$ rpki-client -vvf repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft File: E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft (raw, json) Hash identifier: YC+qPsHiktl9hZfVfmJMhVRc/mvjJml9D9rGExPuCuM= Subject key identifier: A1:AA:0C:E1:0D:03:5E:DE:2E:A6:DB:75:EC:11:8D:38:9C:D1:FD:6A Authority key identifier: E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77 Certificate issuer: /CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977 Certificate serial: 674BF47142858BA28821D831C5163B58AB83D3E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft Manifest number: 04CA Signing time: Sat 03 May 2025 15:11:09 +0000 Manifest this update: Sat 03 May 2025 15:06:09 +0000 Manifest next update: Tue 06 May 2025 21:00:09 +0000 Files and hashes: 1: E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl (hash: RwoyAD8UWfCvELbb2IECr9bpHLY3p5rAiWvOHOHdgaQ=) 2: 3130332e3135332e332e302f32342d3234203d3e20313430333839.roa (hash: tOlwWAsQQh+xURJu8keK+zuzlpfYYojs9gT81FNdqI8=) 3: 3130332e3135332e322e302f32332d3233203d3e20313430333839.roa (hash: DIk57DXP9EbnAxhNqfJ9/qfaXKxZUsUMRYf4DR8Uo5I=) 4: 3130332e3135332e322e302f32342d3234203d3e20313430333839.roa (hash: 68P9YRj7qWLqaHnz/V408axn37EsS6cGwdElOJnZDvc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 21:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:4b:f4:71:42:85:8b:a2:88:21:d8:31:c5:16:3b:58:ab:83:d3:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977 Validity Not Before: May 3 15:06:09 2025 GMT Not After : May 6 21:00:09 2025 GMT Subject: CN=A1AA0CE10D035EDE2EA6DB75EC118D389CD1FD6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:80:83:25:ff:4d:d3:fe:b9:ed:6a:c0:50:f0: 13:df:40:96:20:4a:8d:eb:b0:89:6b:89:56:6e:d1: 59:8a:ff:b3:20:26:bf:e9:e6:12:d0:a3:d1:e1:ef: f4:2e:38:1e:46:df:e0:81:71:5b:9f:2d:05:c1:6e: 7c:83:fa:1d:76:09:57:a5:fa:47:a0:94:4c:d2:e9: e2:6d:14:63:e8:e8:f4:20:9b:c3:bf:5d:39:c6:9c: cc:ba:a0:71:2e:69:ab:62:0f:a7:28:ed:f3:24:41: f3:d6:89:59:1f:cd:c5:21:54:52:65:11:c3:38:92: 48:f8:4c:83:0d:46:12:e1:e6:6c:6e:51:7b:cd:29: f4:9a:ed:39:8e:6e:33:7c:75:21:07:5c:67:9c:82: e2:51:2f:91:6f:10:3c:3d:6e:f2:05:20:5a:70:b2: 11:fd:83:df:a6:81:55:8f:cb:b3:87:a6:b4:0e:21: d7:7c:84:10:82:db:07:74:14:01:94:48:df:73:71: 63:32:6e:de:8b:a6:1a:a9:61:76:d2:fb:42:bb:b3: 88:f9:6b:1f:cc:4a:ce:ab:08:03:9c:b3:8d:ab:25: 7d:f1:02:f6:6d:4b:fc:cc:0e:f3:f9:09:f4:2c:ef: 84:ec:9e:aa:3e:e2:f6:d3:7b:88:ea:e3:2c:20:6f: 34:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AA:0C:E1:0D:03:5E:DE:2E:A6:DB:75:EC:11:8D:38:9C:D1:FD:6A X509v3 Authority Key Identifier: keyid:E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:2a:06:be:f1:49:35:e2:d9:46:3b:bc:4b:af:0d:b8:99:12: ac:84:a3:97:59:20:cc:54:c1:91:f7:01:e3:f2:b4:28:70:fd: 4c:5e:e7:c3:57:b6:16:6b:07:3e:76:6d:cf:97:d2:58:59:52: 3c:9a:f7:f3:f6:06:02:45:de:0b:9a:a1:4e:2d:d9:26:a4:c0: c5:bd:86:89:37:05:a7:c5:8c:98:8d:72:5c:c9:6d:51:b6:9a: 13:14:46:2d:8f:32:76:08:fb:c0:fb:88:bc:72:0e:f1:2d:91: 99:15:0a:95:1b:49:c9:9f:08:09:4e:da:8d:b4:49:43:73:f6: 59:a9:df:91:ad:0b:c9:ea:7a:e0:fc:e9:6f:8b:15:dd:85:96: 7c:e1:34:f9:72:c9:c4:4a:2d:7d:0c:99:15:78:1a:3f:27:59: 27:93:6b:00:61:8e:de:0c:67:6f:ae:17:c9:be:38:ca:2c:88: 21:31:26:17:19:8c:f2:f2:31:ec:5f:23:7a:d0:85:2a:eb:ad: 33:21:21:d9:7a:62:3d:21:05:e6:05:b6:14:5a:bd:ce:05:be: 70:5e:fe:31:5d:34:ab:2a:62:93:13:64:1f:bf:94:4c:39:69: 29:92:5e:2e:4f:5e:7b:b9:6a:dd:9c:74:24:6c:cd:56:5a:a6: 70:71:c5:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ0v0cUKFi6KIIdgxxRY7WKuD0+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIxQ0ZE ODBDRjk3NzAeFw0yNTA1MDMxNTA2MDlaFw0yNTA1MDYyMTAwMDlaMDMxMTAvBgNV BAMTKEExQUEwQ0UxMEQwMzVFREUyRUE2REI3NUVDMTE4RDM4OUNEMUZENkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDgIMl/03T/rntasBQ8BPfQJYg So3rsIlriVZu0VmK/7MgJr/p5hLQo9Hh7/QuOB5G3+CBcVufLQXBbnyD+h12CVel +keglEzS6eJtFGPo6PQgm8O/XTnGnMy6oHEuaatiD6co7fMkQfPWiVkfzcUhVFJl EcM4kkj4TIMNRhLh5mxuUXvNKfSa7TmObjN8dSEHXGecguJRL5FvEDw9bvIFIFpw shH9g9+mgVWPy7OHprQOIdd8hBCC2wd0FAGUSN9zcWMybt6LphqpYXbS+0K7s4j5 ax/MSs6rCAOcs42rJX3xAvZtS/zMDvP5CfQs74Tsnqo+4vbTe4jq4ywgbzRDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoaoM4Q0DXt4uptt17BGNOJzR/WowHwYDVR0j BBgwFoAU4ia0+oQtzmw4ZEnxT4whz9gM+XcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmMxYWI3MS05MWQwLTRmMGItYmIyOS1jYmI3ZDM1ZTc0YmEvMC9FMjI2QjRGQTg0 MkRDRTZDMzg2NDQ5RjE0RjhDMjFDRkQ4MENGOTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIxQ0ZEODBD Rjk3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWJjMWFiNzEtOTFkMC00ZjBiLWJi MjktY2JiN2QzNWU3NGJhLzAvRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIx Q0ZEODBDRjk3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYqBr7xSTXi2UY7vEuvDbiZEqyEo5dZIMxU wZH3AePytChw/Uxe58NXthZrBz52bc+X0lhZUjya9/P2BgJF3guaoU4t2SakwMW9 hok3BafFjJiNclzJbVG2mhMURi2PMnYI+8D7iLxyDvEtkZkVCpUbScmfCAlO2o20 SUNz9lmp35GtC8nqeuD86W+LFd2FlnzhNPlyycRKLX0MmRV4Gj8nWSeTawBhjt4M Z2+uF8m+OMosiCExJhcZjPLyMexfI3rQhSrrrTMhIdl6Yj0hBeYFthRavc4FvnBe /jFdNKsqYpMTZB+/lEw5aSmSXi5PXnu5at2cdCRszVZapnBxxTU= -----END CERTIFICATE-----Generated at Tue May 6 14:33:56 2025 by rpki-client