$ rpki-client -vvf repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft File: E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft (raw, json) Hash identifier: bXkyz7MCb7/PFi5MjmeqA6OE5gCSg7D/0ghkXMSBnBk= Subject key identifier: 47:1B:CA:86:2F:A0:0C:DF:50:06:24:C5:E0:08:1F:FA:5C:1D:56:F6 Authority key identifier: E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F Certificate issuer: /CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F Certificate serial: 704C3C92AA26AF000DF26C72E9BEA71BB3C588E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft Manifest number: 9D Signing time: Mon 28 Apr 2025 10:01:10 +0000 Manifest this update: Mon 28 Apr 2025 09:56:10 +0000 Manifest next update: Thu 01 May 2025 16:29:10 +0000 Files and hashes: 1: E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl (hash: yZw4+FUyUIPyqCijgxDQ7I4FcjTxSevAhTgMc/8AyZE=) 2: 3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa (hash: fkNU7FdVjKHsjFj1YpiV+gYURzvDFsZYzfTu/zHhcfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 17:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:4c:3c:92:aa:26:af:00:0d:f2:6c:72:e9:be:a7:1b:b3:c5:88:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F Validity Not Before: Apr 28 09:56:10 2025 GMT Not After : May 1 16:29:10 2025 GMT Subject: CN=471BCA862FA00CDF500624C5E0081FFA5C1D56F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:45:21:c2:85:10:0a:a8:df:43:f8:c4:4e:cc: ab:3f:1a:ae:46:ba:f1:85:ee:5f:0c:f4:e0:69:28: 32:8e:d3:f4:b0:8f:18:08:9a:1e:2c:e2:8a:aa:a4: 34:8c:10:4e:2d:90:f1:8f:f0:28:0e:4e:0d:89:a6: fc:b8:95:d9:e7:a2:d3:39:93:56:a6:fe:85:1d:90: b6:af:71:4b:d7:a0:d2:e5:6e:15:ab:2e:52:31:20: 9c:ee:ca:d0:86:1e:e3:c7:a5:d3:35:40:3f:37:33: 06:dd:0e:cc:54:3a:c3:c8:8f:87:e3:88:be:18:88: 3c:c2:34:ef:10:3e:15:07:37:d0:3b:fc:9b:2d:a7: c8:11:f6:40:d1:43:20:ca:26:7d:c7:97:ce:c5:78: a5:87:3b:03:b4:ae:73:14:ce:66:11:a4:e1:d7:3d: ac:d8:be:19:b1:3b:a8:07:8a:92:39:22:f6:89:18: 28:e7:dd:8a:2c:4c:3c:08:07:62:4f:75:f7:16:c8: c3:57:89:77:ea:ce:7c:d9:c2:8f:e2:b6:4f:f8:fd: 24:9d:5d:3f:c9:95:03:ed:69:b8:5c:ac:9c:58:71: dd:a7:ad:e6:c7:b5:3f:0f:eb:6c:47:a3:e0:9b:22: 7d:d8:ba:0c:57:7d:01:b8:8b:16:b8:51:bc:b4:0c: a0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1B:CA:86:2F:A0:0C:DF:50:06:24:C5:E0:08:1F:FA:5C:1D:56:F6 X509v3 Authority Key Identifier: keyid:E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:c9:12:68:1c:e2:bf:34:ec:57:d5:c2:45:de:fd:68:c1:89: c6:54:2c:05:3a:55:62:68:bd:9b:0a:3c:62:09:89:29:13:be: 3d:95:c9:c1:63:d4:8f:0d:a3:5d:c5:40:5d:63:6a:2f:89:c1: db:0a:55:3a:8f:fc:40:cb:1f:14:a8:48:9c:f8:da:01:d6:e3: 45:a5:a0:d1:40:21:95:f5:a8:cf:45:0e:0b:f7:7c:3a:e6:87: bd:f6:7b:c4:86:f3:77:f3:d2:e6:8d:19:6a:14:e7:6e:e8:7b: da:81:fc:da:9f:dd:ac:0d:a4:ef:28:f0:34:0a:a9:43:e7:c5: de:49:88:cc:64:f6:d4:60:de:5b:f0:ab:61:86:43:d4:f8:e7: 41:ac:fd:26:29:9e:30:52:b9:62:a3:40:b4:3c:c7:40:00:14: 60:5a:01:87:72:62:c0:6c:86:c8:3a:7d:fa:9f:9c:06:ad:3c: f0:75:25:9c:43:16:13:39:7c:ec:7f:33:5b:a7:7e:f6:06:42: 26:c6:0b:dc:06:4f:09:98:61:fa:81:65:ce:b9:79:09:c0:cd: d5:35:42:5b:fe:5d:31:c6:f4:f2:fe:8b:01:ff:f8:e2:37:75: fb:f2:72:c5:65:29:46:ff:eb:46:6b:6e:8c:6d:ed:ee:53:21: c7:2a:bc:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcEw8kqomrwAN8mxy6b6nG7PFiOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJFMDhD QzJGNUM3RjAeFw0yNTA0MjgwOTU2MTBaFw0yNTA1MDExNjI5MTBaMDMxMTAvBgNV BAMTKDQ3MUJDQTg2MkZBMDBDREY1MDA2MjRDNUUwMDgxRkZBNUMxRDU2RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClRSHChRAKqN9D+MROzKs/Gq5G uvGF7l8M9OBpKDKO0/SwjxgImh4s4oqqpDSMEE4tkPGP8CgOTg2Jpvy4ldnnotM5 k1am/oUdkLavcUvXoNLlbhWrLlIxIJzuytCGHuPHpdM1QD83MwbdDsxUOsPIj4fj iL4YiDzCNO8QPhUHN9A7/Jstp8gR9kDRQyDKJn3Hl87FeKWHOwO0rnMUzmYRpOHX PazYvhmxO6gHipI5IvaJGCjn3YosTDwIB2JPdfcWyMNXiXfqznzZwo/itk/4/SSd XT/JlQPtabhcrJxYcd2nrebHtT8P62xHo+CbIn3YugxXfQG4ixa4Uby0DKDtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURxvKhi+gDN9QBiTF4Agf+lwdVvYwHwYDVR0j BBgwFoAU6QK/TPydmX42qeGjL6ouCMwvXH8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmI0NjZjNi0zNzQzLTQ5NWYtYjFhOC0yNjA3Y2M5OTU3M2YvMC9FOTAyQkY0Q0ZD OUQ5OTdFMzZBOUUxQTMyRkFBMkUwOENDMkY1QzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJFMDhDQzJG NUM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZiNDY2YzYtMzc0My00OTVmLWIx YTgtMjYwN2NjOTk1NzNmLzAvRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJF MDhDQzJGNUM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABjJEmgc4r807FfVwkXe/WjBicZULAU6VWJo vZsKPGIJiSkTvj2VycFj1I8No13FQF1jai+JwdsKVTqP/EDLHxSoSJz42gHW40Wl oNFAIZX1qM9FDgv3fDrmh732e8SG83fz0uaNGWoU527oe9qB/Nqf3awNpO8o8DQK qUPnxd5JiMxk9tRg3lvwq2GGQ9T450Gs/SYpnjBSuWKjQLQ8x0AAFGBaAYdyYsBs hsg6ffqfnAatPPB1JZxDFhM5fOx/M1unfvYGQibGC9wGTwmYYfqBZc65eQnAzdU1 Qlv+XTHG9PL+iwH/+OI3dfvycsVlKUb/60Zrboxt7e5TIccqvEI= -----END CERTIFICATE-----Generated at Tue Apr 29 18:43:42 2025 by rpki-client