$ rpki-client -vvf repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft File: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft (raw, json) Hash identifier: j0EwN+tWxKYiCTHuE2d4y+Iz8JCow8bmfVM5XGG5nSk= Subject key identifier: 41:A3:8F:48:95:0C:B2:8A:CA:86:A8:19:AA:2A:B8:EC:C1:8E:23:84 Authority key identifier: E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 Certificate issuer: /CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Certificate serial: 0A9CAD7DE067DCB702DC5169054743DC61DB687B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft Manifest number: C8 Signing time: Wed 07 May 2025 01:21:08 +0000 Manifest this update: Wed 07 May 2025 01:16:08 +0000 Manifest next update: Sat 10 May 2025 10:23:08 +0000 Files and hashes: 1: 3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa (hash: geAKj9+TOtyfNH9PasUiph/Br+j89slGEUwYIqBnSpQ=) 2: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl (hash: Hwjxtc4jo2V/bZ5b7dF2O9otbrmhT7coex87wdCYVUQ=) 3: 3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (hash: RhGN57E/ZSjGvHHK5MWz3epa97gXAk4w6YjAbvPV0fg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 10:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:9c:ad:7d:e0:67:dc:b7:02:dc:51:69:05:47:43:dc:61:db:68:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Validity Not Before: May 7 01:16:08 2025 GMT Not After : May 10 10:23:08 2025 GMT Subject: CN=41A38F48950CB28ACA86A819AA2AB8ECC18E2384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:73:f7:e0:09:97:d2:70:52:de:a4:b1:91:bd: fd:47:7a:0f:76:db:62:ec:f1:f1:50:2e:58:c1:d5: e3:e7:99:4a:45:9a:f3:82:4d:37:18:c9:01:a7:52: b9:7c:90:e4:68:b3:78:62:0a:65:64:f3:94:3b:16: 5a:68:a0:9a:b6:74:56:85:38:18:6a:97:8a:9f:97: ad:89:94:c8:35:22:63:bd:7f:c8:6d:b9:ff:57:5c: ad:a6:18:dd:64:75:54:6d:e7:57:3b:47:df:28:8d: 0e:37:b1:25:e2:f4:f1:9c:6f:94:09:5d:fb:32:e1: ef:68:d8:b2:ad:be:73:47:77:4e:87:be:89:ce:54: d6:30:a5:8e:18:86:7c:2c:ed:62:5e:c9:b0:ce:36: 78:ee:9c:f9:17:32:af:24:92:01:4a:7c:9e:f3:9c: 0a:f5:34:ab:34:8b:5d:bf:42:7f:2e:a9:fb:a6:d8: ae:ba:c7:a5:2e:11:9b:56:29:73:93:74:99:2e:26: 0a:71:53:13:b8:5e:e5:b7:c8:0a:ae:38:59:f1:25: 46:0c:91:02:b1:d4:19:b9:37:c5:d3:eb:6f:d0:8c: 61:07:f8:8e:aa:8f:cc:d3:55:85:63:06:03:11:c9: 65:03:77:1d:65:f5:c0:c4:5c:e2:1d:da:7c:7f:eb: d8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A3:8F:48:95:0C:B2:8A:CA:86:A8:19:AA:2A:B8:EC:C1:8E:23:84 X509v3 Authority Key Identifier: keyid:E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:84:25:7d:24:8a:97:ff:f7:ce:9d:3c:1b:7d:9c:ff:70:5a: 3e:f6:6c:58:44:af:43:ec:d2:7e:8e:c9:bf:46:c3:b2:c6:b1: 66:3a:8f:53:e9:49:70:44:d7:f7:c8:99:5a:81:7e:32:56:bf: 1d:6f:2f:4c:37:d6:f0:e4:4b:a2:60:b9:2d:6a:2f:eb:b4:e5: 4d:aa:0f:f4:ea:15:e9:7c:62:47:1c:bb:00:75:cd:7f:b1:dc: e1:a0:6c:62:6f:4b:81:de:59:76:60:54:32:f8:21:a7:af:90: 83:17:90:46:39:c9:6b:24:40:e5:68:55:3d:59:c5:d1:9e:ae: f4:17:9b:c3:6c:78:7b:d8:be:0e:68:0b:e0:9a:95:b9:7d:d8: 5d:39:3c:6b:0e:fb:a3:92:3c:9e:b9:4c:74:e3:2b:53:61:4b: 35:cf:6b:07:98:34:59:d6:db:b9:31:d8:06:e7:20:dd:2f:f7: e9:c2:e4:82:fa:ba:7a:cb:39:4e:6d:b0:97:a2:db:d0:bd:08: 96:81:82:07:2e:f2:0a:fc:ca:01:2f:29:3c:bb:20:a4:2c:bc: 9b:a5:2e:98:c6:e6:7f:17:c1:d7:3c:ee:a3:09:17:ca:ae:71: 34:0c:8c:f6:94:95:b7:5a:ec:23:c2:1c:bd:2f:8a:ab:a1:82: 7b:17:75:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCpytfeBn3LcC3FFpBUdD3GHbaHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUz MkI4RTk0MzAeFw0yNTA1MDcwMTE2MDhaFw0yNTA1MTAxMDIzMDhaMDMxMTAvBgNV BAMTKDQxQTM4RjQ4OTUwQ0IyOEFDQTg2QTgxOUFBMkFCOEVDQzE4RTIzODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4c/fgCZfScFLepLGRvf1Heg92 22Ls8fFQLljB1ePnmUpFmvOCTTcYyQGnUrl8kORos3hiCmVk85Q7FlpooJq2dFaF OBhql4qfl62JlMg1ImO9f8htuf9XXK2mGN1kdVRt51c7R98ojQ43sSXi9PGcb5QJ Xfsy4e9o2LKtvnNHd06HvonOVNYwpY4Yhnws7WJeybDONnjunPkXMq8kkgFKfJ7z nAr1NKs0i12/Qn8uqfum2K66x6UuEZtWKXOTdJkuJgpxUxO4XuW3yAquOFnxJUYM kQKx1Bm5N8XT62/QjGEH+I6qj8zTVYVjBgMRyWUDdx1l9cDEXOId2nx/69ihAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQaOPSJUMsorKhqgZqiq47MGOI4QwHwYDVR0j BBgwFoAU4p6DwsWJf6T2zv48N+4aZTK46UMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTdjZjlhMC1lOTI3LTQ4MTQtODQ0Ny04YjNhMDAyNzYwYTgvMC9FMjlFODNDMkM1 ODk3RkE0RjZDRUZFM0MzN0VFMUE2NTMyQjhFOTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUzMkI4 RTk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk3Y2Y5YTAtZTkyNy00ODE0LTg0 NDctOGIzYTAwMjc2MGE4LzAvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFB NjUzMkI4RTk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWEJX0kipf/986dPBt9nP9wWj72bFhEr0Ps 0n6Oyb9Gw7LGsWY6j1PpSXBE1/fImVqBfjJWvx1vL0w31vDkS6JguS1qL+u05U2q D/TqFel8YkccuwB1zX+x3OGgbGJvS4HeWXZgVDL4IaevkIMXkEY5yWskQOVoVT1Z xdGervQXm8NseHvYvg5oC+Calbl92F05PGsO+6OSPJ65THTjK1NhSzXPaweYNFnW 27kx2AbnIN0v9+nC5IL6unrLOU5tsJei29C9CJaBggcu8gr8ygEvKTy7IKQsvJul LpjG5n8Xwdc87qMJF8qucTQMjPaUlbda7CPCHL0viquhgnsXdbw= -----END CERTIFICATE-----Generated at Thu May 8 02:34:22 2025 by rpki-client