$ rpki-client -vvf repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft File: E0D54A271CD04583E0304613C7075C15FA03E497.mft (raw, json) Hash identifier: Hd9Ws75wplr5w7LHrJMtn9c7Xsj2HPp3F3+55elfL6s= Subject key identifier: D4:7C:5A:76:EA:4B:1F:34:66:7C:A0:F3:A8:BC:70:DC:B8:18:79:27 Authority key identifier: E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 Certificate issuer: /CN=E0D54A271CD04583E0304613C7075C15FA03E497 Certificate serial: 66389E158933E2B6B26ABC56100AFBDF8B27F287 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft Manifest number: 03A2 Signing time: Sat 10 May 2025 18:52:14 +0000 Manifest this update: Sat 10 May 2025 18:47:14 +0000 Manifest next update: Tue 13 May 2025 22:18:14 +0000 Files and hashes: 1: 3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa (hash: iaC5WCoK/QU+xKaB0vnR2mTORiwDsx2/t1ElkG42yQ8=) 2: 323430343a636263303a3a2f33322d3332203d3e20313338383433.roa (hash: CUX/FZUFqFLVmfqcGn4Uxf38ndBFpWWkwqBCc1O0Nwg=) 3: E0D54A271CD04583E0304613C7075C15FA03E497.crl (hash: ESbDCZZ9Z18J6WjrG6BzeM7hRwHTxb7WY7tWA4hXzr8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 22:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:38:9e:15:89:33:e2:b6:b2:6a:bc:56:10:0a:fb:df:8b:27:f2:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0D54A271CD04583E0304613C7075C15FA03E497 Validity Not Before: May 10 18:47:14 2025 GMT Not After : May 13 22:18:14 2025 GMT Subject: CN=D47C5A76EA4B1F34667CA0F3A8BC70DCB8187927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:85:bc:c5:2f:af:0b:75:cb:f7:c0:f9:4e:61: e3:ff:93:64:5f:8b:0d:4c:e5:f4:d4:c8:9a:f1:99: 28:49:6c:38:a6:4f:9f:5e:40:a2:8b:ff:ad:0b:79: 03:74:2e:7f:5b:0d:d7:58:99:77:25:e0:17:52:ca: 7d:1b:9f:14:f1:af:ca:71:ef:77:69:45:28:8a:c0: e1:d3:23:81:53:f9:d0:13:a8:dc:98:e3:c3:f6:67: 23:38:45:fc:21:26:10:17:0b:ca:74:d4:d9:3e:42: 33:f5:65:9f:d8:5d:9f:40:63:ae:90:06:b2:be:98: a0:62:d2:3a:59:97:37:41:14:16:8e:d2:06:5b:37: ba:c9:91:50:5c:95:be:2a:13:38:f4:9f:d4:7c:4b: f5:11:be:9a:ad:b2:c5:f0:67:24:b7:87:49:4e:4e: ef:10:90:80:f3:35:9d:88:c6:47:e2:5a:1c:10:a6: fe:36:5e:e5:26:20:a0:c4:d2:bb:13:01:b3:c2:d3: 2e:62:d2:61:c9:38:8b:a0:de:2b:9d:49:f2:cf:0c: 9a:5b:50:fe:70:fb:6c:5e:01:d2:e2:d3:b2:a4:fb: b2:da:cb:68:e6:cd:5c:2d:e9:4b:8d:31:6a:fb:bb: e7:57:c5:c3:e0:a3:d5:ce:c4:98:15:28:a2:b8:ce: 02:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7C:5A:76:EA:4B:1F:34:66:7C:A0:F3:A8:BC:70:DC:B8:18:79:27 X509v3 Authority Key Identifier: keyid:E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:cb:ce:94:8a:19:08:e3:1f:05:ed:c4:3e:7f:cb:da:66:02: 44:12:f7:6f:f5:82:e8:9d:48:98:2f:1c:5c:11:bd:a7:3c:6d: 24:fb:4d:19:d5:e7:29:bf:db:4e:de:f3:ae:cf:71:71:4f:b9: 12:33:64:69:25:c4:56:79:49:7f:dd:b8:2e:81:17:b3:21:7f: f5:78:66:37:65:75:cc:44:d4:56:f8:b6:60:58:93:d4:c4:00: 6f:15:ea:1e:63:45:c3:07:b9:97:d3:c2:7b:ea:a7:24:d0:e5: 81:46:d3:f6:07:25:63:db:d8:cd:b2:e1:b8:69:e8:02:f4:74: 1d:e1:83:9d:4f:d4:69:dd:67:8c:54:a9:ca:d4:ac:0a:fe:e9: 1d:ce:5e:ff:9a:1f:8a:49:41:b8:15:e8:61:dd:25:bc:ff:6b: c2:27:e5:49:92:53:1f:9d:70:40:ab:28:a4:5f:ef:2d:55:cf: 5f:70:63:25:32:ca:df:af:a2:b6:75:1c:2d:29:aa:20:92:8a: 3f:db:21:ba:01:9d:cd:a1:85:3d:b3:81:41:df:62:a8:c6:13: 46:0d:48:99:dc:90:ad:1d:0d:5c:0f:26:c6:f6:a9:44:15:d5: 91:10:07:19:53:8f:72:03:2f:a1:e1:ee:a4:2a:e2:12:85:15: fc:91:e7:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZjieFYkz4rayarxWEAr734sn8ocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVG QTAzRTQ5NzAeFw0yNTA1MTAxODQ3MTRaFw0yNTA1MTMyMjE4MTRaMDMxMTAvBgNV BAMTKEQ0N0M1QTc2RUE0QjFGMzQ2NjdDQTBGM0E4QkM3MERDQjgxODc5MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRhbzFL68Ldcv3wPlOYeP/k2Rf iw1M5fTUyJrxmShJbDimT59eQKKL/60LeQN0Ln9bDddYmXcl4BdSyn0bnxTxr8px 73dpRSiKwOHTI4FT+dATqNyY48P2ZyM4RfwhJhAXC8p01Nk+QjP1ZZ/YXZ9AY66Q BrK+mKBi0jpZlzdBFBaO0gZbN7rJkVBclb4qEzj0n9R8S/URvpqtssXwZyS3h0lO Tu8QkIDzNZ2IxkfiWhwQpv42XuUmIKDE0rsTAbPC0y5i0mHJOIug3iudSfLPDJpb UP5w+2xeAdLi07Kk+7Lay2jmzVwt6UuNMWr7u+dXxcPgo9XOxJgVKKK4zgJLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1HxadupLHzRmfKDzqLxw3LgYeScwHwYDVR0j BBgwFoAU4NVKJxzQRYPgMEYTxwdcFfoD5JcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzU4NjdkOC0zZDZmLTQ4MTYtYjg0Zi1mZGQ1YzUwMmI2MzQvMC9FMEQ1NEEyNzFD RDA0NTgzRTAzMDQ2MTNDNzA3NUMxNUZBMDNFNDk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVGQTAz RTQ5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmM1ODY3ZDgtM2Q2Zi00ODE2LWI4 NGYtZmRkNWM1MDJiNjM0LzAvRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVD MTVGQTAzRTQ5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD3LzpSKGQjjHwXtxD5/y9pmAkQS92/1guid SJgvHFwRvac8bST7TRnV5ym/207e867PcXFPuRIzZGklxFZ5SX/duC6BF7Mhf/V4 ZjdldcxE1Fb4tmBYk9TEAG8V6h5jRcMHuZfTwnvqpyTQ5YFG0/YHJWPb2M2y4bhp 6AL0dB3hg51P1GndZ4xUqcrUrAr+6R3OXv+aH4pJQbgV6GHdJbz/a8In5UmSUx+d cECrKKRf7y1Vz19wYyUyyt+vorZ1HC0pqiCSij/bIboBnc2hhT2zgUHfYqjGE0YN SJnckK0dDVwPJsb2qUQV1ZEQBxlTj3IDL6Hh7qQq4hKFFfyR59A= -----END CERTIFICATE-----Generated at Sun May 11 08:35:26 2025 by rpki-client