$ rpki-client -vvf repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft File: E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft (raw, json) Hash identifier: UtF53Hi9AWbKLaqR0Aq9Z8ghjH9illyerIResOwVVBc= Subject key identifier: 8C:26:49:E2:DE:79:F9:F6:4D:08:12:FF:2A:1F:B2:DA:CF:6E:96:0F Authority key identifier: E3:5D:44:33:8E:59:37:B4:AE:26:9D:DD:CD:A4:0A:28:F8:7F:3E:C8 Certificate issuer: /CN=E35D44338E5937B4AE269DDDCDA40A28F87F3EC8 Certificate serial: 601D3DA3B3A13F5BBCC966DD0086C4D27CE30E95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft Manifest number: 01B8 Signing time: Fri 02 May 2025 22:11:51 +0000 Manifest this update: Fri 02 May 2025 22:06:51 +0000 Manifest next update: Tue 06 May 2025 09:22:51 +0000 Files and hashes: 1: 3130332e32312e3139352e302f32342d3234203d3e20313439393637.roa (hash: S0p/daZGbVg/6osVTIYUqF7J3lXGwRxwBETpqSAS5qY=) 2: E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl (hash: OjCEWlQ/fnhF+qutd6DFxKRw8NxxYeET5oF5EcmHp94=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 09:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:1d:3d:a3:b3:a1:3f:5b:bc:c9:66:dd:00:86:c4:d2:7c:e3:0e:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E35D44338E5937B4AE269DDDCDA40A28F87F3EC8 Validity Not Before: May 2 22:06:51 2025 GMT Not After : May 6 09:22:51 2025 GMT Subject: CN=8C2649E2DE79F9F64D0812FF2A1FB2DACF6E960F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ad:83:2a:6e:98:4a:8c:0b:e9:05:d3:d6:c9: cd:77:1a:27:2e:3a:02:3c:0e:da:b7:dc:cf:96:15: b1:77:79:e1:ca:99:94:24:e4:5a:02:2a:08:c4:bb: 05:02:de:5a:4b:4b:7d:34:81:28:58:74:71:f5:97: b8:23:ec:9f:18:25:c5:dc:c3:3a:f4:6f:ce:28:9f: 76:9d:79:c7:37:c8:af:a5:56:5e:82:06:26:d6:79: 3b:d5:22:08:c3:a5:9c:bc:ab:30:81:ed:58:51:1c: 7b:8e:46:4d:9f:f1:9f:da:37:81:26:29:1c:f0:d6: e5:5a:10:48:65:ae:64:31:92:5f:fd:f3:20:73:5b: a9:19:89:72:60:83:3d:68:13:5a:7f:22:49:6e:bd: 04:8f:b0:fe:ab:a4:1b:63:70:08:8c:7f:83:d5:13: 52:63:1d:2c:49:7e:9e:26:50:68:db:d5:49:20:8c: 85:5e:43:ff:03:cf:65:33:e7:e4:44:4c:f9:83:2e: 1f:70:dc:34:88:8c:05:3b:31:80:a5:af:21:1f:f0: 3d:ed:9d:0d:83:12:6f:65:fe:36:4e:c0:03:10:97: f6:09:2f:a2:27:ae:8d:a8:8d:ec:31:84:8f:f0:e9: c7:30:6e:64:b6:ac:3f:b9:99:d9:52:d2:39:b7:a3: e0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:26:49:E2:DE:79:F9:F6:4D:08:12:FF:2A:1F:B2:DA:CF:6E:96:0F X509v3 Authority Key Identifier: keyid:E3:5D:44:33:8E:59:37:B4:AE:26:9D:DD:CD:A4:0A:28:F8:7F:3E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:d8:21:07:b3:d9:93:d3:f4:16:3e:f5:f6:e8:11:bc:85:1e: 62:d9:a1:b4:e8:63:44:7a:52:f5:be:8e:35:14:71:2d:50:6a: c3:dd:ea:2a:81:36:45:be:2a:d0:18:61:69:aa:a9:df:84:3a: 2d:43:0d:74:23:36:aa:f2:11:c9:d9:dd:ff:13:1f:4e:60:96: 08:47:06:a0:18:af:98:d2:12:c6:89:0e:bb:eb:16:e2:8b:2b: 59:e2:d3:b0:b1:59:f6:e2:4e:d1:49:c4:d7:34:3b:72:a5:e2: 6b:04:72:54:ff:13:97:4b:72:1d:33:03:0e:e1:cd:bd:c8:75: a9:d3:a9:8b:41:a7:61:b1:3d:84:14:73:fa:2a:15:60:31:59: 09:07:00:37:7d:c9:5a:9d:06:dc:3c:8c:8d:68:88:c7:1c:8b: 90:70:20:cf:f3:2b:88:7e:21:2b:d6:12:8c:87:5d:38:c1:e0: cb:4c:93:5f:ca:05:50:a4:ed:4e:de:7e:81:f6:6a:1b:b9:ce: 3d:e5:79:66:6a:59:b6:05:27:6e:e0:49:a8:83:6c:a4:d9:5b: 01:4f:de:f0:49:c2:46:91:f6:63:13:3a:8c:c7:88:04:3f:6b: 09:a1:aa:d1:ae:b3:a2:08:fe:ec:35:d0:6b:0f:78:24:c5:33: d1:b2:f2:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYB09o7OhP1u8yWbdAIbE0nzjDpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBBMjhG ODdGM0VDODAeFw0yNTA1MDIyMjA2NTFaFw0yNTA1MDYwOTIyNTFaMDMxMTAvBgNV BAMTKDhDMjY0OUUyREU3OUY5RjY0RDA4MTJGRjJBMUZCMkRBQ0Y2RTk2MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmrYMqbphKjAvpBdPWyc13Gicu OgI8Dtq33M+WFbF3eeHKmZQk5FoCKgjEuwUC3lpLS300gShYdHH1l7gj7J8YJcXc wzr0b84on3adecc3yK+lVl6CBibWeTvVIgjDpZy8qzCB7VhRHHuORk2f8Z/aN4Em KRzw1uVaEEhlrmQxkl/98yBzW6kZiXJggz1oE1p/IkluvQSPsP6rpBtjcAiMf4PV E1JjHSxJfp4mUGjb1UkgjIVeQ/8Dz2Uz5+RETPmDLh9w3DSIjAU7MYClryEf8D3t nQ2DEm9l/jZOwAMQl/YJL6Inro2ojewxhI/w6ccwbmS2rD+5mdlS0jm3o+AbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjCZJ4t55+fZNCBL/Kh+y2s9ulg8wHwYDVR0j BBgwFoAU411EM45ZN7SuJp3dzaQKKPh/PsgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjgzYjI3Yy1hNzMwLTQwMDItOTFiOC1kMDM2NmRmYWM3N2UvMC9FMzVENDQzMzhF NTkzN0I0QUUyNjlERERDREE0MEEyOEY4N0YzRUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBBMjhGODdG M0VDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY4M2IyN2MtYTczMC00MDAyLTkx YjgtZDAzNjZkZmFjNzdlLzAvRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBB MjhGODdGM0VDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLYIQez2ZPT9BY+9fboEbyFHmLZobToY0R6 UvW+jjUUcS1QasPd6iqBNkW+KtAYYWmqqd+EOi1DDXQjNqryEcnZ3f8TH05glghH BqAYr5jSEsaJDrvrFuKLK1ni07CxWfbiTtFJxNc0O3Kl4msEclT/E5dLch0zAw7h zb3IdanTqYtBp2GxPYQUc/oqFWAxWQkHADd9yVqdBtw8jI1oiMcci5BwIM/zK4h+ ISvWEoyHXTjB4MtMk1/KBVCk7U7efoH2ahu5zj3leWZqWbYFJ27gSaiDbKTZWwFP 3vBJwkaR9mMTOozHiAQ/awmhqtGus6II/uw10GsPeCTFM9Gy8mc= -----END CERTIFICATE-----Generated at Mon May 5 21:51:35 2025 by rpki-client