$ rpki-client -vvf repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft File: E4C33FFA425046D044E7F503AC8065468BAF739E.mft (raw, json) Hash identifier: p6sAo0uY80We8MQfVDa6ryi6t3TANQHcTXC2srRZNaU= Subject key identifier: FD:08:EB:C5:A5:11:A5:0A:48:BA:EB:6C:74:16:66:B1:08:AA:50:A2 Authority key identifier: E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E Certificate issuer: /CN=E4C33FFA425046D044E7F503AC8065468BAF739E Certificate serial: 2A750861CC75E5D75522A5E76B7B7828ED09FADB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft Manifest number: 0182 Signing time: Wed 30 Apr 2025 16:52:01 +0000 Manifest this update: Wed 30 Apr 2025 16:47:01 +0000 Manifest next update: Sat 03 May 2025 20:44:01 +0000 Files and hashes: 1: 3130332e39392e32372e302f32342d3234203d3e20313530323739.roa (hash: 4oIhooNcjswOY06c5BLFSgUgdzWhNc2IjQmbzeqQDiU=) 2: E4C33FFA425046D044E7F503AC8065468BAF739E.crl (hash: T9RR9jsvPyKgNTGGEcLfIjvqJi3Rv7jrWQOawf2Aph8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.crl rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 20:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:75:08:61:cc:75:e5:d7:55:22:a5:e7:6b:7b:78:28:ed:09:fa:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4C33FFA425046D044E7F503AC8065468BAF739E Validity Not Before: Apr 30 16:47:01 2025 GMT Not After : May 3 20:44:01 2025 GMT Subject: CN=FD08EBC5A511A50A48BAEB6C741666B108AA50A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d0:d0:f5:ed:a6:e8:77:25:c4:7b:2b:fa:e2: f6:64:a1:81:78:96:d2:8b:2d:eb:a3:13:12:77:55: 4b:d7:8b:c8:4b:ec:7b:16:22:33:76:f8:11:4f:5a: 9a:96:23:02:59:be:68:fa:48:28:84:ba:32:75:be: b5:b5:56:b5:9c:6d:17:43:e8:00:a2:92:67:e1:cd: 48:bf:7d:8c:b4:ee:99:45:36:29:0d:27:37:17:bb: 04:70:fc:1f:0d:04:57:ed:bf:2d:71:28:70:bd:70: 03:dd:2a:64:04:1a:a7:c2:7a:ce:70:ce:92:6b:b5: 4c:a8:53:49:32:45:f7:76:78:9c:10:36:fb:58:c7: e4:cd:dd:69:f8:4c:de:6d:eb:3c:40:ab:2c:aa:2e: b7:97:e6:82:b9:e0:44:d2:61:08:2f:ca:51:f9:80: b3:fc:fe:38:6f:42:d3:61:59:11:0b:74:e0:f3:ed: c6:7c:ff:5d:8b:96:6d:fc:49:25:08:a0:db:ee:77: 9f:9d:99:0f:07:65:86:cf:6d:63:84:f5:31:57:72: 82:4f:0a:bf:db:89:d0:1f:3d:2b:c4:99:5a:95:0a: 65:25:87:39:8d:c3:3f:4b:20:25:a3:e6:2e:90:ca: b7:86:d1:42:61:a1:c3:f4:98:5a:bd:8c:94:5c:23: 81:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:08:EB:C5:A5:11:A5:0A:48:BA:EB:6C:74:16:66:B1:08:AA:50:A2 X509v3 Authority Key Identifier: keyid:E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:c3:d7:91:61:16:d7:74:e7:9f:0e:7f:84:c1:d7:8c:0e:7b: d5:3a:20:4a:64:23:a9:e3:f7:48:28:86:d2:fb:20:60:44:d3: c5:64:32:a5:e0:c9:39:da:5d:55:5d:38:33:cb:dc:00:2a:f4: 3a:69:53:cd:40:8a:d7:7d:65:b0:8a:c3:17:fa:f3:7c:c8:13: 99:98:34:b0:ac:7f:04:09:d2:8f:ba:2c:50:ba:8e:70:8e:e6: 72:c6:a7:07:17:14:ff:b3:c5:8a:34:a7:06:43:9f:16:f9:6c: d1:2e:47:2a:06:50:9e:4b:17:f2:ac:af:64:a3:89:cf:25:92: e7:93:81:c5:9c:0b:65:b9:4d:00:a0:5d:aa:6f:73:86:04:f1: 82:43:be:1d:8f:75:d6:71:41:d9:84:e1:f9:27:71:6a:15:f5: 9f:88:77:46:ac:94:fc:1f:7c:7c:a4:af:88:d3:1b:8c:dc:95: d8:af:c9:48:22:c3:d2:68:49:86:f1:aa:47:ac:19:06:55:48: 95:dd:9c:ff:41:84:25:da:b4:2e:41:96:1e:88:9f:19:0f:62: cb:91:65:ee:d1:49:fa:4c:9f:25:ff:ef:cb:d8:eb:85:85:a8: 5a:36:42:d6:a3:ce:1f:d5:4d:ff:03:7f:43:ae:d0:5c:28:00: ad:ad:21:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKnUIYcx15ddVIqXna3t4KO0J+tswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1NDY4 QkFGNzM5RTAeFw0yNTA0MzAxNjQ3MDFaFw0yNTA1MDMyMDQ0MDFaMDMxMTAvBgNV BAMTKEZEMDhFQkM1QTUxMUE1MEE0OEJBRUI2Qzc0MTY2NkIxMDhBQTUwQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD0ND17abodyXEeyv64vZkoYF4 ltKLLeujExJ3VUvXi8hL7HsWIjN2+BFPWpqWIwJZvmj6SCiEujJ1vrW1VrWcbRdD 6ACikmfhzUi/fYy07plFNikNJzcXuwRw/B8NBFftvy1xKHC9cAPdKmQEGqfCes5w zpJrtUyoU0kyRfd2eJwQNvtYx+TN3Wn4TN5t6zxAqyyqLreX5oK54ETSYQgvylH5 gLP8/jhvQtNhWRELdODz7cZ8/12Llm38SSUIoNvud5+dmQ8HZYbPbWOE9TFXcoJP Cr/bidAfPSvEmVqVCmUlhzmNwz9LICWj5i6QyreG0UJhocP0mFq9jJRcI4FNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/QjrxaURpQpIuutsdBZmsQiqUKIwHwYDVR0j BBgwFoAU5MM/+kJQRtBE5/UDrIBlRouvc54wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDk3NmUyNi05NTEzLTQ4ZmYtOWY3Zi1lYTNmZGNmM2UyZTgvMC9FNEMzM0ZGQTQy NTA0NkQwNDRFN0Y1MDNBQzgwNjU0NjhCQUY3MzlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1NDY4QkFG NzM5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA5NzZlMjYtOTUxMy00OGZmLTlm N2YtZWEzZmRjZjNlMmU4LzAvRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1 NDY4QkFGNzM5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/D15FhFtd0558Of4TB14wOe9U6IEpkI6nj 90gohtL7IGBE08VkMqXgyTnaXVVdODPL3AAq9DppU81Aitd9ZbCKwxf683zIE5mY NLCsfwQJ0o+6LFC6jnCO5nLGpwcXFP+zxYo0pwZDnxb5bNEuRyoGUJ5LF/Ksr2Sj ic8lkueTgcWcC2W5TQCgXapvc4YE8YJDvh2PddZxQdmE4fkncWoV9Z+Id0aslPwf fHykr4jTG4zcldivyUgiw9JoSYbxqkesGQZVSJXdnP9BhCXatC5Blh6InxkPYsuR Ze7RSfpMnyX/78vY64WFqFo2Qtajzh/VTf8Df0Ou0FwoAK2tISg= -----END CERTIFICATE-----Generated at Thu May 1 01:17:18 2025 by rpki-client