$ rpki-client -vvf repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.mft File: EF4C4D45351DBB35C40C58769D718931B1AAD47D.mft (raw, json) Hash identifier: EZCNAxEM+2feyzvaCh7T/qpcdUWLt7SQK96P/Zhi0Ko= Subject key identifier: 90:E9:9D:D1:BD:44:37:81:E1:A7:6C:35:85:D7:67:2D:17:18:2F:3F Authority key identifier: EF:4C:4D:45:35:1D:BB:35:C4:0C:58:76:9D:71:89:31:B1:AA:D4:7D Certificate issuer: /CN=EF4C4D45351DBB35C40C58769D718931B1AAD47D Certificate serial: 4930A633224EBBEE5D5623FA5709962D4684EF73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF4C4D45351DBB35C40C58769D718931B1AAD47D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.mft Manifest number: 04CC Signing time: Mon 28 Apr 2025 14:51:35 +0000 Manifest this update: Mon 28 Apr 2025 14:46:35 +0000 Manifest next update: Fri 02 May 2025 00:13:35 +0000 Files and hashes: 1: 3130332e35342e3133342e302f32342d3234203d3e203633383736.roa (hash: 0CbQfTPeAnBrUAt9K7mbtAEOAg4jYj6TSyAclEWNyE4=) 2: EF4C4D45351DBB35C40C58769D718931B1AAD47D.crl (hash: EtvqgGdsLrJNN5cJniH48aOGEmx4xjhcTv9uRxXTCJs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.crl rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF4C4D45351DBB35C40C58769D718931B1AAD47D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:13:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:30:a6:33:22:4e:bb:ee:5d:56:23:fa:57:09:96:2d:46:84:ef:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF4C4D45351DBB35C40C58769D718931B1AAD47D Validity Not Before: Apr 28 14:46:35 2025 GMT Not After : May 2 00:13:35 2025 GMT Subject: CN=90E99DD1BD443781E1A76C3585D7672D17182F3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d5:71:9e:ef:d1:c0:d2:3c:ec:8d:b7:cc:e1: f5:73:41:05:d0:cf:0c:13:4d:e3:05:f0:f6:9e:e2: 4a:37:bb:0c:cd:e7:6c:27:25:a6:24:9f:af:79:a1: ba:80:af:a6:71:f8:41:46:ee:7f:af:86:5c:d6:d9: 74:1f:b5:0f:0d:a4:66:d7:24:72:88:31:b2:f3:67: d2:ea:d5:b9:b1:9c:60:ad:63:95:17:8a:38:c3:76: f2:9a:a2:55:2e:29:63:d7:69:ee:33:14:08:ba:70: 69:4e:51:d7:db:d1:fe:a6:e1:e5:42:2d:15:4c:3d: 4b:d4:99:92:d6:6a:00:95:71:69:0d:70:61:2f:59: 63:15:d9:9d:e2:74:8b:bc:b8:27:8e:d8:9f:c8:93: 97:3c:96:19:61:02:60:6b:0e:df:84:fe:8f:aa:0d: 52:97:44:72:77:cd:f8:39:4e:cf:48:82:ca:9b:34: 25:1a:5a:87:0a:0a:e1:f6:08:ad:4e:ad:f4:34:26: 6f:35:a8:c5:0d:f0:f4:22:cd:8d:f8:03:69:cd:f6: ec:f5:01:ff:cb:ce:2c:7f:17:2f:24:25:03:26:b2: e2:90:8b:f5:81:d3:a3:3c:a3:55:b3:b8:b0:ac:9e: 87:33:95:4c:fc:30:2e:a9:1b:33:3b:3a:a0:72:15: 4a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E9:9D:D1:BD:44:37:81:E1:A7:6C:35:85:D7:67:2D:17:18:2F:3F X509v3 Authority Key Identifier: keyid:EF:4C:4D:45:35:1D:BB:35:C4:0C:58:76:9D:71:89:31:B1:AA:D4:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF4C4D45351DBB35C40C58769D718931B1AAD47D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:0b:2e:f2:63:0b:9e:f8:3f:b7:ed:61:49:eb:3f:66:cf:42: f3:de:ee:4f:50:b1:63:f6:c0:9c:7f:96:9d:0b:44:56:98:4b: 51:d4:e7:d5:fc:a5:47:a6:1f:dc:e7:13:a6:62:45:6c:c5:b9: 88:c2:2e:47:06:ac:39:6d:f2:eb:bf:86:8e:ea:11:ff:5b:93: 8f:6d:db:6f:3b:69:43:b6:dc:ab:a7:b9:63:f2:68:46:0a:83: 91:d8:cb:04:60:f4:94:42:4a:48:bb:7b:c3:dc:0e:4b:fc:6f: 30:53:67:9b:c1:51:6d:5b:dd:93:0b:3b:ec:a6:cc:db:aa:d3: 1a:cd:d4:49:0f:7e:4b:b1:ce:fb:55:d5:4a:2f:98:81:32:40: 5e:4a:1e:c3:da:b4:79:2e:06:2c:da:f5:2e:9b:61:4e:41:59: 80:61:8f:c1:1e:e4:b9:8c:77:66:27:ca:3f:95:cb:af:aa:0b: 2d:06:6d:95:98:61:b9:b0:cc:c7:4c:d8:5e:55:e0:3b:e2:ab: 17:25:37:d7:c8:3d:c9:9e:f8:99:4b:d3:9d:ce:55:d3:04:53: 60:b6:24:05:a0:c8:4a:93:2d:62:7f:69:c3:d4:79:5a:b9:f7: 7a:b2:08:2d:bb:03:72:c8:4e:3f:54:5a:b5:aa:c7:01:fd:4d: 32:8f:6c:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSTCmMyJOu+5dViP6VwmWLUaE73MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY0QzRENDUzNTFEQkIzNUM0MEM1ODc2OUQ3MTg5MzFC MUFBRDQ3RDAeFw0yNTA0MjgxNDQ2MzVaFw0yNTA1MDIwMDEzMzVaMDMxMTAvBgNV BAMTKDkwRTk5REQxQkQ0NDM3ODFFMUE3NkMzNTg1RDc2NzJEMTcxODJGM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN1XGe79HA0jzsjbfM4fVzQQXQ zwwTTeMF8Pae4ko3uwzN52wnJaYkn695obqAr6Zx+EFG7n+vhlzW2XQftQ8NpGbX JHKIMbLzZ9Lq1bmxnGCtY5UXijjDdvKaolUuKWPXae4zFAi6cGlOUdfb0f6m4eVC LRVMPUvUmZLWagCVcWkNcGEvWWMV2Z3idIu8uCeO2J/Ik5c8lhlhAmBrDt+E/o+q DVKXRHJ3zfg5Ts9IgsqbNCUaWocKCuH2CK1OrfQ0Jm81qMUN8PQizY34A2nN9uz1 Af/Lzix/Fy8kJQMmsuKQi/WB06M8o1WzuLCsnoczlUz8MC6pGzM7OqByFUpfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkOmd0b1EN4Hhp2w1hddnLRcYLz8wHwYDVR0j BBgwFoAU70xNRTUduzXEDFh2nXGJMbGq1H0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzAyODJlZi0yNTAwLTRmZmItOGQ3ZC0xZjUwNTQzNTIyN2QvMC9FRjRDNEQ0NTM1 MURCQjM1QzQwQzU4NzY5RDcxODkzMUIxQUFENDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUY0QzRENDUzNTFEQkIzNUM0MEM1ODc2OUQ3MTg5MzFCMUFB RDQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzcwMjgyZWYtMjUwMC00ZmZiLThk N2QtMWY1MDU0MzUyMjdkLzAvRUY0QzRENDUzNTFEQkIzNUM0MEM1ODc2OUQ3MTg5 MzFCMUFBRDQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQLLvJjC574P7ftYUnrP2bPQvPe7k9QsWP2 wJx/lp0LRFaYS1HU59X8pUemH9znE6ZiRWzFuYjCLkcGrDlt8uu/ho7qEf9bk49t 2287aUO23KunuWPyaEYKg5HYywRg9JRCSki7e8PcDkv8bzBTZ5vBUW1b3ZMLO+ym zNuq0xrN1EkPfkuxzvtV1UovmIEyQF5KHsPatHkuBiza9S6bYU5BWYBhj8Ee5LmM d2Ynyj+Vy6+qCy0GbZWYYbmwzMdM2F5V4DviqxclN9fIPcme+JlL053OVdMEU2C2 JAWgyEqTLWJ/acPUeVq593qyCC27A3LITj9UWrWqxwH9TTKPbEw= -----END CERTIFICATE-----Generated at Tue Apr 29 18:34:33 2025 by rpki-client