$ rpki-client -vvf repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft File: 0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft (raw, json) Hash identifier: PPG4ykgz2TDwleMlOEUv7+lw4slqlucMxjtK73q7yRM= Subject key identifier: 68:8E:48:71:2C:96:FE:E0:6F:D6:6E:D3:44:0C:26:9E:D3:9C:33:29 Authority key identifier: 0E:7B:F2:CE:27:D8:99:D8:E9:85:DB:D9:31:1D:F8:B2:50:C5:85:81 Certificate issuer: /CN=0E7BF2CE27D899D8E985DBD9311DF8B250C58581 Certificate serial: 5DAFBD8E653276E21473EA02CAB031A5260AD823 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft Manifest number: C1 Signing time: Fri 09 May 2025 08:31:17 +0000 Manifest this update: Fri 09 May 2025 08:26:17 +0000 Manifest next update: Mon 12 May 2025 16:14:17 +0000 Files and hashes: 1: 0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl (hash: uneZEEzee31ebKcG39k0x3G3c6r+nVScO1dGQQ/u+iM=) 2: 3130332e3235322e3130302e302f32332d3233203d3e203539313437.roa (hash: 7Av//tJaFwT8z6GFSW7uk6ehjT5V0e5+FTRipECyI0I=) 3: 3130332e3235322e3130302e302f32342d3234203d3e203539313437.roa (hash: YM9KbHhAudmxJLriUiNFwnyRKQIeMezebhltKdO9iVg=) 4: 3130332e3235322e3130312e302f32342d3234203d3e203539313437.roa (hash: MWGkE6CsRSWqMBYLVPUy9HMPTSzmfg1RhCwIFa2snrk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 16:14:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:af:bd:8e:65:32:76:e2:14:73:ea:02:ca:b0:31:a5:26:0a:d8:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E7BF2CE27D899D8E985DBD9311DF8B250C58581 Validity Not Before: May 9 08:26:17 2025 GMT Not After : May 12 16:14:17 2025 GMT Subject: CN=688E48712C96FEE06FD66ED3440C269ED39C3329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e2:40:13:d0:93:d5:7d:97:71:a2:8a:92:48: b5:bb:a2:93:8d:32:bf:28:47:f6:e4:16:da:e7:46: 12:7f:23:5a:29:f6:ff:82:f3:02:96:f5:ed:36:dd: 2c:15:73:c9:fe:57:9e:9d:dd:c5:19:bd:6c:0a:90: c8:c4:32:80:53:5c:83:12:78:70:29:9a:b8:a2:ea: 02:4f:0c:98:49:6b:95:dd:64:b2:ba:7f:6f:85:2e: 10:8b:f8:a3:ca:52:c7:bc:af:7f:14:f5:c8:8a:17: 02:56:60:b1:0e:1a:d7:03:28:a3:fc:51:d1:de:5e: e0:18:48:17:1b:f5:65:3a:ac:1e:4e:bc:33:1c:3c: 51:36:37:86:00:9f:8a:7c:41:54:3f:9c:b9:85:0d: 36:fb:45:1f:bd:0c:2e:45:aa:90:c5:13:9d:76:47: f3:90:6b:de:c3:70:e3:ec:9c:61:30:6a:7b:9a:2f: ad:b3:a4:c7:ab:c6:6a:6c:0d:ff:d2:6b:74:35:92: 8e:5e:32:21:3a:2f:8f:15:85:09:56:36:72:00:da: e1:91:96:7a:49:f1:0c:f0:b7:e1:a3:af:8d:45:55: 96:32:78:df:1a:34:53:57:1f:87:8e:25:84:89:3c: 17:a2:da:67:a9:fb:b9:a8:52:2c:83:18:b7:e8:44: ea:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8E:48:71:2C:96:FE:E0:6F:D6:6E:D3:44:0C:26:9E:D3:9C:33:29 X509v3 Authority Key Identifier: keyid:0E:7B:F2:CE:27:D8:99:D8:E9:85:DB:D9:31:1D:F8:B2:50:C5:85:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:a7:bf:20:3b:e7:02:23:b2:f1:ed:76:84:3a:2d:b4:61:9d: cb:25:e3:f3:22:0d:5d:94:e6:df:a6:4b:4d:9c:04:73:0a:67: 32:1e:8e:99:a9:d1:d2:2e:e7:87:1f:a8:e6:96:3c:ba:e4:8a: c0:7d:56:98:56:42:bc:d5:28:2e:30:08:22:7d:95:de:59:06: ee:f2:6a:f2:fc:ba:b9:70:1b:e0:7b:31:64:4f:d9:7f:0a:3d: 8a:39:a2:ac:75:0b:f4:65:60:85:39:6b:f3:41:9f:36:74:ec: f7:ee:4b:c4:14:a2:13:3c:c1:96:22:be:41:72:09:7d:53:6b: 7a:81:50:7e:08:72:c9:c6:f2:dd:2a:73:99:93:a2:2c:e4:53: fd:b8:06:b9:0d:23:f8:f5:24:e8:09:82:99:9d:5d:1d:68:5b: 7f:23:62:31:fa:f9:4f:81:1c:b6:88:76:12:db:43:59:e4:1e: 15:77:71:2c:59:9a:a5:0a:1a:97:b7:7f:6f:68:4a:a6:7d:f0: 7d:97:de:1c:55:36:ce:85:46:b0:03:52:7d:e8:ba:e4:4e:e8: 3f:48:87:f8:33:87:62:3f:33:2a:f3:80:60:24:cd:05:79:35: 83:e8:7f:b2:bc:15:c5:10:f9:32:b1:88:59:95:a2:fa:32:dc: b8:5b:bb:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXa+9jmUyduIUc+oCyrAxpSYK2CMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU3QkYyQ0UyN0Q4OTlEOEU5ODVEQkQ5MzExREY4QjI1 MEM1ODU4MTAeFw0yNTA1MDkwODI2MTdaFw0yNTA1MTIxNjE0MTdaMDMxMTAvBgNV BAMTKDY4OEU0ODcxMkM5NkZFRTA2RkQ2NkVEMzQ0MEMyNjlFRDM5QzMzMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd4kAT0JPVfZdxooqSSLW7opON Mr8oR/bkFtrnRhJ/I1op9v+C8wKW9e023SwVc8n+V56d3cUZvWwKkMjEMoBTXIMS eHApmrii6gJPDJhJa5XdZLK6f2+FLhCL+KPKUse8r38U9ciKFwJWYLEOGtcDKKP8 UdHeXuAYSBcb9WU6rB5OvDMcPFE2N4YAn4p8QVQ/nLmFDTb7RR+9DC5FqpDFE512 R/OQa97DcOPsnGEwanuaL62zpMerxmpsDf/Sa3Q1ko5eMiE6L48VhQlWNnIA2uGR lnpJ8Qzwt+Gjr41FVZYyeN8aNFNXH4eOJYSJPBei2mep+7moUiyDGLfoROo3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaI5IcSyW/uBv1m7TRAwmntOcMykwHwYDVR0j BBgwFoAUDnvyzifYmdjphdvZMR34slDFhYEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGM1NTAzNC01ZjM2LTQxNzMtYjY0Yy1hOTc1ZTMyMzEzOGEvMC8wRTdCRjJDRTI3 RDg5OUQ4RTk4NURCRDkzMTFERjhCMjUwQzU4NTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU3QkYyQ0UyN0Q4OTlEOEU5ODVEQkQ5MzExREY4QjI1MEM1 ODU4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBjNTUwMzQtNWYzNi00MTczLWI2 NGMtYTk3NWUzMjMxMzhhLzAvMEU3QkYyQ0UyN0Q4OTlEOEU5ODVEQkQ5MzExREY4 QjI1MEM1ODU4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABynvyA75wIjsvHtdoQ6LbRhncsl4/MiDV2U 5t+mS02cBHMKZzIejpmp0dIu54cfqOaWPLrkisB9VphWQrzVKC4wCCJ9ld5ZBu7y avL8urlwG+B7MWRP2X8KPYo5oqx1C/RlYIU5a/NBnzZ07PfuS8QUohM8wZYivkFy CX1Ta3qBUH4IcsnG8t0qc5mToizkU/24BrkNI/j1JOgJgpmdXR1oW38jYjH6+U+B HLaIdhLbQ1nkHhV3cSxZmqUKGpe3f29oSqZ98H2X3hxVNs6FRrADUn3ouuRO6D9I h/gzh2I/MyrzgGAkzQV5NYPof7K8FcUQ+TKxiFmVovoy3LhbuyI= -----END CERTIFICATE-----Generated at Sun May 11 01:20:36 2025 by rpki-client