$ rpki-client -vvf repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft File: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft (raw, json) Hash identifier: uTsMfg0haf600iAPDNdjqxknKa+wgMvxUZtj/oKY7ks= Subject key identifier: DE:5E:A9:68:1B:68:A5:1C:30:78:E2:79:62:C5:EA:9C:66:9A:63:05 Authority key identifier: EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C Certificate issuer: /CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Certificate serial: 0E9E0AC61FEC9E4A0F88F7A41D3DF7CE9A478F07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft Manifest number: 045B Signing time: Wed 07 May 2025 21:42:02 +0000 Manifest this update: Wed 07 May 2025 21:37:02 +0000 Manifest next update: Sun 11 May 2025 05:22:02 +0000 Files and hashes: 1: 3130332e3135332e3132362e302f32342d3234203d3e20313430343632.roa (hash: /BYvra4DlfHnq4UOMzaF51N5Kus+HjkdFOsGHv9u+80=) 2: EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl (hash: o8hZX+bp0RjnYuktpccmuPZLCQgQHuba/Io3GsSXBeI=) 3: 3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa (hash: pAwAaLum0jYdUTsB6mT2CdQGQv2HQcF0heplULsgo1Y=) 4: 323430363a343463303a3a2f33322d3438203d3e20313430343632.roa (hash: /afJJDhqLHEyFhgVDaHqEV2OiB3/NZ6i6GNwssoIGhk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 05:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:9e:0a:c6:1f:ec:9e:4a:0f:88:f7:a4:1d:3d:f7:ce:9a:47:8f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C Validity Not Before: May 7 21:37:02 2025 GMT Not After : May 11 05:22:02 2025 GMT Subject: CN=DE5EA9681B68A51C3078E27962C5EA9C669A6305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a0:6c:7b:a1:05:d7:e3:5a:31:84:14:36:e3: d2:29:94:f8:aa:6a:68:c3:bd:8b:4d:93:c0:d8:8d: c1:a6:a5:b6:e0:d0:a3:dd:83:b0:9f:37:60:1e:7d: 94:c1:10:49:08:65:05:7e:c3:43:96:0d:63:55:44: 5d:9e:af:39:e2:ec:7d:a2:cf:d8:db:cf:06:2c:41: bb:16:2d:14:ab:1d:a3:e1:9b:b5:32:25:0e:dd:d4: 5d:16:58:07:e6:20:6f:dd:77:4a:f5:39:80:81:05: 85:8b:f5:ba:a2:ea:dc:61:27:5d:b3:d4:70:8d:ec: 30:d1:44:e6:c9:51:1a:d5:49:93:6e:da:67:ce:72: 68:a6:6e:c0:a3:7f:ae:5d:6c:ac:8a:3d:4c:6c:9e: cf:5b:e0:01:fa:12:41:40:80:8a:b3:23:b9:f3:83: bc:f9:ca:31:1f:23:eb:15:64:d1:94:13:f2:46:9b: 01:40:0f:ef:11:13:4b:89:54:09:33:d4:18:1e:b4: 5f:1d:e8:b2:71:3d:e6:5c:7d:a5:d7:de:b8:7f:2f: fb:f8:03:98:55:f5:82:fe:0e:6c:62:ba:73:75:00: 40:c4:04:81:d8:ae:b7:f5:08:46:e1:55:27:cf:39: 5e:6c:c3:0a:f3:3b:ce:3c:91:66:ed:a3:74:b8:40: a6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5E:A9:68:1B:68:A5:1C:30:78:E2:79:62:C5:EA:9C:66:9A:63:05 X509v3 Authority Key Identifier: keyid:EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:ed:69:a4:d1:e4:7f:8b:94:6d:1a:72:22:76:8c:e6:ac:61: b3:f1:49:c2:77:59:fa:57:77:08:3d:08:14:6d:af:b7:5d:e8: 2f:0a:29:18:89:9c:24:78:10:39:9f:96:f4:87:56:bc:79:cf: ed:d1:bf:4e:16:c5:b0:3a:29:21:ed:a5:c9:8c:65:a4:5c:4b: d4:2e:e3:0f:72:07:b8:8a:d7:e5:0f:39:f4:6a:96:3c:56:28: 70:39:b2:9d:02:6f:c2:a6:a6:04:01:c6:7b:b6:56:21:dc:16: 3a:68:fe:ae:15:ec:92:6a:97:d0:6b:21:4d:7f:d8:ab:5b:eb: c5:72:bb:fa:80:3d:49:d9:2a:6e:e2:12:01:d2:a3:f7:ac:15: 58:b0:44:81:28:c3:67:c9:5f:10:ce:f7:ad:86:73:64:61:57: 4a:dd:f6:c4:49:77:b2:65:57:cb:ff:21:a3:59:b8:60:a7:3b: f5:a1:98:75:ab:cb:40:1e:4f:e1:00:8b:03:5e:2c:71:2d:b5: a8:9c:7e:f7:ed:38:18:3c:ae:5b:10:e6:04:b7:73:42:48:e1: 0c:01:0c:a8:1e:b3:c0:95:33:06:7e:ef:b5:53:c1:dd:a7:46: 20:d8:b9:01:e6:26:91:71:d2:af:ad:4c:d9:bc:8e:45:52:e2: 0b:42:e8:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDp4Kxh/snkoPiPekHT33zppHjwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUz QUQ5OTQyQzAeFw0yNTA1MDcyMTM3MDJaFw0yNTA1MTEwNTIyMDJaMDMxMTAvBgNV BAMTKERFNUVBOTY4MUI2OEE1MUMzMDc4RTI3OTYyQzVFQTlDNjY5QTYzMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6oGx7oQXX41oxhBQ249IplPiq amjDvYtNk8DYjcGmpbbg0KPdg7CfN2AefZTBEEkIZQV+w0OWDWNVRF2erzni7H2i z9jbzwYsQbsWLRSrHaPhm7UyJQ7d1F0WWAfmIG/dd0r1OYCBBYWL9bqi6txhJ12z 1HCN7DDRRObJURrVSZNu2mfOcmimbsCjf65dbKyKPUxsns9b4AH6EkFAgIqzI7nz g7z5yjEfI+sVZNGUE/JGmwFAD+8RE0uJVAkz1BgetF8d6LJxPeZcfaXX3rh/L/v4 A5hV9YL+DmxiunN1AEDEBIHYrrf1CEbhVSfPOV5swwrzO848kWbto3S4QKY7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3l6paBtopRwweOJ5YsXqnGaaYwUwHwYDVR0j BBgwFoAU78D+Mo97hvnGgvT+NzYMTjrZlCwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODNlZDdhYi0xYWM5LTRmNDItYWNkZC01MzU1N2FjN2IzZjMvMC9FRkMwRkUzMjhG N0I4NkY5QzY4MkY0RkUzNzM2MEM0RTNBRDk5NDJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBDNEUzQUQ5 OTQyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgzZWQ3YWItMWFjOS00ZjQyLWFj ZGQtNTM1NTdhYzdiM2YzLzAvRUZDMEZFMzI4RjdCODZGOUM2ODJGNEZFMzczNjBD NEUzQUQ5OTQyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDtaaTR5H+LlG0aciJ2jOasYbPxScJ3WfpX dwg9CBRtr7dd6C8KKRiJnCR4EDmflvSHVrx5z+3Rv04WxbA6KSHtpcmMZaRcS9Qu 4w9yB7iK1+UPOfRqljxWKHA5sp0Cb8KmpgQBxnu2ViHcFjpo/q4V7JJql9BrIU1/ 2Ktb68Vyu/qAPUnZKm7iEgHSo/esFViwRIEow2fJXxDO962Gc2RhV0rd9sRJd7Jl V8v/IaNZuGCnO/WhmHWry0AeT+EAiwNeLHEttaicfvftOBg8rlsQ5gS3c0JI4QwB DKges8CVMwZ+77VTwd2nRiDYuQHmJpFx0q+tTNm8jkVS4gtC6Oc= -----END CERTIFICATE-----Generated at Thu May 8 12:27:05 2025 by rpki-client