$ rpki-client -vvf repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft File: E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft (raw, json) Hash identifier: Sej3sRl4OS9q8nrIcZO6Efmdp3Q9H2TgRNL97ofnExI= Subject key identifier: 9A:0E:CF:D9:28:88:2A:FB:13:28:0C:44:9E:29:0D:2A:A5:FD:F0:9B Authority key identifier: E5:11:E1:48:06:15:E7:AF:C9:15:B8:E0:43:0D:70:CA:0B:31:D0:F0 Certificate issuer: /CN=E511E1480615E7AFC915B8E0430D70CA0B31D0F0 Certificate serial: 07AD07541C554CE260E7A4F6FE777D3EAA21EEC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft Manifest number: 04C9 Signing time: Sun 27 Apr 2025 04:50:36 +0000 Manifest this update: Sun 27 Apr 2025 04:45:36 +0000 Manifest next update: Wed 30 Apr 2025 12:17:36 +0000 Files and hashes: 1: E511E1480615E7AFC915B8E0430D70CA0B31D0F0.crl (hash: 5AxmWdlHAjGhH9JAvQYePeknOrNlLFeqdrJ/odk7RHE=) 2: 3130332e35312e34342e302f32322d3234203d3e20313333383139.roa (hash: +iPaBQP4Ys+oee6RqKOUUvjExvThvITWA8unaa0E58k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.crl rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 12:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ad:07:54:1c:55:4c:e2:60:e7:a4:f6:fe:77:7d:3e:aa:21:ee:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E511E1480615E7AFC915B8E0430D70CA0B31D0F0 Validity Not Before: Apr 27 04:45:36 2025 GMT Not After : Apr 30 12:17:36 2025 GMT Subject: CN=9A0ECFD928882AFB13280C449E290D2AA5FDF09B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c3:52:e8:af:cc:32:75:03:ab:ed:bc:99:70: 28:ec:15:73:98:b9:4f:40:d4:43:fe:d9:42:9d:75: e7:fa:59:7d:ac:11:12:49:73:79:5d:7a:91:69:18: cb:ff:03:92:73:cd:c7:77:21:61:5d:27:78:b2:df: 0c:d4:bc:ff:2a:b2:40:4c:82:f6:0f:5b:dd:c0:00: 43:75:70:91:6f:55:5a:a1:14:5f:4a:1b:81:5e:2e: fc:7f:f2:95:86:21:b7:da:e2:b9:4d:e3:23:c4:b5: 2c:6b:b4:e1:91:75:69:5f:ea:92:97:ae:a6:8d:33: 24:b4:26:05:df:f9:31:97:4e:7d:80:d9:aa:7e:c7: a7:7a:70:41:f0:43:13:6e:27:20:4f:8a:eb:e0:8e: 0a:ef:c4:6f:dc:f8:99:49:10:c6:b6:f2:14:fd:2b: 61:e2:42:fe:1d:76:af:2e:74:9d:92:61:ba:b2:1f: b9:e2:25:d2:72:82:01:8a:4a:e0:6f:74:c1:20:a4: c9:47:0b:e9:c3:ce:06:9a:b3:19:95:64:2b:b7:91: 67:16:9f:29:b6:f9:6e:30:b6:06:11:cc:03:21:bd: ee:d3:ee:a4:7b:b5:c1:26:62:66:04:87:53:d3:8e: 06:18:14:4d:fb:4d:2d:83:a1:f5:85:c4:b0:a2:8b: 97:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:0E:CF:D9:28:88:2A:FB:13:28:0C:44:9E:29:0D:2A:A5:FD:F0:9B X509v3 Authority Key Identifier: keyid:E5:11:E1:48:06:15:E7:AF:C9:15:B8:E0:43:0D:70:CA:0B:31:D0:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:d7:ea:f2:bd:0a:2d:b4:50:5d:6d:5e:91:22:af:99:11:1c: e5:5f:f0:cc:8a:64:31:2b:6f:cc:a2:27:85:93:52:51:d3:c4: 4d:02:6b:15:67:a4:82:6c:dc:fd:05:16:56:e4:1e:dc:13:43: 42:0d:0e:f4:99:ae:18:72:7e:86:8d:dd:84:92:60:e5:7a:d1: 0a:27:25:a0:9f:8f:a6:c2:73:d7:1c:9f:d9:70:cb:67:cc:79: f4:c0:73:f2:47:ca:6f:4b:18:41:ac:0d:11:16:42:86:58:d8: 01:37:1e:6b:40:28:88:cb:45:c9:73:aa:10:e6:8c:83:31:b3: 82:0e:dd:c2:1a:68:f9:66:99:c9:f0:96:ed:c5:69:b7:31:83: 4c:03:fc:0c:43:f8:0e:ca:97:c5:6a:5a:06:63:af:bb:23:b9: 2a:ed:a6:5b:71:96:10:5f:99:9f:a8:fc:c9:58:7f:c0:7e:ec: 89:50:ef:98:02:97:7b:a6:f0:f8:9a:c1:87:f3:5f:f6:42:9d: 69:96:a8:97:85:aa:18:36:3a:c3:dc:97:df:28:46:19:fe:37: 64:26:5e:eb:cb:8c:19:8b:f9:74:14:01:c7:14:87:24:76:da: 66:9a:ac:e5:f6:82:b1:3d:39:ac:85:46:c1:f0:e9:da:94:e1: 4b:82:79:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB60HVBxVTOJg56T2/nd9Pqoh7sMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUxMUUxNDgwNjE1RTdBRkM5MTVCOEUwNDMwRDcwQ0Ew QjMxRDBGMDAeFw0yNTA0MjcwNDQ1MzZaFw0yNTA0MzAxMjE3MzZaMDMxMTAvBgNV BAMTKDlBMEVDRkQ5Mjg4ODJBRkIxMzI4MEM0NDlFMjkwRDJBQTVGREYwOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqw1Lor8wydQOr7byZcCjsFXOY uU9A1EP+2UKddef6WX2sERJJc3ldepFpGMv/A5Jzzcd3IWFdJ3iy3wzUvP8qskBM gvYPW93AAEN1cJFvVVqhFF9KG4FeLvx/8pWGIbfa4rlN4yPEtSxrtOGRdWlf6pKX rqaNMyS0JgXf+TGXTn2A2ap+x6d6cEHwQxNuJyBPiuvgjgrvxG/c+JlJEMa28hT9 K2HiQv4ddq8udJ2SYbqyH7niJdJyggGKSuBvdMEgpMlHC+nDzgaasxmVZCu3kWcW nym2+W4wtgYRzAMhve7T7qR7tcEmYmYEh1PTjgYYFE37TS2DofWFxLCii5fBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmg7P2SiIKvsTKAxEnikNKqX98JswHwYDVR0j BBgwFoAU5RHhSAYV56/JFbjgQw1wygsx0PAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2NjNWZmYS01ZjYyLTQ0ZTUtOGZlMi1lZTg3NTBmMjIyMWQvMC9FNTExRTE0ODA2 MTVFN0FGQzkxNUI4RTA0MzBENzBDQTBCMzFEMEYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTUxMUUxNDgwNjE1RTdBRkM5MTVCOEUwNDMwRDcwQ0EwQjMx RDBGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdjYzVmZmEtNWY2Mi00NGU1LThm ZTItZWU4NzUwZjIyMjFkLzAvRTUxMUUxNDgwNjE1RTdBRkM5MTVCOEUwNDMwRDcw Q0EwQjMxRDBGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFbX6vK9Ci20UF1tXpEir5kRHOVf8MyKZDEr b8yiJ4WTUlHTxE0CaxVnpIJs3P0FFlbkHtwTQ0INDvSZrhhyfoaN3YSSYOV60Qon JaCfj6bCc9ccn9lwy2fMefTAc/JHym9LGEGsDREWQoZY2AE3HmtAKIjLRclzqhDm jIMxs4IO3cIaaPlmmcnwlu3Fabcxg0wD/AxD+A7Kl8VqWgZjr7sjuSrtpltxlhBf mZ+o/MlYf8B+7IlQ75gCl3um8PiawYfzX/ZCnWmWqJeFqhg2OsPcl98oRhn+N2Qm XuvLjBmL+XQUAccUhyR22maarOX2grE9OayFRsHw6dqU4UuCeXY= -----END CERTIFICATE-----Generated at Tue Apr 29 09:40:19 2025 by rpki-client