$ rpki-client -vvf repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft File: E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft (raw, json) Hash identifier: dQFPrhmRyFqku0NxSFhsOCqSDxj79f6EWCf9yxKT5mU= Subject key identifier: 0E:12:3C:AB:40:1F:D1:1C:DA:3F:8A:76:F2:AD:A8:68:F2:E0:A2:4B Authority key identifier: E9:8B:5C:8D:E6:CD:8A:83:09:2F:B5:55:78:38:8B:B5:5D:80:21:A5 Certificate issuer: /CN=E98B5C8DE6CD8A83092FB55578388BB55D8021A5 Certificate serial: 238C1EF1AA76B592350817E97DCB4111A39A9DCA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft Manifest number: 0146 Signing time: Sat 10 May 2025 18:51:19 +0000 Manifest this update: Sat 10 May 2025 18:46:19 +0000 Manifest next update: Tue 13 May 2025 22:57:19 +0000 Files and hashes: 1: E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl (hash: QJpm7i/eOeO+MOYzA9VzeciNNQxsKLuOn5VQLynbFHU=) 2: 3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa (hash: RVW6NTEFxtaBVN2tG8HTXDlbU79ZyUomhDvpDJYoqdQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 22:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:8c:1e:f1:aa:76:b5:92:35:08:17:e9:7d:cb:41:11:a3:9a:9d:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E98B5C8DE6CD8A83092FB55578388BB55D8021A5 Validity Not Before: May 10 18:46:19 2025 GMT Not After : May 13 22:57:19 2025 GMT Subject: CN=0E123CAB401FD11CDA3F8A76F2ADA868F2E0A24B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cf:76:d8:73:56:1f:f3:92:88:41:3f:9b:ed: 8d:99:59:0b:c3:dd:d4:4c:77:0b:72:11:f3:57:c3: b8:49:55:e0:28:b1:95:62:e6:ed:67:f2:08:5e:43: b4:11:86:ae:38:27:f5:87:a8:da:29:be:0d:7c:52: 27:03:09:10:e6:88:92:21:cd:43:c9:61:dc:68:72: 16:53:37:bc:e2:53:38:2e:ec:34:07:b3:92:8e:36: cf:89:b1:d3:51:c1:a1:9e:5d:78:10:04:23:32:42: 6e:15:d6:8e:c7:63:0d:98:0c:10:8c:ea:4e:01:d3: 66:c4:9e:90:9d:99:a1:ab:4c:d8:68:37:7e:3a:10: 92:f9:ba:d3:a8:b4:24:1a:4b:32:89:c3:6a:a6:d3: 38:25:2e:fb:8b:6a:f9:af:c2:90:a2:15:29:f8:e9: 69:d5:3b:d2:ef:d8:53:c2:ac:61:f5:cf:4e:d6:82: 82:0b:f7:29:47:66:a9:4a:4f:ea:15:50:06:86:c9: e5:8d:6a:4a:61:85:aa:22:58:a2:ff:9f:91:dd:87: bc:eb:14:aa:50:15:e6:80:4d:38:a3:e0:84:06:c3: 88:88:93:7c:fe:bb:9e:b4:5c:79:90:23:cc:5a:31: 6b:04:ba:69:42:23:32:cc:67:32:fe:14:02:0b:73: 75:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:12:3C:AB:40:1F:D1:1C:DA:3F:8A:76:F2:AD:A8:68:F2:E0:A2:4B X509v3 Authority Key Identifier: keyid:E9:8B:5C:8D:E6:CD:8A:83:09:2F:B5:55:78:38:8B:B5:5D:80:21:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:aa:00:3f:1e:53:a4:89:0b:65:31:95:b2:01:f0:47:9f:4e: 19:28:b7:96:d6:1a:c7:ee:5e:c4:17:7e:a7:69:9b:f7:4d:1e: f2:cf:8c:b1:07:60:8b:6c:18:45:6a:95:6f:42:cf:99:8f:8a: aa:27:75:af:ea:bb:60:f2:ed:3e:84:db:65:cc:7b:84:91:f5: 33:d8:1a:0d:33:7e:cb:50:a3:8f:08:d8:b5:4d:4c:d9:6d:12: 2f:c0:b0:ad:8a:f2:d8:d0:49:5f:55:23:da:5b:ef:59:ec:42: 61:0f:73:34:98:9c:4e:d9:92:ee:4c:03:50:bb:7c:17:e8:17: 1c:da:c8:27:02:35:36:b4:c4:8b:65:14:53:7e:9c:98:54:37: 6a:56:41:ff:e9:e1:8b:d0:28:49:3e:fb:64:05:e1:98:9f:9f: 7f:7e:c5:f7:31:f4:4e:6c:89:f4:b7:5d:a3:23:61:cf:6b:87: 58:cd:8b:f4:15:e2:75:a9:03:34:a7:75:81:58:6b:fe:97:09: 41:68:c2:7d:0d:73:49:a5:a6:80:74:a1:63:c6:9d:ec:34:5b: 3c:4e:0b:c1:74:ea:ec:92:86:43:82:af:69:58:51:09:6a:55: 96:ee:b2:ab:2a:24:7b:55:89:91:f7:1b:60:ed:4a:fb:c3:aa: 99:4f:6a:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI4we8ap2tZI1CBfpfctBEaOancowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhCQjU1 RDgwMjFBNTAeFw0yNTA1MTAxODQ2MTlaFw0yNTA1MTMyMjU3MTlaMDMxMTAvBgNV BAMTKDBFMTIzQ0FCNDAxRkQxMUNEQTNGOEE3NkYyQURBODY4RjJFMEEyNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDz3bYc1Yf85KIQT+b7Y2ZWQvD 3dRMdwtyEfNXw7hJVeAosZVi5u1n8gheQ7QRhq44J/WHqNopvg18UicDCRDmiJIh zUPJYdxochZTN7ziUzgu7DQHs5KONs+JsdNRwaGeXXgQBCMyQm4V1o7HYw2YDBCM 6k4B02bEnpCdmaGrTNhoN346EJL5utOotCQaSzKJw2qm0zglLvuLavmvwpCiFSn4 6WnVO9Lv2FPCrGH1z07WgoIL9ylHZqlKT+oVUAaGyeWNakphhaoiWKL/n5Hdh7zr FKpQFeaATTij4IQGw4iIk3z+u560XHmQI8xaMWsEumlCIzLMZzL+FAILc3XbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDhI8q0Af0RzaP4p28q2oaPLgokswHwYDVR0j BBgwFoAU6YtcjebNioMJL7VVeDiLtV2AIaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmRhZmU1Ni04NDM0LTRiYmEtYjE3Ni0zNWU4NzJjMWFjMTgvMC9FOThCNUM4REU2 Q0Q4QTgzMDkyRkI1NTU3ODM4OEJCNTVEODAyMUE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhCQjU1RDgw MjFBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZkYWZlNTYtODQzNC00YmJhLWIx NzYtMzVlODcyYzFhYzE4LzAvRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhC QjU1RDgwMjFBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWqAD8eU6SJC2UxlbIB8EefThkot5bWGsfu XsQXfqdpm/dNHvLPjLEHYItsGEVqlW9Cz5mPiqonda/qu2Dy7T6E22XMe4SR9TPY Gg0zfstQo48I2LVNTNltEi/AsK2K8tjQSV9VI9pb71nsQmEPczSYnE7Zku5MA1C7 fBfoFxzayCcCNTa0xItlFFN+nJhUN2pWQf/p4YvQKEk++2QF4Zifn39+xfcx9E5s ifS3XaMjYc9rh1jNi/QV4nWpAzSndYFYa/6XCUFown0Nc0mlpoB0oWPGnew0WzxO C8F06uyShkOCr2lYUQlqVZbusqsqJHtViZH3G2DtSvvDqplPau8= -----END CERTIFICATE-----Generated at Mon May 12 05:42:28 2025 by rpki-client