$ rpki-client -vvf repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft File: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft (raw, json) Hash identifier: Nay9/pzbg1pDev3FIxb5Vau3Eh5US0EfS2LKpjAdgx0= Subject key identifier: 61:69:E5:F0:A7:49:C2:F4:CF:BD:A3:BE:01:8C:97:2A:16:53:D8:BE Authority key identifier: E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42 Certificate issuer: /CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42 Certificate serial: 25D8B4855622A3EB76F5697C91772DFB908866D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft Manifest number: 04D6 Signing time: Wed 07 May 2025 03:00:05 +0000 Manifest this update: Wed 07 May 2025 02:55:05 +0000 Manifest next update: Sat 10 May 2025 13:59:05 +0000 Files and hashes: 1: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl (hash: ze90m54Opsa0KSrYj+blA/WTNz+/tM0xS+T2pl3khsg=) 2: 35392e3135332e32342e302f32332d3233203d3e203539323835.roa (hash: Xz6SlFll/6iO1NEW4d3L0Zbxfk3HKgTbGTZOaZmaxK0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 13:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:d8:b4:85:56:22:a3:eb:76:f5:69:7c:91:77:2d:fb:90:88:66:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42 Validity Not Before: May 7 02:55:05 2025 GMT Not After : May 10 13:59:05 2025 GMT Subject: CN=6169E5F0A749C2F4CFBDA3BE018C972A1653D8BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:25:27:64:13:5b:1e:85:8e:34:b8:82:2c:02: 7a:e7:c5:a0:de:cc:ed:b1:99:0f:21:52:c4:b5:47: d0:4e:83:d0:1d:70:9d:8a:45:b0:ab:b1:94:42:4f: a1:fb:d0:ff:de:44:0c:16:13:7c:1a:97:fa:0f:69: 14:ae:6c:94:04:2a:ee:58:cc:38:d6:02:19:57:22: 3a:fd:7c:ae:13:e0:d1:15:47:28:8d:be:d0:67:43: b1:c6:d8:22:79:e0:29:77:d7:64:31:da:9c:01:d2: 3a:d3:c4:67:88:53:83:76:22:be:28:11:e1:af:71: ec:78:04:76:79:a1:ab:ee:e5:50:f8:d8:dc:66:85: 2a:7b:25:ac:6a:80:83:32:6a:af:7d:c9:29:53:02: a1:de:f4:81:59:03:3c:32:87:72:6f:cb:e7:8e:c2: e7:da:7f:a6:14:15:2e:3e:91:d4:d0:95:e9:84:98: 5d:04:08:31:51:47:65:3a:94:48:61:43:9d:28:c9: bc:18:f8:51:78:09:fa:70:58:8d:77:61:a1:3b:ee: d8:52:97:9c:84:3f:99:be:6f:74:fe:ac:01:26:1b: 70:24:e0:ac:60:fd:66:53:fa:68:b4:68:11:44:45: 99:b9:29:a0:ba:40:1d:41:da:ac:e3:72:41:f8:74: 0f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:69:E5:F0:A7:49:C2:F4:CF:BD:A3:BE:01:8C:97:2A:16:53:D8:BE X509v3 Authority Key Identifier: keyid:E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:07:0d:80:28:0f:a8:32:2b:6a:8e:dd:41:6f:f3:96:ad:98: 7b:bd:34:c0:65:cd:3e:61:fd:02:e9:10:51:d0:7a:cb:8a:16: 9b:d1:bb:38:a7:6e:45:b6:38:3e:62:96:b4:7f:f8:8b:91:23: 44:18:4a:5e:8f:b7:94:e8:d1:48:dc:d3:23:d7:a6:39:d2:7f: d0:34:7a:e3:0c:59:c2:a4:cb:af:49:43:80:3a:61:b0:45:49: 43:96:bf:8e:db:4d:e7:fc:ae:ee:04:b3:54:46:a7:1b:21:dd: 6e:20:7c:d8:56:40:4c:fd:50:8e:a7:e8:45:de:4c:55:1c:7e: 38:93:9d:8c:30:92:08:9b:8a:a3:8e:3f:c7:af:de:a7:82:f7: b6:56:64:c1:e1:80:9d:e8:10:e7:9b:a4:07:2c:a1:6a:86:2e: cb:6e:cd:b6:a2:2f:54:19:73:50:c8:f6:90:b6:3c:0b:c7:5d: 0c:c3:01:23:47:5e:97:b9:33:e2:84:49:33:d1:f1:99:51:e3: dd:67:36:46:da:33:6d:6c:cd:ec:4d:fb:d2:f7:e3:4a:72:78: b1:80:f9:c9:6b:21:0c:bb:bf:33:aa:c7:92:9b:f5:98:1a:00: fc:36:83:e5:64:fe:ae:b7:72:0a:a5:2f:29:e5:15:7b:bc:45: 59:b4:de:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJdi0hVYio+t29Wl8kXct+5CIZtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRDNTYw MUJERUE0MjAeFw0yNTA1MDcwMjU1MDVaFw0yNTA1MTAxMzU5MDVaMDMxMTAvBgNV BAMTKDYxNjlFNUYwQTc0OUMyRjRDRkJEQTNCRTAxOEM5NzJBMTY1M0Q4QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+JSdkE1sehY40uIIsAnrnxaDe zO2xmQ8hUsS1R9BOg9AdcJ2KRbCrsZRCT6H70P/eRAwWE3wal/oPaRSubJQEKu5Y zDjWAhlXIjr9fK4T4NEVRyiNvtBnQ7HG2CJ54Cl312Qx2pwB0jrTxGeIU4N2Ir4o EeGvcex4BHZ5oavu5VD42NxmhSp7JaxqgIMyaq99ySlTAqHe9IFZAzwyh3Jvy+eO wufaf6YUFS4+kdTQlemEmF0ECDFRR2U6lEhhQ50oybwY+FF4CfpwWI13YaE77thS l5yEP5m+b3T+rAEmG3Ak4Kxg/WZT+mi0aBFERZm5KaC6QB1B2qzjckH4dA/VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYWnl8KdJwvTPvaO+AYyXKhZT2L4wHwYDVR0j BBgwFoAU4PugPWtolc61NyLO/blMVgG96kIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTFmM2IzNy1iZDU0LTQ5MTEtOTA1Yi0zNjU0OTY2ODdjOGQvMC9FMEZCQTAzRDZC Njg5NUNFQjUzNzIyQ0VGREI5NEM1NjAxQkRFQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRDNTYwMUJE RUE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExZjNiMzctYmQ1NC00OTExLTkw NWItMzY1NDk2Njg3YzhkLzAvRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRD NTYwMUJERUE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgHDYAoD6gyK2qO3UFv85atmHu9NMBlzT5h /QLpEFHQesuKFpvRuzinbkW2OD5ilrR/+IuRI0QYSl6Pt5To0Ujc0yPXpjnSf9A0 euMMWcKky69JQ4A6YbBFSUOWv47bTef8ru4Es1RGpxsh3W4gfNhWQEz9UI6n6EXe TFUcfjiTnYwwkgibiqOOP8ev3qeC97ZWZMHhgJ3oEOebpAcsoWqGLstuzbaiL1QZ c1DI9pC2PAvHXQzDASNHXpe5M+KESTPR8ZlR491nNkbaM21szexN+9L340pyeLGA +clrIQy7vzOqx5Kb9ZgaAPw2g+Vk/q63cgqlLynlFXu8RVm03oI= -----END CERTIFICATE-----Generated at Thu May 8 21:51:01 2025 by rpki-client