$ rpki-client -vvf repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft File: E025EB5354ADB573B451D02820EA68FD4CAE920A.mft (raw, json) Hash identifier: eoiBYPDACgeS/R4RTSqBBxMd1VAE8E0z7/sIDWvhbmg= Subject key identifier: C3:FE:32:C9:4B:A4:FD:40:2B:23:F4:AB:99:FF:D8:75:4E:05:EE:B7 Authority key identifier: E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A Certificate issuer: /CN=E025EB5354ADB573B451D02820EA68FD4CAE920A Certificate serial: 19B32F011F60C67ADEE7C6BCDF37BC5B37A0D0F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft Manifest number: 012F Signing time: Sun 04 May 2025 22:20:40 +0000 Manifest this update: Sun 04 May 2025 22:15:40 +0000 Manifest next update: Thu 08 May 2025 09:47:40 +0000 Files and hashes: 1: 3130332e3233302e38312e302f32342d3234203d3e20313530393631.roa (hash: BRyZcy7P9c9jO1spuL0mDoDN9aAC7pRi+y0OjtQk3Qc=) 2: E025EB5354ADB573B451D02820EA68FD4CAE920A.crl (hash: jUnvT9M2ML1q5O6XVGiN2dfJHHkh2F48qWMBnvrtqsU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 09:47:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:b3:2f:01:1f:60:c6:7a:de:e7:c6:bc:df:37:bc:5b:37:a0:d0:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E025EB5354ADB573B451D02820EA68FD4CAE920A Validity Not Before: May 4 22:15:40 2025 GMT Not After : May 8 09:47:40 2025 GMT Subject: CN=C3FE32C94BA4FD402B23F4AB99FFD8754E05EEB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dc:a3:9c:a7:f4:8d:7b:b5:ca:9d:96:2e:84: 0a:f0:96:eb:12:69:a7:bf:c5:7a:67:fc:35:ba:13: 5d:da:09:9e:a8:d7:02:33:ec:d7:21:42:f5:34:3b: 29:97:97:e0:64:cf:e5:d0:14:15:06:e9:0a:45:b3: f2:56:84:e3:66:82:b1:17:d7:f6:5d:c1:b2:16:e8: 97:b5:df:e9:c0:e0:98:e3:51:4a:6a:8b:28:79:0d: d1:d2:9e:19:12:3c:41:f6:e8:c0:d1:01:9b:de:be: a1:b5:10:ab:ba:44:c3:d5:29:1e:2a:c8:eb:70:39: 9a:ff:db:23:72:86:13:ff:12:60:97:64:de:27:18: 30:12:3b:65:2f:13:16:70:12:97:e7:ea:d5:0e:07: da:9a:10:2f:9b:90:bd:e9:d0:7e:11:2a:28:6b:4a: 2b:d4:51:98:33:c5:e4:10:b6:b5:41:ed:ad:1d:b6: db:71:0f:36:72:7b:7f:28:95:6f:83:86:1a:af:6f: a2:40:ed:1a:e3:43:17:72:5e:be:1f:6a:ee:91:ba: dd:78:f0:7a:27:ed:a6:bc:4e:74:89:2f:10:4f:3b: 3d:42:36:b2:fd:98:6d:c7:12:ed:f4:31:ab:b7:b0: 39:75:eb:82:6c:73:6c:76:02:0a:b4:fc:10:07:ef: 67:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FE:32:C9:4B:A4:FD:40:2B:23:F4:AB:99:FF:D8:75:4E:05:EE:B7 X509v3 Authority Key Identifier: keyid:E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:34:da:c8:e9:10:42:08:56:fe:cb:24:77:ab:17:bb:2e:49: cf:a1:c8:e4:a1:51:06:09:4a:e0:9e:b4:f0:fe:be:5d:9e:04: 66:af:50:c2:69:b6:3c:42:01:69:44:b8:19:d4:13:cf:d1:97: b1:1e:10:90:70:22:02:60:6f:85:be:6f:a4:51:f4:7d:5d:aa: a0:f6:4d:32:ab:4e:93:3d:4e:9c:73:87:3d:0b:56:02:38:c3: 68:c5:27:1b:8f:e8:a7:73:bf:8a:b9:6c:fe:7e:da:12:19:4f: 9e:93:23:c7:c6:09:f7:57:b3:c8:1e:57:9d:af:db:d3:76:51: e0:08:75:40:3c:62:a5:04:5d:bd:e4:cc:f3:a3:15:85:f3:2e: f3:ff:68:e9:10:1d:15:6c:64:70:e0:70:e4:66:f3:bf:45:d6: cd:2c:82:1e:9c:6f:6b:ff:f4:dd:a0:d4:ae:3e:b3:67:eb:66: 7f:6f:0c:9b:04:70:e6:92:1e:12:18:a2:21:51:fe:c3:57:b8: 53:49:52:cc:6d:e4:93:6f:d3:58:e2:e2:06:12:ab:d9:da:cf: 47:68:7c:28:39:f8:8d:8c:0e:59:20:a2:4f:71:76:0d:a4:87: b6:19:12:a6:4d:8b:33:83:2f:e6:97:5c:a0:6a:a2:ac:94:b6: f5:4b:6d:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGbMvAR9gxnre58a83ze8Wzeg0PEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4RkQ0 Q0FFOTIwQTAeFw0yNTA1MDQyMjE1NDBaFw0yNTA1MDgwOTQ3NDBaMDMxMTAvBgNV BAMTKEMzRkUzMkM5NEJBNEZENDAyQjIzRjRBQjk5RkZEODc1NEUwNUVFQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt3KOcp/SNe7XKnZYuhArwlusS aae/xXpn/DW6E13aCZ6o1wIz7NchQvU0OymXl+Bkz+XQFBUG6QpFs/JWhONmgrEX 1/ZdwbIW6Je13+nA4JjjUUpqiyh5DdHSnhkSPEH26MDRAZvevqG1EKu6RMPVKR4q yOtwOZr/2yNyhhP/EmCXZN4nGDASO2UvExZwEpfn6tUOB9qaEC+bkL3p0H4RKihr SivUUZgzxeQQtrVB7a0dtttxDzZye38olW+Dhhqvb6JA7RrjQxdyXr4fau6Rut14 8Hon7aa8TnSJLxBPOz1CNrL9mG3HEu30Mau3sDl164Jsc2x2Agq0/BAH72ePAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw/4yyUuk/UArI/Srmf/YdU4F7rcwHwYDVR0j BBgwFoAU4CXrU1SttXO0UdAoIOpo/UyukgowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTRhMmE0MS0yODM4LTQzNjktOTk3Yi00Mjk5ZjE3ZWVlOTAvMC9FMDI1RUI1MzU0 QURCNTczQjQ1MUQwMjgyMEVBNjhGRDRDQUU5MjBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4RkQ0Q0FF OTIwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE0YTJhNDEtMjgzOC00MzY5LTk5 N2ItNDI5OWYxN2VlZTkwLzAvRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4 RkQ0Q0FFOTIwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEs02sjpEEIIVv7LJHerF7suSc+hyOShUQYJ SuCetPD+vl2eBGavUMJptjxCAWlEuBnUE8/Rl7EeEJBwIgJgb4W+b6RR9H1dqqD2 TTKrTpM9Tpxzhz0LVgI4w2jFJxuP6Kdzv4q5bP5+2hIZT56TI8fGCfdXs8geV52v 29N2UeAIdUA8YqUEXb3kzPOjFYXzLvP/aOkQHRVsZHDgcORm879F1s0sgh6cb2v/ 9N2g1K4+s2frZn9vDJsEcOaSHhIYoiFR/sNXuFNJUsxt5JNv01ji4gYSq9naz0do fCg5+I2MDlkgok9xdg2kh7YZEqZNizODL+aXXKBqoqyUtvVLbc4= -----END CERTIFICATE-----Generated at Tue May 6 08:38:39 2025 by rpki-client