$ rpki-client -vvf repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft File: E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft (raw, json) Hash identifier: 4m1P1/y34MORNAdRcajw/V3S57PXn7vI/d++Jg1gq44= Subject key identifier: 31:F3:3F:90:77:B8:70:EC:D9:82:7F:F4:24:06:11:74:72:FE:BF:45 Authority key identifier: E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12 Certificate issuer: /CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12 Certificate serial: 33C10E7DB1EBE13E0EA28AB04AD16802B5CFA3AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft Manifest number: 0152 Signing time: Mon 28 Apr 2025 22:00:49 +0000 Manifest this update: Mon 28 Apr 2025 21:55:49 +0000 Manifest next update: Fri 02 May 2025 02:21:49 +0000 Files and hashes: 1: 3130332e3131302e33352e302f32342d3234203d3e20313530393336.roa (hash: uQLjUBISMtz6q/VlBRFK79+EJlW80V1U4JVUQySqyvM=) 2: 3130332e3131302e33352e302f32342d3234203d3e203438343635.roa (hash: DzNgbtb37FHgf8PUTDgM1fK08dGiOXOjHj1Mn5GUPVY=) 3: 3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa (hash: 1IkODvXidoD/gpowm8RlZSrde5VBfqIBySUSOGikSnc=) 4: 3130332e3131302e33342e302f32342d3234203d3e20313530393336.roa (hash: CzAMVi4LI/hA4dEq+gFLf1t2OAe5Bjc5LnZkwOWw6KQ=) 5: E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl (hash: Ru4YKz0TD5woJzoSZhkFghgDZlYHJfWJcKTugxPHedU=) 6: 3130332e3131302e33342e302f32342d3234203d3e203438343635.roa (hash: hpDDjXhf9eocrb2aWJ0rrzVtERGsFI/jmmAXSbOPclw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c1:0e:7d:b1:eb:e1:3e:0e:a2:8a:b0:4a:d1:68:02:b5:cf:a3:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12 Validity Not Before: Apr 28 21:55:49 2025 GMT Not After : May 2 02:21:49 2025 GMT Subject: CN=31F33F9077B870ECD9827FF42406117472FEBF45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:89:92:ee:77:e8:52:e0:19:2d:42:25:90:b8: 60:46:95:52:df:4b:56:71:a6:76:01:83:1c:dd:f1: 3f:85:76:d7:b8:7e:31:64:2c:da:c7:95:48:40:d8: 73:62:aa:89:56:42:03:b5:d9:e9:cf:bf:73:3c:68: 01:4e:ed:39:e6:82:6f:e6:cb:39:56:e6:25:f8:ef: 1b:99:0c:82:34:1f:1a:54:50:7c:db:a4:da:4b:bd: e2:5f:8e:03:d8:48:44:44:91:b1:20:aa:6f:1c:e8: 26:6b:78:3e:0c:99:3e:ab:38:0d:04:1a:48:2c:2e: 5c:2b:62:5a:84:d8:36:43:8c:df:a1:97:b7:2f:0a: 76:0d:f5:2c:b4:0a:8e:e8:78:9b:7e:6f:cf:3f:be: 8c:54:d1:b7:52:40:03:48:d4:cf:a0:fa:57:bf:fd: 52:42:19:67:51:93:e7:b6:6d:36:ca:56:ab:f1:05: d8:17:3e:ca:f6:46:ac:e0:f3:7e:77:84:c8:49:f3: 4b:a1:fc:e9:31:1e:c4:2b:af:c9:da:42:dc:10:3e: 70:9b:0f:03:e9:bb:7f:8f:c2:99:55:9f:d8:07:a8: be:4c:bc:cf:88:42:50:1d:26:dd:27:f5:d4:9c:65: d5:26:e7:ae:d0:c7:46:50:78:0a:c7:27:57:59:ad: 68:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F3:3F:90:77:B8:70:EC:D9:82:7F:F4:24:06:11:74:72:FE:BF:45 X509v3 Authority Key Identifier: keyid:E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:22:d0:17:82:98:28:89:51:c2:8d:db:c6:93:dd:98:99:5a: 4e:db:e4:87:5f:e1:ec:cd:e2:e0:eb:65:e2:b9:cd:9a:66:7a: b4:1b:0f:ae:01:dc:e8:f1:87:1e:31:5e:b1:b0:91:09:3e:4d: 30:62:56:c6:c0:4b:33:04:f7:48:6a:8d:8d:03:a5:2e:25:00: 81:49:73:b5:62:fd:a8:fc:eb:65:e2:fb:ce:2d:f7:d5:1e:d7: af:22:40:e0:30:1e:80:61:1f:b2:b7:6a:66:24:c8:2f:9a:3a: 73:38:b4:a1:1f:6a:84:53:05:45:6f:a7:96:c5:46:c1:b5:c1: 9f:ac:6d:e5:e7:7d:ab:17:c0:41:bf:52:b6:43:f6:29:00:5f: 6f:cd:33:01:2a:d5:a7:81:40:43:44:6a:15:65:d0:aa:8b:7f: 28:db:e4:09:52:72:eb:5a:15:5c:f6:1e:b4:bd:15:10:c3:65: 2a:d4:a5:7f:d3:26:c8:10:15:a1:87:0b:74:04:ec:b5:7b:a3: 92:31:57:19:91:b7:8d:76:9b:1a:18:1d:48:d5:0b:3c:54:36: 9f:72:7c:84:70:aa:ee:1a:4b:cd:4c:23:85:e3:b8:28:d0:87: 4a:54:0c:dc:dc:c7:ce:c9:bc:0e:d6:0d:31:b2:44:12:c8:4f: ce:39:06:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM8EOfbHr4T4OooqwStFoArXPo6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFGN0U3MzlENUU5MkNFRkFBRjhEQjRGREUyNEI0MDJE RjJGNUYxMjAeFw0yNTA0MjgyMTU1NDlaFw0yNTA1MDIwMjIxNDlaMDMxMTAvBgNV BAMTKDMxRjMzRjkwNzdCODcwRUNEOTgyN0ZGNDI0MDYxMTc0NzJGRUJGNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4iZLud+hS4BktQiWQuGBGlVLf S1ZxpnYBgxzd8T+Fdte4fjFkLNrHlUhA2HNiqolWQgO12enPv3M8aAFO7Tnmgm/m yzlW5iX47xuZDII0HxpUUHzbpNpLveJfjgPYSEREkbEgqm8c6CZreD4MmT6rOA0E GkgsLlwrYlqE2DZDjN+hl7cvCnYN9Sy0Co7oeJt+b88/voxU0bdSQANI1M+g+le/ /VJCGWdRk+e2bTbKVqvxBdgXPsr2Rqzg8353hMhJ80uh/OkxHsQrr8naQtwQPnCb DwPpu3+PwplVn9gHqL5MvM+IQlAdJt0n9dScZdUm567Qx0ZQeArHJ1dZrWgpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMfM/kHe4cOzZgn/0JAYRdHL+v0UwHwYDVR0j BBgwFoAU4ffnOdXpLO+q+NtP3iS0At8vXxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NGJmMDdjZi01MGE5LTQyOGEtOTBkMi1kNDRkNmI3NjJiNTUvMC9FMUY3RTczOUQ1 RTkyQ0VGQUFGOERCNEZERTI0QjQwMkRGMkY1RjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFGN0U3MzlENUU5MkNFRkFBRjhEQjRGREUyNEI0MDJERjJG NUYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzRiZjA3Y2YtNTBhOS00MjhhLTkw ZDItZDQ0ZDZiNzYyYjU1LzAvRTFGN0U3MzlENUU5MkNFRkFBRjhEQjRGREUyNEI0 MDJERjJGNUYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQi0BeCmCiJUcKN28aT3ZiZWk7b5Idf4ezN 4uDrZeK5zZpmerQbD64B3Ojxhx4xXrGwkQk+TTBiVsbASzME90hqjY0DpS4lAIFJ c7Vi/aj862Xi+84t99Ue168iQOAwHoBhH7K3amYkyC+aOnM4tKEfaoRTBUVvp5bF RsG1wZ+sbeXnfasXwEG/UrZD9ikAX2/NMwEq1aeBQENEahVl0KqLfyjb5AlScuta FVz2HrS9FRDDZSrUpX/TJsgQFaGHC3QE7LV7o5IxVxmRt412mxoYHUjVCzxUNp9y fIRwqu4aS81MI4XjuCjQh0pUDNzcx87JvA7WDTGyRBLIT845BoI= -----END CERTIFICATE-----Generated at Wed Apr 30 00:16:42 2025 by rpki-client