$ rpki-client -vvf repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft File: E5B2AB049E75667C8F00ECB0EBF617859558571D.mft (raw, json) Hash identifier: dQC/XGO/UBXp5kZ8/gjU6bkXat+52TywpDpahQ8QRf4= Subject key identifier: C6:3F:8D:52:0F:BA:38:B4:78:5F:7E:1F:DD:A7:41:C9:7B:02:F0:3F Authority key identifier: E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D Certificate issuer: /CN=E5B2AB049E75667C8F00ECB0EBF617859558571D Certificate serial: 03FF5D99B25C9B0EEFA0A6A49366FEBB46F74E7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft Manifest number: 0101 Signing time: Mon 05 May 2025 04:30:34 +0000 Manifest this update: Mon 05 May 2025 04:25:34 +0000 Manifest next update: Thu 08 May 2025 12:57:34 +0000 Files and hashes: 1: E5B2AB049E75667C8F00ECB0EBF617859558571D.crl (hash: SKN+eak6CQwoqrOzdVT61gvQRxn4xpGiw4iRQzV1KKs=) 2: 3130332e3232342e37362e302f32342d3234203d3e203536323535.roa (hash: Zqpcy0ugk8HAE+GYWRNcHEByrdTEefMutc7Cf14qofA=) 3: 3130332e3232342e37372e302f32342d3234203d3e203536323535.roa (hash: MHqEWkxk0lcqHf0DHOOzzwqgpatowmuSY53tgbg1pfo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 12:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ff:5d:99:b2:5c:9b:0e:ef:a0:a6:a4:93:66:fe:bb:46:f7:4e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5B2AB049E75667C8F00ECB0EBF617859558571D Validity Not Before: May 5 04:25:34 2025 GMT Not After : May 8 12:57:34 2025 GMT Subject: CN=C63F8D520FBA38B4785F7E1FDDA741C97B02F03F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ae:90:18:fd:01:ea:72:88:b2:b8:ed:8c:58: 4c:8d:bc:8a:44:28:84:fb:98:a9:5b:69:92:9c:ce: 02:61:1b:90:be:51:9e:c6:9e:60:c7:05:86:a2:97: 47:d0:d8:ac:05:46:1c:99:ab:dd:6c:e4:68:90:6c: 8a:8a:d0:4d:72:b2:5b:72:ae:5c:ab:ae:36:71:49: 78:c9:d2:89:af:3e:07:d2:2a:16:53:39:84:9d:cf: e7:3b:d0:5d:fe:8e:6e:62:38:99:97:55:33:b2:67: 79:94:8e:f4:40:32:7e:ab:2d:a7:04:23:fc:fa:7c: 8c:eb:12:cc:22:e5:a3:68:d5:f0:8a:6c:df:d3:7e: 59:c5:68:16:25:77:45:b5:c6:ce:76:c9:f0:75:0b: fc:6a:bc:34:49:f3:fc:b1:92:3e:73:72:6b:f1:33: 43:88:9a:eb:fe:4d:ec:b3:f9:94:f3:02:cf:68:ce: aa:1d:f4:e2:1b:2a:48:80:42:dc:57:d8:f1:39:65: 10:ad:4c:c9:30:db:6d:bd:71:45:8f:ec:c3:ac:43: d1:a8:96:65:29:06:5b:c4:29:b5:69:87:5e:f1:cc: 39:83:34:12:fe:60:e7:3c:8d:25:c2:98:71:b3:f0: 80:28:bc:eb:c3:9d:9a:10:5c:34:50:59:14:f8:ac: 2b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3F:8D:52:0F:BA:38:B4:78:5F:7E:1F:DD:A7:41:C9:7B:02:F0:3F X509v3 Authority Key Identifier: keyid:E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:86:b4:39:07:80:3f:74:0b:52:2b:0a:6c:46:bf:1b:97:f0: 40:82:55:d7:ac:12:af:66:a2:15:3b:2b:81:89:18:ab:e1:92: 32:3f:df:37:06:a0:bf:09:36:bc:3d:ba:f7:18:b7:9d:60:9f: e4:66:8b:92:7a:c3:10:d1:2a:21:a0:b1:0d:0c:b1:8c:63:9c: 37:0a:d0:5c:24:e3:8b:89:5a:68:13:fe:7d:71:4a:49:6b:ca: b6:1c:dc:4d:70:05:a2:53:42:e4:fa:c9:e4:76:67:93:f7:ae: 05:3d:92:ed:14:7d:01:98:95:23:4c:cd:a8:df:e1:6e:40:7b: 1b:0a:0c:8a:11:1b:4d:aa:13:2c:9a:9c:7b:98:bb:95:ab:56: 1f:eb:38:53:21:da:82:57:4a:d3:6c:00:d8:90:56:36:8a:c2: 89:58:aa:44:5c:91:84:75:df:5d:84:7a:13:14:33:3a:fa:cf: 90:25:a7:4a:03:5a:ec:ae:3d:bf:4f:17:12:49:cb:99:86:c5: 11:98:54:62:07:86:16:bf:14:b0:55:70:6d:e5:c0:c4:0e:03: 3a:1a:bf:a5:b4:f7:23:e2:19:f5:6c:e8:05:5f:74:f1:14:5d: 1f:c0:b4:ba:c0:22:fe:0e:ef:c6:5a:e4:7c:cd:fe:2c:26:d8: 6c:ba:e2:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA/9dmbJcmw7voKakk2b+u0b3TnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3ODU5 NTU4NTcxRDAeFw0yNTA1MDUwNDI1MzRaFw0yNTA1MDgxMjU3MzRaMDMxMTAvBgNV BAMTKEM2M0Y4RDUyMEZCQTM4QjQ3ODVGN0UxRkREQTc0MUM5N0IwMkYwM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzrpAY/QHqcoiyuO2MWEyNvIpE KIT7mKlbaZKczgJhG5C+UZ7GnmDHBYail0fQ2KwFRhyZq91s5GiQbIqK0E1yslty rlyrrjZxSXjJ0omvPgfSKhZTOYSdz+c70F3+jm5iOJmXVTOyZ3mUjvRAMn6rLacE I/z6fIzrEswi5aNo1fCKbN/TflnFaBYld0W1xs52yfB1C/xqvDRJ8/yxkj5zcmvx M0OImuv+Teyz+ZTzAs9ozqod9OIbKkiAQtxX2PE5ZRCtTMkw2229cUWP7MOsQ9Go lmUpBlvEKbVph17xzDmDNBL+YOc8jSXCmHGz8IAovOvDnZoQXDRQWRT4rCtnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxj+NUg+6OLR4X34f3adByXsC8D8wHwYDVR0j BBgwFoAU5bKrBJ51ZnyPAOyw6/YXhZVYVx0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjI2YjNlMS1kN2Y2LTQ2NWUtODMwMi03ZDUyZjVjMzQwZmYvMC9FNUIyQUIwNDlF NzU2NjdDOEYwMEVDQjBFQkY2MTc4NTk1NTg1NzFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3ODU5NTU4 NTcxRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIyNmIzZTEtZDdmNi00NjVlLTgz MDItN2Q1MmY1YzM0MGZmLzAvRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3 ODU5NTU4NTcxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2GtDkHgD90C1IrCmxGvxuX8ECCVdesEq9m ohU7K4GJGKvhkjI/3zcGoL8JNrw9uvcYt51gn+Rmi5J6wxDRKiGgsQ0MsYxjnDcK 0Fwk44uJWmgT/n1xSklryrYc3E1wBaJTQuT6yeR2Z5P3rgU9ku0UfQGYlSNMzajf 4W5AexsKDIoRG02qEyyanHuYu5WrVh/rOFMh2oJXStNsANiQVjaKwolYqkRckYR1 312EehMUMzr6z5Alp0oDWuyuPb9PFxJJy5mGxRGYVGIHhha/FLBVcG3lwMQOAzoa v6W09yPiGfVs6AVfdPEUXR/AtLrAIv4O78Za5HzN/iwm2Gy64ic= -----END CERTIFICATE-----Generated at Tue May 6 23:06:35 2025 by rpki-client