$ rpki-client -vvf repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft File: E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft (raw, json) Hash identifier: +FTRCYbDG8VGDpPYpzDG5Mo9ATmhxfD0sjXgv3QPud0= Subject key identifier: BD:A9:31:C0:48:44:73:57:E3:32:84:D0:4E:B5:50:BA:31:42:6B:9D Authority key identifier: E7:DC:BB:5E:91:2C:56:AB:C8:9C:BB:C8:FA:42:B5:E6:3D:15:2A:F4 Certificate issuer: /CN=E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4 Certificate serial: 6B91B5F315B29F05581F37BCAB25E8E84BDFF55F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft Manifest number: 0503 Signing time: Thu 21 Aug 2025 21:22:22 +0000 Manifest this update: Thu 21 Aug 2025 21:17:22 +0000 Manifest next update: Mon 25 Aug 2025 03:34:22 +0000 Files and hashes: 1: E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl (hash: euEPJMzs9RuqTLtKaeR5Pf546Nq8T+YX6LZIKCaOHAM=) 2: 3130332e3133392e3138362e302f32342d3234203d3e20313338383634.roa (hash: hCqKQAmBft8A8taUBcT8sOYve7SjkWXpgzjj9NA6B/s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:34:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:91:b5:f3:15:b2:9f:05:58:1f:37:bc:ab:25:e8:e8:4b:df:f5:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4 Validity Not Before: Aug 21 21:17:22 2025 GMT Not After : Aug 25 03:34:22 2025 GMT Subject: CN=BDA931C048447357E33284D04EB550BA31426B9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fc:0b:4f:05:f7:b1:bd:2d:9f:15:c4:ff:72: e7:cb:c1:0e:b9:6e:4c:5d:36:54:dd:69:f3:35:84: ce:1f:b7:32:83:a4:13:80:e0:56:8d:b2:72:92:ff: 13:d7:b7:aa:af:fd:dd:03:f8:05:7c:a6:2d:6e:89: 1b:a2:34:4b:d2:be:db:1d:59:7c:01:16:51:ff:a6: d0:32:d8:2a:94:6f:74:98:40:4b:16:84:6f:d9:c7: 7a:79:bf:07:d7:b7:d8:b9:1d:3d:df:a5:4f:29:39: 25:04:b7:3c:a8:3f:55:03:29:db:35:7d:40:5f:c7: c8:00:bf:23:29:81:ea:c3:9d:45:12:d1:c0:2d:bf: c1:9a:b3:ba:16:77:7a:c3:ab:80:4c:4b:d9:69:ab: 95:78:56:2d:41:c3:01:0c:56:32:3b:39:19:bf:8a: 01:37:72:0b:da:19:ac:da:67:1d:09:03:80:3e:a4: 75:89:34:ab:71:77:89:2a:ae:77:e9:89:88:0a:30: a2:67:98:5d:6d:7c:05:ea:d5:99:43:2a:a0:7c:1e: 1c:27:f9:5c:e5:f2:d4:b9:ed:24:8b:db:2f:77:87: 25:88:ba:48:86:77:53:bf:d9:ca:27:2f:50:3d:2d: b3:39:f2:af:43:c5:18:ee:49:17:e1:7f:3d:77:44: 30:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A9:31:C0:48:44:73:57:E3:32:84:D0:4E:B5:50:BA:31:42:6B:9D X509v3 Authority Key Identifier: keyid:E7:DC:BB:5E:91:2C:56:AB:C8:9C:BB:C8:FA:42:B5:E6:3D:15:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:bf:63:84:1b:bd:f7:dc:62:e2:8b:b5:2d:2b:25:20:f1:64: ea:63:86:ad:67:e6:ff:13:33:45:29:c1:50:d1:25:de:64:09: 6a:1f:8a:1a:53:41:b6:83:34:34:62:89:9e:da:90:ff:93:7a: 9e:b7:d3:6c:c2:18:94:1e:b0:27:86:79:9e:10:ca:15:8c:8b: b4:07:f9:04:d4:dc:56:8d:a1:31:16:66:3b:3c:3e:f2:be:fa: 57:c4:a9:ef:2d:24:74:56:13:32:77:85:b0:98:67:7c:3e:ff: 88:71:88:d3:79:34:fd:e1:da:87:d5:a0:28:8e:e2:ba:b5:28: 4d:d4:73:5a:de:73:1a:3d:85:48:db:ab:0e:18:ed:3d:44:d9: 1c:5b:c1:a1:af:80:3a:88:9a:74:6e:2d:24:53:12:b1:ef:f3: 4a:4a:9e:6a:43:21:23:00:de:c7:33:fb:cd:97:42:5e:18:f7: f1:5f:ba:47:4f:26:ef:43:51:5d:40:73:5e:41:a7:e7:3c:02: 37:15:d9:59:1b:be:75:d1:41:97:52:28:4c:b8:60:dd:a8:b8: 4a:ec:2e:b9:4f:e3:70:43:40:c0:46:29:81:b3:24:b2:44:95: a9:cd:99:75:c1:2e:42:90:52:8a:c4:87:d7:7e:06:5a:01:c9: f8:8d:7c:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa5G18xWynwVYHze8qyXo6Evf9V8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdEQ0JCNUU5MTJDNTZBQkM4OUNCQkM4RkE0MkI1RTYz RDE1MkFGNDAeFw0yNTA4MjEyMTE3MjJaFw0yNTA4MjUwMzM0MjJaMDMxMTAvBgNV BAMTKEJEQTkzMUMwNDg0NDczNTdFMzMyODREMDRFQjU1MEJBMzE0MjZCOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1/AtPBfexvS2fFcT/cufLwQ65 bkxdNlTdafM1hM4ftzKDpBOA4FaNsnKS/xPXt6qv/d0D+AV8pi1uiRuiNEvSvtsd WXwBFlH/ptAy2CqUb3SYQEsWhG/Zx3p5vwfXt9i5HT3fpU8pOSUEtzyoP1UDKds1 fUBfx8gAvyMpgerDnUUS0cAtv8Gas7oWd3rDq4BMS9lpq5V4Vi1BwwEMVjI7ORm/ igE3cgvaGazaZx0JA4A+pHWJNKtxd4kqrnfpiYgKMKJnmF1tfAXq1ZlDKqB8Hhwn +Vzl8tS57SSL2y93hyWIukiGd1O/2conL1A9LbM58q9DxRjuSRfhfz13RDAtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvakxwEhEc1fjMoTQTrVQujFCa50wHwYDVR0j BBgwFoAU59y7XpEsVqvInLvI+kK15j0VKvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDM1OGIwMC0zMWNkLTQxYTMtOTUzNi1kYmIxOTNlN2Y0ZDAvMC9FN0RDQkI1RTkx MkM1NkFCQzg5Q0JCQzhGQTQyQjVFNjNEMTUyQUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdEQ0JCNUU5MTJDNTZBQkM4OUNCQkM4RkE0MkI1RTYzRDE1 MkFGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQzNThiMDAtMzFjZC00MWEzLTk1 MzYtZGJiMTkzZTdmNGQwLzAvRTdEQ0JCNUU5MTJDNTZBQkM4OUNCQkM4RkE0MkI1 RTYzRDE1MkFGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEG/Y4QbvffcYuKLtS0rJSDxZOpjhq1n5v8T M0UpwVDRJd5kCWofihpTQbaDNDRiiZ7akP+Tep6302zCGJQesCeGeZ4QyhWMi7QH +QTU3FaNoTEWZjs8PvK++lfEqe8tJHRWEzJ3hbCYZ3w+/4hxiNN5NP3h2ofVoCiO 4rq1KE3Uc1recxo9hUjbqw4Y7T1E2RxbwaGvgDqImnRuLSRTErHv80pKnmpDISMA 3scz+82XQl4Y9/FfukdPJu9DUV1Ac15Bp+c8AjcV2VkbvnXRQZdSKEy4YN2ouErs LrlP43BDQMBGKYGzJLJElanNmXXBLkKQUorEh9d+BloByfiNfOY= -----END CERTIFICATE-----Generated at Sat Aug 23 22:44:15 2025 by rpki-client