$ rpki-client -vvf repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft File: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft (raw, json) Hash identifier: p58WUaaGKElOd4fSZeZQ6zWxEwf/51LAeHpO388OyiM= Subject key identifier: 77:F5:56:2B:6E:C1:D9:7E:80:B4:4E:5C:EB:E2:A9:30:A9:97:38:B2 Authority key identifier: E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F Certificate issuer: /CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Certificate serial: 52D7F377D8AC548DF8D966561D4B89639284278C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft Manifest number: AE Signing time: Sat 03 May 2025 07:31:47 +0000 Manifest this update: Sat 03 May 2025 07:26:47 +0000 Manifest next update: Tue 06 May 2025 14:30:47 +0000 Files and hashes: 1: 3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (hash: 0+ulOJPEXxfRU9rDzPOyAhCIeStaBB8o7bfVtpS93+A=) 2: 3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa (hash: PEcDYL2YEDwvOwIh2isXFSsdo3mWol6RplkSJ7kPOGI=) 3: 323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa (hash: k742tyOIX18+4IlFbV4FgY2xaEXxztUec+tXVFs15vs=) 4: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl (hash: O1vpLCr83ihD/tnehGB834Vx0HZMlBE1EgXQqfz8Hs8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 14:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:d7:f3:77:d8:ac:54:8d:f8:d9:66:56:1d:4b:89:63:92:84:27:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Validity Not Before: May 3 07:26:47 2025 GMT Not After : May 6 14:30:47 2025 GMT Subject: CN=77F5562B6EC1D97E80B44E5CEBE2A930A99738B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:01:c8:35:07:dd:39:c1:ed:1a:97:1d:bf:01: 16:88:96:ff:12:c5:32:dc:4e:d3:70:0a:1e:57:60: 3c:74:49:de:07:6d:c9:ac:d0:bf:04:1a:3a:d8:89: b6:56:c2:e2:62:72:cc:96:d1:39:3b:86:0c:f2:9b: 07:8d:9d:53:d1:8a:74:d2:80:27:84:3b:20:76:c9: fb:f1:98:12:a6:67:0d:1b:ee:91:7a:b9:9f:66:97: 4c:63:82:54:e9:49:80:6b:ae:19:cb:89:77:93:d4: 2d:54:6b:8c:dd:fc:dc:61:ad:67:5b:7a:af:08:10: 8a:27:b7:4b:77:fb:be:ce:d9:ea:17:96:18:18:a1: 97:54:2d:ef:06:49:58:99:f8:20:ef:38:03:aa:69: 75:ab:a8:6b:41:f2:d3:e2:d8:ee:69:13:1d:0b:c3: db:af:af:62:66:77:44:ce:c6:8c:22:e7:d0:b3:d9: 08:88:06:b3:ce:5a:77:eb:94:5f:7f:88:a9:33:68: 40:95:95:6b:b6:8b:ee:d7:98:b2:21:8e:36:61:39: 0c:0e:64:12:d4:5f:b6:1c:a8:f2:fb:f2:ba:04:81: 5a:c3:c6:1f:93:ed:6d:d6:ed:a9:36:70:d4:ac:34: 2d:cb:30:1d:ab:5f:19:e2:38:24:9f:96:92:d0:64: ba:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F5:56:2B:6E:C1:D9:7E:80:B4:4E:5C:EB:E2:A9:30:A9:97:38:B2 X509v3 Authority Key Identifier: keyid:E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:7a:9e:a9:dc:f8:5e:1f:1a:c7:15:05:97:ac:e5:1e:76:4a: 56:17:7f:29:57:7e:64:fd:af:6f:42:cb:3b:44:af:9f:dd:f2: 15:2d:d6:f0:a7:af:66:14:b3:23:53:ee:f3:54:af:00:65:15: 3b:cc:7b:a2:1a:7e:fd:2d:78:2e:f0:2f:f7:08:80:83:78:51: b1:7a:09:85:a8:1e:98:ff:bc:a0:0b:a7:ec:4e:31:32:60:36: 73:53:bf:c1:2a:fb:2d:cc:54:07:4e:77:53:f1:55:72:1a:c3: b0:3a:38:ad:49:65:13:4f:53:a2:30:8a:ac:7b:ce:28:71:06: cd:48:0e:44:fc:c3:3a:17:ee:6c:fe:b6:6d:89:4c:f0:6c:21: 1d:61:2b:93:75:21:d1:39:70:ac:5d:d4:0f:74:74:c6:8d:4d: ab:df:b3:b1:71:9c:57:61:42:f8:ce:a8:7c:f1:91:f3:29:92: 5a:2f:62:57:a2:02:3a:bd:30:b4:76:7d:24:e4:32:57:18:7f: be:30:43:d1:4c:70:d6:4a:0c:ad:f3:3d:28:15:6f:df:b2:28: da:02:27:27:49:87:a5:34:26:43:c0:13:06:dc:20:69:18:46: db:48:e4:b7:19:d9:0e:50:fd:bc:83:5f:42:8f:fe:55:f6:2d: 7e:e1:88:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUtfzd9isVI342WZWHUuJY5KEJ4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0Iy REJCRUQwRjAeFw0yNTA1MDMwNzI2NDdaFw0yNTA1MDYxNDMwNDdaMDMxMTAvBgNV BAMTKDc3RjU1NjJCNkVDMUQ5N0U4MEI0NEU1Q0VCRTJBOTMwQTk5NzM4QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvAcg1B905we0alx2/ARaIlv8S xTLcTtNwCh5XYDx0Sd4Hbcms0L8EGjrYibZWwuJicsyW0Tk7hgzymweNnVPRinTS gCeEOyB2yfvxmBKmZw0b7pF6uZ9ml0xjglTpSYBrrhnLiXeT1C1Ua4zd/NxhrWdb eq8IEIont0t3+77O2eoXlhgYoZdULe8GSViZ+CDvOAOqaXWrqGtB8tPi2O5pEx0L w9uvr2Jmd0TOxowi59Cz2QiIBrPOWnfrlF9/iKkzaECVlWu2i+7XmLIhjjZhOQwO ZBLUX7YcqPL78roEgVrDxh+T7W3W7ak2cNSsNC3LMB2rXxniOCSflpLQZLr5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd/VWK27B2X6AtE5c6+KpMKmXOLIwHwYDVR0j BBgwFoAU5M7BHyRL8Nq+wTb4Of1Tey277Q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmYzZjVkOS1jZmI4LTQxMjMtYTJiMS1iMGI1Mjk5ZjljNmUvMC9FNENFQzExRjI0 NEJGMERBQkVDMTM2RjgzOUZENTM3QjJEQkJFRDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0IyREJC RUQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJmM2Y1ZDktY2ZiOC00MTIzLWEy YjEtYjBiNTI5OWY5YzZlLzAvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUz N0IyREJCRUQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALF6nqnc+F4fGscVBZes5R52SlYXfylXfmT9 r29CyztEr5/d8hUt1vCnr2YUsyNT7vNUrwBlFTvMe6Iafv0teC7wL/cIgIN4UbF6 CYWoHpj/vKALp+xOMTJgNnNTv8Eq+y3MVAdOd1PxVXIaw7A6OK1JZRNPU6Iwiqx7 zihxBs1IDkT8wzoX7mz+tm2JTPBsIR1hK5N1IdE5cKxd1A90dMaNTavfs7FxnFdh QvjOqHzxkfMpklovYleiAjq9MLR2fSTkMlcYf74wQ9FMcNZKDK3zPSgVb9+yKNoC JydJh6U0JkPAEwbcIGkYRttI5LcZ2Q5Q/byDX0KP/lX2LX7hiOI= -----END CERTIFICATE-----Generated at Mon May 5 19:13:40 2025 by rpki-client