$ rpki-client -vvf repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft File: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft (raw, json) Hash identifier: 2EjozxIPClssxZwa1s5Kc2Sn5W9Xz00mAin2HLXgWMw= Subject key identifier: 27:15:9B:5C:38:F2:A5:B4:96:91:BF:A1:13:9B:A1:B1:BF:61:49:DB Authority key identifier: EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE Certificate issuer: /CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Certificate serial: 558FAA6C1FED96342CD6F86C277BCB133EB630D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft Manifest number: EF Signing time: Mon 28 Apr 2025 02:01:33 +0000 Manifest this update: Mon 28 Apr 2025 01:56:33 +0000 Manifest next update: Thu 01 May 2025 08:50:33 +0000 Files and hashes: 1: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl (hash: nPtzaS71fZO3l6ehum1PbJQPDqJdwqvedp9V2uYwn6U=) 2: 3130332e35332e32382e302f32332d3234203d3e20313339393535.roa (hash: XmUhlDLdTlUEJxqMyV5d8izbXv0SLIMUNSTUR2SbfXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 08:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:8f:aa:6c:1f:ed:96:34:2c:d6:f8:6c:27:7b:cb:13:3e:b6:30:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Validity Not Before: Apr 28 01:56:33 2025 GMT Not After : May 1 08:50:33 2025 GMT Subject: CN=27159B5C38F2A5B49691BFA1139BA1B1BF6149DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:69:9f:c7:77:23:b5:24:d3:1b:09:23:41:d1: 27:e4:36:37:79:86:06:17:ca:e1:f4:c3:49:6a:ef: ad:16:77:a6:55:45:09:51:03:4f:d5:a4:b9:98:88: 25:34:fd:24:e8:5b:d5:4c:f8:0e:f1:75:4f:e8:7b: 5b:d9:80:4c:8b:11:fb:0e:80:9c:48:ab:b6:64:36: c4:53:69:b8:0c:f8:30:81:fe:04:64:e9:20:81:68: 50:f8:b6:5c:61:4b:34:9c:76:c7:3c:90:66:c4:15: fe:59:f9:8d:11:06:10:07:01:72:32:ce:c2:71:98: b4:93:68:9a:05:c6:5d:3c:7e:da:59:46:cf:62:2b: f7:f2:69:13:2d:71:ea:0f:4b:4b:64:f6:88:98:5d: 96:17:0d:96:cb:aa:53:a4:8c:6d:d9:d6:be:3e:da: 9a:3f:c6:84:2b:16:d3:ca:56:34:bb:10:6c:c1:f0: c2:86:9b:fb:91:fb:8e:ef:4a:c8:8a:bc:41:20:ee: e8:83:a6:94:d5:3d:8a:37:1d:83:70:a7:8f:d3:70: 36:78:9d:ef:89:c0:41:0f:dd:e8:0c:4f:6c:01:a3: 19:e5:e0:4c:30:4f:eb:1d:1f:ab:4a:6c:92:37:cf: 21:11:b6:5f:3f:35:03:ca:6d:d3:f3:4b:d1:97:ad: 2c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:15:9B:5C:38:F2:A5:B4:96:91:BF:A1:13:9B:A1:B1:BF:61:49:DB X509v3 Authority Key Identifier: keyid:EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:77:71:3d:2b:73:2c:44:0e:95:12:e7:bb:30:49:a9:0c:3f: e1:86:5e:ba:fa:24:cd:4d:f1:8a:af:60:4c:b9:aa:bf:9d:06: 4f:6c:11:f3:98:bb:9a:b1:d3:46:e9:10:32:bb:1d:3a:8d:c1: 1b:a7:61:73:c8:8b:2b:49:dc:1a:46:45:77:ab:2f:42:0e:1d: 53:91:01:7e:33:e8:e7:5a:a3:c9:67:29:59:fa:b8:ad:5a:65: 23:9e:6f:77:89:d2:ef:4c:8b:50:44:f5:d3:5a:9d:ca:70:d4: 1e:1f:6e:5d:24:18:49:d2:46:9a:f0:cd:6c:a2:73:a9:2b:8e: f8:ec:b4:a6:46:7a:52:75:22:63:e6:87:74:2a:69:7c:91:9e: e9:61:29:dd:71:04:b0:05:64:1d:24:b7:4b:59:4b:e3:eb:d9: c6:e2:55:d0:da:ca:02:4e:31:e6:e6:14:94:db:31:8a:f6:1a: f7:f1:11:b4:9c:f2:95:ab:62:b6:fe:1d:ab:1a:fc:9a:64:3a: e4:79:f6:fd:66:0c:a8:43:4f:a1:53:a7:da:9b:c9:92:f1:02: 73:89:f9:32:df:9e:7a:8f:d8:e4:32:8f:2c:93:44:ca:c5:ae: 94:4c:4f:d4:94:64:8b:09:d3:59:7c:85:06:32:2d:b6:68:8a: e4:9d:d9:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVY+qbB/tljQs1vhsJ3vLEz62MNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0 NUYyOUVERTAeFw0yNTA0MjgwMTU2MzNaFw0yNTA1MDEwODUwMzNaMDMxMTAvBgNV BAMTKDI3MTU5QjVDMzhGMkE1QjQ5NjkxQkZBMTEzOUJBMUIxQkY2MTQ5REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCaZ/HdyO1JNMbCSNB0SfkNjd5 hgYXyuH0w0lq760Wd6ZVRQlRA0/VpLmYiCU0/SToW9VM+A7xdU/oe1vZgEyLEfsO gJxIq7ZkNsRTabgM+DCB/gRk6SCBaFD4tlxhSzScdsc8kGbEFf5Z+Y0RBhAHAXIy zsJxmLSTaJoFxl08ftpZRs9iK/fyaRMtceoPS0tk9oiYXZYXDZbLqlOkjG3Z1r4+ 2po/xoQrFtPKVjS7EGzB8MKGm/uR+47vSsiKvEEg7uiDppTVPYo3HYNwp4/TcDZ4 ne+JwEEP3egMT2wBoxnl4EwwT+sdH6tKbJI3zyERtl8/NQPKbdPzS9GXrSwfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJxWbXDjypbSWkb+hE5uhsb9hSdswHwYDVR0j BBgwFoAU7JqrkQBwU+Y84X+Y10/9iUXynt4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmI0M2VjOC1mNTgyLTQwMjUtOGYzNi0zY2VhNTM5ZDBiMDkvMC9FQzlBQUI5MTAw NzA1M0U2M0NFMTdGOThENzRGRkQ4OTQ1RjI5RURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0NUYy OUVERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJiNDNlYzgtZjU4Mi00MDI1LThm MzYtM2NlYTUzOWQwYjA5LzAvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZE ODk0NUYyOUVERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJB3cT0rcyxEDpUS57swSakMP+GGXrr6JM1N 8YqvYEy5qr+dBk9sEfOYu5qx00bpEDK7HTqNwRunYXPIiytJ3BpGRXerL0IOHVOR AX4z6Odao8lnKVn6uK1aZSOeb3eJ0u9Mi1BE9dNancpw1B4fbl0kGEnSRprwzWyi c6krjvjstKZGelJ1ImPmh3QqaXyRnulhKd1xBLAFZB0kt0tZS+Pr2cbiVdDaygJO MebmFJTbMYr2GvfxEbSc8pWrYrb+Hasa/JpkOuR59v1mDKhDT6FTp9qbyZLxAnOJ +TLfnnqP2OQyjyyTRMrFrpRMT9SUZIsJ01l8hQYyLbZoiuSd2fk= -----END CERTIFICATE-----Generated at Tue Apr 29 12:50:56 2025 by rpki-client