$ rpki-client -vvf repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft File: E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft (raw, json) Hash identifier: Wuiz9+j8MZ+MngJXgx0pZlh8tkmUt8l1LE6rLjg0ixQ= Subject key identifier: 30:82:B1:C4:2C:8C:1F:11:0C:9B:3F:95:73:A1:97:20:0F:D7:8C:93 Authority key identifier: E9:FC:7A:F3:FF:BA:00:98:63:D1:04:ED:E1:B4:5D:A0:59:25:35:E6 Certificate issuer: /CN=E9FC7AF3FFBA009863D104EDE1B45DA0592535E6 Certificate serial: 255EB8496A86488DACD092F24916D09F0604EB05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft Manifest number: 01F1 Signing time: Mon 28 Apr 2025 01:52:14 +0000 Manifest this update: Mon 28 Apr 2025 01:47:14 +0000 Manifest next update: Thu 01 May 2025 12:11:14 +0000 Files and hashes: 1: E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl (hash: fUWBKwk4lA3FPtqybOe8sL1SSjhVcUbhWG/DcQXAu/c=) 2: 3130332e3137352e3233362e302f32332d3234203d3e20313437313231.roa (hash: LFOqzDAyDWWdrBcQS4m60ydnXXk+fQv19GMLbDiq/ow=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 12:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:5e:b8:49:6a:86:48:8d:ac:d0:92:f2:49:16:d0:9f:06:04:eb:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9FC7AF3FFBA009863D104EDE1B45DA0592535E6 Validity Not Before: Apr 28 01:47:14 2025 GMT Not After : May 1 12:11:14 2025 GMT Subject: CN=3082B1C42C8C1F110C9B3F9573A197200FD78C93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2d:24:35:89:e8:fe:5f:a3:a5:c4:d9:d7:7f: 3a:5c:4c:01:5b:3b:c5:56:ca:55:9d:13:09:b0:4c: dd:01:ba:d6:97:84:0f:6a:c5:bd:76:c1:c2:f1:04: da:3b:17:7d:fb:7e:10:e4:7b:56:66:6d:a8:b9:2f: 1e:eb:b4:eb:e3:e2:9b:bc:00:8f:50:22:0e:e8:f9: e8:7c:84:63:56:88:bc:b8:81:e1:63:54:2f:91:a9: e4:eb:fd:72:7c:3e:f5:70:3a:3a:78:3e:db:d4:a2: 2b:52:de:ec:fe:70:6a:2f:a1:ab:17:03:48:f2:1b: 79:a4:6c:a2:23:92:be:1f:57:1e:22:a3:b5:76:80: c2:04:05:31:35:10:97:ae:ab:14:34:97:07:88:41: da:50:98:8e:1a:f3:52:ed:2a:f8:95:fc:99:9b:f9: 19:a4:c3:e7:21:a4:87:54:80:05:f8:90:94:41:b2: e6:01:1c:f2:a0:9d:97:e2:2d:05:e4:a0:37:e3:dc: 1c:1d:6c:66:cb:5b:86:72:ee:c6:0d:d3:45:25:c3: a4:03:d8:84:b2:03:41:22:87:ed:dd:64:50:2d:d3: c8:e3:fa:aa:c7:a3:0f:90:76:5d:0a:63:3b:ac:32: 57:fb:59:d2:7f:fa:df:da:38:7e:de:17:74:f4:dc: cd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:82:B1:C4:2C:8C:1F:11:0C:9B:3F:95:73:A1:97:20:0F:D7:8C:93 X509v3 Authority Key Identifier: keyid:E9:FC:7A:F3:FF:BA:00:98:63:D1:04:ED:E1:B4:5D:A0:59:25:35:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:5a:29:6b:8e:55:a0:1d:88:13:64:87:e4:7a:0a:9c:ea:f8: 01:77:60:c2:e1:49:25:1d:60:6c:e1:a2:8b:5c:ab:80:88:42: bb:aa:60:d7:4a:2e:99:15:43:16:b6:71:bc:b8:1f:c3:77:7f: eb:fe:78:00:b2:d7:36:88:1f:53:14:28:80:9d:d9:74:8b:db: d4:03:51:89:3f:85:75:1f:db:2a:11:85:4f:06:56:f4:36:d9: 94:14:43:cf:8c:e0:b9:04:c8:94:94:42:36:d5:f6:f2:41:e3: d8:53:7d:a6:a9:90:a5:7a:61:83:4e:ea:71:ac:09:7f:10:26: 7f:45:b3:8f:b3:3c:96:db:63:fb:c3:1b:1c:70:77:ea:43:1d: a9:b6:57:71:0c:c7:09:54:cb:59:10:3f:4f:2a:63:7e:97:c8: eb:33:2e:a9:91:76:e6:9e:c1:3a:71:35:79:1c:46:f1:d5:59: af:c1:ea:2a:72:c5:36:ec:58:d3:90:4d:c6:ac:b7:a6:0a:bd: 60:ab:56:bb:e8:94:20:1c:64:05:77:91:78:17:49:79:20:a5: a0:bb:a1:1c:d2:db:ee:8b:6d:2f:4b:9f:5f:6b:ae:25:4c:50: bd:e3:fe:e7:69:e7:0a:57:ab:2b:bb:a4:be:68:cc:fa:04:7b: e6:fd:34:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJV64SWqGSI2s0JLySRbQnwYE6wUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVEQTA1 OTI1MzVFNjAeFw0yNTA0MjgwMTQ3MTRaFw0yNTA1MDExMjExMTRaMDMxMTAvBgNV BAMTKDMwODJCMUM0MkM4QzFGMTEwQzlCM0Y5NTczQTE5NzIwMEZENzhDOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZLSQ1iej+X6OlxNnXfzpcTAFb O8VWylWdEwmwTN0ButaXhA9qxb12wcLxBNo7F337fhDke1Zmbai5Lx7rtOvj4pu8 AI9QIg7o+eh8hGNWiLy4geFjVC+RqeTr/XJ8PvVwOjp4PtvUoitS3uz+cGovoasX A0jyG3mkbKIjkr4fVx4io7V2gMIEBTE1EJeuqxQ0lweIQdpQmI4a81LtKviV/Jmb +Rmkw+chpIdUgAX4kJRBsuYBHPKgnZfiLQXkoDfj3BwdbGbLW4Zy7sYN00Ulw6QD 2ISyA0Eih+3dZFAt08jj+qrHow+Qdl0KYzusMlf7WdJ/+t/aOH7eF3T03M2fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMIKxxCyMHxEMmz+Vc6GXIA/XjJMwHwYDVR0j BBgwFoAU6fx68/+6AJhj0QTt4bRdoFklNeYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YjRjNzBhMS01MDM2LTQ1MGItYjkzNi01MDg0Zjc4ZjgxZWYvMC9FOUZDN0FGM0ZG QkEwMDk4NjNEMTA0RURFMUI0NURBMDU5MjUzNUU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVEQTA1OTI1 MzVFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmI0YzcwYTEtNTAzNi00NTBiLWI5 MzYtNTA4NGY3OGY4MWVmLzAvRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVE QTA1OTI1MzVFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpaKWuOVaAdiBNkh+R6Cpzq+AF3YMLhSSUd YGzhootcq4CIQruqYNdKLpkVQxa2cby4H8N3f+v+eACy1zaIH1MUKICd2XSL29QD UYk/hXUf2yoRhU8GVvQ22ZQUQ8+M4LkEyJSUQjbV9vJB49hTfaapkKV6YYNO6nGs CX8QJn9Fs4+zPJbbY/vDGxxwd+pDHam2V3EMxwlUy1kQP08qY36XyOszLqmRduae wTpxNXkcRvHVWa/B6ipyxTbsWNOQTcast6YKvWCrVrvolCAcZAV3kXgXSXkgpaC7 oRzS2+6LbS9Ln19rriVMUL3j/udp5wpXqyu7pL5ozPoEe+b9NPQ= -----END CERTIFICATE-----Generated at Wed Apr 30 03:43:33 2025 by rpki-client