$ rpki-client -vvf repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft File: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft (raw, json) Hash identifier: BQfgb0HiSsAJZwxHYSLLPPr0M5OSdPAcSOcTFTRBpFc= Subject key identifier: 90:77:80:15:5E:7A:65:75:78:B5:2C:40:47:E9:23:29:89:60:B6:8B Authority key identifier: E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70 Certificate issuer: /CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70 Certificate serial: 6D30D0A243C6C349D514F4267151A683C2C09223 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft Manifest number: 01F1 Signing time: Tue 06 May 2025 17:50:56 +0000 Manifest this update: Tue 06 May 2025 17:45:56 +0000 Manifest next update: Sat 10 May 2025 05:39:56 +0000 Files and hashes: 1: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl (hash: ekt3hJywroFtrMMQifLVD8uAqpAzIpPdqudm2lHVL6c=) 2: 3130332e3138362e302e302f32332d3234203d3e20313336303532.roa (hash: YlWhhG5+SXJ+RtEZrRBNLk9BnFzp5Av7c11ptEycGe4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 05:39:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:30:d0:a2:43:c6:c3:49:d5:14:f4:26:71:51:a6:83:c2:c0:92:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70 Validity Not Before: May 6 17:45:56 2025 GMT Not After : May 10 05:39:56 2025 GMT Subject: CN=907780155E7A657578B52C4047E923298960B68B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:db:ec:d0:d2:9a:0e:dd:94:b9:da:84:2c:f9: 7f:8d:48:36:42:26:29:15:55:8b:36:cd:5e:48:ad: e0:2b:97:1f:6e:a3:02:cd:7a:88:73:c5:6a:20:7f: d5:7b:0d:ae:cf:d3:bd:f8:9d:75:ca:7d:52:a4:16: e5:c4:18:d4:38:ee:da:a0:7b:59:28:7c:05:a2:9f: 51:8a:40:38:30:0e:b6:1e:7b:a2:74:ac:3d:14:aa: 82:9f:4e:0e:ba:a1:9b:19:74:0c:9b:f7:b6:df:ad: 58:71:c5:9c:5e:30:6b:17:81:40:65:35:89:30:16: d2:18:c5:27:71:3b:af:60:f5:80:25:10:94:8b:7d: 0d:5d:67:3a:86:c3:f7:a0:d0:68:5d:85:ec:60:fc: d9:69:d3:52:d1:2d:2d:c8:22:9b:a0:5d:eb:5b:72: 71:2d:6f:6a:e2:79:e5:14:94:4d:66:c2:a7:a4:16: f8:36:13:5d:cc:af:8b:c1:a2:1f:eb:b3:4a:3a:a1: c5:f1:3a:bf:d7:d1:8f:db:8b:86:92:c9:b8:e4:7e: d7:eb:3a:83:e1:c5:97:b3:91:3c:81:9c:a7:61:35: 71:85:b7:3a:f7:b0:a6:50:4c:e1:1d:f5:51:ba:4d: 13:da:65:a6:e7:2c:4f:1e:76:ae:56:b3:c8:54:62: 6a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:77:80:15:5E:7A:65:75:78:B5:2C:40:47:E9:23:29:89:60:B6:8B X509v3 Authority Key Identifier: keyid:E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:c0:19:45:c0:65:45:ea:bd:07:93:7b:2f:87:ae:14:e4:71: e6:2b:1d:1f:f3:55:a6:d2:7d:27:27:2a:a7:98:bd:58:cd:a7: 8f:55:fe:59:c9:5f:59:e5:fc:7f:2d:87:7e:e7:e6:1d:b0:36: ec:ac:32:2e:3b:ee:35:df:72:ac:09:7e:c8:9d:77:75:94:06: 17:45:92:e8:44:7b:d5:0f:22:17:fa:d2:21:0e:6b:a9:c9:4f: c6:54:3d:c5:ae:c8:a1:3c:76:e9:85:c7:1d:98:42:16:d0:f3: d0:25:f6:4e:13:2c:c3:db:6e:a5:05:64:d7:3f:aa:74:7e:ee: c6:ac:b1:47:ae:77:15:9a:d2:ae:1a:fc:f8:4c:9c:eb:71:d5: 67:47:65:59:0c:e2:5b:bf:5a:01:77:1e:3d:8c:94:07:b7:17: 5d:24:a1:6b:99:50:36:89:f4:33:29:17:91:8d:cd:55:53:56: 55:c6:4e:b7:13:f6:bd:46:61:ee:c7:05:a5:68:b9:1b:a8:c2: 3c:cc:dc:5f:a4:39:26:51:9b:db:a8:9d:bd:4b:9a:27:87:d4: bf:c6:82:71:e8:36:5c:e3:54:de:13:17:0f:70:0e:69:69:ca: f2:df:da:26:65:17:6c:a9:c0:8a:7a:3b:85:9a:bc:21:12:1a: 6e:a9:e1:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbTDQokPGw0nVFPQmcVGmg8LAkiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0Ex QURBNUQ3MDAeFw0yNTA1MDYxNzQ1NTZaFw0yNTA1MTAwNTM5NTZaMDMxMTAvBgNV BAMTKDkwNzc4MDE1NUU3QTY1NzU3OEI1MkM0MDQ3RTkyMzI5ODk2MEI2OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo2+zQ0poO3ZS52oQs+X+NSDZC JikVVYs2zV5IreArlx9uowLNeohzxWogf9V7Da7P0734nXXKfVKkFuXEGNQ47tqg e1kofAWin1GKQDgwDrYee6J0rD0UqoKfTg66oZsZdAyb97bfrVhxxZxeMGsXgUBl NYkwFtIYxSdxO69g9YAlEJSLfQ1dZzqGw/eg0Ghdhexg/Nlp01LRLS3IIpugXetb cnEtb2rieeUUlE1mwqekFvg2E13Mr4vBoh/rs0o6ocXxOr/X0Y/bi4aSybjkftfr OoPhxZezkTyBnKdhNXGFtzr3sKZQTOEd9VG6TRPaZabnLE8edq5Ws8hUYmrrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkHeAFV56ZXV4tSxAR+kjKYlgtoswHwYDVR0j BBgwFoAU4JZ1Se8y2J6f8WOPzxg0ehraXXAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzdhNmRkOC1hODQzLTQ2OTgtYTVmMy0zZWVjNDY4ZDE0YTQvMC9FMDk2NzU0OUVG MzJEODlFOUZGMTYzOEZDRjE4MzQ3QTFBREE1RDcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0ExQURB NUQ3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM3YTZkZDgtYTg0My00Njk4LWE1 ZjMtM2VlYzQ2OGQxNGE0LzAvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0 N0ExQURBNUQ3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPAGUXAZUXqvQeTey+HrhTkceYrHR/zVabS fScnKqeYvVjNp49V/lnJX1nl/H8th37n5h2wNuysMi477jXfcqwJfsidd3WUBhdF kuhEe9UPIhf60iEOa6nJT8ZUPcWuyKE8dumFxx2YQhbQ89Al9k4TLMPbbqUFZNc/ qnR+7sassUeudxWa0q4a/PhMnOtx1WdHZVkM4lu/WgF3Hj2MlAe3F10koWuZUDaJ 9DMpF5GNzVVTVlXGTrcT9r1GYe7HBaVouRuowjzM3F+kOSZRm9uonb1LmieH1L/G gnHoNlzjVN4TFw9wDmlpyvLf2iZlF2ypwIp6O4WavCESGm6p4T4= -----END CERTIFICATE-----Generated at Thu May 8 04:15:50 2025 by rpki-client