$ rpki-client -vvf repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft File: 1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft (raw, json) Hash identifier: qwv2//OuapCbf81u76JWpr1OdKRrfmyhC10HK89KLj0= Subject key identifier: 3D:02:6B:CB:94:D7:84:03:8A:30:A9:15:8D:8E:95:60:4F:4A:D5:7F Authority key identifier: 1E:AF:FD:F7:6C:26:1A:0C:98:01:D9:F2:B0:2D:5B:A1:49:67:F3:CD Certificate issuer: /CN=1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD Certificate serial: 6E0209E42E77180B5C15D843EDB3BB126329A144 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft Manifest number: 0164 Signing time: Mon 05 May 2025 04:51:18 +0000 Manifest this update: Mon 05 May 2025 04:46:18 +0000 Manifest next update: Thu 08 May 2025 09:36:18 +0000 Files and hashes: 1: 1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl (hash: kUBrIBJdimzUF9r8EqEL6cDvlcverQ9SAQEI6JsAmtM=) 2: 3130332e3139302e39342e302f32342d3234203d3e20313530353531.roa (hash: ZLit+8UW98ngBL2LPf2rRbdHr7opbJkANqxKGJG/n4c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 09:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:02:09:e4:2e:77:18:0b:5c:15:d8:43:ed:b3:bb:12:63:29:a1:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD Validity Not Before: May 5 04:46:18 2025 GMT Not After : May 8 09:36:18 2025 GMT Subject: CN=3D026BCB94D784038A30A9158D8E95604F4AD57F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1a:dd:86:79:ea:99:9a:3f:97:b9:72:26:4d: 72:0f:1c:3d:3e:eb:3a:b5:a1:62:8c:5d:7d:b6:0a: fb:0b:f7:08:a2:67:5c:5d:fa:cd:3b:ae:3a:77:01: 94:38:c9:fa:6f:4b:7e:1c:a3:ea:f9:ad:d9:50:c9: 4f:87:d7:f4:64:82:43:15:7a:f3:ea:33:cf:d7:3e: ee:34:ad:0f:79:f1:46:9b:3f:4b:51:70:df:15:11: c9:1b:0c:38:7d:a5:46:4c:25:07:36:76:a7:87:a5: 62:eb:8b:c7:35:a4:78:4e:2e:82:fc:8c:42:8d:86: aa:9b:10:54:08:71:e4:71:d7:1d:ac:33:64:dc:b6: af:0e:47:a1:a8:25:8d:70:b9:bc:a7:cb:c7:2c:a4: 90:8b:72:05:11:87:26:7b:7b:c8:c6:e5:1a:c1:b6: b1:bd:3f:53:d4:b3:54:96:d3:6b:62:a4:dd:14:fb: 5d:2a:a4:ea:c7:96:98:67:08:13:4d:6c:1a:0a:e2: 6c:cd:7f:5f:0a:76:71:be:9e:ab:78:89:6f:46:c2: e0:13:c9:1b:ec:4d:1e:b0:05:5f:5a:dc:31:ad:2f: f1:87:a7:62:9d:05:0f:f7:2b:82:71:27:ff:13:d2: 59:a6:e9:5a:e7:ea:b4:fc:53:a0:32:56:f3:3a:8f: 24:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:02:6B:CB:94:D7:84:03:8A:30:A9:15:8D:8E:95:60:4F:4A:D5:7F X509v3 Authority Key Identifier: keyid:1E:AF:FD:F7:6C:26:1A:0C:98:01:D9:F2:B0:2D:5B:A1:49:67:F3:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/1EAFFDF76C261A0C9801D9F2B02D5BA14967F3CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:45:b4:41:01:2c:44:25:07:5a:66:fc:32:13:1f:4a:69:b4: 39:0d:e4:fe:31:96:ff:c8:bc:a4:46:25:87:7a:7f:31:9a:1d: 10:28:06:4c:7b:5f:ec:45:69:f3:00:89:0d:24:d7:c9:86:73: 81:18:62:b6:ef:0e:aa:0a:a8:1c:8f:0d:b6:8f:0b:a8:16:c7: 5b:d2:15:cd:71:9f:c2:ca:da:f9:6f:47:20:20:92:ef:dd:9f: 78:dc:92:8c:f7:3f:69:a4:3a:d1:cb:8b:77:65:e5:ba:dc:98: 94:63:15:0f:2d:29:d7:26:c9:2a:96:f6:1a:3e:bd:a7:22:3a: af:a8:9e:77:c9:82:c7:48:b2:3a:e8:a4:03:f2:ee:4c:17:4e: 0b:14:ff:91:b6:28:af:d0:7a:14:c5:04:7f:b6:92:ff:95:f4: b9:38:c7:86:01:07:8e:63:2f:96:58:d9:4f:db:95:ff:59:5a: 92:0a:37:85:ca:97:9d:e0:7d:af:a3:9d:ee:2d:07:4c:24:dc: eb:c1:75:48:69:37:6a:c5:17:1e:52:0f:9d:2a:84:29:1a:8b: ee:a6:90:48:9f:83:73:9e:f9:58:29:8e:29:d1:75:2d:0a:5f: b7:a4:88:d3:c4:1f:18:ea:f0:e3:19:6f:9b:39:9b:40:ed:63: 0c:01:e1:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbgIJ5C53GAtcFdhD7bO7EmMpoUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVCQTE0 OTY3RjNDRDAeFw0yNTA1MDUwNDQ2MThaFw0yNTA1MDgwOTM2MThaMDMxMTAvBgNV BAMTKDNEMDI2QkNCOTRENzg0MDM4QTMwQTkxNThEOEU5NTYwNEY0QUQ1N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Gt2GeeqZmj+XuXImTXIPHD0+ 6zq1oWKMXX22CvsL9wiiZ1xd+s07rjp3AZQ4yfpvS34co+r5rdlQyU+H1/RkgkMV evPqM8/XPu40rQ958UabP0tRcN8VEckbDDh9pUZMJQc2dqeHpWLri8c1pHhOLoL8 jEKNhqqbEFQIceRx1x2sM2Tctq8OR6GoJY1wubyny8cspJCLcgURhyZ7e8jG5RrB trG9P1PUs1SW02tipN0U+10qpOrHlphnCBNNbBoK4mzNf18KdnG+nqt4iW9GwuAT yRvsTR6wBV9a3DGtL/GHp2KdBQ/3K4JxJ/8T0lmm6Vrn6rT8U6AyVvM6jyQ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPQJry5TXhAOKMKkVjY6VYE9K1X8wHwYDVR0j BBgwFoAUHq/992wmGgyYAdnysC1boUln880wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Nzk4MDkxZS1jMWFlLTQwNDktOTZkMi1jNGNlMzdmZGMzNWIvMC8xRUFGRkRGNzZD MjYxQTBDOTgwMUQ5RjJCMDJENUJBMTQ5NjdGM0NELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVCQTE0OTY3 RjNDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc5ODA5MWUtYzFhZS00MDQ5LTk2 ZDItYzRjZTM3ZmRjMzViLzAvMUVBRkZERjc2QzI2MUEwQzk4MDFEOUYyQjAyRDVC QTE0OTY3RjNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5FtEEBLEQlB1pm/DITH0pptDkN5P4xlv/I vKRGJYd6fzGaHRAoBkx7X+xFafMAiQ0k18mGc4EYYrbvDqoKqByPDbaPC6gWx1vS Fc1xn8LK2vlvRyAgku/dn3jckoz3P2mkOtHLi3dl5brcmJRjFQ8tKdcmySqW9ho+ vaciOq+onnfJgsdIsjropAPy7kwXTgsU/5G2KK/QehTFBH+2kv+V9Lk4x4YBB45j L5ZY2U/blf9ZWpIKN4XKl53gfa+jne4tB0wk3OvBdUhpN2rFFx5SD50qhCkai+6m kEifg3Oe+VgpjinRdS0KX7ekiNPEHxjq8OMZb5s5m0DtYwwB4cU= -----END CERTIFICATE-----Generated at Tue May 6 06:50:38 2025 by rpki-client