$ rpki-client -vvf repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft File: EC973BE13EF324E7D59046CF7690A12F9DF12932.mft (raw, json) Hash identifier: LG1B4Z9fkJfFU561ztXZnuYgS2YPvZ8L02vdCnSBya4= Subject key identifier: 81:5C:0A:A8:30:5F:9E:4F:57:C8:8A:67:B4:88:F5:67:C7:2E:A2:C7 Authority key identifier: EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 Certificate issuer: /CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Certificate serial: 72B523BF7B6BDBD8DF79E0EBFDC0F71B0D44D6B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft Manifest number: 020F Signing time: Tue 06 May 2025 20:31:20 +0000 Manifest this update: Tue 06 May 2025 20:26:20 +0000 Manifest next update: Sat 10 May 2025 07:17:20 +0000 Files and hashes: 1: 3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (hash: Lkf5GtqCgpM0afLQQBUVM3+/AVTbtZLezFPI9dw/EXw=) 2: EC973BE13EF324E7D59046CF7690A12F9DF12932.crl (hash: WvTr1C/mXSUYVuRCv5Vyz/yebsdA0lqYAAuJlxyJNEY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 07:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b5:23:bf:7b:6b:db:d8:df:79:e0:eb:fd:c0:f7:1b:0d:44:d6:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Validity Not Before: May 6 20:26:20 2025 GMT Not After : May 10 07:17:20 2025 GMT Subject: CN=815C0AA8305F9E4F57C88A67B488F567C72EA2C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ed:23:8a:31:30:17:33:d5:a1:7f:38:e3:a5: 5c:0f:3e:1d:89:bc:83:40:21:6e:d2:15:2d:36:13: d5:41:c0:28:72:fa:5f:56:43:06:2f:58:10:e1:c2: a7:c2:91:43:7b:61:af:35:21:1f:22:9f:ae:9e:e3: c2:4a:09:27:e7:3b:1b:31:92:f6:cd:35:a7:f7:ee: 2a:bb:6b:2c:d1:36:eb:00:9f:90:5c:34:7d:0a:c8: 37:d2:e9:d1:04:0e:4b:db:f2:02:34:c8:4c:26:45: 08:76:de:0b:ed:c5:0a:1f:4f:ff:fd:9d:d1:6d:88: 98:32:bd:7f:29:b8:9a:3f:22:c8:75:2a:53:8b:1e: 3b:1e:35:69:0f:09:fd:f9:2e:a8:05:39:bf:72:7b: 2f:d8:aa:50:7e:19:27:ac:91:4d:76:57:21:64:de: 34:67:db:ee:0f:f7:32:5a:bf:f2:48:14:c1:72:89: 19:f7:36:42:d1:a7:f5:98:29:ba:b1:8f:fc:2e:b0: c6:b4:c8:c3:03:b8:98:5e:44:87:d8:c2:1e:07:a8: 29:58:7f:0d:77:3d:4b:4f:c7:60:32:5a:5e:dc:44: 81:dc:9b:50:81:ab:70:a2:53:5a:cc:77:ff:f0:f6: ae:d6:4f:6c:b0:f7:19:5d:69:6b:7f:3e:2d:66:83: 6b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:5C:0A:A8:30:5F:9E:4F:57:C8:8A:67:B4:88:F5:67:C7:2E:A2:C7 X509v3 Authority Key Identifier: keyid:EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:4f:fa:0c:c6:8f:07:0e:2d:b2:a1:78:22:06:e9:2a:52:69: e5:cb:02:17:64:df:43:ed:4e:33:b5:64:6c:74:f0:2d:d7:48: fc:dd:3e:35:be:a2:3c:c6:c6:cb:b5:d1:bc:b9:26:ad:26:84: c0:66:cf:e9:f9:c7:7d:53:48:9c:eb:6d:e4:c5:e0:f9:22:fe: 0b:c7:e6:0f:08:0b:d8:17:92:f8:ab:c1:8d:08:a0:8d:bf:b4: df:eb:32:1a:d3:f4:f8:6f:90:50:94:a5:ea:c7:f3:12:e1:5b: b1:8a:60:1a:72:08:93:97:79:e8:57:ef:0d:46:a5:e6:7b:ab: b6:77:7e:5c:0b:95:89:d0:ff:79:13:de:dd:54:94:be:52:89: 81:60:d5:6a:61:01:37:e0:42:cf:9d:48:75:4c:bc:f8:f9:54: 01:25:4f:bd:82:3d:73:0e:1c:34:99:e2:05:ba:8f:69:fa:df: f1:a6:d2:4f:5b:41:b2:d9:f5:78:fd:d3:e0:c2:2b:e2:0d:56: 01:39:21:ff:bf:b1:3b:6b:ca:e7:f8:3a:2c:b2:15:c2:33:ef: 97:a7:b0:b6:91:ce:ab:16:57:03:26:16:e2:3b:0e:bb:07:ba: a2:98:48:d7:2b:b8:06:ec:ce:e9:21:d7:53:0d:54:45:90:bf: 19:9e:cd:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcrUjv3tr29jfeeDr/cD3Gw1E1rAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5 REYxMjkzMjAeFw0yNTA1MDYyMDI2MjBaFw0yNTA1MTAwNzE3MjBaMDMxMTAvBgNV BAMTKDgxNUMwQUE4MzA1RjlFNEY1N0M4OEE2N0I0ODhGNTY3QzcyRUEyQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE7SOKMTAXM9WhfzjjpVwPPh2J vINAIW7SFS02E9VBwChy+l9WQwYvWBDhwqfCkUN7Ya81IR8in66e48JKCSfnOxsx kvbNNaf37iq7ayzRNusAn5BcNH0KyDfS6dEEDkvb8gI0yEwmRQh23gvtxQofT//9 ndFtiJgyvX8puJo/Ish1KlOLHjseNWkPCf35LqgFOb9yey/YqlB+GSeskU12VyFk 3jRn2+4P9zJav/JIFMFyiRn3NkLRp/WYKbqxj/wusMa0yMMDuJheRIfYwh4HqClY fw13PUtPx2AyWl7cRIHcm1CBq3CiU1rMd//w9q7WT2yw9xldaWt/Pi1mg2tNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgVwKqDBfnk9XyIpntIj1Z8cuoscwHwYDVR0j BBgwFoAU7Jc74T7zJOfVkEbPdpChL53xKTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTFjYmQ3OS04ZjI2LTRiMGUtOGIzYi1hYjllOTkzOGZjYWUvMC9FQzk3M0JFMTNF RjMyNEU3RDU5MDQ2Q0Y3NjkwQTEyRjlERjEyOTMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5REYx MjkzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmUxY2JkNzktOGYyNi00YjBlLThi M2ItYWI5ZTk5MzhmY2FlLzAvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEEx MkY5REYxMjkzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRP+gzGjwcOLbKheCIG6SpSaeXLAhdk30Pt TjO1ZGx08C3XSPzdPjW+ojzGxsu10by5Jq0mhMBmz+n5x31TSJzrbeTF4Pki/gvH 5g8IC9gXkvirwY0IoI2/tN/rMhrT9PhvkFCUperH8xLhW7GKYBpyCJOXeehX7w1G peZ7q7Z3flwLlYnQ/3kT3t1UlL5SiYFg1WphATfgQs+dSHVMvPj5VAElT72CPXMO HDSZ4gW6j2n63/Gm0k9bQbLZ9Xj90+DCK+INVgE5If+/sTtryuf4OiyyFcIz75en sLaRzqsWVwMmFuI7DrsHuqKYSNcruAbszukh11MNVEWQvxmezRA= -----END CERTIFICATE-----Generated at Thu May 8 15:16:22 2025 by rpki-client