$ rpki-client -vvf repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft File: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft (raw, json) Hash identifier: 0Gzoj6vGEA7Axuu2sVrC97EbORI7F14152OiwWpr8rc= Subject key identifier: 89:7E:16:51:8F:91:7A:9E:4C:41:4F:CA:60:B8:13:1E:47:D5:6E:D2 Authority key identifier: E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 Certificate issuer: /CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Certificate serial: 17F27F1E38D9B61C89FB650CA89CC787FA36BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft Manifest number: 0321 Signing time: Sat 10 May 2025 11:21:46 +0000 Manifest this update: Sat 10 May 2025 11:16:46 +0000 Manifest next update: Tue 13 May 2025 20:03:46 +0000 Files and hashes: 1: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl (hash: /Tx0JYknMxN9xpoDYxKcq5X1dciHxbi46jJ4WLE1jkg=) 2: 3130332e3136342e3233312e302f32342d3234203d3e20313431393133.roa (hash: NK0HZEK3BAxoXUs/T9BsQ+3NHYIYmmtIH82zUm/fzDk=) 3: 3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa (hash: zTY/Xpdv3MSQoDsOl/9obTqa4WAjpeiNnIpy7In5lOI=) 4: 3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa (hash: Wwvtox4pnVKWLsRl/E/cxu7UuLzmLQJxzxgchSEOlMg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 20:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:f2:7f:1e:38:d9:b6:1c:89:fb:65:0c:a8:9c:c7:87:fa:36:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Validity Not Before: May 10 11:16:46 2025 GMT Not After : May 13 20:03:46 2025 GMT Subject: CN=897E16518F917A9E4C414FCA60B8131E47D56ED2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:51:d0:3d:4d:17:7e:85:69:00:81:2e:5a:03: 45:3a:54:75:28:44:6b:97:dd:23:ab:30:b9:d1:67: 9d:f2:d7:f1:0d:a5:c5:eb:8f:e6:50:2d:c9:b5:7e: 7c:de:cc:05:19:e6:63:95:6e:31:4f:2e:6e:1b:e2: 47:7e:b0:b2:fd:41:57:69:cc:8c:7e:cc:87:37:92: 73:2a:c2:8a:6b:62:64:38:25:97:8a:40:e0:68:33: 3a:48:b4:ea:d1:7c:1b:90:03:5c:d8:d2:2e:77:67: 58:06:eb:9f:ce:68:d7:41:eb:60:79:29:db:9e:c2: e7:c0:9e:28:50:af:9a:db:47:7c:2a:22:3c:7a:6b: 68:a2:e7:09:71:12:af:04:07:79:d9:5f:c1:18:69: c3:b1:d8:96:83:5c:cc:4b:0c:26:dd:99:ba:c4:06: 92:31:82:e9:33:dc:4e:fc:39:31:20:9d:f2:b9:a3: 7a:84:77:d4:a0:53:f3:c7:82:9f:3a:ec:3a:c3:94: 6a:9b:14:cf:ae:f9:de:11:4c:c6:dc:b1:36:14:bf: 2e:e8:b8:51:a0:4e:6e:89:c0:7f:39:a2:58:2b:92: 9d:32:3b:fe:d5:29:c4:22:c0:41:47:24:63:e6:66: 60:54:47:91:e9:7d:36:8f:c8:a4:d4:a2:26:32:bb: 6d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7E:16:51:8F:91:7A:9E:4C:41:4F:CA:60:B8:13:1E:47:D5:6E:D2 X509v3 Authority Key Identifier: keyid:E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:3d:06:a9:1d:9b:6c:44:33:64:31:30:b7:57:b7:f0:c5:82: cf:f2:db:23:a2:a1:e1:1f:c2:72:af:8a:67:ae:7c:39:d9:75: 1d:c1:1d:20:8f:f3:ae:1d:2c:6a:55:9d:57:33:27:6b:4c:74: 74:eb:7e:15:a5:6b:bc:a6:8d:bd:3a:7d:ef:bb:09:0b:1d:a2: 1f:86:8a:29:c1:ce:57:d8:c9:94:fb:25:06:af:72:37:07:80: af:76:b3:e8:bf:40:7e:46:49:c1:8a:dd:e4:ed:76:40:7b:5a: 91:0d:c5:52:a1:55:44:7f:9f:48:60:27:09:a7:c7:0f:12:40: 2a:52:dc:77:d4:a0:0c:48:02:7f:97:fd:df:38:12:81:75:fa: 27:4c:5e:04:d1:15:dc:a2:2d:f6:17:78:4a:2d:94:04:12:45: a5:7a:20:89:e3:d5:f4:08:b8:ba:36:0c:f1:ea:6b:56:9a:58: ce:11:26:bf:15:2f:a0:51:54:0a:0f:bc:44:9a:2c:af:3d:ec: 74:0e:09:f4:7c:cc:66:80:48:9b:fd:20:e1:cd:8f:40:1c:af: ca:f8:aa:32:e8:1b:bc:18:62:af:c7:79:08:d3:d7:b3:f5:eb: b6:e4:65:58:17:4a:9e:2b:8b:40:e9:2d:7b:89:de:db:39:06: c2:84:6e:21 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITF/J/HjjZthyJ+2UMqJzHh/o2vTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhFNzIzMUQxQTNFMDUxQkQ5MDNEQjg2RDdERTAwNzdDMjMz M0VCQjU4MB4XDTI1MDUxMDExMTY0NloXDTI1MDUxMzIwMDM0NlowMzExMC8GA1UE AxMoODk3RTE2NTE4RjkxN0E5RTRDNDE0RkNBNjBCODEzMUU0N0Q1NkVEMjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL5R0D1NF36FaQCBLloDRTpUdShE a5fdI6swudFnnfLX8Q2lxeuP5lAtybV+fN7MBRnmY5VuMU8ubhviR36wsv1BV2nM jH7MhzeScyrCimtiZDgll4pA4GgzOki06tF8G5ADXNjSLndnWAbrn85o10HrYHkp 257C58CeKFCvmttHfCoiPHpraKLnCXESrwQHedlfwRhpw7HYloNczEsMJt2ZusQG kjGC6TPcTvw5MSCd8rmjeoR31KBT88eCnzrsOsOUapsUz6753hFMxtyxNhS/Lui4 UaBObonAfzmiWCuSnTI7/tUpxCLAQUckY+ZmYFRHkel9No/IpNSiJjK7bYMCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBSJfhZRj5F6nkxBT8pguBMeR9Vu0jAfBgNVHSME GDAWgBTnIx0aPgUb2QPbhtfeAHfCMz67WDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlh MTc5NGFhLTMyOTEtNDgzYi1hYzBiLTdiYzdiMWE2N2NjNi8wL0U3MjMxRDFBM0Uw NTFCRDkwM0RCODZEN0RFMDA3N0MyMzMzRUJCNTguY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi9FNzIzMUQxQTNFMDUxQkQ5MDNEQjg2RDdERTAwNzdDMjMzM0VC QjU4LmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85YTE3OTRhYS0zMjkxLTQ4M2ItYWMw Yi03YmM3YjFhNjdjYzYvMC9FNzIzMUQxQTNFMDUxQkQ5MDNEQjg2RDdERTAwNzdD MjMzM0VCQjU4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAyz0GqR2bbEQzZDEwt1e38MWCz/LbI6Kh4R/C cq+KZ658Odl1HcEdII/zrh0salWdVzMna0x0dOt+FaVrvKaNvTp977sJCx2iH4aK KcHOV9jJlPslBq9yNweAr3az6L9AfkZJwYrd5O12QHtakQ3FUqFVRH+fSGAnCafH DxJAKlLcd9SgDEgCf5f93zgSgXX6J0xeBNEV3KIt9hd4Si2UBBJFpXogiePV9Ai4 ujYM8eprVppYzhEmvxUvoFFUCg+8RJosrz3sdA4J9HzMZoBIm/0g4c2PQByvyviq MugbvBhir8d5CNPXs/XrtuRlWBdKniuLQOkte4ne2zkGwoRuIQ== -----END CERTIFICATE-----Generated at Mon May 12 15:59:41 2025 by rpki-client