$ rpki-client -vvf repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.mft File: EC1B9BE63137230F6756E222019318C640EBE42E.mft (raw, json) Hash identifier: 5sy478UNztkM6XWh9KVXUmGfeADb9ZFCJP1e9zP9ZUE= Subject key identifier: 65:E0:3B:1C:58:7B:03:AE:9F:03:A7:40:0D:88:76:F9:9B:DB:B3:6F Authority key identifier: EC:1B:9B:E6:31:37:23:0F:67:56:E2:22:01:93:18:C6:40:EB:E4:2E Certificate issuer: /CN=EC1B9BE63137230F6756E222019318C640EBE42E Certificate serial: 4601DFF3220C010B2785934A18A6CC267916EFDF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EC1B9BE63137230F6756E222019318C640EBE42E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.mft Manifest number: C2 Signing time: Sun 27 Apr 2025 06:21:37 +0000 Manifest this update: Sun 27 Apr 2025 06:16:37 +0000 Manifest next update: Wed 30 Apr 2025 11:20:37 +0000 Files and hashes: 1: EC1B9BE63137230F6756E222019318C640EBE42E.crl (hash: k4FHn7kO9hpg+vDkGcOu8y+EO/4ZE1x44Q3OrWQfHw4=) 2: 3135372e31352e3136362e302f32342d3234203d3e20313532333832.roa (hash: 5wOzKGDtK4zeM+14oVf5CebWsbPEoKuI00n5y47Z804=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.crl rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EC1B9BE63137230F6756E222019318C640EBE42E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 11:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:01:df:f3:22:0c:01:0b:27:85:93:4a:18:a6:cc:26:79:16:ef:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC1B9BE63137230F6756E222019318C640EBE42E Validity Not Before: Apr 27 06:16:37 2025 GMT Not After : Apr 30 11:20:37 2025 GMT Subject: CN=65E03B1C587B03AE9F03A7400D8876F99BDBB36F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0d:fd:23:42:43:80:2f:e0:84:bd:92:29:bd: 07:a9:90:c5:f3:b1:2f:75:c3:f4:5d:c1:86:78:41: 10:e7:e6:bf:a8:99:6e:52:87:a4:5c:4e:db:e0:98: 9e:78:0a:8e:5b:a0:fe:2b:0d:47:29:85:4b:f5:86: d8:fe:78:f4:7a:8d:8d:ab:a2:da:b3:a2:5c:3e:b0: c4:f7:23:de:4f:fa:e6:5f:74:dd:55:92:f7:e5:d5: 2d:44:7f:b2:42:2e:d5:64:fe:82:0a:de:8e:20:64: f9:8d:f0:e3:13:00:d6:4c:ad:6d:d3:a3:1d:5d:c5: 90:43:2c:c8:34:07:25:c7:0f:15:d1:9f:19:4e:17: 18:b3:33:3b:52:86:f1:50:05:86:9a:7e:a3:a9:d0: c6:12:1f:55:90:50:f4:95:fc:9f:59:44:89:0c:26: 64:f7:75:60:7c:37:6e:ca:ce:ec:83:64:8d:ba:92: 02:db:2a:79:76:30:29:5b:d6:60:77:f8:aa:4e:a3: 2e:9f:b5:05:76:f7:f4:9e:05:10:b0:6f:e5:1d:f4: ff:e4:75:86:2c:96:5a:cf:9d:c5:09:1b:c3:3f:22: a2:d1:1c:74:f2:22:ec:25:d2:14:94:cc:a5:64:f1: fd:88:ea:b1:06:c6:45:7e:33:bd:8e:64:e0:5d:6f: 72:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E0:3B:1C:58:7B:03:AE:9F:03:A7:40:0D:88:76:F9:9B:DB:B3:6F X509v3 Authority Key Identifier: keyid:EC:1B:9B:E6:31:37:23:0F:67:56:E2:22:01:93:18:C6:40:EB:E4:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EC1B9BE63137230F6756E222019318C640EBE42E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:38:64:02:fa:cd:ed:66:5c:1f:bd:23:de:65:45:4a:bd:47: b2:a1:50:8f:a4:77:de:e9:fe:f4:8c:ba:4d:14:54:bf:02:ec: 9b:45:69:f2:8e:0f:35:27:7b:1c:c4:3e:b9:97:3f:f9:08:dc: 09:c0:64:2d:62:fc:8f:77:ad:11:7c:68:f7:08:a8:58:5c:61: ed:34:a9:18:56:99:c2:0c:4a:f6:e7:dd:59:ef:ca:c8:97:39: d9:d0:d6:8d:ee:7f:bd:2a:2a:7c:b9:c8:40:0c:18:19:cd:4e: a1:0b:60:12:10:50:71:d2:db:16:c4:d9:41:f2:e3:e2:1f:49: 3a:28:47:c2:96:03:39:2f:e9:9e:47:a8:c3:af:d8:6f:94:2b: 29:19:5e:1a:f3:c6:31:76:82:50:61:67:f4:ac:10:51:17:ee: 59:ad:4f:89:50:1a:b0:82:1e:8b:42:1d:83:1a:ec:6b:96:cc: dc:0e:72:f1:60:5d:0d:2f:38:b1:08:5e:06:be:fc:ae:09:13: 54:01:fe:95:4d:29:fa:10:81:23:69:bd:02:87:26:9d:22:3f: 19:ed:a1:91:5d:57:15:22:bf:aa:c7:24:42:73:50:76:92:ab: bf:bf:5d:71:29:b9:3a:f0:97:4d:ee:a4:ff:b3:c4:b4:e0:9c: d0:d8:25:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURgHf8yIMAQsnhZNKGKbMJnkW798wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMxQjlCRTYzMTM3MjMwRjY3NTZFMjIyMDE5MzE4QzY0 MEVCRTQyRTAeFw0yNTA0MjcwNjE2MzdaFw0yNTA0MzAxMTIwMzdaMDMxMTAvBgNV BAMTKDY1RTAzQjFDNTg3QjAzQUU5RjAzQTc0MDBEODg3NkY5OUJEQkIzNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvDf0jQkOAL+CEvZIpvQepkMXz sS91w/RdwYZ4QRDn5r+omW5Sh6RcTtvgmJ54Co5boP4rDUcphUv1htj+ePR6jY2r otqzolw+sMT3I95P+uZfdN1Vkvfl1S1Ef7JCLtVk/oIK3o4gZPmN8OMTANZMrW3T ox1dxZBDLMg0ByXHDxXRnxlOFxizMztShvFQBYaafqOp0MYSH1WQUPSV/J9ZRIkM JmT3dWB8N27KzuyDZI26kgLbKnl2MClb1mB3+KpOoy6ftQV29/SeBRCwb+Ud9P/k dYYsllrPncUJG8M/IqLRHHTyIuwl0hSUzKVk8f2I6rEGxkV+M72OZOBdb3IpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZeA7HFh7A66fA6dADYh2+Zvbs28wHwYDVR0j BBgwFoAU7Bub5jE3Iw9nVuIiAZMYxkDr5C4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTNhYzY2Ny00ZDllLTQ4ZDctYWZkNi04MmU5OGZhNzZjMWUvMC9FQzFCOUJFNjMx MzcyMzBGNjc1NkUyMjIwMTkzMThDNjQwRUJFNDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUMxQjlCRTYzMTM3MjMwRjY3NTZFMjIyMDE5MzE4QzY0MEVC RTQyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUzYWM2NjctNGQ5ZS00OGQ3LWFm ZDYtODJlOThmYTc2YzFlLzAvRUMxQjlCRTYzMTM3MjMwRjY3NTZFMjIyMDE5MzE4 QzY0MEVCRTQyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB04ZAL6ze1mXB+9I95lRUq9R7KhUI+kd97p /vSMuk0UVL8C7JtFafKODzUnexzEPrmXP/kI3AnAZC1i/I93rRF8aPcIqFhcYe00 qRhWmcIMSvbn3VnvysiXOdnQ1o3uf70qKny5yEAMGBnNTqELYBIQUHHS2xbE2UHy 4+IfSTooR8KWAzkv6Z5HqMOv2G+UKykZXhrzxjF2glBhZ/SsEFEX7lmtT4lQGrCC HotCHYMa7GuWzNwOcvFgXQ0vOLEIXga+/K4JE1QB/pVNKfoQgSNpvQKHJp0iPxnt oZFdVxUiv6rHJEJzUHaSq7+/XXEpuTrwl03upP+zxLTgnNDYJds= -----END CERTIFICATE-----Generated at Mon Apr 28 01:08:13 2025 by rpki-client