$ rpki-client -vvf repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft File: E025EB5354ADB573B451D02820EA68FD4CAE920A.mft (raw, json) Hash identifier: ZfXzV8TOx2eM5r8zLBlzlPzaQtg1bngW9WTRiBUEj8k= Subject key identifier: 3D:80:8E:81:AB:01:F5:90:0D:73:B9:00:48:01:70:98:5F:1B:02:8E Authority key identifier: E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A Certificate issuer: /CN=E025EB5354ADB573B451D02820EA68FD4CAE920A Certificate serial: 2A09EC2E0724F6040CCCFAE63E5CD159D8A785A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft Manifest number: 012C Signing time: Mon 28 Apr 2025 18:20:39 +0000 Manifest this update: Mon 28 Apr 2025 18:15:39 +0000 Manifest next update: Fri 02 May 2025 01:41:39 +0000 Files and hashes: 1: E025EB5354ADB573B451D02820EA68FD4CAE920A.crl (hash: h7ZVfM147yB9nZk9VAUwomeZHBVNYr9OSutD6kszqg0=) 2: 3130332e3233302e38312e302f32342d3234203d3e20313530393631.roa (hash: 5F95RZDK27mvn3dTD3C5hpwLTOCgLX1sE5sqanqe6xQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:09:ec:2e:07:24:f6:04:0c:cc:fa:e6:3e:5c:d1:59:d8:a7:85:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E025EB5354ADB573B451D02820EA68FD4CAE920A Validity Not Before: Apr 28 18:15:39 2025 GMT Not After : May 2 01:41:39 2025 GMT Subject: CN=3D808E81AB01F5900D73B900480170985F1B028E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:7e:75:6c:8f:78:3f:23:e5:ea:80:4c:a3:86: 8f:c1:17:5b:63:4a:56:06:e0:81:f5:17:4b:da:9d: 27:fd:b0:04:c1:d5:ef:f2:2d:95:ea:34:1e:33:85: 02:8e:32:40:2c:11:c5:6f:f4:4b:5b:9a:e9:dc:8a: 7b:83:39:1e:f7:2c:5d:b2:3f:e2:97:be:d7:c1:9c: ab:47:2c:da:9c:21:2c:f6:db:6d:e4:2a:44:9e:c7: 69:8b:86:05:94:9d:0d:b7:d2:b0:dc:dd:00:9d:e2: 75:22:43:0a:7b:69:04:be:60:7f:88:b4:8f:a5:92: ff:22:b5:2c:81:63:82:8c:42:4e:6c:f1:73:cf:c0: 4a:aa:11:f6:c2:86:fd:93:b2:6b:84:54:d4:68:2e: 3c:32:b0:a3:d5:da:97:10:95:28:4d:29:36:8b:46: b9:c3:9a:1a:b1:ea:c8:ef:ea:b1:46:f2:36:71:51: 3b:0b:c8:3e:8a:96:5c:a5:6f:b7:c4:14:9c:da:da: 0d:37:50:36:37:99:74:50:de:a6:e0:a8:84:fa:a1: 35:e8:c2:2a:ea:a6:7e:df:35:47:02:37:3d:85:b5: 68:c0:bc:e0:cb:bd:c4:9f:bb:1c:14:a2:98:3a:63: 36:df:70:48:ed:86:ef:77:dd:fe:79:b6:49:f9:cc: 66:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:80:8E:81:AB:01:F5:90:0D:73:B9:00:48:01:70:98:5F:1B:02:8E X509v3 Authority Key Identifier: keyid:E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:9e:ce:1f:48:3b:23:71:57:c8:58:6c:29:31:23:21:2d:3d: 88:82:0a:4d:48:a5:fe:98:82:84:a7:f6:45:7f:0f:d4:0f:9b: af:6a:ca:b9:8c:84:64:10:91:40:b5:49:3f:4f:77:2b:d7:66: cc:d0:9a:4e:f5:2c:5e:89:ca:e0:c9:d9:3d:a7:4f:e2:e9:ba: 76:fa:c7:94:3d:f5:c5:f6:ca:ab:8e:ea:63:74:eb:df:83:82: 65:b2:fd:84:59:18:55:93:c7:f3:a0:42:71:51:50:55:21:1c: 4f:8d:11:5d:fd:d7:a1:95:d4:77:c9:0d:41:68:01:f0:5c:93: b2:83:ed:2d:48:f0:1e:ae:bb:ba:34:70:c9:3c:c0:0c:70:37: 1f:a0:dc:f5:9d:8d:c2:22:d4:76:cd:c5:8b:fe:08:55:08:17: 37:bd:84:c5:82:f8:f6:02:78:ff:c5:74:73:16:39:b1:0e:bf: 3f:c9:5d:f5:55:ae:d5:bb:20:e5:94:9b:1d:42:98:c9:07:ae: 47:28:29:79:8e:2e:de:52:cc:d6:68:10:ad:4b:fa:24:16:a1: 1e:e6:56:35:5d:ad:37:e8:29:0f:e3:51:f6:57:86:83:de:d8: f6:4a:ed:9e:b6:e3:59:62:66:44:dd:59:92:c9:8a:56:0d:36: ce:99:f5:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKgnsLgck9gQMzPrmPlzRWdinhaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4RkQ0 Q0FFOTIwQTAeFw0yNTA0MjgxODE1MzlaFw0yNTA1MDIwMTQxMzlaMDMxMTAvBgNV BAMTKDNEODA4RTgxQUIwMUY1OTAwRDczQjkwMDQ4MDE3MDk4NUYxQjAyOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtfnVsj3g/I+XqgEyjho/BF1tj SlYG4IH1F0vanSf9sATB1e/yLZXqNB4zhQKOMkAsEcVv9EtbmuncinuDOR73LF2y P+KXvtfBnKtHLNqcISz2223kKkSex2mLhgWUnQ230rDc3QCd4nUiQwp7aQS+YH+I tI+lkv8itSyBY4KMQk5s8XPPwEqqEfbChv2TsmuEVNRoLjwysKPV2pcQlShNKTaL RrnDmhqx6sjv6rFG8jZxUTsLyD6Kllylb7fEFJza2g03UDY3mXRQ3qbgqIT6oTXo wirqpn7fNUcCNz2FtWjAvODLvcSfuxwUopg6YzbfcEjthu933f55tkn5zGaVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPYCOgasB9ZANc7kASAFwmF8bAo4wHwYDVR0j BBgwFoAU4CXrU1SttXO0UdAoIOpo/UyukgowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTRhMmE0MS0yODM4LTQzNjktOTk3Yi00Mjk5ZjE3ZWVlOTAvMC9FMDI1RUI1MzU0 QURCNTczQjQ1MUQwMjgyMEVBNjhGRDRDQUU5MjBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4RkQ0Q0FF OTIwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE0YTJhNDEtMjgzOC00MzY5LTk5 N2ItNDI5OWYxN2VlZTkwLzAvRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4 RkQ0Q0FFOTIwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSezh9IOyNxV8hYbCkxIyEtPYiCCk1Ipf6Y goSn9kV/D9QPm69qyrmMhGQQkUC1ST9PdyvXZszQmk71LF6JyuDJ2T2nT+Lpunb6 x5Q99cX2yquO6mN069+DgmWy/YRZGFWTx/OgQnFRUFUhHE+NEV3916GV1HfJDUFo AfBck7KD7S1I8B6uu7o0cMk8wAxwNx+g3PWdjcIi1HbNxYv+CFUIFze9hMWC+PYC eP/FdHMWObEOvz/JXfVVrtW7IOWUmx1CmMkHrkcoKXmOLt5SzNZoEK1L+iQWoR7m VjVdrTfoKQ/jUfZXhoPe2PZK7Z6241liZkTdWZLJilYNNs6Z9VA= -----END CERTIFICATE-----Generated at Tue Apr 29 14:33:36 2025 by rpki-client