$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft File: E94D4099064713F1C3A5E211E817CFC2A40E6370.mft (raw, json) Hash identifier: DxsDDsFC+KXY2tgpZX+WntlDeFRbzwinDdThR43nC28= Subject key identifier: 49:53:13:78:A5:6F:02:86:DE:3C:66:31:0E:5C:80:75:4B:A5:24:65 Authority key identifier: E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 Certificate issuer: /CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Certificate serial: 436AA0ABAA858AF92752D79534CC8D743939B5AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft Manifest number: 0186 Signing time: Thu 08 May 2025 14:51:26 +0000 Manifest this update: Thu 08 May 2025 14:46:26 +0000 Manifest next update: Sun 11 May 2025 23:03:26 +0000 Files and hashes: 1: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: Qay85z2tBE2gSsJ1As2R1DyRPFo67yuecJZbDwWzf5g=) 2: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: 3oRl4FLRpqbW8xFTv+6cj6QVd2OEB0Ox6NTFkqNqehI=) 3: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: Qa9xNMpYcP+9pVUvEHAtgK4Z1jgnm3adWlqql9bkWPc=) 4: E94D4099064713F1C3A5E211E817CFC2A40E6370.crl (hash: RPn5W5a5BKU8vVys0Na3nnZB4QhhgwLeGR6jCOi4XCM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 23:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:6a:a0:ab:aa:85:8a:f9:27:52:d7:95:34:cc:8d:74:39:39:b5:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Validity Not Before: May 8 14:46:26 2025 GMT Not After : May 11 23:03:26 2025 GMT Subject: CN=49531378A56F0286DE3C66310E5C80754BA52465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:91:0e:85:0c:06:92:66:8e:ec:e7:f5:04:c3: 3c:6c:26:d4:ea:62:fc:67:17:21:0c:3e:55:2a:53: 3e:0f:04:32:13:2a:66:ea:67:43:58:9a:6d:7e:b2: 5b:fa:77:79:7b:07:66:7e:31:48:90:af:0e:22:6e: 74:5d:ed:84:db:2c:58:a5:68:cf:a1:54:c9:9f:c3: 95:45:79:f3:ea:1e:28:7c:d9:71:50:22:5b:63:cd: 9c:14:5f:0b:b1:a4:da:ed:93:20:60:92:d5:62:9f: f9:0c:81:b5:0c:77:65:a8:9f:75:41:a2:cc:a9:0e: df:54:22:80:b0:5c:c0:78:c8:fc:cb:af:94:0a:6c: b4:ae:8b:fc:83:c9:69:a7:47:cf:a2:7d:94:00:55: 98:52:14:79:f8:b2:de:fe:58:ac:7b:1f:e1:17:08: 24:ef:e4:fc:1b:d3:1a:f4:9c:f7:cf:61:54:0d:f7: 5c:48:7a:27:01:e1:91:a6:14:74:bb:58:c6:33:77: bf:cd:40:d6:6a:c5:83:bb:2e:47:66:28:2a:d6:ca: cc:1c:e6:a6:c9:3b:fd:8c:36:44:dc:20:99:3b:47: 99:d5:fc:eb:fe:66:9f:c8:96:c3:15:de:19:b2:3a: cc:27:f7:e1:6b:7b:53:61:85:48:90:ce:aa:8e:1d: df:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:53:13:78:A5:6F:02:86:DE:3C:66:31:0E:5C:80:75:4B:A5:24:65 X509v3 Authority Key Identifier: keyid:E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:e6:64:9d:d1:00:d5:4f:2c:a9:64:2d:4c:a6:2b:20:c0:c6: 7f:fa:0e:24:ee:21:ce:20:42:d7:bd:7b:88:7f:e7:27:4a:67: 93:b2:8b:21:6b:8d:05:dc:72:6e:e9:30:7a:60:3a:fe:2d:aa: 66:f0:cd:2b:27:7f:5e:93:0e:b5:61:63:2f:84:89:8e:7b:d4: a1:3c:f3:42:91:47:c7:93:a2:29:7a:35:5a:10:12:b7:83:d2: ce:2f:60:7b:8f:9b:93:b7:e6:cf:2c:74:0e:bf:8f:74:a2:55: 51:34:5b:29:64:aa:29:0e:79:86:6d:99:95:76:67:d5:72:9b: 03:0b:49:d2:46:a7:38:a6:56:be:42:19:7e:ca:aa:89:13:2e: ff:b0:28:95:66:5e:bf:7a:de:e6:df:8a:0d:8e:62:46:22:7d: 3d:70:3f:47:18:98:83:d0:84:b1:86:06:8b:a8:9f:ee:d0:fc: 9e:6e:6f:85:99:75:5b:0f:db:26:01:7c:16:f0:aa:4c:57:5b: 19:5a:b9:23:46:e7:72:b7:52:81:75:e9:5c:d8:5f:a1:19:91: 8a:7e:84:30:08:b5:91:07:cc:cd:c3:e2:ac:14:82:68:e4:ab: c2:f9:77:57:2f:6a:4d:84:99:02:15:8d:83:0e:d3:a8:68:18: 39:28:38:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ2qgq6qFivknUteVNMyNdDk5ta0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJB NDBFNjM3MDAeFw0yNTA1MDgxNDQ2MjZaFw0yNTA1MTEyMzAzMjZaMDMxMTAvBgNV BAMTKDQ5NTMxMzc4QTU2RjAyODZERTNDNjYzMTBFNUM4MDc1NEJBNTI0NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2kQ6FDAaSZo7s5/UEwzxsJtTq YvxnFyEMPlUqUz4PBDITKmbqZ0NYmm1+slv6d3l7B2Z+MUiQrw4ibnRd7YTbLFil aM+hVMmfw5VFefPqHih82XFQIltjzZwUXwuxpNrtkyBgktVin/kMgbUMd2Won3VB osypDt9UIoCwXMB4yPzLr5QKbLSui/yDyWmnR8+ifZQAVZhSFHn4st7+WKx7H+EX CCTv5Pwb0xr0nPfPYVQN91xIeicB4ZGmFHS7WMYzd7/NQNZqxYO7LkdmKCrWyswc 5qbJO/2MNkTcIJk7R5nV/Ov+Zp/IlsMV3hmyOswn9+Fre1NhhUiQzqqOHd8TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSVMTeKVvAobePGYxDlyAdUulJGUwHwYDVR0j BBgwFoAU6U1AmQZHE/HDpeIR6BfPwqQOY3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhZTgyZi01MzdlLTQ2MjYtYmU5ZS0zMzM5NGEyZGM5NjkvMC9FOTRENDA5OTA2 NDcxM0YxQzNBNUUyMTFFODE3Q0ZDMkE0MEU2MzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJBNDBF NjM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YWU4MmYtNTM3ZS00NjI2LWJl OWUtMzMzOTRhMmRjOTY5LzAvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NG QzJBNDBFNjM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMDmZJ3RANVPLKlkLUymKyDAxn/6DiTuIc4g Qte9e4h/5ydKZ5OyiyFrjQXccm7pMHpgOv4tqmbwzSsnf16TDrVhYy+EiY571KE8 80KRR8eToil6NVoQEreD0s4vYHuPm5O35s8sdA6/j3SiVVE0WylkqikOeYZtmZV2 Z9VymwMLSdJGpzimVr5CGX7KqokTLv+wKJVmXr963ubfig2OYkYifT1wP0cYmIPQ hLGGBouon+7Q/J5ub4WZdVsP2yYBfBbwqkxXWxlauSNG53K3UoF16VzYX6EZkYp+ hDAItZEHzM3D4qwUgmjkq8L5d1cvak2EmQIVjYMO06hoGDkoOKs= -----END CERTIFICATE-----Generated at Sat May 10 13:42:57 2025 by rpki-client