$ rpki-client -vvf repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft File: E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft (raw, json) Hash identifier: oBpET/8dRQDA2XtqDD9fWLjuaLjOqTRE7f1eZ/CwVHs= Subject key identifier: 7D:6C:0E:FB:1D:D6:F2:B3:15:57:B4:D2:A9:E1:02:82:4C:F6:82:9A Authority key identifier: E0:AC:9F:73:54:2C:4F:A1:E5:2F:9E:56:5E:ED:95:2D:45:28:AB:D5 Certificate issuer: /CN=E0AC9F73542C4FA1E52F9E565EED952D4528ABD5 Certificate serial: 4A4BC855447BB0E1FC747DAF3623BAD783C8018D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft Manifest number: 0161 Signing time: Sat 10 May 2025 06:31:52 +0000 Manifest this update: Sat 10 May 2025 06:26:52 +0000 Manifest next update: Tue 13 May 2025 17:59:52 +0000 Files and hashes: 1: E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl (hash: KvvpoPzMUhVofXHfwF+uj+yjS5WSGHeejpNYOW5Xwtg=) 2: 3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa (hash: bfGWWBYLFdBS0ipwVQx4h+wBe1EIqVM2TX2GM2uhPGQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 08:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:4b:c8:55:44:7b:b0:e1:fc:74:7d:af:36:23:ba:d7:83:c8:01:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0AC9F73542C4FA1E52F9E565EED952D4528ABD5 Validity Not Before: May 10 06:26:52 2025 GMT Not After : May 13 17:59:52 2025 GMT Subject: CN=7D6C0EFB1DD6F2B31557B4D2A9E102824CF6829A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:18:e3:5c:ea:e1:f7:58:71:0c:10:92:62:01: 86:19:d1:db:8a:83:65:e8:a2:02:68:cd:a2:21:67: 0e:be:61:7e:da:c6:22:97:65:fd:30:99:48:39:05: e9:8d:40:d3:a7:aa:8f:b9:8a:49:82:be:5f:a1:4e: a4:23:8b:2b:a6:8b:4e:09:36:84:f8:fd:82:f8:c6: ce:bb:08:1d:c3:7e:6a:a8:bb:1e:d6:0e:b6:82:44: 1a:d1:75:cc:42:73:66:c1:69:51:be:e0:15:a3:6a: 76:a3:b1:d7:88:64:82:eb:99:4a:44:92:29:f9:15: c8:9e:d0:19:37:47:8d:d8:e6:3f:52:da:34:c5:49: b9:0c:ae:60:22:56:1c:dc:02:ca:37:7b:ef:06:f7: 05:de:d0:5b:ca:e6:e7:db:a4:84:4e:93:82:2b:da: b1:67:bc:ac:49:f7:e0:3b:09:e3:90:09:6b:0d:3d: d6:ad:11:91:93:a8:c0:b0:67:9b:66:00:4a:ae:c9: 31:da:3d:8c:71:9b:25:91:47:1c:41:a8:39:17:db: 96:12:70:c2:97:0e:ec:f5:79:01:36:f6:03:08:db: b2:0e:43:e1:84:61:9c:65:11:0a:b8:c9:09:d1:c7: d1:cd:b8:51:2a:e2:8b:3c:5a:02:53:89:5f:8f:7a: 1f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6C:0E:FB:1D:D6:F2:B3:15:57:B4:D2:A9:E1:02:82:4C:F6:82:9A X509v3 Authority Key Identifier: keyid:E0:AC:9F:73:54:2C:4F:A1:E5:2F:9E:56:5E:ED:95:2D:45:28:AB:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:f2:e8:2f:c3:46:92:6f:78:4c:bc:ce:c3:11:31:a6:e2:0a: 52:af:3b:ea:31:5f:51:24:7c:da:9b:90:df:53:3c:d0:08:6d: 70:a1:50:9b:36:3c:2f:9b:9c:b9:3b:f1:8a:ba:fc:32:74:23: 08:11:ed:3c:e9:d2:12:16:72:60:5c:a5:f0:05:f9:a7:3e:b1: 30:4d:73:7a:b4:27:13:a3:5b:72:ba:ff:c1:d4:19:2e:d5:67: cb:e1:2f:9b:9d:3a:1c:3e:c3:11:30:47:a6:2e:19:51:78:4f: 86:62:12:d4:1c:12:e5:69:2e:ed:ab:21:a0:9b:00:e3:55:18: 60:e1:8f:db:2b:7b:46:74:ab:e7:92:96:c8:21:cd:09:40:e3: 7f:b9:05:7e:74:e5:0a:e9:48:7e:2b:b3:76:8c:25:25:90:92: 80:68:a1:c9:0e:49:e3:c3:e3:e2:0c:25:7e:4f:1e:5d:24:ae: 69:a0:f3:b5:12:02:bf:ac:2d:10:0d:ba:35:b0:b6:21:f7:17: 32:c3:ed:f0:59:13:f3:a1:b3:31:e4:8f:df:96:17:4d:ac:74: 54:01:83:0c:da:7c:fe:d9:83:34:03:ba:8d:15:0b:b6:6a:ff: 17:19:f2:a8:80:81:e8:79:2d:54:34:40:76:a5:7e:4e:20:20: 70:41:b7:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSkvIVUR7sOH8dH2vNiO614PIAY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBBQzlGNzM1NDJDNEZBMUU1MkY5RTU2NUVFRDk1MkQ0 NTI4QUJENTAeFw0yNTA1MTAwNjI2NTJaFw0yNTA1MTMxNzU5NTJaMDMxMTAvBgNV BAMTKDdENkMwRUZCMURENkYyQjMxNTU3QjREMkE5RTEwMjgyNENGNjgyOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvGONc6uH3WHEMEJJiAYYZ0duK g2XoogJozaIhZw6+YX7axiKXZf0wmUg5BemNQNOnqo+5ikmCvl+hTqQjiyumi04J NoT4/YL4xs67CB3Dfmqoux7WDraCRBrRdcxCc2bBaVG+4BWjanajsdeIZILrmUpE kin5Fcie0Bk3R43Y5j9S2jTFSbkMrmAiVhzcAso3e+8G9wXe0FvK5ufbpIROk4Ir 2rFnvKxJ9+A7CeOQCWsNPdatEZGTqMCwZ5tmAEquyTHaPYxxmyWRRxxBqDkX25YS cMKXDuz1eQE29gMI27IOQ+GEYZxlEQq4yQnRx9HNuFEq4os8WgJTiV+Peh/HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfWwO+x3W8rMVV7TSqeECgkz2gpowHwYDVR0j BBgwFoAU4Kyfc1QsT6HlL55WXu2VLUUoq9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWYwMDEzYi01OWE2LTQ3MzMtODlmOC0yOGZhM2Q4ODU3OWYvMC9FMEFDOUY3MzU0 MkM0RkExRTUyRjlFNTY1RUVEOTUyRDQ1MjhBQkQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBBQzlGNzM1NDJDNEZBMUU1MkY5RTU2NUVFRDk1MkQ0NTI4 QUJENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmMDAxM2ItNTlhNi00NzMzLTg5 ZjgtMjhmYTNkODg1NzlmLzAvRTBBQzlGNzM1NDJDNEZBMUU1MkY5RTU2NUVFRDk1 MkQ0NTI4QUJENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHy6C/DRpJveEy8zsMRMabiClKvO+oxX1Ek fNqbkN9TPNAIbXChUJs2PC+bnLk78Yq6/DJ0IwgR7Tzp0hIWcmBcpfAF+ac+sTBN c3q0JxOjW3K6/8HUGS7VZ8vhL5udOhw+wxEwR6YuGVF4T4ZiEtQcEuVpLu2rIaCb AONVGGDhj9sre0Z0q+eSlsghzQlA43+5BX505QrpSH4rs3aMJSWQkoBoockOSePD 4+IMJX5PHl0krmmg87USAr+sLRANujWwtiH3FzLD7fBZE/OhszHkj9+WF02sdFQB gwzafP7ZgzQDuo0VC7Zq/xcZ8qiAgeh5LVQ0QHalfk4gIHBBt6Y= -----END CERTIFICATE-----Generated at Sat May 10 15:33:59 2025 by rpki-client