$ rpki-client -vvf repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft File: ED4F41D4EBE684D523406475FAB471CE1B24E360.mft (raw, json) Hash identifier: 8ibm7vQthgSBgv4Ume13tIsV5z0aFPm13LjtZbk+nrQ= Subject key identifier: CD:EE:0B:3C:6F:8D:14:9E:99:CF:8F:B7:47:AD:F2:1D:4B:9A:90:A0 Authority key identifier: ED:4F:41:D4:EB:E6:84:D5:23:40:64:75:FA:B4:71:CE:1B:24:E3:60 Certificate issuer: /CN=ED4F41D4EBE684D523406475FAB471CE1B24E360 Certificate serial: 0FF8CC7F802C99DE017E5C2A2119D50A3541DB01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft Manifest number: 0170 Signing time: Tue 29 Apr 2025 00:10:39 +0000 Manifest this update: Tue 29 Apr 2025 00:05:39 +0000 Manifest next update: Fri 02 May 2025 08:06:39 +0000 Files and hashes: 1: 3130332e3137352e3135362e302f32332d3234203d3e20313437313230.roa (hash: emsQJdjbYtT0renX4ejysE/MpgZNsldWDGyL3wTvHwk=) 2: 3130332e3137352e3135372e302f32342d3234203d3e20313437313230.roa (hash: PclkaQEExnEq6Plp0ETJpHDW+UGjqsl26yjUnKIcI7k=) 3: ED4F41D4EBE684D523406475FAB471CE1B24E360.crl (hash: NoYQ5ZiBTe2gR9yrBradHi2SnOVUBTCz1Q8cruMvWZI=) 4: 3130332e3137352e3135362e302f32342d3234203d3e20313437313230.roa (hash: Q0ltxebzKzXnkre7xssfVtSgnahJ7bWNS1vKESygj8c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.crl rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 08:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:f8:cc:7f:80:2c:99:de:01:7e:5c:2a:21:19:d5:0a:35:41:db:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED4F41D4EBE684D523406475FAB471CE1B24E360 Validity Not Before: Apr 29 00:05:39 2025 GMT Not After : May 2 08:06:39 2025 GMT Subject: CN=CDEE0B3C6F8D149E99CF8FB747ADF21D4B9A90A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f5:79:24:55:27:2d:e6:8e:b6:2f:aa:5b:e8: a0:f9:6c:3a:d7:5a:2d:c8:6a:07:03:98:24:9b:26: ea:aa:bd:1c:d0:5c:e5:82:08:48:40:02:a2:26:c8: 12:46:33:92:8f:1c:e4:47:9b:00:f2:f2:5c:3f:32: 8e:e9:f3:9d:b1:42:68:5f:4e:73:1e:b9:f9:0a:1c: 44:91:30:e9:9f:b9:27:91:c6:40:58:04:23:fa:dc: 6e:a7:ba:fc:7f:e0:c1:e1:92:60:73:85:6c:f6:9c: 6d:98:fd:17:7a:0f:d5:29:c9:37:1d:7d:82:05:d6: 69:eb:95:6e:b5:48:44:9b:e0:ad:bd:13:78:63:c9: 92:4c:55:3f:49:6d:a7:07:9b:90:18:16:5a:86:16: 8c:02:f5:6b:62:43:4f:73:26:60:10:c6:de:f3:99: bc:30:2f:39:d7:04:15:35:67:1a:89:e4:7b:1a:f2: 22:6a:bb:ce:41:cd:6a:1c:e8:53:fe:09:e5:7e:f8: 68:70:01:1f:0c:b6:e3:ef:fd:fd:10:f1:96:ab:40: fa:d9:18:40:09:a2:86:d7:38:92:bd:f4:72:72:8d: fe:b6:a6:c8:da:35:4d:c6:7c:12:e6:58:5a:c7:e0: 64:e6:14:19:8c:30:88:c8:6b:61:bc:fe:a2:e9:68: 6f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:EE:0B:3C:6F:8D:14:9E:99:CF:8F:B7:47:AD:F2:1D:4B:9A:90:A0 X509v3 Authority Key Identifier: keyid:ED:4F:41:D4:EB:E6:84:D5:23:40:64:75:FA:B4:71:CE:1B:24:E3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:06:b5:e9:2c:51:4e:04:49:f7:fa:dd:7f:d1:69:63:6d:a3: cf:0c:18:52:ff:b5:a9:b6:bc:d5:f4:03:e1:eb:ed:08:1f:b3: c1:50:28:57:3c:37:f9:ce:58:a0:e3:7f:75:a8:e4:ad:ad:3b: a8:a6:04:6c:0a:c2:58:1c:c1:93:03:ac:b4:15:e0:e5:37:bd: 7d:83:70:93:80:23:b5:de:82:0c:75:37:6a:9d:de:09:e8:bc: be:30:37:4c:27:9d:fb:06:5f:a9:c4:0c:bb:ab:4c:77:c9:bb: cc:61:04:66:05:e0:7a:4b:7b:b1:6d:37:9a:e5:d3:e2:cd:94: 4b:76:5e:bf:7d:93:e4:56:37:7c:4e:74:02:32:6a:17:8a:4f: 7d:4d:d4:cf:14:a1:99:ed:81:51:41:88:bd:c1:53:43:c1:a0: 1a:16:07:33:5f:3f:66:4a:87:ef:f2:4e:56:4e:e7:49:2d:f8: 74:3f:2d:d1:86:42:b5:34:52:24:8b:26:99:d9:66:37:e3:c2: 53:ef:86:4d:4f:5a:9d:40:3f:57:35:b7:fb:18:f8:9a:0c:63: 68:17:da:75:fa:e6:d0:bd:b0:26:93:23:a0:e3:0f:db:fc:72: d5:ec:5f:cc:56:92:ff:ef:7a:39:2d:b2:6b:14:53:e5:e2:00: f0:2c:ad:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD/jMf4Asmd4BflwqIRnVCjVB2wEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ0RjQxRDRFQkU2ODRENTIzNDA2NDc1RkFCNDcxQ0Ux QjI0RTM2MDAeFw0yNTA0MjkwMDA1MzlaFw0yNTA1MDIwODA2MzlaMDMxMTAvBgNV BAMTKENERUUwQjNDNkY4RDE0OUU5OUNGOEZCNzQ3QURGMjFENEI5QTkwQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA9XkkVSct5o62L6pb6KD5bDrX Wi3IagcDmCSbJuqqvRzQXOWCCEhAAqImyBJGM5KPHORHmwDy8lw/Mo7p852xQmhf TnMeufkKHESRMOmfuSeRxkBYBCP63G6nuvx/4MHhkmBzhWz2nG2Y/Rd6D9UpyTcd fYIF1mnrlW61SESb4K29E3hjyZJMVT9JbacHm5AYFlqGFowC9WtiQ09zJmAQxt7z mbwwLznXBBU1ZxqJ5Hsa8iJqu85BzWoc6FP+CeV++GhwAR8MtuPv/f0Q8ZarQPrZ GEAJoobXOJK99HJyjf62psjaNU3GfBLmWFrH4GTmFBmMMIjIa2G8/qLpaG8pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUze4LPG+NFJ6Zz4+3R63yHUuakKAwHwYDVR0j BBgwFoAU7U9B1OvmhNUjQGR1+rRxzhsk42AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmVlN2E1Zi01MTIxLTQxODEtYTYzNS0xMjFiNmU2OWFkNTkvMC9FRDRGNDFENEVC RTY4NEQ1MjM0MDY0NzVGQUI0NzFDRTFCMjRFMzYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQ0RjQxRDRFQkU2ODRENTIzNDA2NDc1RkFCNDcxQ0UxQjI0 RTM2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZlZTdhNWYtNTEyMS00MTgxLWE2 MzUtMTIxYjZlNjlhZDU5LzAvRUQ0RjQxRDRFQkU2ODRENTIzNDA2NDc1RkFCNDcx Q0UxQjI0RTM2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGoGteksUU4ESff63X/RaWNto88MGFL/tam2 vNX0A+Hr7Qgfs8FQKFc8N/nOWKDjf3Wo5K2tO6imBGwKwlgcwZMDrLQV4OU3vX2D cJOAI7Xeggx1N2qd3gnovL4wN0wnnfsGX6nEDLurTHfJu8xhBGYF4HpLe7FtN5rl 0+LNlEt2Xr99k+RWN3xOdAIyaheKT31N1M8UoZntgVFBiL3BU0PBoBoWBzNfP2ZK h+/yTlZO50kt+HQ/LdGGQrU0UiSLJpnZZjfjwlPvhk1PWp1AP1c1t/sY+JoMY2gX 2nX65tC9sCaTI6DjD9v8ctXsX8xWkv/vejktsmsUU+XiAPAsrRQ= -----END CERTIFICATE-----Generated at Tue Apr 29 17:47:49 2025 by rpki-client