$ rpki-client -vvf repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft File: E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft (raw, json) Hash identifier: fwV1a57TGGoQDlTXaVmIVOHTPOgiEtb9RcQ40QCGKZA= Subject key identifier: 61:4C:21:B4:E2:9D:1D:59:82:BB:BB:04:2F:A0:51:A0:1C:4A:C5:82 Authority key identifier: E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 Certificate issuer: /CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Certificate serial: 66BACE7D99FE8B370C36506C5F6D15E4019B0538 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft Manifest number: 04D9 Signing time: Sun 04 May 2025 22:42:15 +0000 Manifest this update: Sun 04 May 2025 22:37:15 +0000 Manifest next update: Thu 08 May 2025 05:32:15 +0000 Files and hashes: 1: 323430323a366163303a3a2f33332d3333203d3e20313337333036.roa (hash: JzyhQGTzUeLnEUHXH7NE0CSKgoPX1wzlUT6xD8+rNxs=) 2: E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl (hash: WDGHhEBP+onDaim9tHUyK2NIQznn1aMa1VMp9jsdXP8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 05:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ba:ce:7d:99:fe:8b:37:0c:36:50:6c:5f:6d:15:e4:01:9b:05:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Validity Not Before: May 4 22:37:15 2025 GMT Not After : May 8 05:32:15 2025 GMT Subject: CN=614C21B4E29D1D5982BBBB042FA051A01C4AC582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:65:be:7b:c2:20:5c:66:8d:42:78:81:27:d2: b2:15:03:a7:9b:f8:13:81:92:ae:33:39:20:37:b9: 37:8c:15:a4:5c:43:67:2b:0b:22:d6:72:3b:99:98: 95:55:3d:3c:15:db:b3:ec:a8:9f:a5:68:17:8b:39: 95:9c:be:f3:55:3c:94:d3:78:72:ec:66:71:a2:1b: 25:af:f9:91:47:c6:e4:45:8c:97:f2:0f:94:55:06: 0e:0a:27:dc:7b:f1:21:a4:99:e0:31:8d:94:f1:71: 5b:e0:fe:80:0a:8f:91:c2:e3:3f:c3:ad:7b:a7:29: 18:1a:0b:eb:b4:ab:03:ee:7b:95:d3:18:26:53:88: d7:94:a1:3e:74:db:79:28:e4:52:d1:b1:6a:b1:06: 59:8a:1e:ca:38:13:9d:01:62:51:eb:5e:3e:2a:1f: 6c:85:c3:d8:52:e0:e4:a8:7e:40:48:96:c3:a9:20: 80:9e:5b:83:c6:67:8a:3b:ac:8a:e8:10:94:13:59: e5:4d:da:b7:82:85:fc:91:a6:89:ec:65:b8:ea:54: 2e:a3:52:71:10:c8:92:eb:f4:6b:4c:e0:19:b8:9c: b0:75:e7:98:72:ae:3e:20:2a:9a:06:9a:f8:54:f1: 61:47:80:d9:77:03:71:81:0e:51:ed:07:85:b6:d4: f3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4C:21:B4:E2:9D:1D:59:82:BB:BB:04:2F:A0:51:A0:1C:4A:C5:82 X509v3 Authority Key Identifier: keyid:E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:29:ec:19:32:ce:3b:db:c9:41:69:6b:b4:c5:b5:87:e0:fc: 8d:21:17:29:e7:0b:74:06:da:68:5f:55:0b:f4:20:9b:3f:bb: 06:3e:a5:e4:35:77:60:9e:d1:01:fe:65:4f:76:5d:85:f5:50: d6:30:fc:a8:30:5e:89:58:7d:dd:a0:6f:0c:79:1a:f6:e5:82: 5c:6a:84:5b:b1:4e:d2:48:2f:76:4c:9e:f3:49:6f:29:6b:9d: f7:a1:1e:16:f4:88:65:a3:27:51:27:48:c8:15:3d:d5:f8:4f: 0d:5a:f5:ea:9b:aa:39:69:32:37:50:3b:a8:4c:2e:c5:20:be: fe:32:f7:be:d4:df:8e:14:22:71:d0:4a:da:59:0f:5a:49:b3: 95:a7:fd:af:30:ca:3d:c4:92:f6:83:d9:9a:55:33:91:83:e5: c0:4c:35:20:3a:ab:de:36:d0:33:b7:65:8b:0b:7e:8d:c8:07: 37:6f:bd:11:7a:00:6b:8d:b5:e2:86:f9:be:05:1d:f8:9f:65: 22:68:4b:76:29:b4:c6:78:1b:e5:be:53:7f:9e:2e:f3:9c:1b: e9:76:83:7b:59:84:ca:ce:ae:aa:5e:55:39:e9:c4:6a:e5:16: 14:f3:00:7e:ad:34:c1:fd:10:6e:ec:2e:c7:91:98:0d:41:c5: ce:0b:31:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZrrOfZn+izcMNlBsX20V5AGbBTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdE QzVFMTAxNDAeFw0yNTA1MDQyMjM3MTVaFw0yNTA1MDgwNTMyMTVaMDMxMTAvBgNV BAMTKDYxNEMyMUI0RTI5RDFENTk4MkJCQkIwNDJGQTA1MUEwMUM0QUM1ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPZb57wiBcZo1CeIEn0rIVA6eb +BOBkq4zOSA3uTeMFaRcQ2crCyLWcjuZmJVVPTwV27PsqJ+laBeLOZWcvvNVPJTT eHLsZnGiGyWv+ZFHxuRFjJfyD5RVBg4KJ9x78SGkmeAxjZTxcVvg/oAKj5HC4z/D rXunKRgaC+u0qwPue5XTGCZTiNeUoT5023ko5FLRsWqxBlmKHso4E50BYlHrXj4q H2yFw9hS4OSofkBIlsOpIICeW4PGZ4o7rIroEJQTWeVN2reChfyRponsZbjqVC6j UnEQyJLr9GtM4Bm4nLB155hyrj4gKpoGmvhU8WFHgNl3A3GBDlHtB4W21POTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYUwhtOKdHVmCu7sEL6BRoBxKxYIwHwYDVR0j BBgwFoAU5yYirg9ptM2ryc0iOz4Gx9xeEBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1YmY3OS1lODRhLTQwZTAtOGZkNC1mMTY5YzE4NmJlOGYvMC9FNzI2MjJBRTBG NjlCNENEQUJDOUNEMjIzQjNFMDZDN0RDNUUxMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdEQzVF MTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQzNWJmNzktZTg0YS00MGUwLThm ZDQtZjE2OWMxODZiZThmLzAvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2 QzdEQzVFMTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQp7BkyzjvbyUFpa7TFtYfg/I0hFynnC3QG 2mhfVQv0IJs/uwY+peQ1d2Ce0QH+ZU92XYX1UNYw/KgwXolYfd2gbwx5Gvblglxq hFuxTtJIL3ZMnvNJbylrnfehHhb0iGWjJ1EnSMgVPdX4Tw1a9eqbqjlpMjdQO6hM LsUgvv4y977U344UInHQStpZD1pJs5Wn/a8wyj3EkvaD2ZpVM5GD5cBMNSA6q942 0DO3ZYsLfo3IBzdvvRF6AGuNteKG+b4FHfifZSJoS3YptMZ4G+W+U3+eLvOcG+l2 g3tZhMrOrqpeVTnpxGrlFhTzAH6tNMH9EG7sLseRmA1Bxc4LMcA= -----END CERTIFICATE-----Generated at Tue May 6 14:12:57 2025 by rpki-client