$ rpki-client -vvf repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft File: E380AA52674666F5E074BF511BB72FA0713E5270.mft (raw, json) Hash identifier: dQ0opUrCUQoJB4iftTjw03vJW178nzU/965IGzzR+mU= Subject key identifier: 07:7E:D8:A2:50:20:E0:87:CE:95:C5:A5:E2:CF:B2:13:6B:51:43:67 Authority key identifier: E3:80:AA:52:67:46:66:F5:E0:74:BF:51:1B:B7:2F:A0:71:3E:52:70 Certificate issuer: /CN=E380AA52674666F5E074BF511BB72FA0713E5270 Certificate serial: 56CA5A41016126BB747F81298AAC509591A2370E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft Manifest number: D0 Signing time: Sun 29 Jun 2025 06:31:09 +0000 Manifest this update: Sun 29 Jun 2025 06:26:09 +0000 Manifest next update: Wed 02 Jul 2025 18:23:09 +0000 Files and hashes: 1: 33362e35302e34362e302f32342d3234203d3e20313338383838.roa (hash: thuZAYiRf9cIoV+ku3A0Gac0iLlUZNRvonSPzOtwW4g=) 2: 33362e35302e34372e302f32342d3234203d3e20313338383838.roa (hash: fz83fAQNZ6LIg2KoJilnb9N/Vfy7mhurHRooAOvm+QY=) 3: E380AA52674666F5E074BF511BB72FA0713E5270.crl (hash: f0HIG5PdUez9ws/1OLwacJHnD4OnBY4ieKzbWWoO5W8=) 4: 33362e35302e34362e302f32332d3233203d3e20313338383838.roa (hash: mxtXjA73LS1mZhkBSLMdwKqT16ev1fS5k+J/P85pAXY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.crl rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ca:5a:41:01:61:26:bb:74:7f:81:29:8a:ac:50:95:91:a2:37:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E380AA52674666F5E074BF511BB72FA0713E5270 Validity Not Before: Jun 29 06:26:09 2025 GMT Not After : Jul 2 18:23:09 2025 GMT Subject: CN=077ED8A25020E087CE95C5A5E2CFB2136B514367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e7:7d:3e:94:ab:0e:05:12:b2:ea:15:df:41: 72:a9:54:44:0e:07:dc:87:9b:0c:89:c0:ff:e0:f1: 73:49:f4:e7:32:7e:79:f3:f4:a8:75:1d:ea:81:43: b6:2d:07:65:82:6c:17:9e:f7:7d:9d:70:3b:b4:d2: a8:af:18:34:49:c2:00:76:30:0f:52:00:b3:48:8c: 5b:86:a1:3b:5b:6a:db:b1:e4:6a:f4:b4:42:e7:51: 2d:cd:ff:1b:31:9f:75:32:b6:ad:34:37:98:a6:d5: 29:08:1e:87:e9:a4:30:19:83:64:61:82:63:a7:69: bf:df:7c:05:4f:27:5f:45:55:c2:06:a4:0e:47:6a: a7:1f:2e:b9:a7:84:18:68:8c:a5:44:85:16:2d:16: 60:bf:ba:ae:4e:32:9c:af:35:fc:d4:3f:9a:05:40: 75:e4:41:c1:44:2a:ea:11:be:2b:7f:30:76:af:6f: 98:e4:56:0c:7b:57:f6:7b:17:34:85:86:7a:ba:e2: 64:5c:d5:6d:57:44:af:30:48:37:c4:ae:2e:88:07: 71:19:07:1a:26:bc:62:05:9b:8a:82:e5:73:73:b4: ed:35:24:e3:c7:bd:d2:12:3b:c1:88:52:1a:59:81: 00:5d:e4:6b:fd:7a:c6:cb:b0:19:65:42:90:89:7c: 70:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7E:D8:A2:50:20:E0:87:CE:95:C5:A5:E2:CF:B2:13:6B:51:43:67 X509v3 Authority Key Identifier: keyid:E3:80:AA:52:67:46:66:F5:E0:74:BF:51:1B:B7:2F:A0:71:3E:52:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:70:fa:38:ac:9c:a1:c7:04:23:52:e2:fa:bd:8c:b4:bf:54: 4a:60:b0:ac:7a:05:ed:05:ab:4f:9d:4b:98:64:fe:4a:f6:4e: 79:c0:85:55:59:cf:09:4c:2a:6e:82:16:ef:f0:ea:16:0a:fa: 68:80:9f:4a:fc:56:96:cd:c2:db:c4:7a:65:f4:8d:4a:91:7a: 80:9d:57:99:b0:fb:f9:7d:8d:26:e5:b0:78:8b:df:65:1e:4c: 1b:f7:74:0d:bd:20:0c:5b:ab:6b:4e:21:21:ab:af:fc:34:74: 57:49:a3:2f:d0:cd:4e:aa:ec:17:ef:55:eb:ec:19:a0:28:a9: 3d:d2:fb:5b:31:df:2e:b1:c6:e5:d2:ac:d4:81:7d:32:5e:f2: 5c:e4:22:18:49:df:b8:43:2c:c8:0f:c0:1a:0b:58:19:59:73: a9:03:c6:9f:a2:ba:a3:05:01:bd:f9:45:44:41:58:a0:83:4e: 03:72:f4:3e:71:8d:90:a5:1f:8b:47:54:27:54:6f:3d:95:b9: 5d:c6:32:3a:45:b6:b0:17:a2:f3:14:54:13:63:80:45:1c:1c: d3:27:4e:a4:d8:1c:0c:92:0f:77:3b:bb:c9:b3:51:ce:e0:a5: a6:c9:40:5b:69:1a:f3:86:c5:63:75:ac:7e:5b:09:ea:76:d8: 13:a1:ee:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVspaQQFhJrt0f4EpiqxQlZGiNw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM4MEFBNTI2NzQ2NjZGNUUwNzRCRjUxMUJCNzJGQTA3 MTNFNTI3MDAeFw0yNTA2MjkwNjI2MDlaFw0yNTA3MDIxODIzMDlaMDMxMTAvBgNV BAMTKDA3N0VEOEEyNTAyMEUwODdDRTk1QzVBNUUyQ0ZCMjEzNkI1MTQzNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV530+lKsOBRKy6hXfQXKpVEQO B9yHmwyJwP/g8XNJ9Ocyfnnz9Kh1HeqBQ7YtB2WCbBee932dcDu00qivGDRJwgB2 MA9SALNIjFuGoTtbatux5Gr0tELnUS3N/xsxn3Uytq00N5im1SkIHofppDAZg2Rh gmOnab/ffAVPJ19FVcIGpA5HaqcfLrmnhBhojKVEhRYtFmC/uq5OMpyvNfzUP5oF QHXkQcFEKuoRvit/MHavb5jkVgx7V/Z7FzSFhnq64mRc1W1XRK8wSDfEri6IB3EZ BxomvGIFm4qC5XNztO01JOPHvdISO8GIUhpZgQBd5Gv9esbLsBllQpCJfHDbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB37YolAg4IfOlcWl4s+yE2tRQ2cwHwYDVR0j BBgwFoAU44CqUmdGZvXgdL9RG7cvoHE+UnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjY4NDYyZS1iZmE1LTQzMzctOTE1My1jNTU2ZDlkNzcxZmEvMC9FMzgwQUE1MjY3 NDY2NkY1RTA3NEJGNTExQkI3MkZBMDcxM0U1MjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM4MEFBNTI2NzQ2NjZGNUUwNzRCRjUxMUJCNzJGQTA3MTNF NTI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI2ODQ2MmUtYmZhNS00MzM3LTkx NTMtYzU1NmQ5ZDc3MWZhLzAvRTM4MEFBNTI2NzQ2NjZGNUUwNzRCRjUxMUJCNzJG QTA3MTNFNTI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZw+jisnKHHBCNS4vq9jLS/VEpgsKx6Be0F q0+dS5hk/kr2TnnAhVVZzwlMKm6CFu/w6hYK+miAn0r8VpbNwtvEemX0jUqReoCd V5mw+/l9jSblsHiL32UeTBv3dA29IAxbq2tOISGrr/w0dFdJoy/QzU6q7BfvVevs GaAoqT3S+1sx3y6xxuXSrNSBfTJe8lzkIhhJ37hDLMgPwBoLWBlZc6kDxp+iuqMF Ab35RURBWKCDTgNy9D5xjZClH4tHVCdUbz2VuV3GMjpFtrAXovMUVBNjgEUcHNMn TqTYHAySD3c7u8mzUc7gpabJQFtpGvOGxWN1rH5bCep22BOh7u4= -----END CERTIFICATE-----Generated at Mon Jun 30 03:34:38 2025 by rpki-client