$ rpki-client -vvf repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft File: 0EAF2A0CD22523DB087375417038E4165075CA3E.mft (raw, json) Hash identifier: 6r7MpdXddG/932Rb4xnyq2QqQ38L2uCmxPqAqKBjTqQ= Subject key identifier: 71:C9:5C:7F:21:A7:29:3C:1D:CC:A4:58:A3:54:35:F4:90:A3:EB:35 Authority key identifier: 0E:AF:2A:0C:D2:25:23:DB:08:73:75:41:70:38:E4:16:50:75:CA:3E Certificate issuer: /CN=0EAF2A0CD22523DB087375417038E4165075CA3E Certificate serial: 4E5D7539EFF763D10218DF5031228FA3CA73B50B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft Manifest number: 9F Signing time: Fri 25 Apr 2025 22:51:02 +0000 Manifest this update: Fri 25 Apr 2025 22:46:02 +0000 Manifest next update: Tue 29 Apr 2025 01:01:02 +0000 Files and hashes: 1: 0EAF2A0CD22523DB087375417038E4165075CA3E.crl (hash: 7kVm0cD/sngKOjaGHngjYDdZUGq3DB5s4qStzq2yB5g=) 2: 3135372e32302e34342e302f32342d3234203d3e20313532333932.roa (hash: 20xyi7WGXkhpJhYMMa60rCEDcWMrrO4WibLNf+8UjDs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.crl rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 01:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:5d:75:39:ef:f7:63:d1:02:18:df:50:31:22:8f:a3:ca:73:b5:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAF2A0CD22523DB087375417038E4165075CA3E Validity Not Before: Apr 25 22:46:02 2025 GMT Not After : Apr 29 01:01:02 2025 GMT Subject: CN=71C95C7F21A7293C1DCCA458A35435F490A3EB35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a9:3a:6d:57:7d:ba:db:52:5e:b9:a2:df:f3: 89:85:0c:5d:58:e9:00:3b:74:4e:03:b6:d7:fc:f4: 6b:56:39:f2:df:9c:c3:19:3d:4c:9d:89:e1:0b:c7: a0:37:1a:cf:d9:d7:e3:12:9f:71:c6:ea:1c:73:e6: d1:fa:34:1a:fc:a0:95:87:0c:93:07:fd:3a:b7:72: c8:f5:ac:4a:53:80:42:41:b6:7c:14:b7:73:c7:6f: 97:c9:5e:66:33:db:fe:bf:62:59:e9:26:89:55:c6: 5e:5d:aa:11:25:d2:18:25:0c:29:5e:e9:08:18:1a: cf:bf:1f:07:d8:de:7b:68:dd:0f:ae:ca:b4:7e:35: 65:29:7d:57:a8:a5:1d:c9:1c:9b:41:80:96:a4:a1: 6f:ae:f3:3d:17:a5:b0:cd:5b:c2:77:63:85:aa:82: b8:7b:2f:79:77:00:4c:18:24:f2:f3:ae:70:68:37: df:85:16:b4:53:81:c4:8f:51:1a:0a:d5:52:ce:cb: d8:39:c5:c0:26:42:10:d3:12:75:ee:7d:ce:32:5c: bf:8f:6f:ee:f7:b0:ac:96:b4:90:af:6b:df:21:5f: 36:61:cc:8f:94:e8:2c:f3:06:27:26:6c:29:87:5d: 01:b1:23:a5:aa:fb:11:52:28:b3:d9:58:2e:9a:f2: 53:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C9:5C:7F:21:A7:29:3C:1D:CC:A4:58:A3:54:35:F4:90:A3:EB:35 X509v3 Authority Key Identifier: keyid:0E:AF:2A:0C:D2:25:23:DB:08:73:75:41:70:38:E4:16:50:75:CA:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0EAF2A0CD22523DB087375417038E4165075CA3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/0EAF2A0CD22523DB087375417038E4165075CA3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:f9:45:3b:23:99:a2:69:22:60:95:ac:49:95:b4:37:7d:c3: 76:27:4b:d1:5c:a3:46:e8:bb:c1:b0:5a:02:80:43:15:28:b7: ca:6c:e6:45:7b:e3:3c:33:ef:73:b1:2e:74:66:a7:8d:ee:6e: 94:d7:94:1e:6d:48:94:8b:0e:f2:fb:8a:cc:76:49:12:87:31: dd:2f:21:3f:55:11:42:57:d3:de:21:b3:46:78:ad:4e:c4:81: b6:ae:1c:ee:dd:ae:5e:f2:db:6f:ad:a6:bb:64:40:61:2c:01: 67:c3:6c:6f:bb:f6:a3:82:0f:59:21:81:df:72:6b:7f:ee:f9: 5b:b3:11:0f:11:04:85:f1:b1:7d:8c:9b:af:21:57:b4:f6:3f: 3e:17:ac:8e:a1:4f:75:5f:36:fa:02:67:27:83:c6:93:20:3f: ac:46:83:e9:72:8d:fb:18:09:12:74:7c:0c:ec:fd:8e:b3:6d: 69:17:f7:34:26:be:8b:bc:48:b8:86:b3:f2:04:37:eb:28:dd: 0d:b1:3b:4f:f3:32:92:d1:89:63:10:ef:e2:b1:d1:3d:22:0c: bc:77:c9:e6:39:bb:2d:00:22:e5:38:54:58:a5:e4:33:fa:d2: 8b:95:00:00:25:a4:6b:1f:19:cc:4f:9a:f3:27:ab:76:ec:16: da:a5:88:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTl11Oe/3Y9ECGN9QMSKPo8pztQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBRjJBMENEMjI1MjNEQjA4NzM3NTQxNzAzOEU0MTY1 MDc1Q0EzRTAeFw0yNTA0MjUyMjQ2MDJaFw0yNTA0MjkwMTAxMDJaMDMxMTAvBgNV BAMTKDcxQzk1QzdGMjFBNzI5M0MxRENDQTQ1OEEzNTQzNUY0OTBBM0VCMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYqTptV32621JeuaLf84mFDF1Y 6QA7dE4Dttf89GtWOfLfnMMZPUydieELx6A3Gs/Z1+MSn3HG6hxz5tH6NBr8oJWH DJMH/Tq3csj1rEpTgEJBtnwUt3PHb5fJXmYz2/6/YlnpJolVxl5dqhEl0hglDCle 6QgYGs+/HwfY3nto3Q+uyrR+NWUpfVeopR3JHJtBgJakoW+u8z0XpbDNW8J3Y4Wq grh7L3l3AEwYJPLzrnBoN9+FFrRTgcSPURoK1VLOy9g5xcAmQhDTEnXufc4yXL+P b+73sKyWtJCva98hXzZhzI+U6CzzBicmbCmHXQGxI6Wq+xFSKLPZWC6a8lO5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcclcfyGnKTwdzKRYo1Q19JCj6zUwHwYDVR0j BBgwFoAUDq8qDNIlI9sIc3VBcDjkFlB1yj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTg4ZGZmNy02YTkyLTQyOTMtODgwMC1iNTNlMmE5MThhY2EvMC8wRUFGMkEwQ0Qy MjUyM0RCMDg3Mzc1NDE3MDM4RTQxNjUwNzVDQTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEVBRjJBMENEMjI1MjNEQjA4NzM3NTQxNzAzOEU0MTY1MDc1 Q0EzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU4OGRmZjctNmE5Mi00MjkzLTg4 MDAtYjUzZTJhOTE4YWNhLzAvMEVBRjJBMENEMjI1MjNEQjA4NzM3NTQxNzAzOEU0 MTY1MDc1Q0EzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGP5RTsjmaJpImCVrEmVtDd9w3YnS9Fco0bo u8GwWgKAQxUot8ps5kV74zwz73OxLnRmp43ubpTXlB5tSJSLDvL7isx2SRKHMd0v IT9VEUJX094hs0Z4rU7EgbauHO7drl7y22+tprtkQGEsAWfDbG+79qOCD1khgd9y a3/u+VuzEQ8RBIXxsX2Mm68hV7T2Pz4XrI6hT3VfNvoCZyeDxpMgP6xGg+lyjfsY CRJ0fAzs/Y6zbWkX9zQmvou8SLiGs/IEN+so3Q2xO0/zMpLRiWMQ7+Kx0T0iDLx3 yeY5uy0AIuU4VFil5DP60ouVAAAlpGsfGcxPmvMnq3bsFtqliKA= -----END CERTIFICATE-----Generated at Sun Apr 27 10:30:56 2025 by rpki-client