$ rpki-client -vvf repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft File: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft (raw, json) Hash identifier: k83AnMsxPqKhHrawt7NMY10W9Z4dfuF36roR1Oyx7bc= Subject key identifier: DF:0B:BA:5E:51:3C:62:7E:C8:D1:87:C8:41:19:C9:FC:24:96:4E:14 Authority key identifier: E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE Certificate issuer: /CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Certificate serial: 367AE12E653C9AE1139B220B828C8CC1B9F0D7DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft Manifest number: AB Signing time: Wed 07 May 2025 15:12:12 +0000 Manifest this update: Wed 07 May 2025 15:07:12 +0000 Manifest next update: Sat 10 May 2025 20:03:12 +0000 Files and hashes: 1: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl (hash: a6iXrWwEja5AqB2Z1KGdaEA8Go5Qn3blUBHHelJu1HI=) 2: 3130332e36302e38392e302f32342d3234203d3e20313531353732.roa (hash: Enf4GZpiw8yRCRJ559txgbwn9cUloBn5l+xZd4CiSI4=) 3: 3130332e36302e38382e302f32342d3234203d3e20313531353732.roa (hash: k2+2S8JNGrIJgA3B1fWsPdcHVnZQhwJAO8DfE0j/qJE=) 4: 3130332e36302e38382e302f32332d3233203d3e20313531353732.roa (hash: sj/Mmz0IkuIImkgMrX5NfmBzqbmlEbbflvN0FkIxBO4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 20:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:7a:e1:2e:65:3c:9a:e1:13:9b:22:0b:82:8c:8c:c1:b9:f0:d7:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Validity Not Before: May 7 15:07:12 2025 GMT Not After : May 10 20:03:12 2025 GMT Subject: CN=DF0BBA5E513C627EC8D187C84119C9FC24964E14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a3:a3:cc:3a:f0:b8:66:4e:c6:5c:22:53:d8: 0e:bf:0b:49:12:dc:82:64:04:fa:d5:1b:4a:5a:0e: b3:ae:2c:11:4b:ab:e0:bc:76:b2:84:12:b2:41:39: 0b:2f:05:66:28:4e:f6:16:e4:f8:19:d7:ad:93:a8: 4d:de:43:9a:c5:7c:36:5a:2c:5b:eb:da:9e:e2:f7: c6:d4:75:ae:b7:8d:97:ac:c4:0b:8f:35:5b:2f:38: 5a:3b:a5:b5:de:31:90:b0:3b:7b:f5:f2:88:9b:fe: bd:d8:83:18:f6:56:7f:63:74:98:88:ce:cf:12:f7: 74:e4:e0:a0:09:04:e6:04:08:e1:29:89:81:82:f1: 1c:c4:21:ee:07:30:92:51:3f:d4:6f:d6:e4:17:b7: 7f:f8:59:eb:14:0c:e7:8b:48:a4:b6:e2:bc:52:c5: cf:47:e2:fd:92:00:d1:8f:bd:cb:70:6f:a8:28:6f: 73:52:8b:62:6a:55:e5:63:20:c2:4b:cc:d2:7a:2a: 6f:e5:86:4d:ae:c4:da:b5:a4:c2:40:bb:d0:0a:d5: cb:7c:21:76:1f:c5:33:b5:d3:82:fc:d2:23:57:19: d2:b8:c4:fb:12:ff:ee:32:21:c4:86:e2:37:d4:6b: 4f:ac:08:a4:9a:e2:89:49:60:61:19:47:03:b5:70: 2e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:0B:BA:5E:51:3C:62:7E:C8:D1:87:C8:41:19:C9:FC:24:96:4E:14 X509v3 Authority Key Identifier: keyid:E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:14:af:11:1a:39:4e:99:9e:ef:07:96:78:70:72:de:2a:98: 66:ba:ef:61:eb:f6:0e:cb:bb:d0:13:a6:d8:c3:79:71:db:79: 9e:2b:6f:12:82:fc:56:2c:fc:00:dc:49:ba:64:ad:51:d8:8a: 6d:8b:78:a5:1b:38:00:a8:84:9f:6c:20:fc:61:c4:a7:d0:ca: b6:b6:f1:26:d1:1c:06:b6:8e:88:28:c7:d3:e0:cf:7d:9a:44: 19:39:e0:85:71:7e:4b:93:fd:97:5a:5f:a9:38:13:96:75:7a: df:21:2a:87:83:1e:09:98:71:e4:1f:ae:83:a9:bb:ab:52:76: 20:8a:8b:a6:11:ca:99:59:40:c6:a5:7a:71:9a:36:71:9a:91: 8b:05:99:3c:e3:c8:90:54:8b:1b:6a:09:50:28:e0:45:b3:70: df:d5:ac:5e:e2:70:56:dd:36:11:e4:8a:c7:ed:a9:7d:be:8f: 02:f5:47:f9:9b:b0:79:f7:81:3e:f7:78:0c:26:2e:1a:ce:69: ed:75:92:b4:2b:1d:01:53:4f:fd:a3:7b:6d:81:e4:30:95:25: b9:b9:b9:28:50:17:f3:50:b4:c9:c6:bb:a1:6c:33:3c:74:e8: b3:09:bb:16:69:77:a1:65:fb:c2:57:dd:cd:aa:69:64:65:e2: 15:a4:4b:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNnrhLmU8muETmyILgoyMwbnw19wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZF ODIxMkRERTAeFw0yNTA1MDcxNTA3MTJaFw0yNTA1MTAyMDAzMTJaMDMxMTAvBgNV BAMTKERGMEJCQTVFNTEzQzYyN0VDOEQxODdDODQxMTlDOUZDMjQ5NjRFMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRo6PMOvC4Zk7GXCJT2A6/C0kS 3IJkBPrVG0paDrOuLBFLq+C8drKEErJBOQsvBWYoTvYW5PgZ162TqE3eQ5rFfDZa LFvr2p7i98bUda63jZesxAuPNVsvOFo7pbXeMZCwO3v18oib/r3Ygxj2Vn9jdJiI zs8S93Tk4KAJBOYECOEpiYGC8RzEIe4HMJJRP9Rv1uQXt3/4WesUDOeLSKS24rxS xc9H4v2SANGPvctwb6gob3NSi2JqVeVjIMJLzNJ6Km/lhk2uxNq1pMJAu9AK1ct8 IXYfxTO104L80iNXGdK4xPsS/+4yIcSG4jfUa0+sCKSa4olJYGEZRwO1cC6rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3wu6XlE8Yn7I0YfIQRnJ/CSWThQwHwYDVR0j BBgwFoAU58nk5cjqmJ8P99b+bb1qT+ghLd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzExYWE0Ni1mMjhlLTRjNTUtYjliYS03ZDViZGM5NWI0ZjYvMC9FN0M5RTRFNUM4 RUE5ODlGMEZGN0Q2RkU2REJENkE0RkU4MjEyRERFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZFODIx MkRERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxMWFhNDYtZjI4ZS00YzU1LWI5 YmEtN2Q1YmRjOTViNGY2LzAvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZB NEZFODIxMkRERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcUrxEaOU6Znu8Hlnhwct4qmGa672Hr9g7L u9ATptjDeXHbeZ4rbxKC/FYs/ADcSbpkrVHYim2LeKUbOACohJ9sIPxhxKfQyra2 8SbRHAa2jogox9Pgz32aRBk54IVxfkuT/ZdaX6k4E5Z1et8hKoeDHgmYceQfroOp u6tSdiCKi6YRyplZQMalenGaNnGakYsFmTzjyJBUixtqCVAo4EWzcN/VrF7icFbd NhHkisftqX2+jwL1R/mbsHn3gT73eAwmLhrOae11krQrHQFTT/2je22B5DCVJbm5 uShQF/NQtMnGu6FsMzx06LMJuxZpd6Fl+8JX3c2qaWRl4hWkS00= -----END CERTIFICATE-----Generated at Fri May 9 08:33:31 2025 by rpki-client