$ rpki-client -vvf repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft File: E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft (raw, json) Hash identifier: 3k5vw681Ei2YKQ29VqKqcGLi76QO2MCP1omuzBE7UO0= Subject key identifier: E6:F1:53:4D:22:C6:74:99:39:39:D5:2B:4A:AB:87:AC:0A:D9:38:B7 Authority key identifier: E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF Certificate issuer: /CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF Certificate serial: 546C50DCE21FDB9600CA7C99C21333B017FDBC98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft Manifest number: 0191 Signing time: Sat 03 May 2025 15:10:01 +0000 Manifest this update: Sat 03 May 2025 15:05:01 +0000 Manifest next update: Tue 06 May 2025 21:21:01 +0000 Files and hashes: 1: 3130332e3138312e3234362e302f32332d3234203d3e20313439333935.roa (hash: LZnbIIsLDElVInIW5qq+Xdda/Rypkb/0FARs3D1/0Rk=) 2: 3130332e3138312e3234372e302f32342d3234203d3e20313439333935.roa (hash: BCXvxmyioKQvXTQ7T8iVRvqkwhqhpqQP5I9ID9+agWk=) 3: 323030313a6466303a376263303a3a2f34382d3438203d3e20313439333935.roa (hash: KmwxYNBof+9d1bN3iAjGOYXY8SVr0+E+UsBOHaijDGU=) 4: E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl (hash: S1HmPwfTdmhWnuRaEmK7O9WBZeWNCu/vDp1g24uh1Ws=) 5: 3130332e3138312e3234362e302f32342d3234203d3e20313439333935.roa (hash: hDiPHgG6pnFjAwZiLnb6ef4keBf/i47WPM6YZu2zsYg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 21:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:6c:50:dc:e2:1f:db:96:00:ca:7c:99:c2:13:33:b0:17:fd:bc:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF Validity Not Before: May 3 15:05:01 2025 GMT Not After : May 6 21:21:01 2025 GMT Subject: CN=E6F1534D22C674993939D52B4AAB87AC0AD938B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bd:dc:45:7e:98:3e:d0:72:51:86:51:a6:b6: 8e:03:c9:3b:e7:86:37:c4:10:32:b9:2c:ca:83:6c: a2:c3:14:bd:83:aa:75:23:ec:74:36:e5:b9:96:11: d1:30:fe:fb:6b:a1:a8:35:cd:d6:b0:65:61:f4:6c: 06:7e:94:13:54:5d:15:87:b8:af:bf:64:2a:a6:9a: af:60:9f:09:8e:15:63:27:14:20:74:c3:4f:26:0b: cd:6f:27:61:2f:37:b6:59:0b:34:53:83:ad:65:5b: 09:16:d2:90:4a:fa:8d:a6:4b:a9:4f:f4:26:3d:71: 32:0d:28:00:4a:a6:33:a2:14:df:6c:0e:f9:13:b2: d2:80:04:7f:77:8e:91:e3:f9:f5:84:94:4f:19:90: 6d:35:08:dd:48:95:f6:3c:f1:03:05:47:8c:3f:a0: 92:21:98:8f:26:5f:fb:28:6d:de:00:33:2e:4e:61: 87:2c:b5:18:91:a0:98:32:b4:09:f7:24:96:81:00: de:40:05:bb:70:30:53:29:9d:93:2c:ea:04:dd:7c: c0:58:9d:0d:ec:ac:e8:5c:80:1f:76:bb:e2:16:bf: b3:b1:53:c3:50:d1:79:80:ba:31:f0:77:fb:83:40: fa:b0:b5:05:86:ef:75:f2:cb:66:1e:7f:0d:b1:b1: 34:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F1:53:4D:22:C6:74:99:39:39:D5:2B:4A:AB:87:AC:0A:D9:38:B7 X509v3 Authority Key Identifier: keyid:E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:df:99:f6:b6:7f:32:69:f8:15:9d:da:50:84:0e:43:2c:13: 30:98:11:a1:4f:98:62:ab:98:76:c0:3f:1a:61:1e:3b:26:90: 8e:64:f1:5e:32:02:b9:3e:39:69:51:ff:f9:1f:73:5d:50:03: db:46:92:ff:9e:fc:86:35:2b:cc:f3:b6:48:80:8a:68:e4:7f: 61:b3:8a:94:07:11:5b:df:e4:d9:4a:64:1d:6f:f8:26:9f:a8: fe:3d:ad:76:af:d0:de:97:4c:9c:e0:4f:58:81:65:e9:74:a1: 9e:0d:27:aa:cc:e0:20:e4:9a:77:02:e3:e1:58:a5:cd:a1:d9: 8b:86:f8:9d:9d:10:5d:7b:57:96:a8:42:8a:63:63:bc:a9:44: 86:c4:92:a9:2d:71:df:e1:d2:e7:14:73:18:4e:cb:5e:e4:d9: be:6c:84:02:75:46:f9:67:84:a8:6f:c5:10:9f:68:64:59:d0: 64:4f:02:73:16:7b:d6:39:53:58:29:2d:67:7a:9a:8a:3c:fd: 9d:93:6d:57:ac:b1:4e:20:d2:55:2e:ec:57:83:a0:d2:f1:f7: 08:94:06:0d:b2:df:ab:46:41:a4:5c:39:4e:cb:ce:07:29:0d: 45:be:22:7b:83:c3:cd:06:29:ae:e7:ec:53:d6:02:d0:5f:ed: 30:0b:03:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVGxQ3OIf25YAynyZwhMzsBf9vJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVENDhE NkY3M0ZBRjAeFw0yNTA1MDMxNTA1MDFaFw0yNTA1MDYyMTIxMDFaMDMxMTAvBgNV BAMTKEU2RjE1MzREMjJDNjc0OTkzOTM5RDUyQjRBQUI4N0FDMEFEOTM4QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfvdxFfpg+0HJRhlGmto4DyTvn hjfEEDK5LMqDbKLDFL2DqnUj7HQ25bmWEdEw/vtroag1zdawZWH0bAZ+lBNUXRWH uK+/ZCqmmq9gnwmOFWMnFCB0w08mC81vJ2EvN7ZZCzRTg61lWwkW0pBK+o2mS6lP 9CY9cTINKABKpjOiFN9sDvkTstKABH93jpHj+fWElE8ZkG01CN1IlfY88QMFR4w/ oJIhmI8mX/sobd4AMy5OYYcstRiRoJgytAn3JJaBAN5ABbtwMFMpnZMs6gTdfMBY nQ3srOhcgB92u+IWv7OxU8NQ0XmAujHwd/uDQPqwtQWG73Xyy2Yefw2xsTTFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5vFTTSLGdJk5OdUrSquHrArZOLcwHwYDVR0j BBgwFoAU6TFDB60UMC30DeGo7QtdSNb3P68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDFlMDhlZi0zYWU2LTRiOTAtYjQ3Ny0wZTkxNDBkMDQzODAvMC9FOTMxNDMwN0FE MTQzMDJERjQwREUxQThFRDBCNUQ0OEQ2RjczRkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVENDhENkY3 M0ZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQxZTA4ZWYtM2FlNi00YjkwLWI0 NzctMGU5MTQwZDA0MzgwLzAvRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVE NDhENkY3M0ZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALDfmfa2fzJp+BWd2lCEDkMsEzCYEaFPmGKr mHbAPxphHjsmkI5k8V4yArk+OWlR//kfc11QA9tGkv+e/IY1K8zztkiAimjkf2Gz ipQHEVvf5NlKZB1v+CafqP49rXav0N6XTJzgT1iBZel0oZ4NJ6rM4CDkmncC4+FY pc2h2YuG+J2dEF17V5aoQopjY7ypRIbEkqktcd/h0ucUcxhOy17k2b5shAJ1Rvln hKhvxRCfaGRZ0GRPAnMWe9Y5U1gpLWd6moo8/Z2TbVessU4g0lUu7FeDoNLx9wiU Bg2y36tGQaRcOU7LzgcpDUW+InuDw80GKa7n7FPWAtBf7TALAz0= -----END CERTIFICATE-----Generated at Tue May 6 12:25:10 2025 by rpki-client