$ rpki-client -vvf repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft File: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft (raw, json) Hash identifier: WgJT68Jlxt36GB1T5+I6C73WMA0tVNQEXt4XUpRNXwA= Subject key identifier: 13:D8:D8:9F:98:BD:FF:81:93:BB:09:D9:52:CD:0A:05:C0:2D:5F:87 Authority key identifier: E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70 Certificate issuer: /CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70 Certificate serial: 7AC25533FEB7037634E5B593FEAE9214D625A26D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft Manifest number: 01ED Signing time: Sun 27 Apr 2025 22:50:55 +0000 Manifest this update: Sun 27 Apr 2025 22:45:55 +0000 Manifest next update: Thu 01 May 2025 09:14:55 +0000 Files and hashes: 1: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl (hash: bbT92G5b+YVgAhgrz6fMCtUnOE3HAPkTN7OyDObUi9U=) 2: 3130332e3138362e302e302f32332d3234203d3e20313336303532.roa (hash: YlWhhG5+SXJ+RtEZrRBNLk9BnFzp5Av7c11ptEycGe4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 09:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:c2:55:33:fe:b7:03:76:34:e5:b5:93:fe:ae:92:14:d6:25:a2:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70 Validity Not Before: Apr 27 22:45:55 2025 GMT Not After : May 1 09:14:55 2025 GMT Subject: CN=13D8D89F98BDFF8193BB09D952CD0A05C02D5F87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:45:7c:12:d5:e6:b8:f7:bf:a8:2e:70:97:fb: 39:d7:ac:3f:ab:5b:be:c0:d9:07:4f:5c:47:e7:72: f3:0e:43:d6:08:ba:92:ff:e4:7d:91:39:00:fd:6c: 4f:aa:ea:b3:8b:a0:50:6e:83:a4:2c:6f:14:d6:3b: d0:75:90:1f:c4:68:7f:af:6a:33:cc:80:99:24:e7: f2:bb:c2:29:69:43:62:49:8e:b7:f2:3e:b6:21:78: 42:b5:bd:6d:3c:bf:6b:e1:23:24:3b:30:e3:f5:db: 64:aa:e1:ea:cb:16:97:0e:68:fe:75:b6:3a:9b:6d: ca:1f:8a:f2:8e:01:53:6f:b9:43:be:6f:5f:42:2e: d5:42:da:20:20:43:82:99:56:37:fb:4e:94:22:09: ee:29:b5:96:db:c5:e8:50:08:e4:cd:91:08:e1:12: 93:80:78:8c:c4:54:c2:a9:ab:1c:de:d3:eb:14:77: 6d:28:75:43:20:b4:63:4f:67:82:b3:a6:89:ca:f7: 02:88:d3:6c:98:17:c0:dd:68:d8:bf:b9:fa:c2:d9: a3:cd:60:2f:7a:01:b0:14:b3:f1:e1:f5:5e:7c:b0: e3:21:c4:72:6b:88:25:24:c6:07:2c:23:11:a1:ab: 82:a5:e0:72:0a:d2:c9:d6:52:45:d4:1f:fa:ef:19: cd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D8:D8:9F:98:BD:FF:81:93:BB:09:D9:52:CD:0A:05:C0:2D:5F:87 X509v3 Authority Key Identifier: keyid:E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:18:44:6b:c4:3a:33:c2:7e:9d:6e:06:f7:ea:55:19:b6:d3: f8:aa:ac:63:4c:f7:be:e4:48:02:02:a0:ff:e3:1f:df:3e:29: 9d:f0:38:0b:e9:59:30:28:7b:a7:c6:d5:3d:ad:47:8a:ae:c2: 55:b8:f7:fd:54:bb:c6:de:19:ed:e8:7a:ff:15:b8:d7:02:84: 0c:93:fc:d2:02:f4:5d:0f:a5:56:8c:04:d8:60:17:41:8a:06: 82:27:74:a7:46:a9:2c:e5:e6:84:39:87:6c:b1:de:52:6b:a1: e1:44:71:cb:b8:07:db:aa:fa:f6:fa:56:1f:a2:b6:25:8e:20: bb:c6:fa:de:ea:2b:7f:04:ea:35:2d:0f:f1:74:0d:3a:77:24: 97:69:85:9c:7e:56:1e:c2:d6:11:84:28:8c:93:6b:a6:50:36: da:e6:61:30:48:0a:27:9b:a8:89:a2:9a:04:a6:ce:77:aa:b6: c5:78:57:43:63:ff:be:ad:c5:73:61:e7:23:b4:07:13:d8:42: 3d:e8:f1:96:1f:25:8b:a4:90:b7:67:1b:45:d7:7e:e6:d8:eb: b5:dc:42:41:e4:03:6e:2c:17:b8:95:df:21:c8:0d:2e:f6:c1: ea:2c:10:6f:60:8a:45:fb:82:20:85:f3:7e:8e:49:75:8e:db: ec:9a:e2:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUesJVM/63A3Y05bWT/q6SFNYlom0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0Ex QURBNUQ3MDAeFw0yNTA0MjcyMjQ1NTVaFw0yNTA1MDEwOTE0NTVaMDMxMTAvBgNV BAMTKDEzRDhEODlGOThCREZGODE5M0JCMDlEOTUyQ0QwQTA1QzAyRDVGODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKRXwS1ea497+oLnCX+znXrD+r W77A2QdPXEfncvMOQ9YIupL/5H2ROQD9bE+q6rOLoFBug6QsbxTWO9B1kB/EaH+v ajPMgJkk5/K7wilpQ2JJjrfyPrYheEK1vW08v2vhIyQ7MOP122Sq4erLFpcOaP51 tjqbbcofivKOAVNvuUO+b19CLtVC2iAgQ4KZVjf7TpQiCe4ptZbbxehQCOTNkQjh EpOAeIzEVMKpqxze0+sUd20odUMgtGNPZ4KzponK9wKI02yYF8DdaNi/ufrC2aPN YC96AbAUs/Hh9V58sOMhxHJriCUkxgcsIxGhq4Kl4HIK0snWUkXUH/rvGc3PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE9jYn5i9/4GTuwnZUs0KBcAtX4cwHwYDVR0j BBgwFoAU4JZ1Se8y2J6f8WOPzxg0ehraXXAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzdhNmRkOC1hODQzLTQ2OTgtYTVmMy0zZWVjNDY4ZDE0YTQvMC9FMDk2NzU0OUVG MzJEODlFOUZGMTYzOEZDRjE4MzQ3QTFBREE1RDcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0ExQURB NUQ3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM3YTZkZDgtYTg0My00Njk4LWE1 ZjMtM2VlYzQ2OGQxNGE0LzAvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0 N0ExQURBNUQ3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQYRGvEOjPCfp1uBvfqVRm20/iqrGNM977k SAICoP/jH98+KZ3wOAvpWTAoe6fG1T2tR4quwlW49/1Uu8beGe3oev8VuNcChAyT /NIC9F0PpVaMBNhgF0GKBoIndKdGqSzl5oQ5h2yx3lJroeFEccu4B9uq+vb6Vh+i tiWOILvG+t7qK38E6jUtD/F0DTp3JJdphZx+Vh7C1hGEKIyTa6ZQNtrmYTBICieb qImimgSmzneqtsV4V0Nj/76txXNh5yO0BxPYQj3o8ZYfJYukkLdnG0XXfubY67Xc QkHkA24sF7iV3yHIDS72weosEG9gikX7giCF836OSXWO2+ya4nE= -----END CERTIFICATE-----Generated at Tue Apr 29 23:26:37 2025 by rpki-client