de:4d:ab:2b:15:e0:07:81:2e:eb:82:7f:8c:46: b4:13:7d:a3:10:d8:14:67:e4:cf:18:d8:83:32:3a: a2:d0:f9:b7:1a:51:e3:cf:3b:64:5b:15:88:b6:ab: 17:25:9c:d0:a3:35:5f:46:de:01:f5:b0:87:fa:ec: 2e:87:b0:4f:22:4c:b7:70:7c:28:19:e5:bb:a5:32: 6f:de:9c:5c:b7:38:c1:0d:2c:8f:e1:78:f2:72:f9: 03:27:cc:3e:7f:d9:17:63:6b:0e:b4:0b:2f:19:68: 82:44:5b:72:52:b6:db:e8:17:29:8c:2f:86:1b:85: fe:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:7B:2B:A9:AC:5E:25:44:21:A3:4A:E7:8C:C8:16:AB:2E:C3:E5:5E X509v3 Authority Key Identifier: keyid:EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c3:5f:fa:1c:72:9f:fd:95:c7:3f:f0:e5:34:6b:50:d3:21: 38:b9:07:78:6e:8b:5a:b9:80:ce:36:6f:2f:a2:f9:24:3b:63: ec:dd:fc:be:f5:71:a7:f0:d0:ef:cf:b0:d4:90:81:ca:3f:df: 1a:df:0b:1a:ae:15:ad:8b:ce:47:14:57:02:19:d3:62:97:09: 8e:5c:0c:64:55:18:45:61:0c:96:d0:29:4c:ce:77:53:c3:89: b8:9d:65:b1:36:7d:c7:6f:cf:29:ea:de:70:d2:8a:ca:51:72: 76:0a:99:90:12:2d:84:5d:05:3e:e3:b2:0b:d2:f2:1e:ca:2a: 28:a3:0c:dc:8b:72:2b:7d:07:ca:94:5f:e7:3f:aa:4d:f4:29: 5b:06:9a:62:25:c6:65:54:aa:9d:14:83:b0:17:98:91:a7:46: 06:eb:9d:4c:5c:76:ec:1c:1b:06:16:2c:b9:c6:ed:f2:32:5d: 68:6f:26:e8:e7:0c:cc:5a:5f:6f:ad:b0:98:fb:e6:db:c4:cf: 25:82:ac:c5:c7:13:6e:98:52:de:5d:d8:e3:fb:ab:9f:0c:b2: 30:d7:d4:31:8e:3c:23:e0:66:ef:00:9e:52:ba:c1:53:cd:70: c0:44:f5:f3:dc:41:4c:fd:90:dd:d1:6e:3b:9d:6e:be:7d:67: a2:4c:af:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOLA4B5k4eewToXk5U6Df2ogs2rswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdFREJB M0QxMTZENTAeFw0yNTA1MDkwMDI2MzVaFw0yNTA1MTIwNjAzMzVaMDMxMTAvBgNV BAMTKDg1N0IyQkE5QUM1RTI1NDQyMUEzNEFFNzhDQzgxNkFCMkVDM0U1NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo0h3cefVpBNXqXUPHbp+nT6b7 htyEAQFAqKG6t0IvGjVHNfJoiUewLD7TQU9Q/UiO9Ha/m7TKpeveH31g4DWKCjKX /3cioRd/Jy0rVbOwBW1USnbcFKqCxg12cQhBzKmF6l27C07TxqZ5Y62IpadrFC7/ KFmUWwonlkPMlELp6dgByBWr+LHeTasrFeAHgS7rgn+MRrQTfaMQ2BRn5M8Y2IMy OqLQ+bcaUePPO2RbFYi2qxclnNCjNV9G3gH1sIf67C6HsE8iTLdwfCgZ5bulMm/e nFy3OMENLI/hePJy+QMnzD5/2Rdjaw60Cy8ZaIJEW3JSttvoFymML4Ybhf5XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhXsrqaxeJUQho0rnjMgWqy7D5V4wHwYDVR0j BBgwFoAU7GKpSXDlasn+i4KKVCt+26PRFtUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODdmOGY4Mi0zN2JiLTQ5ODMtOTNjYS01ZTA2NzBhYjAyZTMvMC9FQzYyQTk0OTcw RTU2QUM5RkU4QjgyOEE1NDJCN0VEQkEzRDExNkQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdFREJBM0Qx MTZENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg3ZjhmODItMzdiYi00OTgzLTkz Y2EtNWUwNjcwYWIwMmUzLzAvRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdF REJBM0QxMTZENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzDX/occp/9lcc/8OU0a1DTITi5B3hui1q5 gM42by+i+SQ7Y+zd/L71cafw0O/PsNSQgco/3xrfCxquFa2LzkcUVwIZ02KXCY5c DGRVGEVhDJbQKUzOd1PDibidZbE2fcdvzynq3nDSispRcnYKmZASLYRdBT7jsgvS 8h7KKiijDNyLcit9B8qUX+c/qk30KVsGmmIlxmVUqp0Ug7AXmJGnRgbrnUxcduwc GwYWLLnG7fIyXWhvJujnDMxaX2+tsJj75tvEzyWCrMXHE26YUt5d2OP7q58MsjDX 1DGOPCPgZu8AnlK6wVPNcMBE9fPcQUz9kN3Rbjudbr59Z6JMr1k= -----END CERTIFICATE-----Generated at Sat May 10 19:43:12 2025 by rpki-client