$ rpki-client -vvf repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft File: EAD173629E4F955F44EC781A3739775E738ACCFD.mft (raw, json) Hash identifier: g2hKv0lytUXHCGRe8MUDBqXaTM5p5bo3t6ywvpc8rN8= Subject key identifier: 0E:3C:F8:9C:AE:A4:34:AF:66:F3:F7:19:6C:95:A5:5F:6D:CC:4C:BD Authority key identifier: EA:D1:73:62:9E:4F:95:5F:44:EC:78:1A:37:39:77:5E:73:8A:CC:FD Certificate issuer: /CN=EAD173629E4F955F44EC781A3739775E738ACCFD Certificate serial: 358D7C80836B7A00222E9966257BCFC590F98CD8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EAD173629E4F955F44EC781A3739775E738ACCFD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft Manifest number: 9D Signing time: Mon 28 Apr 2025 22:40:41 +0000 Manifest this update: Mon 28 Apr 2025 22:35:41 +0000 Manifest next update: Fri 02 May 2025 02:12:41 +0000 Files and hashes: 1: EAD173629E4F955F44EC781A3739775E738ACCFD.crl (hash: V0JUhwBXsO8x2qaTf+nxp1amKHah0wehVqUMOvj8bAU=) 2: 3135372e36362e32392e302f32342d3234203d3e203539323831.roa (hash: zTHLGAwQAsHOZagfs3+O24ipzV4m2EM9CneqRLVHTaQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.crl rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EAD173629E4F955F44EC781A3739775E738ACCFD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 17:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:8d:7c:80:83:6b:7a:00:22:2e:99:66:25:7b:cf:c5:90:f9:8c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EAD173629E4F955F44EC781A3739775E738ACCFD Validity Not Before: Apr 28 22:35:41 2025 GMT Not After : May 2 02:12:41 2025 GMT Subject: CN=0E3CF89CAEA434AF66F3F7196C95A55F6DCC4CBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:30:13:71:75:b5:ca:22:81:cb:08:5a:aa:dd: 5c:41:df:ce:af:af:5f:e8:69:5d:90:83:54:a1:3a: 62:0b:d2:d3:55:5a:44:5d:9d:d0:e7:d1:33:ad:f0: b1:63:cf:97:4d:f7:8a:b4:03:bc:c7:70:8b:9a:6b: ce:8d:4c:ab:9d:5e:f0:0f:e3:1b:9b:4e:0b:ac:16: e9:fa:c7:36:b6:16:cd:1c:b9:c7:d8:95:49:2b:60: 60:e9:01:f8:85:00:fd:01:b7:6b:7c:5d:b4:78:b6: 51:47:7d:6b:44:82:d2:f7:10:8e:e6:08:45:b0:48: 45:bd:42:ba:69:a5:8c:1d:2b:3d:41:e6:74:05:2c: fa:e0:c3:51:40:ad:fd:ee:c5:34:b6:8f:2a:f1:f4: 5b:60:35:3e:9b:23:42:01:3d:34:fb:13:bb:c9:4c: fa:65:0f:7f:e9:d6:f8:c8:53:f3:d3:c0:ba:6c:2b: cf:18:7b:6a:03:a5:bb:af:1f:8b:71:88:3a:2e:9c: 24:29:bc:01:1b:f5:c3:e4:e8:ca:de:23:62:63:7e: bd:ec:7f:85:92:b6:5a:2d:eb:e5:ef:72:74:ed:4d: 6d:9b:ec:80:77:56:c9:5d:57:f5:e7:11:9f:83:73: 58:12:88:6e:de:8e:54:63:73:32:0c:b5:e3:0f:f5: 35:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3C:F8:9C:AE:A4:34:AF:66:F3:F7:19:6C:95:A5:5F:6D:CC:4C:BD X509v3 Authority Key Identifier: keyid:EA:D1:73:62:9E:4F:95:5F:44:EC:78:1A:37:39:77:5E:73:8A:CC:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EAD173629E4F955F44EC781A3739775E738ACCFD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:93:16:7f:fb:60:5a:02:53:a1:88:65:5d:76:bd:ab:4c:70: 9e:76:e2:f9:1d:11:14:88:a5:21:b0:06:2e:01:15:33:3e:cb: df:a3:58:1e:1a:e5:f5:e6:a4:b6:62:1b:d0:58:68:7d:21:f0: f4:0a:b8:9f:0f:a0:7e:30:f3:05:1b:84:20:c7:d5:ba:8c:31: b9:92:37:76:cc:ec:d8:24:81:98:72:2d:38:78:6f:71:72:3f: 3a:a9:ea:38:68:ac:a9:9a:a7:31:be:83:ee:87:f9:68:8f:09: 2b:bd:26:a6:bd:71:99:ba:29:68:7e:38:cf:16:97:ff:74:02: 8b:ee:63:77:23:43:f9:4d:b3:33:9e:a0:a8:ce:27:29:07:cc: ee:d1:17:5e:25:70:be:89:4c:c3:1d:9d:6a:72:a6:54:aa:0c: 47:9f:da:f4:3a:0d:e9:aa:93:23:81:08:d8:ee:28:e2:fa:7d: 9c:96:8e:01:5d:50:bb:a0:55:e2:21:1e:b2:84:68:e6:fd:40: 04:be:97:da:0e:90:00:63:05:83:31:39:df:ca:a9:83:06:00: cd:ed:d2:e9:16:f9:0c:9e:7f:a5:f7:4f:8e:3d:e8:4e:ef:13: 5c:44:57:52:32:ef:5f:dc:20:77:3f:fb:5c:f0:ce:e0:ef:67: c5:0c:d7:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNY18gINregAiLplmJXvPxZD5jNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUFEMTczNjI5RTRGOTU1RjQ0RUM3ODFBMzczOTc3NUU3 MzhBQ0NGRDAeFw0yNTA0MjgyMjM1NDFaFw0yNTA1MDIwMjEyNDFaMDMxMTAvBgNV BAMTKDBFM0NGODlDQUVBNDM0QUY2NkYzRjcxOTZDOTVBNTVGNkRDQzRDQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyMBNxdbXKIoHLCFqq3VxB386v r1/oaV2Qg1ShOmIL0tNVWkRdndDn0TOt8LFjz5dN94q0A7zHcIuaa86NTKudXvAP 4xubTgusFun6xza2Fs0cucfYlUkrYGDpAfiFAP0Bt2t8XbR4tlFHfWtEgtL3EI7m CEWwSEW9QrpppYwdKz1B5nQFLPrgw1FArf3uxTS2jyrx9FtgNT6bI0IBPTT7E7vJ TPplD3/p1vjIU/PTwLpsK88Ye2oDpbuvH4txiDounCQpvAEb9cPk6MreI2Jjfr3s f4WStlot6+XvcnTtTW2b7IB3VsldV/XnEZ+Dc1gSiG7ejlRjczIMteMP9TUfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDjz4nK6kNK9m8/cZbJWlX23MTL0wHwYDVR0j BBgwFoAU6tFzYp5PlV9E7HgaNzl3XnOKzP0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWI0MzNhNS03MmIxLTQ2NTMtOTlkMy05NDY5YzhiOGI3NjIvMC9FQUQxNzM2MjlF NEY5NTVGNDRFQzc4MUEzNzM5Nzc1RTczOEFDQ0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUFEMTczNjI5RTRGOTU1RjQ0RUM3ODFBMzczOTc3NUU3MzhB Q0NGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFiNDMzYTUtNzJiMS00NjUzLTk5 ZDMtOTQ2OWM4YjhiNzYyLzAvRUFEMTczNjI5RTRGOTU1RjQ0RUM3ODFBMzczOTc3 NUU3MzhBQ0NGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2TFn/7YFoCU6GIZV12vatMcJ524vkdERSI pSGwBi4BFTM+y9+jWB4a5fXmpLZiG9BYaH0h8PQKuJ8PoH4w8wUbhCDH1bqMMbmS N3bM7NgkgZhyLTh4b3FyPzqp6jhorKmapzG+g+6H+WiPCSu9Jqa9cZm6KWh+OM8W l/90AovuY3cjQ/lNszOeoKjOJykHzO7RF14lcL6JTMMdnWpyplSqDEef2vQ6Demq kyOBCNjuKOL6fZyWjgFdULugVeIhHrKEaOb9QAS+l9oOkABjBYMxOd/KqYMGAM3t 0ukW+Qyef6X3T4496E7vE1xEV1Iy71/cIHc/+1zwzuDvZ8UM10I= -----END CERTIFICATE-----Generated at Tue Apr 29 06:28:06 2025 by rpki-client