$ rpki-client -vvf repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.mft File: E118E8E6144A59677DB6D05BDF713DB23BC61342.mft (raw, json) Hash identifier: yfCNemEY2qiV8RCnjd7WqSgVMboE+Py7FHdWruEYrgU= Subject key identifier: AA:56:8C:4A:46:55:47:5F:7B:82:0F:D6:19:00:BA:39:EF:62:48:51 Authority key identifier: E1:18:E8:E6:14:4A:59:67:7D:B6:D0:5B:DF:71:3D:B2:3B:C6:13:42 Certificate issuer: /CN=E118E8E6144A59677DB6D05BDF713DB23BC61342 Certificate serial: 373DA7D9D3B63C04935E95FDDC8D8980B6AAF0A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E118E8E6144A59677DB6D05BDF713DB23BC61342.cer Subject info access: rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.mft Manifest number: 02BA Signing time: Sat 26 Apr 2025 19:21:47 +0000 Manifest this update: Sat 26 Apr 2025 19:16:47 +0000 Manifest next update: Tue 29 Apr 2025 19:36:47 +0000 Files and hashes: 1: 3130332e3137342e31382e302f32332d3234203d3e20313331313131.roa (hash: soOwOsKEClipawNtfhPlc/7q78qMlxe1VK6YTqJKRFg=) 2: E118E8E6144A59677DB6D05BDF713DB23BC61342.crl (hash: efG4WBtBVDmo/F17AwS/U9owy1V5c0Zii2RYxlFh1Xk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.crl rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E118E8E6144A59677DB6D05BDF713DB23BC61342.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 19:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:3d:a7:d9:d3:b6:3c:04:93:5e:95:fd:dc:8d:89:80:b6:aa:f0:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E118E8E6144A59677DB6D05BDF713DB23BC61342 Validity Not Before: Apr 26 19:16:47 2025 GMT Not After : Apr 29 19:36:47 2025 GMT Subject: CN=AA568C4A4655475F7B820FD61900BA39EF624851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8a:1d:1e:f5:81:5e:cf:d8:75:17:f7:e2:c8: 45:44:e4:6c:a4:af:d6:5e:df:c1:02:bb:7f:45:3d: 48:00:40:e2:51:4f:19:1d:43:c1:af:56:4b:18:fa: b1:5b:0e:9a:d1:dc:e0:82:04:3c:4d:62:21:ee:36: fe:b4:7f:6f:3e:d3:bf:a4:b8:25:b9:80:e5:e2:15: 5b:1b:4c:c1:6a:15:93:b1:82:95:41:2c:ce:ee:1e: cd:2a:f4:f1:07:6d:33:99:9e:a1:99:27:63:4d:64: 50:a0:50:5a:72:48:cb:b9:e7:a4:27:f1:f8:d3:17: d6:9b:e5:90:fe:66:19:33:5b:85:da:1d:8f:c1:d1: c9:84:f0:dc:48:30:8b:c9:dc:37:fe:e5:61:0f:94: 90:a2:85:3a:a9:7a:7c:8e:8e:42:dd:91:51:5a:5f: b0:c4:ee:d2:a4:39:25:a9:d5:4c:47:f4:35:ce:50: 25:eb:90:d3:ce:c3:90:31:bf:01:b5:64:9d:6e:5d: c7:61:14:ff:f2:d5:e6:86:e1:47:24:74:3a:0b:62: 7d:9e:0e:8f:f7:0d:41:40:81:d9:70:73:40:1d:f5: ed:3b:ed:e0:0a:2e:b8:96:cd:59:88:69:bc:21:09: 2f:c3:29:09:9f:a5:94:d8:35:a6:9e:6b:70:83:9d: 42:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:56:8C:4A:46:55:47:5F:7B:82:0F:D6:19:00:BA:39:EF:62:48:51 X509v3 Authority Key Identifier: keyid:E1:18:E8:E6:14:4A:59:67:7D:B6:D0:5B:DF:71:3D:B2:3B:C6:13:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E118E8E6144A59677DB6D05BDF713DB23BC61342.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:64:56:0b:51:e9:d5:63:49:ac:df:88:f3:06:3f:11:49:b6: 8e:b4:34:fb:67:6e:69:4d:e8:4a:18:5e:19:7c:f7:7c:7d:0e: 98:16:52:a8:60:6f:54:a2:68:fa:bb:4d:22:dc:10:c3:e6:b5: b7:34:70:68:13:a4:62:d8:11:11:3b:da:5c:f7:21:f2:45:c1: b8:1f:fd:3d:27:3c:d1:13:37:15:b2:19:6c:b9:6e:6f:5d:70: b1:3b:7a:58:b6:f5:b8:bb:b7:db:60:03:87:8e:f7:ee:e2:4b: 82:d7:82:d1:f4:7e:a8:af:17:41:af:70:17:4c:dc:ac:d6:28: 21:c4:00:ab:e5:e1:99:ba:1e:78:d2:9b:f1:76:c7:c6:b7:c0: d0:3c:43:fc:63:a9:7f:5b:a1:5a:72:b7:63:65:5b:c2:1f:99: 11:78:b6:70:1b:dc:44:a0:7f:40:da:f7:72:aa:ca:8f:00:c0: e7:97:cb:9c:ef:89:20:f3:22:a5:46:d3:c7:93:16:e9:93:56: a2:3c:57:70:b2:11:c5:3e:12:dc:e7:12:1b:6a:9a:aa:38:d5: f0:eb:a7:84:39:73:85:8e:d0:1f:a1:5e:c6:b0:42:67:85:b7: 1a:59:40:a3:b2:a9:d2:17:fc:7b:84:7e:19:ec:ea:a5:d5:78: 4f:39:0b:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNz2n2dO2PASTXpX93I2JgLaq8KQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTExOEU4RTYxNDRBNTk2NzdEQjZEMDVCREY3MTNEQjIz QkM2MTM0MjAeFw0yNTA0MjYxOTE2NDdaFw0yNTA0MjkxOTM2NDdaMDMxMTAvBgNV BAMTKEFBNTY4QzRBNDY1NTQ3NUY3QjgyMEZENjE5MDBCQTM5RUY2MjQ4NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ih0e9YFez9h1F/fiyEVE5Gyk r9Ze38ECu39FPUgAQOJRTxkdQ8GvVksY+rFbDprR3OCCBDxNYiHuNv60f28+07+k uCW5gOXiFVsbTMFqFZOxgpVBLM7uHs0q9PEHbTOZnqGZJ2NNZFCgUFpySMu556Qn 8fjTF9ab5ZD+ZhkzW4XaHY/B0cmE8NxIMIvJ3Df+5WEPlJCihTqpenyOjkLdkVFa X7DE7tKkOSWp1UxH9DXOUCXrkNPOw5AxvwG1ZJ1uXcdhFP/y1eaG4UckdDoLYn2e Do/3DUFAgdlwc0Ad9e077eAKLriWzVmIabwhCS/DKQmfpZTYNaaea3CDnULTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqlaMSkZVR197gg/WGQC6Oe9iSFEwHwYDVR0j BBgwFoAU4Rjo5hRKWWd9ttBb33E9sjvGE0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MDFkYmFmYy1jMGNjLTQ5NmEtYjVlMC00ZjQ4YmE5NDZjZDMvMC9FMTE4RThFNjE0 NEE1OTY3N0RCNkQwNUJERjcxM0RCMjNCQzYxMzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTExOEU4RTYxNDRBNTk2NzdEQjZEMDVCREY3MTNEQjIzQkM2 MTM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTAxZGJhZmMtYzBjYy00OTZhLWI1 ZTAtNGY0OGJhOTQ2Y2QzLzAvRTExOEU4RTYxNDRBNTk2NzdEQjZEMDVCREY3MTNE QjIzQkM2MTM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJkVgtR6dVjSazfiPMGPxFJto60NPtnbmlN 6EoYXhl893x9DpgWUqhgb1SiaPq7TSLcEMPmtbc0cGgTpGLYERE72lz3IfJFwbgf /T0nPNETNxWyGWy5bm9dcLE7eli29bi7t9tgA4eO9+7iS4LXgtH0fqivF0GvcBdM 3KzWKCHEAKvl4Zm6HnjSm/F2x8a3wNA8Q/xjqX9boVpyt2NlW8IfmRF4tnAb3ESg f0Da93Kqyo8AwOeXy5zviSDzIqVG08eTFumTVqI8V3CyEcU+EtznEhtqmqo41fDr p4Q5c4WO0B+hXsawQmeFtxpZQKOyqdIX/HuEfhns6qXVeE85C64= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:18 2025 by rpki-client