$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft File: E3FB5E3343EC63D705FF51B645113F74C7965236.mft (raw, json) Hash identifier: NRm5YVro7Q9keQL0SNmTfb3lu2/bAVoO9iWRtIZAAHU= Subject key identifier: E3:A1:54:36:E0:1F:DC:6B:D1:D4:69:3F:60:DE:F0:57:A9:9F:8A:1B Authority key identifier: E3:FB:5E:33:43:EC:63:D7:05:FF:51:B6:45:11:3F:74:C7:96:52:36 Certificate issuer: /CN=E3FB5E3343EC63D705FF51B645113F74C7965236 Certificate serial: 65337213F5EA114128AEAA574EB014564D42CD30 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft Manifest number: 78 Signing time: Sat 26 Apr 2025 07:11:23 +0000 Manifest this update: Sat 26 Apr 2025 07:06:22 +0000 Manifest next update: Tue 29 Apr 2025 12:55:22 +0000 Files and hashes: 1: 3136302e32352e3232322e302f32332d3233203d3e20313533303837.roa (hash: jz7yjPO/h0Hd3tRfN+ZclqniexoPCfBHldRalYARglE=) 2: 3136302e32352e3232332e302f32342d3234203d3e20313533303837.roa (hash: uhnIJdLtefBKzdvxmoXqy4MkPaqyIvVlQc7Roas8llw=) 3: 3136302e32352e3232322e302f32342d3234203d3e20313533303837.roa (hash: fko1jOuBFtLKmds09e8hEEDpVGQwTcV/tpYHBgYWWus=) 4: E3FB5E3343EC63D705FF51B645113F74C7965236.crl (hash: Cjeh9e5UG87PF7XD4K1triJmQX7HWefWEs6pe25bNfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 12:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:33:72:13:f5:ea:11:41:28:ae:aa:57:4e:b0:14:56:4d:42:cd:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3FB5E3343EC63D705FF51B645113F74C7965236 Validity Not Before: Apr 26 07:06:22 2025 GMT Not After : Apr 29 12:55:22 2025 GMT Subject: CN=E3A15436E01FDC6BD1D4693F60DEF057A99F8A1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1a:87:58:7c:ec:71:9d:48:a7:3c:98:41:92: c9:ba:87:45:f8:a9:73:47:b7:f1:03:f8:51:52:fe: e7:dd:06:33:6e:60:77:70:51:a9:c6:05:99:2c:8e: 46:55:4d:93:d0:f8:f5:36:9f:34:c9:47:52:4b:ff: d2:46:b7:fc:7e:df:bc:6b:cb:a4:12:e5:73:4c:c9: a4:37:79:41:41:2b:9b:e6:55:a9:fe:1c:2d:98:4d: 40:83:f8:3a:a5:06:33:90:5e:1a:ed:8a:3e:85:2b: f1:7a:a7:da:63:12:13:ab:b0:eb:a0:0f:96:46:0c: 01:b4:dd:b6:a1:25:26:e1:e0:8e:77:61:6f:b3:d2: c9:02:07:45:d7:f5:df:ad:8a:0d:82:a9:02:38:7d: 8d:d3:f0:d4:5d:21:b2:f0:9d:ff:71:2a:29:41:8d: c0:1a:2f:3d:7d:c4:a5:bc:a9:1a:50:af:d9:81:f1: 02:29:ab:1d:1e:0a:28:e0:72:b2:f9:7c:d8:d8:a3: c2:88:d7:65:59:72:bd:7f:7b:6c:11:96:d9:46:af: 4d:aa:20:61:b8:49:57:e2:26:5e:54:84:2c:b5:23: f2:2f:70:a5:fe:96:77:56:6c:af:65:b7:05:72:0f: 8b:87:ce:5a:9b:7f:23:5e:9d:6f:f7:06:ad:ad:a2: 6d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A1:54:36:E0:1F:DC:6B:D1:D4:69:3F:60:DE:F0:57:A9:9F:8A:1B X509v3 Authority Key Identifier: keyid:E3:FB:5E:33:43:EC:63:D7:05:FF:51:B6:45:11:3F:74:C7:96:52:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:eb:d2:48:e8:e8:36:65:ac:f9:e4:be:7c:46:f3:91:71:53: d2:90:40:8d:0d:1b:d8:4a:0e:5f:ef:18:e2:9c:be:ea:97:8c: 40:ba:f4:6b:26:1f:50:11:5e:02:41:11:05:cf:87:16:33:ec: 90:3e:31:64:0c:6b:91:50:9a:20:47:73:c7:6e:3c:8d:18:fc: 44:25:06:7e:95:91:78:44:8d:dc:19:1a:27:2e:4c:c9:7a:4d: 0c:75:96:89:ce:4b:7c:25:8d:ca:2e:12:72:30:6b:fd:c4:e5: a9:a2:ae:1f:e4:6c:c8:a8:4d:31:93:4e:56:82:00:da:c0:46: 01:d1:d5:02:4e:81:cc:9d:51:77:c4:e2:c3:81:ef:bd:5a:97: 1c:72:40:77:fd:19:9a:48:08:a8:da:7e:a0:d4:c3:0b:8d:71: c6:e7:5e:4b:ec:4a:09:25:94:00:70:c1:4f:81:c0:61:64:54: 2c:fb:db:82:c6:cd:6f:6d:5f:18:09:30:8d:0f:8d:c7:f1:24: 80:99:89:f6:ee:01:56:53:5e:c4:2b:6f:f9:07:e1:45:dc:69: e6:25:2b:d1:8c:a1:70:09:61:4a:f0:80:cc:66:a7:43:9c:f8: ff:20:ac:b6:be:8e:32:79:a1:04:3b:26:02:ca:c0:9e:c0:f1: de:e2:1d:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZTNyE/XqEUEorqpXTrAUVk1CzTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNGNzRD Nzk2NTIzNjAeFw0yNTA0MjYwNzA2MjJaFw0yNTA0MjkxMjU1MjJaMDMxMTAvBgNV BAMTKEUzQTE1NDM2RTAxRkRDNkJEMUQ0NjkzRjYwREVGMDU3QTk5RjhBMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFGodYfOxxnUinPJhBksm6h0X4 qXNHt/ED+FFS/ufdBjNuYHdwUanGBZksjkZVTZPQ+PU2nzTJR1JL/9JGt/x+37xr y6QS5XNMyaQ3eUFBK5vmVan+HC2YTUCD+DqlBjOQXhrtij6FK/F6p9pjEhOrsOug D5ZGDAG03bahJSbh4I53YW+z0skCB0XX9d+tig2CqQI4fY3T8NRdIbLwnf9xKilB jcAaLz19xKW8qRpQr9mB8QIpqx0eCijgcrL5fNjYo8KI12VZcr1/e2wRltlGr02q IGG4SVfiJl5UhCy1I/IvcKX+lndWbK9ltwVyD4uHzlqbfyNenW/3Bq2tom0zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU46FUNuAf3GvR1Gk/YN7wV6mfihswHwYDVR0j BBgwFoAU4/teM0PsY9cF/1G2RRE/dMeWUjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMC9FM0ZCNUUzMzQz RUM2M0Q3MDVGRjUxQjY0NTExM0Y3NEM3OTY1MjM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNGNzRDNzk2 NTIzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZDU4MTEtYmU1MC00Y2FhLTlm OTYtNjNkMzcyMDMxMWRlLzAvRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNG NzRDNzk2NTIzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErr0kjo6DZlrPnkvnxG85FxU9KQQI0NG9hK Dl/vGOKcvuqXjEC69GsmH1ARXgJBEQXPhxYz7JA+MWQMa5FQmiBHc8duPI0Y/EQl Bn6VkXhEjdwZGicuTMl6TQx1lonOS3wljcouEnIwa/3E5amirh/kbMioTTGTTlaC ANrARgHR1QJOgcydUXfE4sOB771alxxyQHf9GZpICKjafqDUwwuNccbnXkvsSgkl lABwwU+BwGFkVCz724LGzW9tXxgJMI0PjcfxJICZifbuAVZTXsQrb/kH4UXcaeYl K9GMoXAJYUrwgMxmp0Oc+P8grLa+jjJ5oQQ7JgLKwJ7A8d7iHdY= -----END CERTIFICATE-----Generated at Sun Apr 27 16:38:08 2025 by rpki-client