$ rpki-client -vvf repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft File: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft (raw, json) Hash identifier: 0n547XVMgRbVwvVT7WUS3epbi8gCtByYOmEei/F8DnM= Subject key identifier: 46:53:60:1B:6C:8E:FF:B4:8B:20:07:DC:34:24:49:97:4E:D1:A5:72 Authority key identifier: EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE Certificate issuer: /CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Certificate serial: 2810227ACEEAD15F091799443252E3E4EF6DC06A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft Manifest number: F2 Signing time: Sun 04 May 2025 15:51:31 +0000 Manifest this update: Sun 04 May 2025 15:46:31 +0000 Manifest next update: Wed 07 May 2025 23:52:31 +0000 Files and hashes: 1: 3130332e35332e32382e302f32332d3234203d3e20313339393535.roa (hash: XmUhlDLdTlUEJxqMyV5d8izbXv0SLIMUNSTUR2SbfXQ=) 2: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl (hash: Zb+zts57VswO5gwJ91VMlWe03sbPdwwGxvN6+S8tm18=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 23:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:10:22:7a:ce:ea:d1:5f:09:17:99:44:32:52:e3:e4:ef:6d:c0:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Validity Not Before: May 4 15:46:31 2025 GMT Not After : May 7 23:52:31 2025 GMT Subject: CN=4653601B6C8EFFB48B2007DC342449974ED1A572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:81:94:f3:9d:19:a4:7e:e0:76:df:0b:ce:95: 18:40:5f:98:05:8c:06:7c:73:7d:9c:fb:87:1c:f4: 4d:3c:7d:c2:21:a4:0d:5f:4b:84:3e:de:04:2f:68: c0:64:1d:a4:5c:1b:2a:aa:30:d4:b7:24:44:d4:b0: c3:42:22:f8:d9:37:c3:8d:79:11:74:b0:e7:3e:c2: a5:3d:a7:d9:e0:ef:a7:b6:9d:c8:02:71:47:1d:36: 00:56:e7:c6:4a:b6:e8:16:ca:3a:f1:dd:95:08:b5: f3:c3:0e:5e:5f:48:d0:a0:51:05:13:4d:28:81:bb: 3c:3b:c3:b1:7a:4d:79:13:4f:1b:be:43:83:03:71: 2e:96:af:6e:50:f9:a7:a5:07:a3:4a:b4:17:85:e2: 57:40:b9:3d:86:01:6a:6c:a3:38:44:57:23:af:85: b8:d0:f4:2b:3b:ba:f5:9c:ba:17:7d:17:bd:73:ff: 8e:69:68:31:f6:43:67:17:6f:f6:99:2c:cf:91:6f: 3a:43:66:ec:66:08:d8:16:22:e5:ad:af:29:41:83: 27:13:27:60:69:eb:4f:36:eb:b4:fd:b0:11:28:63: a8:40:7d:76:a5:b6:9d:eb:8e:a8:8c:27:44:87:67: f1:25:f2:32:18:86:84:b6:b5:e4:01:de:3d:59:1e: f4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:53:60:1B:6C:8E:FF:B4:8B:20:07:DC:34:24:49:97:4E:D1:A5:72 X509v3 Authority Key Identifier: keyid:EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:3a:a2:2c:20:f3:84:c0:6b:37:a5:39:28:71:cf:0b:47:9f: 09:55:a0:35:95:77:fb:6d:24:1b:29:e2:78:38:e4:86:ac:08: d7:a7:a2:49:0c:a5:47:1a:68:6f:47:dd:74:1c:61:d8:df:65: 89:7e:08:af:dc:78:15:d1:85:8d:11:95:65:a2:1d:00:b4:c4: 94:46:9b:72:cd:ce:03:81:da:ff:69:32:a8:f7:ae:65:0b:fc: 5a:f1:c9:ae:86:5e:4f:47:98:f2:1b:56:b4:a8:bc:51:08:f1: 6d:05:d3:06:8a:87:e2:36:6f:ac:05:b6:88:f9:8e:66:1f:8b: c6:fb:c2:30:30:2e:1d:8a:b5:50:3a:21:b6:c5:67:02:5c:8c: aa:a5:ab:1d:e9:14:9b:79:b6:30:b8:49:9c:21:43:32:85:5b: be:9a:1d:85:e7:90:e0:58:cc:26:f4:f4:0d:4f:4d:cc:5e:6c: 54:e7:5b:a5:33:a3:e2:36:c8:17:77:0b:38:57:b7:30:9b:37: 72:c2:d6:f1:62:de:96:41:ee:91:d3:d0:95:c5:f1:dd:7f:95: 69:cc:3f:c9:db:0c:a9:49:57:be:19:96:cc:61:08:5d:8f:4a: 57:24:be:3f:cc:0b:ce:83:78:38:81:06:ab:06:15:d8:02:03: f3:30:04:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKBAies7q0V8JF5lEMlLj5O9twGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0 NUYyOUVERTAeFw0yNTA1MDQxNTQ2MzFaFw0yNTA1MDcyMzUyMzFaMDMxMTAvBgNV BAMTKDQ2NTM2MDFCNkM4RUZGQjQ4QjIwMDdEQzM0MjQ0OTk3NEVEMUE1NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzgZTznRmkfuB23wvOlRhAX5gF jAZ8c32c+4cc9E08fcIhpA1fS4Q+3gQvaMBkHaRcGyqqMNS3JETUsMNCIvjZN8ON eRF0sOc+wqU9p9ng76e2ncgCcUcdNgBW58ZKtugWyjrx3ZUItfPDDl5fSNCgUQUT TSiBuzw7w7F6TXkTTxu+Q4MDcS6Wr25Q+aelB6NKtBeF4ldAuT2GAWpsozhEVyOv hbjQ9Cs7uvWcuhd9F71z/45paDH2Q2cXb/aZLM+RbzpDZuxmCNgWIuWtrylBgycT J2Bp608267T9sBEoY6hAfXaltp3rjqiMJ0SHZ/El8jIYhoS2teQB3j1ZHvRNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURlNgG2yO/7SLIAfcNCRJl07RpXIwHwYDVR0j BBgwFoAU7JqrkQBwU+Y84X+Y10/9iUXynt4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmI0M2VjOC1mNTgyLTQwMjUtOGYzNi0zY2VhNTM5ZDBiMDkvMC9FQzlBQUI5MTAw NzA1M0U2M0NFMTdGOThENzRGRkQ4OTQ1RjI5RURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0NUYy OUVERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJiNDNlYzgtZjU4Mi00MDI1LThm MzYtM2NlYTUzOWQwYjA5LzAvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZE ODk0NUYyOUVERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMM6oiwg84TAazelOShxzwtHnwlVoDWVd/tt JBsp4ng45IasCNenokkMpUcaaG9H3XQcYdjfZYl+CK/ceBXRhY0RlWWiHQC0xJRG m3LNzgOB2v9pMqj3rmUL/Frxya6GXk9HmPIbVrSovFEI8W0F0waKh+I2b6wFtoj5 jmYfi8b7wjAwLh2KtVA6IbbFZwJcjKqlqx3pFJt5tjC4SZwhQzKFW76aHYXnkOBY zCb09A1PTcxebFTnW6Uzo+I2yBd3CzhXtzCbN3LC1vFi3pZB7pHT0JXF8d1/lWnM P8nbDKlJV74ZlsxhCF2PSlckvj/MC86DeDiBBqsGFdgCA/MwBGs= -----END CERTIFICATE-----Generated at Wed May 7 08:07:58 2025 by rpki-client