$ rpki-client -vvf repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft File: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft (raw, json) Hash identifier: iWei/iXLhN/uUlXINC+imxv9fPTp9iAveGBkuFjt6ss= Subject key identifier: CB:66:2E:AF:F0:0D:0F:B4:6E:A1:10:B0:0A:F8:69:BB:9F:55:BE:CB Authority key identifier: EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 Certificate issuer: /CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Certificate serial: 41CEA8F12E07D6C48142026F4A8B2E5B0D548494 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft Manifest number: 017F Signing time: Sat 26 Apr 2025 00:41:23 +0000 Manifest this update: Sat 26 Apr 2025 00:36:23 +0000 Manifest next update: Tue 29 Apr 2025 07:53:23 +0000 Files and hashes: 1: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl (hash: zr40kgCrOjdbsXYiiPP1Nv9aIwkpJF/E08OfY2e/2v8=) 2: 3230322e34372e39322e302f32332d3234203d3e203137393935.roa (hash: BiJ73L794WTIFVs+3dlt1Nu1TwuPunFJpDTHrxt8w6o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 07:53:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ce:a8:f1:2e:07:d6:c4:81:42:02:6f:4a:8b:2e:5b:0d:54:84:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Validity Not Before: Apr 26 00:36:23 2025 GMT Not After : Apr 29 07:53:23 2025 GMT Subject: CN=CB662EAFF00D0FB46EA110B00AF869BB9F55BECB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:70:23:22:9b:f5:4a:b9:3d:d2:26:ca:ad:9f: 31:e2:1b:97:2a:86:55:46:7d:4b:d0:0d:c5:3f:c0: 85:ef:3d:7d:ea:f1:f7:5d:b3:f2:3e:1e:6c:96:9f: 88:6d:6c:f3:e8:59:d0:40:0a:00:1e:60:c0:86:14: 49:c4:6e:5e:d6:3e:d1:88:fa:1c:af:a1:e3:6b:2a: d8:c4:80:92:7b:dc:78:67:a7:e6:02:9c:69:21:fc: 48:84:36:9e:11:13:39:8c:d8:be:ef:b4:ce:2c:f5: df:78:ab:2c:db:cc:f7:46:94:05:27:74:cc:0e:31: 8c:5b:67:6b:92:9b:e5:58:d6:51:8e:49:e1:ed:5b: d3:b2:8e:18:2c:50:ed:0c:67:3c:06:51:12:b8:ff: 15:4f:60:21:9e:17:56:cf:e0:f1:75:f2:46:d7:37: 8b:94:3f:b7:40:81:50:00:1e:4b:c9:3f:dd:55:78: 88:06:9b:07:e3:54:49:36:1f:1d:61:d8:c1:9a:d5: 67:9f:bb:e0:a3:6f:ca:b0:4f:1d:2b:1a:f2:f2:87: 91:ee:34:8a:4f:c7:f5:01:1c:48:d4:b0:34:e1:62: 7e:e9:f9:0b:e5:09:4c:56:82:7b:e4:56:bc:2c:c4: 30:83:93:c4:d3:56:e5:a9:83:83:d1:8f:c6:39:1d: e6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:66:2E:AF:F0:0D:0F:B4:6E:A1:10:B0:0A:F8:69:BB:9F:55:BE:CB X509v3 Authority Key Identifier: keyid:EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:b8:b3:43:10:76:2e:55:80:d2:34:cd:a9:93:25:90:d8:76: bb:49:1b:a7:82:e2:68:4c:42:29:2f:0e:fa:7d:c6:5c:c1:89: 8d:f1:f1:98:7e:1c:d4:2b:10:30:97:cc:00:6e:8c:a5:a4:4d: 2f:78:ef:0e:09:a0:06:9e:df:c9:42:46:3b:52:80:00:9c:2e: 0d:ce:53:0d:ec:98:0e:f3:99:2e:13:9e:0a:36:c0:ba:c3:53: 53:d2:18:bc:fc:ae:a7:82:d2:81:2b:ff:8b:83:98:4d:cf:87: d7:3a:2c:57:57:a1:7a:55:c3:bd:ed:cd:c7:fa:56:ed:d7:a9: aa:5b:13:ed:ac:87:b9:54:67:c9:c2:e4:2b:a9:a9:7d:e1:be: 9c:8e:7f:b9:f8:ce:53:23:78:77:70:05:ba:73:06:ab:c3:aa: d8:ad:3f:88:77:63:32:96:5f:c5:8c:00:90:32:d2:b3:6b:cc: 7e:e3:59:83:e4:da:1d:45:a3:b0:ab:cb:72:14:37:a6:e9:d3: 6d:f7:a1:26:e4:bc:20:1e:92:c9:71:f0:7a:d5:fb:44:d4:ce: 11:94:b8:ac:2e:b1:f9:e5:48:cf:ff:9c:16:54:50:91:04:4e: 45:90:e1:e3:99:e7:45:43:4c:e9:6d:61:9f:be:c4:bc:63:31: 37:f1:f6:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQc6o8S4H1sSBQgJvSosuWw1UhJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVC REZCRDQ1NDAeFw0yNTA0MjYwMDM2MjNaFw0yNTA0MjkwNzUzMjNaMDMxMTAvBgNV BAMTKENCNjYyRUFGRjAwRDBGQjQ2RUExMTBCMDBBRjg2OUJCOUY1NUJFQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxcCMim/VKuT3SJsqtnzHiG5cq hlVGfUvQDcU/wIXvPX3q8fdds/I+HmyWn4htbPPoWdBACgAeYMCGFEnEbl7WPtGI +hyvoeNrKtjEgJJ73Hhnp+YCnGkh/EiENp4REzmM2L7vtM4s9d94qyzbzPdGlAUn dMwOMYxbZ2uSm+VY1lGOSeHtW9OyjhgsUO0MZzwGURK4/xVPYCGeF1bP4PF18kbX N4uUP7dAgVAAHkvJP91VeIgGmwfjVEk2Hx1h2MGa1Wefu+Cjb8qwTx0rGvLyh5Hu NIpPx/UBHEjUsDThYn7p+QvlCUxWgnvkVrwsxDCDk8TTVuWpg4PRj8Y5HeZZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy2Yur/AND7RuoRCwCvhpu59VvsswHwYDVR0j BBgwFoAU6l4zC/jc/20J30kHS0ayLr371FQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzcxZGI5Yi03YzQwLTQ5NjYtOTkxYi01MTM4YjM2OTMyNDYvMC9FQTVFMzMwQkY4 RENGRjZEMDlERjQ5MDc0QjQ2QjIyRUJERkJENDU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIyMkVCREZC RDQ1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM3MWRiOWItN2M0MC00OTY2LTk5 MWItNTEzOGIzNjkzMjQ2LzAvRUE1RTMzMEJGOERDRkY2RDA5REY0OTA3NEI0NkIy MkVCREZCRDQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEi4s0MQdi5VgNI0zamTJZDYdrtJG6eC4mhM QikvDvp9xlzBiY3x8Zh+HNQrEDCXzABujKWkTS947w4JoAae38lCRjtSgACcLg3O Uw3smA7zmS4Tngo2wLrDU1PSGLz8rqeC0oEr/4uDmE3Ph9c6LFdXoXpVw73tzcf6 Vu3XqapbE+2sh7lUZ8nC5CupqX3hvpyOf7n4zlMjeHdwBbpzBqvDqtitP4h3YzKW X8WMAJAy0rNrzH7jWYPk2h1Fo7Cry3IUN6bp0233oSbkvCAekslx8HrV+0TUzhGU uKwusfnlSM//nBZUUJEETkWQ4eOZ50VDTOltYZ++xLxjMTfx9tc= -----END CERTIFICATE-----Generated at Sun Apr 27 09:17:29 2025 by rpki-client