$ rpki-client -vvf repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft File: E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft (raw, json) Hash identifier: bxsRgki+9CNl4KFaScnBEgjCvu5dJ8/M0BGmmoPpOaY= Subject key identifier: 98:93:07:64:56:12:00:A0:8A:32:42:57:38:01:37:6D:AD:C8:85:FA Authority key identifier: E5:3C:DD:20:4A:5D:5B:F7:88:3A:04:38:BF:C2:17:94:95:95:3A:1F Certificate issuer: /CN=E53CDD204A5D5BF7883A0438BFC2179495953A1F Certificate serial: 7219C93254DB56DA256A603D286A1504CF8BA3C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft Manifest number: 42 Signing time: Mon 28 Apr 2025 23:10:51 +0000 Manifest this update: Mon 28 Apr 2025 23:05:51 +0000 Manifest next update: Fri 02 May 2025 07:59:51 +0000 Files and hashes: 1: E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl (hash: CnjbpeDSeufHqNGqkTeRf3LYg3G3MlLHx4GdevhO41A=) 2: 3130332e332e3233322e302f32342d3234203d3e20313531353238.roa (hash: 4fYMDhNgrNIZqkjhtJ963SmEKS19mRy8ZlZYdvTh4Vc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:19:c9:32:54:db:56:da:25:6a:60:3d:28:6a:15:04:cf:8b:a3:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E53CDD204A5D5BF7883A0438BFC2179495953A1F Validity Not Before: Apr 28 23:05:51 2025 GMT Not After : May 2 07:59:51 2025 GMT Subject: CN=98930764561200A08A3242573801376DADC885FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fe:e1:0b:7c:90:4c:b1:29:6e:c8:56:90:10: 13:e5:53:14:74:9e:b2:98:ea:e4:ba:37:2f:6c:8b: 25:bc:05:78:bc:9b:1f:b3:de:13:99:fe:78:61:8b: 6b:93:e1:49:a8:ff:68:44:9e:04:fa:42:6f:77:c0: a3:98:4d:96:bc:75:b2:c1:05:b9:f4:2a:65:8f:77: 38:82:08:24:73:08:13:02:25:ab:f9:7b:f6:5e:87: 3f:8d:c2:af:c5:08:72:68:61:ed:c9:2f:f9:77:f9: 51:fb:9f:33:8f:23:7b:1a:46:a5:bb:7c:b7:8a:83: 3e:8a:ec:76:4a:20:3d:ee:fe:89:f9:22:3c:9a:be: 54:ca:89:aa:dd:6f:7d:40:ef:7a:b0:38:c0:00:e8: b4:bb:c2:a1:99:9c:11:34:0e:81:6d:58:3e:db:70: f4:b9:05:cb:ab:e1:da:d2:3a:f3:ad:ff:17:d4:b3: f2:7b:28:75:12:48:fb:df:17:e9:54:6b:0f:f1:6e: 23:ed:28:14:eb:4a:b2:9d:04:cb:24:e2:1d:59:4f: c5:6b:9a:e6:7d:76:2b:6c:39:e4:96:93:0d:c7:ea: 3b:17:fc:38:07:74:65:c5:cb:0d:f5:4e:c5:ea:20: cb:5a:78:0b:b3:35:b8:2a:f1:75:8a:2b:dd:ac:fa: a5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:93:07:64:56:12:00:A0:8A:32:42:57:38:01:37:6D:AD:C8:85:FA X509v3 Authority Key Identifier: keyid:E5:3C:DD:20:4A:5D:5B:F7:88:3A:04:38:BF:C2:17:94:95:95:3A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E53CDD204A5D5BF7883A0438BFC2179495953A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/E53CDD204A5D5BF7883A0438BFC2179495953A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:0e:a1:7b:54:eb:65:51:b6:4f:24:b0:54:f3:64:d6:a9:50: 14:a7:a9:af:9c:47:f3:7f:79:d8:d2:55:15:76:80:bf:d1:16: 3c:59:d5:de:8f:72:3e:22:c5:c5:c4:b9:15:0b:4a:ca:52:81: 99:e0:8c:39:2b:48:5d:02:78:3b:8e:65:d4:e4:19:83:42:9b: c0:6b:61:7c:d4:83:32:7a:6f:3b:62:6c:33:92:03:47:70:d8: a8:7e:a8:6b:1b:06:38:89:20:01:8d:77:88:eb:ab:5a:d3:83: ea:94:8c:d9:03:06:79:ba:39:99:51:28:9c:ec:a6:5f:f5:11: 76:d5:7e:f5:57:b8:06:f3:16:5e:72:16:b5:97:9a:7c:76:93: 1c:81:e3:4e:d8:19:8c:14:0b:d6:28:a4:b6:4d:5b:26:35:8a: 93:0b:4b:b6:0b:24:d3:db:33:89:ae:d5:14:2f:ed:e0:ad:a6: 03:0b:2c:66:b0:dc:32:d8:23:f3:d7:d7:ba:2b:87:0c:6f:15: fa:08:8c:0b:a4:f5:f0:d1:9a:df:1c:52:30:74:3f:19:bf:10: d9:69:02:ab:a8:e8:e8:67:8d:6f:17:c0:25:21:3a:08:d5:92: 04:93:ae:d4:94:77:36:4d:51:15:b6:b4:07:ab:46:00:6c:7f: 2b:25:dc:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUchnJMlTbVtolamA9KGoVBM+Lo8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUzQ0REMjA0QTVENUJGNzg4M0EwNDM4QkZDMjE3OTQ5 NTk1M0ExRjAeFw0yNTA0MjgyMzA1NTFaFw0yNTA1MDIwNzU5NTFaMDMxMTAvBgNV BAMTKDk4OTMwNzY0NTYxMjAwQTA4QTMyNDI1NzM4MDEzNzZEQURDODg1RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9/uELfJBMsSluyFaQEBPlUxR0 nrKY6uS6Ny9siyW8BXi8mx+z3hOZ/nhhi2uT4Umo/2hEngT6Qm93wKOYTZa8dbLB Bbn0KmWPdziCCCRzCBMCJav5e/Zehz+Nwq/FCHJoYe3JL/l3+VH7nzOPI3saRqW7 fLeKgz6K7HZKID3u/on5IjyavlTKiardb31A73qwOMAA6LS7wqGZnBE0DoFtWD7b cPS5Bcur4drSOvOt/xfUs/J7KHUSSPvfF+lUaw/xbiPtKBTrSrKdBMsk4h1ZT8Vr muZ9ditsOeSWkw3H6jsX/DgHdGXFyw31TsXqIMtaeAuzNbgq8XWKK92s+qU3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmJMHZFYSAKCKMkJXOAE3ba3IhfowHwYDVR0j BBgwFoAU5TzdIEpdW/eIOgQ4v8IXlJWVOh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWU3Y2EzOS04ZGJjLTQyODItYTBkMy04NDgwMjM3MjY4NjIvMC9FNTNDREQyMDRB NUQ1QkY3ODgzQTA0MzhCRkMyMTc5NDk1OTUzQTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTUzQ0REMjA0QTVENUJGNzg4M0EwNDM4QkZDMjE3OTQ5NTk1 M0ExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTllN2NhMzktOGRiYy00MjgyLWEw ZDMtODQ4MDIzNzI2ODYyLzAvRTUzQ0REMjA0QTVENUJGNzg4M0EwNDM4QkZDMjE3 OTQ5NTk1M0ExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkOoXtU62VRtk8ksFTzZNapUBSnqa+cR/N/ edjSVRV2gL/RFjxZ1d6Pcj4ixcXEuRULSspSgZngjDkrSF0CeDuOZdTkGYNCm8Br YXzUgzJ6bztibDOSA0dw2Kh+qGsbBjiJIAGNd4jrq1rTg+qUjNkDBnm6OZlRKJzs pl/1EXbVfvVXuAbzFl5yFrWXmnx2kxyB407YGYwUC9YopLZNWyY1ipMLS7YLJNPb M4mu1RQv7eCtpgMLLGaw3DLYI/PX17orhwxvFfoIjAuk9fDRmt8cUjB0Pxm/ENlp Aquo6OhnjW8XwCUhOgjVkgSTrtSUdzZNURW2tAerRgBsfysl3Ew= -----END CERTIFICATE-----Generated at Tue Apr 29 13:14:00 2025 by rpki-client