$ rpki-client -vvf repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft File: E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft (raw, json) Hash identifier: 8oXHcZuiJownEdj+CjWQ6sl4Jq/U1SRlfjoxfBFCaic= Subject key identifier: AA:CC:84:B9:3A:4A:E4:ED:D4:FA:1B:05:4E:8B:95:A5:22:1F:43:3F Authority key identifier: E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77 Certificate issuer: /CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977 Certificate serial: 551F22DE52C92B348CD98077C72AFEC9A7574B73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft Manifest number: 04C7 Signing time: Sun 27 Apr 2025 04:11:09 +0000 Manifest this update: Sun 27 Apr 2025 04:06:09 +0000 Manifest next update: Wed 30 Apr 2025 05:37:09 +0000 Files and hashes: 1: E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl (hash: w/Qhm6NQwJlL7CvPze3oNLh9Gg53cqpnyFLpjwGjJLs=) 2: 3130332e3135332e332e302f32342d3234203d3e20313430333839.roa (hash: tOlwWAsQQh+xURJu8keK+zuzlpfYYojs9gT81FNdqI8=) 3: 3130332e3135332e322e302f32332d3233203d3e20313430333839.roa (hash: DIk57DXP9EbnAxhNqfJ9/qfaXKxZUsUMRYf4DR8Uo5I=) 4: 3130332e3135332e322e302f32342d3234203d3e20313430333839.roa (hash: 68P9YRj7qWLqaHnz/V408axn37EsS6cGwdElOJnZDvc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 05:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:1f:22:de:52:c9:2b:34:8c:d9:80:77:c7:2a:fe:c9:a7:57:4b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977 Validity Not Before: Apr 27 04:06:09 2025 GMT Not After : Apr 30 05:37:09 2025 GMT Subject: CN=AACC84B93A4AE4EDD4FA1B054E8B95A5221F433F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:58:4f:c6:f4:5d:47:06:e4:8f:9d:7a:ae:07: ad:19:1a:94:67:67:bc:15:0d:77:8b:f0:ad:64:9e: cd:13:7a:88:87:32:7e:a8:69:9c:31:35:a8:90:ff: 90:49:2f:1b:28:37:11:1c:e9:c3:ee:4f:97:cc:d6: 18:8c:31:7e:29:4b:42:5f:d4:18:a4:37:1f:1b:0f: 8d:59:1a:23:fe:11:eb:06:08:6f:d8:dc:b6:7f:e3: d0:8d:82:31:6b:6a:b8:70:e9:37:71:be:a9:fc:d7: f7:81:4c:64:8c:99:b8:9c:85:b6:0a:84:61:d8:a4: 04:3f:af:d0:a7:c6:7e:d3:c9:f1:cf:af:36:19:3e: 1c:e7:60:10:56:71:77:8a:c9:5e:28:c7:f0:0d:3b: 2d:07:4a:ea:0b:b1:7c:e5:ce:ea:67:b1:94:60:20: 60:f8:9d:c6:98:25:88:3e:3e:09:e3:19:c5:8e:9a: b0:4e:bd:bf:b4:ab:20:b2:a0:7e:5f:c9:b6:98:98: 54:bb:49:1e:b8:1e:40:de:f5:7a:0a:04:39:60:71: bf:ae:12:17:25:17:7b:4b:26:34:ac:51:be:8f:6e: 0b:e2:85:08:35:44:7e:d7:1c:9b:7a:d8:b7:f3:e6: 97:7a:9e:10:70:02:3b:41:be:28:5d:2b:1c:43:60: 16:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CC:84:B9:3A:4A:E4:ED:D4:FA:1B:05:4E:8B:95:A5:22:1F:43:3F X509v3 Authority Key Identifier: keyid:E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:36:d1:2c:18:47:35:8c:95:a3:70:5c:28:79:40:9a:4c:f2: a7:aa:f6:69:26:20:e7:1c:e8:44:8a:c7:a8:6d:77:ea:9c:83: e9:91:1d:25:90:7f:96:d1:a0:1f:55:8c:ff:f6:90:fc:7e:2d: 07:ae:b6:b5:0a:a7:ec:b0:d0:68:45:3e:18:12:9c:1d:35:d0: 9f:db:85:b5:61:53:99:b0:38:aa:5b:bd:a0:a7:dc:63:9d:96: b7:03:8e:90:22:ff:95:f2:94:fd:75:3a:41:de:20:06:25:27: 5f:e3:36:b1:b4:45:30:31:f0:bf:04:46:e9:1c:17:81:1d:1d: e7:aa:76:7e:f2:1a:e2:2e:fd:fb:71:48:07:ad:48:55:02:71: d6:de:4e:16:fd:85:a9:91:69:49:25:36:5b:0d:5f:54:30:5b: 09:d6:2c:e6:e9:80:5c:d0:94:d2:00:b5:ba:88:16:bd:81:d8: 03:05:65:d9:92:47:f3:7d:84:c1:be:fa:d7:1e:89:86:0d:45: f9:92:37:fe:92:51:9a:07:89:81:83:1f:23:68:cc:2a:1f:8c: da:ed:c4:50:05:e5:e5:2d:6d:fb:1f:57:a1:b9:0d:ef:95:90: d5:fa:fa:31:fc:0a:c5:c5:7e:09:dd:bc:b7:c8:79:fc:0b:f9: bd:28:6f:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVR8i3lLJKzSM2YB3xyr+yadXS3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIxQ0ZE ODBDRjk3NzAeFw0yNTA0MjcwNDA2MDlaFw0yNTA0MzAwNTM3MDlaMDMxMTAvBgNV BAMTKEFBQ0M4NEI5M0E0QUU0RURENEZBMUIwNTRFOEI5NUE1MjIxRjQzM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyWE/G9F1HBuSPnXquB60ZGpRn Z7wVDXeL8K1kns0TeoiHMn6oaZwxNaiQ/5BJLxsoNxEc6cPuT5fM1hiMMX4pS0Jf 1BikNx8bD41ZGiP+EesGCG/Y3LZ/49CNgjFrarhw6Tdxvqn81/eBTGSMmbichbYK hGHYpAQ/r9Cnxn7TyfHPrzYZPhznYBBWcXeKyV4ox/ANOy0HSuoLsXzlzupnsZRg IGD4ncaYJYg+PgnjGcWOmrBOvb+0qyCyoH5fybaYmFS7SR64HkDe9XoKBDlgcb+u EhclF3tLJjSsUb6PbgvihQg1RH7XHJt62Lfz5pd6nhBwAjtBvihdKxxDYBaLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqsyEuTpK5O3U+hsFTouVpSIfQz8wHwYDVR0j BBgwFoAU4ia0+oQtzmw4ZEnxT4whz9gM+XcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmMxYWI3MS05MWQwLTRmMGItYmIyOS1jYmI3ZDM1ZTc0YmEvMC9FMjI2QjRGQTg0 MkRDRTZDMzg2NDQ5RjE0RjhDMjFDRkQ4MENGOTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIxQ0ZEODBD Rjk3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWJjMWFiNzEtOTFkMC00ZjBiLWJi MjktY2JiN2QzNWU3NGJhLzAvRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIx Q0ZEODBDRjk3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACA20SwYRzWMlaNwXCh5QJpM8qeq9mkmIOcc 6ESKx6htd+qcg+mRHSWQf5bRoB9VjP/2kPx+LQeutrUKp+yw0GhFPhgSnB010J/b hbVhU5mwOKpbvaCn3GOdlrcDjpAi/5XylP11OkHeIAYlJ1/jNrG0RTAx8L8ERukc F4EdHeeqdn7yGuIu/ftxSAetSFUCcdbeThb9hamRaUklNlsNX1QwWwnWLObpgFzQ lNIAtbqIFr2B2AMFZdmSR/N9hMG++tceiYYNRfmSN/6SUZoHiYGDHyNozCofjNrt xFAF5eUtbfsfV6G5De+VkNX6+jH8CsXFfgndvLfIefwL+b0obxE= -----END CERTIFICATE-----Generated at Mon Apr 28 15:21:44 2025 by rpki-client