$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft File: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft (raw, json) Hash identifier: aizv6v0FDXbk6tfLddVW0ZukKL0KsV33KrsojeOwA8A= Subject key identifier: 5E:8B:DD:95:39:52:02:7C:6C:09:9B:A7:F3:14:6A:41:E4:B5:BC:9E Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 Certificate issuer: /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Certificate serial: 7AB385BAFDFD3C0F67D9A99BF69548309D82FD70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft Manifest number: 04CB Signing time: Wed 07 May 2025 05:52:04 +0000 Manifest this update: Wed 07 May 2025 05:47:04 +0000 Manifest next update: Sat 10 May 2025 16:46:04 +0000 Files and hashes: 1: 3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa (hash: hMJmJ4dw/81IwDHXcdYCEbx1mMe88CEi44Qr1Pj1eBk=) 2: 3130332e3133302e36302e302f32322d3232203d3e20313338303739.roa (hash: C1HlnOYNkbj9dYN+GVNsy5Ocwp8L1tuS754SnYYyHlE=) 3: 3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa (hash: KEI56K2u3NEnRDvHwfwup/lXLtIuuqQa4o+pfORoJU4=) 4: 3130332e3133302e36332e302f32342d3234203d3e20313338303739.roa (hash: UPqZTtFOgF+jDRv2CvFxqECXCbrw1aEaPzgtFmgsijs=) 5: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl (hash: yVLuDW+LtVpl9vtEzDu8rQ9CjDyQf1N6RO5tAE4gua8=) 6: 3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa (hash: dghjU1zZ9kGjcMRT5/T9O0//sXRfgHxldxyPdO36eG8=) 7: 3130332e3133302e36312e302f32342d3234203d3e20313338303739.roa (hash: 4L2FKCQFOJ6ZvWKgXal0nfrZkHMJOZOY4pyCilWNqJg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 16:46:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:b3:85:ba:fd:fd:3c:0f:67:d9:a9:9b:f6:95:48:30:9d:82:fd:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Validity Not Before: May 7 05:47:04 2025 GMT Not After : May 10 16:46:04 2025 GMT Subject: CN=5E8BDD953952027C6C099BA7F3146A41E4B5BC9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a3:f6:f0:0a:e4:69:7d:b2:f7:29:18:18:a9: b0:01:9c:d0:50:f6:55:59:d9:13:f2:e7:fa:d5:12: f9:33:55:91:39:3f:b8:86:19:f7:2b:98:96:7f:52: a8:49:15:66:e7:4c:aa:18:61:43:d2:31:ab:c5:95: 23:07:b3:d0:0d:cc:83:0f:bb:72:d8:09:75:10:49: 00:3d:e0:1f:3f:36:00:ce:0e:b6:5c:69:1b:8c:25: a5:af:75:86:30:d2:0d:04:02:48:27:bc:24:f1:8f: fe:c7:e6:3e:0a:1a:43:b9:5c:ae:44:dc:7a:70:5a: cc:7e:33:f2:d0:ad:df:d1:f6:26:e6:da:78:d7:ff: bc:e7:1c:08:e4:ec:6a:81:48:b0:d8:8e:81:ce:1c: b4:bb:db:cd:96:f0:6d:a6:2b:fb:8a:fc:49:48:6a: 86:9d:2c:16:c0:d3:e1:1a:8a:42:0d:ed:19:f6:a8: 8f:b8:70:ad:2d:30:c2:c2:fc:d9:c1:3a:1f:17:a0: e1:db:e1:a5:4d:52:92:98:54:12:fd:35:a0:7c:c0: e7:21:4a:43:2f:27:33:af:56:19:9a:bb:1e:bc:72: 2c:d3:ed:b8:ce:c3:7e:4a:d7:f6:2d:44:c8:7a:34: 34:6f:ac:f6:15:5a:3e:f9:55:c5:26:81:19:61:c5: af:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8B:DD:95:39:52:02:7C:6C:09:9B:A7:F3:14:6A:41:E4:B5:BC:9E X509v3 Authority Key Identifier: keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:8b:43:10:39:f0:e4:22:e9:f9:6c:74:d9:3d:0a:bc:3e:be: c6:61:0c:27:6a:9b:f7:1c:c9:bb:92:35:98:8f:74:87:c1:64: a2:00:67:22:02:9d:80:e9:f9:c0:88:74:8e:90:84:5b:49:82: 47:be:78:b1:2d:a2:27:29:fc:b5:2c:ac:b4:06:c3:a5:44:f2: 3f:d8:49:a2:21:dc:b5:99:c5:da:3f:9b:e5:77:53:24:5d:b4: c2:6e:a7:a0:67:22:46:52:f4:1b:f6:94:fd:ab:24:e6:e1:ff: 6b:b5:ce:a7:9f:cf:c8:b5:07:5e:37:6a:5a:dc:85:f4:35:10: 8e:0c:db:17:ae:2d:47:52:b4:0b:ef:94:69:d3:83:a4:da:7c: 0c:ca:79:f7:25:13:61:22:b1:44:cd:10:b2:da:2a:f5:5d:7b: 77:48:9f:0b:37:47:35:f2:31:fe:0c:88:05:d8:12:99:4e:e7: 3e:82:1a:5b:55:72:2f:4d:79:05:ca:06:4a:6f:f1:a7:b4:b4: c7:d6:e0:80:80:5c:8d:72:4c:08:a2:1a:9d:06:7a:2c:67:1f: fe:1b:f0:5b:09:dc:b2:1d:64:f4:00:ac:d7:3f:fe:aa:74:01: 89:39:08:91:fb:a8:8a:87:d9:a2:d7:d8:f8:a6:7e:dc:38:fd: e0:10:3f:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUerOFuv39PA9n2amb9pVIMJ2C/XAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVE Q0YwOEY1MjAeFw0yNTA1MDcwNTQ3MDRaFw0yNTA1MTAxNjQ2MDRaMDMxMTAvBgNV BAMTKDVFOEJERDk1Mzk1MjAyN0M2QzA5OUJBN0YzMTQ2QTQxRTRCNUJDOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyo/bwCuRpfbL3KRgYqbABnNBQ 9lVZ2RPy5/rVEvkzVZE5P7iGGfcrmJZ/UqhJFWbnTKoYYUPSMavFlSMHs9ANzIMP u3LYCXUQSQA94B8/NgDODrZcaRuMJaWvdYYw0g0EAkgnvCTxj/7H5j4KGkO5XK5E 3HpwWsx+M/LQrd/R9ibm2njX/7znHAjk7GqBSLDYjoHOHLS7282W8G2mK/uK/ElI aoadLBbA0+EaikIN7Rn2qI+4cK0tMMLC/NnBOh8XoOHb4aVNUpKYVBL9NaB8wOch SkMvJzOvVhmaux68cizT7bjOw35K1/YtRMh6NDRvrPYVWj75VcUmgRlhxa8vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXovdlTlSAnxsCZun8xRqQeS1vJ4wHwYDVR0j BBgwFoAU4XpeuUFW3iP83I8pshD83tzwj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTJhM2YyOC04MjczLTRkZDUtODdmYy0xZWYwMGFjYWM5YjYvMC9FMTdBNUVCOTQx NTZERTIzRkNEQzhGMjlCMjEwRkNERURDRjA4RjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVEQ0Yw OEY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTEyYTNmMjgtODI3My00ZGQ1LTg3 ZmMtMWVmMDBhY2FjOWI2LzAvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZD REVEQ0YwOEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGLQxA58OQi6flsdNk9Crw+vsZhDCdqm/cc ybuSNZiPdIfBZKIAZyICnYDp+cCIdI6QhFtJgke+eLEtoicp/LUsrLQGw6VE8j/Y SaIh3LWZxdo/m+V3UyRdtMJup6BnIkZS9Bv2lP2rJObh/2u1zqefz8i1B143alrc hfQ1EI4M2xeuLUdStAvvlGnTg6TafAzKefclE2EisUTNELLaKvVde3dInws3RzXy Mf4MiAXYEplO5z6CGltVci9NeQXKBkpv8ae0tMfW4ICAXI1yTAiiGp0GeixnH/4b 8FsJ3LIdZPQArNc//qp0AYk5CJH7qIqH2aLX2Pimftw4/eAQP0Y= -----END CERTIFICATE-----Generated at Thu May 8 08:56:07 2025 by rpki-client