$ rpki-client -vvf repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft File: EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft (raw, json) Hash identifier: 0QR0Wez1UE5m6+dbQ9OfMW5zQDzfP2g9+cBxrmrPfQQ= Subject key identifier: 83:8F:2D:53:B9:97:17:67:B5:FA:9C:D4:E8:8A:D7:C5:F9:3C:05:B3 Authority key identifier: EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 Certificate issuer: /CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Certificate serial: 2F3E053C4AB6F9005A15A768B43EF4DAB7C40494 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft Manifest number: 0174 Signing time: Mon 28 Apr 2025 20:20:02 +0000 Manifest this update: Mon 28 Apr 2025 20:15:02 +0000 Manifest next update: Fri 02 May 2025 01:51:02 +0000 Files and hashes: 1: 3130332e3137392e38322e302f32342d3234203d3e20313338303832.roa (hash: /cdl8KopWWEAVSKHGwwN7jQvT8+haRS7g+4C1ytM8Dg=) 2: 3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa (hash: A8O4HhKJBUpQAVtG9F/HuVJZcjl2PJnz2blEINGnJlw=) 3: EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl (hash: 27ZV389n8QXZ0qC42Kxob+tcIh0JKf/e4O+VR6roT8s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:3e:05:3c:4a:b6:f9:00:5a:15:a7:68:b4:3e:f4:da:b7:c4:04:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Validity Not Before: Apr 28 20:15:02 2025 GMT Not After : May 2 01:51:02 2025 GMT Subject: CN=838F2D53B9971767B5FA9CD4E88AD7C5F93C05B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:dd:94:0a:e6:93:ac:07:61:31:3a:ad:c6:b0: 00:1f:a9:22:b5:70:be:26:e3:21:99:39:92:dd:04: a4:cf:a8:46:d2:48:43:b9:42:98:78:48:1e:1e:fe: 9f:a2:e3:b1:3e:a9:b7:4b:2f:f2:e7:ea:9a:77:7a: 68:d3:6e:74:84:a5:cf:32:d7:32:6d:e9:e0:04:97: c7:bc:c8:94:d0:0e:c0:50:aa:50:c3:b5:66:97:7b: 25:cb:4b:50:c0:8c:03:79:de:bb:42:a4:85:1c:b4: a6:6a:68:41:4e:2e:38:2d:b3:20:ec:62:c8:8f:ef: bd:b2:fc:da:0e:21:ef:f2:b1:71:0f:4a:3e:81:7e: 15:bd:59:af:8b:12:5a:62:c7:a0:4b:8e:51:66:d5: 5c:b1:2d:51:50:be:81:a5:14:fc:a9:d3:96:a7:b5: ec:44:d5:bf:25:6e:d9:81:a5:5f:48:be:8a:e1:e7: 0d:08:56:e4:84:16:af:b8:cc:5e:ce:b9:d9:f0:69: 4d:60:53:67:78:2c:6b:1c:ce:f7:ae:04:f2:17:6a: c3:b0:c2:b2:b5:69:12:5a:cc:11:2d:8b:2b:f2:55: ab:d3:36:f5:c4:63:d7:4f:b7:9b:77:0b:cc:7f:70: 85:1f:c8:21:fb:36:a5:67:87:79:08:08:19:56:f0: 11:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:8F:2D:53:B9:97:17:67:B5:FA:9C:D4:E8:8A:D7:C5:F9:3C:05:B3 X509v3 Authority Key Identifier: keyid:EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:48:ef:0d:9e:78:48:c2:36:65:0a:b6:25:04:81:43:f8:28: 09:c7:cf:b5:70:dd:4a:de:e9:f6:86:ac:5f:b4:5d:c2:93:ff: f8:83:93:91:1c:b1:27:91:54:dc:d0:95:d7:49:ef:f4:3d:b0: de:aa:17:75:4c:4a:77:3f:95:fb:46:86:24:69:33:3c:7f:6b: 2b:ec:be:c5:bd:b7:98:5d:77:9f:bb:c4:a0:6b:a5:6c:66:b8: b6:d8:d7:a0:3e:f7:45:76:a6:9a:25:93:f9:03:02:5b:6c:99: dd:e9:69:1d:b8:7c:81:ee:68:17:4a:21:c6:fc:e9:5b:b7:48: 5e:17:36:4c:64:c3:f8:d7:4d:c9:a8:47:2b:48:ca:87:c1:d8: a3:6c:65:c9:17:d1:da:f7:62:5a:2c:9c:83:bb:2c:68:2f:86: fa:19:8a:fa:84:e1:e2:d9:10:c5:ee:d6:b3:cd:91:50:46:2f: 73:7a:54:cc:0d:7f:b5:1d:89:80:ef:29:80:ea:bc:03:40:6d: d8:ad:0d:7a:1d:80:02:73:4b:34:b3:99:cb:65:37:48:05:80: c8:da:03:00:1b:bb:db:a9:92:85:23:9c:3b:70:23:9b:c0:23: 24:ea:52:1e:ca:12:3b:33:78:9f:92:4c:4d:56:af:53:da:24: 35:47:b0:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULz4FPEq2+QBaFadotD702rfEBJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQx QTVEMDUyMDAeFw0yNTA0MjgyMDE1MDJaFw0yNTA1MDIwMTUxMDJaMDMxMTAvBgNV BAMTKDgzOEYyRDUzQjk5NzE3NjdCNUZBOUNENEU4OEFEN0M1RjkzQzA1QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA3ZQK5pOsB2ExOq3GsAAfqSK1 cL4m4yGZOZLdBKTPqEbSSEO5Qph4SB4e/p+i47E+qbdLL/Ln6pp3emjTbnSEpc8y 1zJt6eAEl8e8yJTQDsBQqlDDtWaXeyXLS1DAjAN53rtCpIUctKZqaEFOLjgtsyDs YsiP772y/NoOIe/ysXEPSj6BfhW9Wa+LElpix6BLjlFm1VyxLVFQvoGlFPyp05an texE1b8lbtmBpV9Ivorh5w0IVuSEFq+4zF7OudnwaU1gU2d4LGsczveuBPIXasOw wrK1aRJazBEtiyvyVavTNvXEY9dPt5t3C8x/cIUfyCH7NqVnh3kICBlW8BHdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg48tU7mXF2e1+pzU6IrXxfk8BbMwHwYDVR0j BBgwFoAU6gHJFRHF40fHwR6kZJsPBBpdBSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Y2QyNGU4Mi1mMzA2LTQ0MDAtYjAwYS1kNTliNDFlMjg2YmIvMC9FQTAxQzkxNTEx QzVFMzQ3QzdDMTFFQTQ2NDlCMEYwNDFBNUQwNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQxQTVE MDUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGNkMjRlODItZjMwNi00NDAwLWIw MGEtZDU5YjQxZTI4NmJiLzAvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBG MDQxQTVEMDUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJI7w2eeEjCNmUKtiUEgUP4KAnHz7Vw3Ure 6faGrF+0XcKT//iDk5EcsSeRVNzQlddJ7/Q9sN6qF3VMSnc/lftGhiRpMzx/ayvs vsW9t5hdd5+7xKBrpWxmuLbY16A+90V2ppolk/kDAltsmd3paR24fIHuaBdKIcb8 6Vu3SF4XNkxkw/jXTcmoRytIyofB2KNsZckX0dr3YlosnIO7LGgvhvoZivqE4eLZ EMXu1rPNkVBGL3N6VMwNf7UdiYDvKYDqvANAbditDXodgAJzSzSzmctlN0gFgMja AwAbu9upkoUjnDtwI5vAIyTqUh7KEjszeJ+STE1Wr1PaJDVHsPU= -----END CERTIFICATE-----Generated at Wed Apr 30 08:22:59 2025 by rpki-client