$ rpki-client -vvf repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft File: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft (raw, json) Hash identifier: tc151DidRYTrbD+WIINWeKyW8ch6mc11cLt1tA7xCJI= Subject key identifier: 61:92:A6:E4:70:04:F7:52:83:A5:2D:A1:4A:46:46:D2:84:96:9F:B7 Authority key identifier: 70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 Certificate issuer: /CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Certificate serial: 039378FDB533EB0614BECC3BA497C8DF7894407F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft Manifest number: EE Signing time: Mon 05 May 2025 07:40:59 +0000 Manifest this update: Mon 05 May 2025 07:35:59 +0000 Manifest next update: Thu 08 May 2025 10:44:59 +0000 Files and hashes: 1: 3131352e3138372e32382e302f32332d3234203d3e20313532303334.roa (hash: xFoVEBixfaV59f5eLoKvzCfI+maBpFsE/LQmHoFGuNo=) 2: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl (hash: KtNZobnucTMJ8GI6VRHXTxBFSnwsrdt3g9+bTSgCjPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 10:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:93:78:fd:b5:33:eb:06:14:be:cc:3b:a4:97:c8:df:78:94:40:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Validity Not Before: May 5 07:35:59 2025 GMT Not After : May 8 10:44:59 2025 GMT Subject: CN=6192A6E47004F75283A52DA14A4646D284969FB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:11:ae:96:90:27:1e:2a:c6:b3:6b:f9:34:a5: bc:a6:35:66:e9:4a:c9:fb:57:f5:2e:c4:27:3c:77: da:e4:71:25:2a:c2:3b:c1:15:92:46:33:d4:d1:55: 8c:73:60:58:18:87:c8:89:af:ac:d3:7a:ff:7e:b6: 69:31:26:2f:e9:73:08:0e:72:ba:9d:b3:11:25:77: 3a:c5:5b:c1:11:01:bb:ae:fc:ae:3f:27:d0:75:1f: a3:c6:d0:7d:91:ef:50:da:06:32:3c:3a:00:68:b5: a4:d8:89:e8:ea:d0:65:77:69:66:f1:3d:e5:7d:47: b3:d5:95:d7:eb:a1:1b:32:20:f8:b3:c4:c9:40:00: 1c:ee:ba:b2:0c:6d:e3:72:4c:7b:36:f2:81:fb:4e: b0:ae:2f:07:6c:7f:27:3a:8f:68:b8:c1:e7:93:6d: a6:d4:50:7b:6f:db:d8:20:d8:53:8e:3f:58:1e:33: 15:cf:5c:6b:08:d3:46:58:e4:d1:8a:cb:88:12:9b: 62:47:f4:3b:7f:09:14:32:4f:9c:84:2e:f1:56:80: 3c:9c:60:f0:18:50:cb:b6:e7:bb:6f:a3:8b:42:e7: 3d:5c:18:2a:f8:55:bc:ee:60:11:ed:51:24:50:54: 0b:90:14:14:a4:75:53:88:19:31:10:e1:7c:dc:3a: 32:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:92:A6:E4:70:04:F7:52:83:A5:2D:A1:4A:46:46:D2:84:96:9F:B7 X509v3 Authority Key Identifier: keyid:70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:ac:83:4c:54:f7:2e:d1:f4:c2:70:08:7f:85:8a:ad:b0:d8: 01:58:5b:72:95:4b:fd:e0:b4:20:87:14:04:c2:a4:d2:b4:91: d8:f9:e2:05:ce:fa:eb:a2:d7:e3:91:36:c1:a0:c9:3a:ff:ea: e5:2a:df:18:97:3f:f0:a9:be:ed:1f:1e:d9:3a:fa:44:be:b8: 9c:70:7b:54:36:38:36:79:91:f7:a8:b6:00:c4:21:51:59:77: 0e:7d:30:86:c8:cf:ac:dd:de:a1:1f:1a:12:79:85:ec:7b:8b: f3:77:aa:74:0b:48:a1:9f:b5:a9:0f:a3:9b:78:3b:e1:75:fa: 10:ed:e8:e3:55:66:c7:30:51:6e:8b:d4:7a:e4:80:c7:d3:d2: df:90:f8:be:0c:db:85:ea:fc:d7:06:b3:a4:5e:48:49:8f:17: 7a:42:82:80:1a:77:cf:3f:ce:85:8d:b1:db:b0:d8:80:62:01: b5:41:b6:53:4e:d1:24:40:1e:41:b9:15:53:66:32:38:f4:ed: da:cb:61:21:7b:32:be:b1:43:0c:1c:ee:8c:62:d3:74:80:80: cb:f2:a3:39:56:45:75:2b:da:f6:50:dd:12:80:47:56:bf:cd: 36:1e:58:16:ab:4f:0b:8b:bf:2b:c3:b0:5f:f6:d6:7d:03:03: 7e:7e:c8:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA5N4/bUz6wYUvsw7pJfI33iUQH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5 QzBDQzUyMDAeFw0yNTA1MDUwNzM1NTlaFw0yNTA1MDgxMDQ0NTlaMDMxMTAvBgNV BAMTKDYxOTJBNkU0NzAwNEY3NTI4M0E1MkRBMTRBNDY0NkQyODQ5NjlGQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoEa6WkCceKsaza/k0pbymNWbp Ssn7V/UuxCc8d9rkcSUqwjvBFZJGM9TRVYxzYFgYh8iJr6zTev9+tmkxJi/pcwgO crqdsxEldzrFW8ERAbuu/K4/J9B1H6PG0H2R71DaBjI8OgBotaTYiejq0GV3aWbx PeV9R7PVldfroRsyIPizxMlAABzuurIMbeNyTHs28oH7TrCuLwdsfyc6j2i4weeT babUUHtv29gg2FOOP1geMxXPXGsI00ZY5NGKy4gSm2JH9Dt/CRQyT5yELvFWgDyc YPAYUMu257tvo4tC5z1cGCr4VbzuYBHtUSRQVAuQFBSkdVOIGTEQ4XzcOjLJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYZKm5HAE91KDpS2hSkZG0oSWn7cwHwYDVR0j BBgwFoAUcI0fmcC9KheD0c5Ca7/oPJwMxSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc0ZWNlNi04ODBjLTRjZWYtYWRkMi03NzcxOWViZWRlYzkvMC83MDhEMUY5OUMw QkQyQTE3ODNEMUNFNDI2QkJGRTgzQzlDMENDNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5QzBD QzUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3NGVjZTYtODgwYy00Y2VmLWFk ZDItNzc3MTllYmVkZWM5LzAvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4 M0M5QzBDQzUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJesg0xU9y7R9MJwCH+Fiq2w2AFYW3KVS/3g tCCHFATCpNK0kdj54gXO+uui1+ORNsGgyTr/6uUq3xiXP/Cpvu0fHtk6+kS+uJxw e1Q2ODZ5kfeotgDEIVFZdw59MIbIz6zd3qEfGhJ5hex7i/N3qnQLSKGftakPo5t4 O+F1+hDt6ONVZscwUW6L1HrkgMfT0t+Q+L4M24Xq/NcGs6ReSEmPF3pCgoAad88/ zoWNsduw2IBiAbVBtlNO0SRAHkG5FVNmMjj07drLYSF7Mr6xQwwc7oxi03SAgMvy ozlWRXUr2vZQ3RKAR1a/zTYeWBarTwuLvyvDsF/21n0DA35+yNA= -----END CERTIFICATE-----Generated at Tue May 6 19:25:01 2025 by rpki-client