$ rpki-client -vvf repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft File: E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft (raw, json) Hash identifier: NH0GaqT47SH8Kand9bw4Q0MFXbX9A/l77eWvE6W9zCk= Subject key identifier: 73:53:FF:3A:6D:C5:80:E5:36:77:8A:5B:01:30:9F:79:07:A5:53:62 Authority key identifier: E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C Certificate issuer: /CN=E530A7B43C0C79FD8707007080E2F7AEA478FD1C Certificate serial: 1DE155C5A01116BEB543C449EF38CEDD8BC15D18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft Manifest number: 04CE Signing time: Sun 04 May 2025 13:10:00 +0000 Manifest this update: Sun 04 May 2025 13:05:00 +0000 Manifest next update: Wed 07 May 2025 14:37:00 +0000 Files and hashes: 1: E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl (hash: fDUgEcvfHBHZY8ctOFUWyyy9Zqx1c18X0DuWLB3Lkqw=) 2: 3230322e3136322e33322e302f32302d3234203d3e203137393936.roa (hash: U+YDWcJFoL5SQBm/z5X6b/pSTYjpY5iGFuHcFPVb3SQ=) 3: 323430323a613630303a3a2f33322d3332203d3e203137393936.roa (hash: /TZEssOQL6bexQSKNfpVz7ktDMF+gupTdwtToy7re70=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 14:37:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:e1:55:c5:a0:11:16:be:b5:43:c4:49:ef:38:ce:dd:8b:c1:5d:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E530A7B43C0C79FD8707007080E2F7AEA478FD1C Validity Not Before: May 4 13:05:00 2025 GMT Not After : May 7 14:37:00 2025 GMT Subject: CN=7353FF3A6DC580E536778A5B01309F7907A55362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:97:44:31:a2:d6:ac:d4:b7:7b:11:8e:b8:27: 4a:df:14:9b:e4:33:07:64:41:97:da:14:c8:2b:ff: d3:d8:37:e6:30:af:fb:b7:10:c3:25:85:b4:45:63: 80:fd:38:d3:ef:a7:97:d1:eb:1f:d3:ad:cf:4c:a7: bc:a0:d3:54:f4:0a:e6:e9:40:76:0e:74:cc:c8:7a: 72:7a:2d:37:84:e6:27:39:42:a9:99:ed:83:c6:16: 70:45:34:95:12:82:b5:ed:57:a4:8d:12:40:04:f4: fb:d8:a4:d9:c1:40:6c:55:2f:0c:23:03:8c:7f:67: fb:5f:81:a7:09:0b:4e:ec:92:d2:af:df:2c:25:f9: b7:a7:dc:16:f2:b5:a5:c3:66:c6:f2:5a:7d:bb:37: 93:ab:fc:cd:d8:8a:8f:28:f9:1c:ed:bf:f2:41:ad: ac:ef:92:d3:3f:5f:c2:0f:e6:fa:ec:b5:02:26:6d: 5a:b6:22:ab:d8:6d:0b:32:6d:cc:e2:75:29:34:05: f0:43:72:94:43:30:4c:a1:ae:a5:3a:14:b8:fc:ea: 99:c2:db:d5:51:2a:4a:9c:a7:86:76:b3:fd:bf:57: dd:8e:64:44:f8:2c:8d:ce:6d:61:06:b4:0a:bd:08: 7f:14:c4:28:e3:f6:ab:86:11:f2:7c:c7:18:1d:f3: ad:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:53:FF:3A:6D:C5:80:E5:36:77:8A:5B:01:30:9F:79:07:A5:53:62 X509v3 Authority Key Identifier: keyid:E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:a0:e3:b9:02:e5:5c:ef:2a:1b:6e:72:60:86:33:04:ba:91: 30:7f:cd:5e:11:83:8d:17:2a:7e:6d:9f:c8:01:77:0f:01:6a: 44:7a:45:23:ae:72:d4:07:c1:6d:5c:bf:96:21:60:9c:f2:7d: b2:f6:00:b5:ad:22:3f:d3:d5:89:b5:07:85:54:7b:3a:8a:c2: 4e:b9:e5:60:fa:c6:f5:ac:fb:bf:19:51:f6:b7:d7:9d:d8:c6: 7f:5e:39:00:b8:ef:46:5c:ea:f0:4d:11:ca:dc:9b:18:5a:29: b2:54:8a:1b:be:97:f9:e3:52:ab:af:06:0d:fe:d9:77:9f:37: 99:02:41:da:b6:b9:95:63:e7:68:5b:31:fc:e3:6d:ed:02:10: c8:66:04:08:aa:8f:51:ef:45:9e:db:bf:dd:6a:d9:2f:bb:90: 16:fe:e1:99:7c:fe:8e:c3:e2:a0:8e:af:f9:cc:fa:3c:d4:88: 01:f2:29:2c:6c:ff:64:3a:f7:89:7a:7a:07:cc:cc:8b:0a:32: 18:7f:9a:2b:84:a0:b9:e7:e5:5d:ff:22:ef:0e:31:8d:f0:2a: 66:21:45:73:34:28:78:f5:1e:74:86:d0:00:95:f8:b9:c4:53: 11:10:4d:f6:2d:1b:0d:8b:1c:53:db:e1:56:cc:ec:b7:35:ef: 7c:a9:3e:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHeFVxaARFr61Q8RJ7zjO3YvBXRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3QUVB NDc4RkQxQzAeFw0yNTA1MDQxMzA1MDBaFw0yNTA1MDcxNDM3MDBaMDMxMTAvBgNV BAMTKDczNTNGRjNBNkRDNTgwRTUzNjc3OEE1QjAxMzA5Rjc5MDdBNTUzNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0l0Qxotas1Ld7EY64J0rfFJvk MwdkQZfaFMgr/9PYN+Ywr/u3EMMlhbRFY4D9ONPvp5fR6x/Trc9Mp7yg01T0Cubp QHYOdMzIenJ6LTeE5ic5QqmZ7YPGFnBFNJUSgrXtV6SNEkAE9PvYpNnBQGxVLwwj A4x/Z/tfgacJC07sktKv3ywl+ben3BbytaXDZsbyWn27N5Or/M3Yio8o+Rztv/JB razvktM/X8IP5vrstQImbVq2IqvYbQsybczidSk0BfBDcpRDMEyhrqU6FLj86pnC 29VRKkqcp4Z2s/2/V92OZET4LI3ObWEGtAq9CH8UxCjj9quGEfJ8xxgd862FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc1P/Om3FgOU2d4pbATCfeQelU2IwHwYDVR0j BBgwFoAU5TCntDwMef2HBwBwgOL3rqR4/RwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2QyZjJmOC0zNTEyLTQzZTUtYmUxNy1iMTFiNThmOTYwODMvMC9FNTMwQTdCNDND MEM3OUZEODcwNzAwNzA4MEUyRjdBRUE0NzhGRDFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3QUVBNDc4 RkQxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNkMmYyZjgtMzUxMi00M2U1LWJl MTctYjExYjU4Zjk2MDgzLzAvRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3 QUVBNDc4RkQxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADSg47kC5VzvKhtucmCGMwS6kTB/zV4Rg40X Kn5tn8gBdw8BakR6RSOuctQHwW1cv5YhYJzyfbL2ALWtIj/T1Ym1B4VUezqKwk65 5WD6xvWs+78ZUfa3153Yxn9eOQC470Zc6vBNEcrcmxhaKbJUihu+l/njUquvBg3+ 2XefN5kCQdq2uZVj52hbMfzjbe0CEMhmBAiqj1HvRZ7bv91q2S+7kBb+4Zl8/o7D 4qCOr/nM+jzUiAHyKSxs/2Q694l6egfMzIsKMhh/miuEoLnn5V3/Iu8OMY3wKmYh RXM0KHj1HnSG0ACV+LnEUxEQTfYtGw2LHFPb4VbM7Lc173ypPig= -----END CERTIFICATE-----Generated at Mon May 5 19:13:39 2025 by rpki-client