$ rpki-client -vvf repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft File: E89C93F089A07D03B5794B0C02239EF67E1D721C.mft (raw, json) Hash identifier: eLgzL0zuzv2tJye6gNT1AkRdkYa660+A7sW+uRKk4a8= Subject key identifier: 24:85:4E:BE:C3:2F:B0:5C:28:F7:91:60:F9:5E:01:2A:75:D1:0D:E8 Authority key identifier: E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C Certificate issuer: /CN=E89C93F089A07D03B5794B0C02239EF67E1D721C Certificate serial: 5EBB63D21E2CB6D3867DAAA4C24C9138B4A0F7AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft Manifest number: 55 Signing time: Thu 01 May 2025 22:11:53 +0000 Manifest this update: Thu 01 May 2025 22:06:53 +0000 Manifest next update: Mon 05 May 2025 08:17:53 +0000 Files and hashes: 1: 3130332e35332e32302e302f32342d3234203d3e203436303334.roa (hash: YHAiLGhk7A6ZE4X7obU+oz12qWeh7X0M2hlk6hYX8jU=) 2: 3130332e37342e3136342e302f32342d3234203d3e203436303334.roa (hash: QbAeIT3Ks6znT3hg7T+AnddPc66+/tThEc2QldGCSpw=) 3: 3130332e37342e3134332e302f32342d3234203d3e203436303334.roa (hash: JENEpsaygQnZfGVyo5B3YcYBAcWsk2wulHjqbKHp5Ko=) 4: E89C93F089A07D03B5794B0C02239EF67E1D721C.crl (hash: f99AbzYC4hOfAY8mfRt5q9UWw4q0DFFdV5BkwZMIVC0=) 5: 3230322e37302e3133362e302f32342d3234203d3e203436303334.roa (hash: 4RAp4F/7XGUDJWluz8ukd4JUDTUiL5R6CUgISPZWwHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 08:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:bb:63:d2:1e:2c:b6:d3:86:7d:aa:a4:c2:4c:91:38:b4:a0:f7:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E89C93F089A07D03B5794B0C02239EF67E1D721C Validity Not Before: May 1 22:06:53 2025 GMT Not After : May 5 08:17:53 2025 GMT Subject: CN=24854EBEC32FB05C28F79160F95E012A75D10DE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a6:58:c3:09:d1:ef:ab:a3:d3:bc:92:a4:99: b8:07:b6:10:18:a0:9d:31:04:87:ca:ef:c9:76:c4: 7a:7c:bf:9b:d8:7e:09:bb:8d:e6:3b:ca:78:09:39: 64:83:b2:68:eb:3a:6d:f0:5a:02:76:3e:fa:a3:a5: 57:70:41:24:63:75:8b:50:b6:7e:54:e8:3f:02:5a: e7:b2:8f:4e:ad:28:79:08:6e:a1:8e:fa:90:45:91: 96:72:59:78:ed:0c:8d:64:ca:e8:93:78:21:44:0c: af:1a:ea:03:fc:76:77:66:9a:15:f2:f6:fc:29:38: 98:1b:e4:bf:95:9b:ca:f0:d2:20:76:71:02:e0:b4: 38:57:f7:a3:77:0a:ee:ca:9e:18:f5:ec:b6:50:3c: 0c:32:bd:f2:3e:e4:f8:5b:d1:60:75:d8:c5:cb:c5: dd:3e:d9:95:70:23:53:d3:f6:e2:5b:ce:bf:df:17: 65:ca:5e:ca:81:16:4f:ec:dd:c5:87:e4:3c:56:1c: 0c:73:a5:a4:79:32:03:46:7f:10:4e:96:43:91:cd: ca:be:68:1e:17:74:2d:fa:7c:b0:05:0d:39:ac:ad: 08:7e:6a:3d:74:b7:37:1e:50:72:ca:05:1a:97:c8: cb:7b:2e:a4:28:dd:c7:3a:7e:b6:c4:44:af:11:ac: a7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:85:4E:BE:C3:2F:B0:5C:28:F7:91:60:F9:5E:01:2A:75:D1:0D:E8 X509v3 Authority Key Identifier: keyid:E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:77:e3:26:49:8a:cf:9c:31:c4:55:22:7f:a7:1e:d7:b5:ab: c5:10:46:72:ef:4e:db:07:69:e2:89:b6:08:0d:2e:8b:fb:c9: cd:7c:83:17:da:bf:9a:e1:d7:00:93:d4:dc:6c:62:c9:31:c1: 8d:af:5e:6d:a8:f6:5a:83:cf:fd:93:45:88:f0:53:8b:14:45: a8:a0:c0:58:ad:4c:c5:6c:1b:36:98:fc:7f:d5:89:9d:99:b9: 38:76:22:11:5a:b7:1c:ad:ad:6e:91:80:cd:8e:96:af:c8:74: 6e:4d:02:5c:a6:84:1c:8a:1b:cb:cc:54:8b:b9:33:46:00:2d: f1:28:f1:d9:4b:56:70:d6:c5:40:ca:5d:06:54:cc:0a:bf:f6: 76:04:d8:e0:68:36:b6:12:e9:92:f3:1b:68:ad:e0:e5:26:0d: 9d:6b:49:ba:bc:6e:ef:fb:60:8b:93:ab:5a:36:1e:a2:36:32: 9e:41:7b:37:e7:37:66:82:fe:50:29:55:0d:c0:97:74:f6:8b: 30:f5:b3:92:50:0d:64:e7:b0:38:d7:ed:77:91:f2:c3:84:2b: 75:0c:9a:45:40:e9:25:f4:ab:df:7a:9b:4d:54:25:d8:78:13: 71:75:37:5d:1d:f0:46:6a:64:04:66:0a:d6:86:6c:ca:42:01: b2:62:07:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXrtj0h4sttOGfaqkwkyROLSg96owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3 RTFENzIxQzAeFw0yNTA1MDEyMjA2NTNaFw0yNTA1MDUwODE3NTNaMDMxMTAvBgNV BAMTKDI0ODU0RUJFQzMyRkIwNUMyOEY3OTE2MEY5NUUwMTJBNzVEMTBERTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXpljDCdHvq6PTvJKkmbgHthAY oJ0xBIfK78l2xHp8v5vYfgm7jeY7yngJOWSDsmjrOm3wWgJ2PvqjpVdwQSRjdYtQ tn5U6D8CWueyj06tKHkIbqGO+pBFkZZyWXjtDI1kyuiTeCFEDK8a6gP8dndmmhXy 9vwpOJgb5L+Vm8rw0iB2cQLgtDhX96N3Cu7Knhj17LZQPAwyvfI+5Phb0WB12MXL xd0+2ZVwI1PT9uJbzr/fF2XKXsqBFk/s3cWH5DxWHAxzpaR5MgNGfxBOlkORzcq+ aB4XdC36fLAFDTmsrQh+aj10tzceUHLKBRqXyMt7LqQo3cc6frbERK8RrKfdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJIVOvsMvsFwo95Fg+V4BKnXRDegwHwYDVR0j BBgwFoAU6JyT8ImgfQO1eUsMAiOe9n4dchwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Zjg4NTFlNS1lZTViLTQxZTEtOWFiYy00NDI2NTFkMjcyOTQvMC9FODlDOTNGMDg5 QTA3RDAzQjU3OTRCMEMwMjIzOUVGNjdFMUQ3MjFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3RTFE NzIxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY4ODUxZTUtZWU1Yi00MWUxLTlh YmMtNDQyNjUxZDI3Mjk0LzAvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlF RjY3RTFENzIxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGl34yZJis+cMcRVIn+nHte1q8UQRnLvTtsH aeKJtggNLov7yc18gxfav5rh1wCT1NxsYskxwY2vXm2o9lqDz/2TRYjwU4sURaig wFitTMVsGzaY/H/ViZ2ZuTh2IhFatxytrW6RgM2Olq/IdG5NAlymhByKG8vMVIu5 M0YALfEo8dlLVnDWxUDKXQZUzAq/9nYE2OBoNrYS6ZLzG2it4OUmDZ1rSbq8bu/7 YIuTq1o2HqI2Mp5BezfnN2aC/lApVQ3Al3T2izD1s5JQDWTnsDjX7XeR8sOEK3UM mkVA6SX0q996m01UJdh4E3F1N10d8EZqZARmCtaGbMpCAbJiB1g= -----END CERTIFICATE-----Generated at Sat May 3 12:40:08 2025 by rpki-client