$ rpki-client -vvf repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft File: E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft (raw, json) Hash identifier: pR7umPBAQWoqw82E7YPIw3kTQzJyh4JFX2ZmW5zIYjU= Subject key identifier: 95:2E:13:A3:40:C9:95:62:63:06:0F:5A:FE:2A:7B:C4:CB:3B:F5:86 Authority key identifier: E9:FC:7A:F3:FF:BA:00:98:63:D1:04:ED:E1:B4:5D:A0:59:25:35:E6 Certificate issuer: /CN=E9FC7AF3FFBA009863D104EDE1B45DA0592535E6 Certificate serial: 5FD2DA7EF001C7A5CAAF8586B8D535F3119DAFDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft Manifest number: 01F6 Signing time: Fri 09 May 2025 18:22:16 +0000 Manifest this update: Fri 09 May 2025 18:17:16 +0000 Manifest next update: Tue 13 May 2025 00:50:16 +0000 Files and hashes: 1: E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl (hash: hDmTWYEPN5Xw7HrZgP+7LiXjHzpzgrJwWMFg5H65PB4=) 2: 3130332e3137352e3233362e302f32332d3234203d3e20313437313231.roa (hash: LFOqzDAyDWWdrBcQS4m60ydnXXk+fQv19GMLbDiq/ow=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 00:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d2:da:7e:f0:01:c7:a5:ca:af:85:86:b8:d5:35:f3:11:9d:af:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9FC7AF3FFBA009863D104EDE1B45DA0592535E6 Validity Not Before: May 9 18:17:16 2025 GMT Not After : May 13 00:50:16 2025 GMT Subject: CN=952E13A340C9956263060F5AFE2A7BC4CB3BF586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:4a:e6:c2:9c:a3:f3:11:ca:d0:6d:ee:49:2c: 9b:67:7a:58:7e:a8:b8:14:b0:09:62:cc:0a:b1:df: 11:2c:d3:6f:3f:d1:db:08:0e:c6:a0:49:4c:95:66: b0:88:73:57:24:02:03:7c:6a:5e:0e:48:81:22:48: c7:93:95:3c:3e:a8:d9:6a:94:c2:de:8c:5f:f9:8c: e2:67:71:30:b2:39:1a:4b:4d:38:89:37:b8:71:0e: 84:69:ba:fc:39:73:50:24:78:6d:32:d1:66:ae:b5: c6:b9:a4:c6:64:ae:27:80:12:12:54:9b:1e:e7:ff: 8b:ea:c7:38:8e:a6:6c:ef:73:1c:04:2a:e6:87:b0: 0b:87:50:6a:d7:89:1b:22:c2:a4:af:bf:95:78:5b: 30:4e:32:50:2f:ba:e9:04:9b:ba:ac:be:f6:53:7a: b9:10:c2:8e:b4:68:fb:a0:a0:99:86:30:c6:64:b4: 38:f7:c8:a7:4c:64:38:26:e1:fb:59:27:4c:ad:8a: db:ab:17:ca:aa:ef:6d:e4:74:9f:40:a0:3e:6c:0a: 81:24:68:7c:f1:14:e6:26:7f:13:ca:01:f8:1e:df: d0:72:de:03:ee:a2:34:f4:51:a0:fd:5e:a2:e2:4d: 58:47:9a:88:a7:63:66:82:7b:73:1e:90:35:03:f3: bd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2E:13:A3:40:C9:95:62:63:06:0F:5A:FE:2A:7B:C4:CB:3B:F5:86 X509v3 Authority Key Identifier: keyid:E9:FC:7A:F3:FF:BA:00:98:63:D1:04:ED:E1:B4:5D:A0:59:25:35:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a1:8d:0b:6b:e4:07:82:4f:0e:d3:a9:50:75:91:97:c4:a9: f4:0e:81:ca:42:30:a1:aa:62:ba:31:05:c2:ee:d5:38:dc:f8: 7b:68:c8:e2:e0:80:63:1c:d7:3c:07:a8:3e:af:f0:25:f2:be: 0a:ef:bb:58:d4:3a:04:2e:61:6a:57:f9:61:f7:f5:48:68:78: 4e:44:a3:c5:33:db:87:2f:d0:da:44:d9:13:6f:c1:fe:ab:22: e6:56:12:49:59:b5:5b:7c:82:22:eb:31:1a:36:8f:05:97:43: 20:de:b1:49:57:04:35:15:b2:c0:20:06:04:2e:a1:a0:e8:af: 59:25:70:b0:dd:be:50:5b:c7:bb:f1:4c:01:20:c6:3e:dd:c0: eb:a2:97:d9:41:bf:25:4b:e6:32:73:ed:f9:5b:ee:b9:65:ed: 7b:cd:86:04:56:cd:36:2c:27:4d:b1:6e:f3:05:eb:1e:c8:8d: 1b:a2:41:83:ba:3c:c4:05:0b:bf:e2:61:8a:f6:38:51:a6:72: c6:f5:3f:2d:f8:2e:03:a5:b4:02:b4:46:3c:5b:91:c5:94:ae: 56:bb:48:6c:1f:4a:2e:d6:db:5a:c4:bb:64:ca:7d:07:2b:75: 64:bd:28:55:4d:b0:96:52:38:2e:dc:5f:a2:05:ec:69:e2:c9: d2:93:22:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX9LafvABx6XKr4WGuNU18xGdr9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVEQTA1 OTI1MzVFNjAeFw0yNTA1MDkxODE3MTZaFw0yNTA1MTMwMDUwMTZaMDMxMTAvBgNV BAMTKDk1MkUxM0EzNDBDOTk1NjI2MzA2MEY1QUZFMkE3QkM0Q0IzQkY1ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwSubCnKPzEcrQbe5JLJtnelh+ qLgUsAlizAqx3xEs028/0dsIDsagSUyVZrCIc1ckAgN8al4OSIEiSMeTlTw+qNlq lMLejF/5jOJncTCyORpLTTiJN7hxDoRpuvw5c1AkeG0y0Wautca5pMZkrieAEhJU mx7n/4vqxziOpmzvcxwEKuaHsAuHUGrXiRsiwqSvv5V4WzBOMlAvuukEm7qsvvZT erkQwo60aPugoJmGMMZktDj3yKdMZDgm4ftZJ0ytiturF8qq723kdJ9AoD5sCoEk aHzxFOYmfxPKAfge39By3gPuojT0UaD9XqLiTVhHmoinY2aCe3MekDUD872LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlS4To0DJlWJjBg9a/ip7xMs79YYwHwYDVR0j BBgwFoAU6fx68/+6AJhj0QTt4bRdoFklNeYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YjRjNzBhMS01MDM2LTQ1MGItYjkzNi01MDg0Zjc4ZjgxZWYvMC9FOUZDN0FGM0ZG QkEwMDk4NjNEMTA0RURFMUI0NURBMDU5MjUzNUU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVEQTA1OTI1 MzVFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmI0YzcwYTEtNTAzNi00NTBiLWI5 MzYtNTA4NGY3OGY4MWVmLzAvRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVE QTA1OTI1MzVFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6hjQtr5AeCTw7TqVB1kZfEqfQOgcpCMKGq YroxBcLu1Tjc+HtoyOLggGMc1zwHqD6v8CXyvgrvu1jUOgQuYWpX+WH39UhoeE5E o8Uz24cv0NpE2RNvwf6rIuZWEklZtVt8giLrMRo2jwWXQyDesUlXBDUVssAgBgQu oaDor1klcLDdvlBbx7vxTAEgxj7dwOuil9lBvyVL5jJz7flb7rll7XvNhgRWzTYs J02xbvMF6x7IjRuiQYO6PMQFC7/iYYr2OFGmcsb1Py34LgOltAK0RjxbkcWUrla7 SGwfSi7W21rEu2TKfQcrdWS9KFVNsJZSOC7cX6IF7GniydKTIuY= -----END CERTIFICATE-----Generated at Sun May 11 05:30:29 2025 by rpki-client