$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft File: E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft (raw, json) Hash identifier: o5x37AChg4MEqSimSQaFNnCj3VD+kz+/IABrPd3/yf0= Subject key identifier: 33:41:AD:1F:B2:D7:11:24:8B:0B:BF:33:72:8D:3D:C2:F0:6F:9E:08 Authority key identifier: E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 Certificate issuer: /CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Certificate serial: 23C17EBEA0397F21F9026E94CC6EE685492B27DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft Manifest number: A5 Signing time: Sat 28 Jun 2025 23:32:01 +0000 Manifest this update: Sat 28 Jun 2025 23:27:01 +0000 Manifest next update: Wed 02 Jul 2025 09:30:01 +0000 Files and hashes: 1: E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl (hash: /QNWjHIbu2k8JlcUdncwI8gPtTxMHCxlmU+Xgmvblac=) 2: 323030313a6466333a653563303a3a2f34382d3438203d3e20313532383231.roa (hash: pQCtNd2+RXtFnrSf+6sVuQqtxv0QiGcHuuERYnQ23YQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:c1:7e:be:a0:39:7f:21:f9:02:6e:94:cc:6e:e6:85:49:2b:27:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Validity Not Before: Jun 28 23:27:01 2025 GMT Not After : Jul 2 09:30:01 2025 GMT Subject: CN=3341AD1FB2D711248B0BBF33728D3DC2F06F9E08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:31:bf:41:6f:af:8b:4c:cf:9e:ec:41:82:9b: ba:87:6e:c2:24:ab:cf:7e:37:22:6c:e9:4c:f1:0d: ec:8f:62:a4:85:42:2f:f2:11:69:98:31:af:bf:03: b3:44:23:15:ed:17:ca:69:5c:13:9d:c1:85:6d:24: 78:29:0e:2e:31:cb:72:8f:72:6a:77:6f:1e:02:56: eb:d6:ec:4b:15:c9:ae:bb:e9:a0:cd:6b:49:e4:8c: 72:f4:7f:a3:f0:9a:6b:0f:94:fb:a5:97:64:1f:ab: f4:37:df:d8:b3:47:6d:eb:16:cd:6a:20:71:da:0c: 36:e7:44:c5:84:bd:4e:0a:a2:f2:d8:d3:92:c4:9d: b7:99:c0:a7:92:e4:a5:36:16:1d:7c:b3:a5:dc:6b: 5f:f6:c3:5f:2d:cf:68:e5:73:8f:3c:6e:2e:90:03: 37:1f:1e:ac:06:04:5b:03:a5:b3:ea:43:0e:79:9c: 61:6b:67:79:96:36:e7:6b:d1:df:10:bf:01:cd:5f: 34:a2:2b:8c:6c:ca:90:cc:8a:5e:5a:16:96:04:91: 4f:57:b8:5d:84:84:77:a5:40:28:c5:b9:71:cd:e6: 32:dc:f8:18:cf:0d:63:4f:aa:7e:bf:bc:c5:39:75: 06:47:11:c5:03:ff:84:10:5d:e8:39:ee:13:8f:7a: fc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:41:AD:1F:B2:D7:11:24:8B:0B:BF:33:72:8D:3D:C2:F0:6F:9E:08 X509v3 Authority Key Identifier: keyid:E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:0a:0d:da:29:54:c6:de:f6:3c:5b:47:25:72:a0:43:e5:2e: 07:34:12:d9:77:8f:dc:79:5d:1a:be:94:f2:1d:89:60:be:44: 9a:ee:cf:06:9a:e9:ed:3a:02:51:dc:83:fb:88:2d:59:c8:df: a0:94:d8:8d:b4:fa:4d:fc:db:cb:0a:1c:9f:04:14:b8:13:01: 58:31:7c:12:55:9d:41:24:d3:89:ec:ae:e9:ff:44:56:f7:6f: d4:a5:85:9b:c6:77:0d:97:03:d4:20:5a:1c:25:c4:2a:4f:51: 2f:a2:c5:c4:65:b2:a9:71:93:1f:15:30:fe:ab:f1:6d:4b:2a: 90:17:5f:79:b3:81:42:c6:7f:1e:4b:9b:90:ed:5e:cb:fa:bf: a1:19:97:bf:f5:05:1b:ec:f9:6d:48:60:d7:7c:2b:6d:e7:02: 85:42:58:f0:76:d8:57:2c:bc:36:cb:4c:30:d7:36:f2:ab:bb: db:30:e1:7d:bd:1e:67:61:2a:ce:7b:e1:44:73:97:0c:08:ed: ed:a0:57:37:b8:89:cf:b3:68:57:c1:ac:d2:56:de:d8:b1:52: 5c:e3:da:e8:8e:15:10:57:8e:33:4f:f4:c2:b0:0e:79:86:b8: e6:53:ee:c6:b8:0e:51:c5:c2:e1:89:75:6d:a9:c1:7f:60:53: 5c:83:a5:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI8F+vqA5fyH5Am6UzG7mhUkrJ98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1 MTM2QzAwMjAeFw0yNTA2MjgyMzI3MDFaFw0yNTA3MDIwOTMwMDFaMDMxMTAvBgNV BAMTKDMzNDFBRDFGQjJENzExMjQ4QjBCQkYzMzcyOEQzREMyRjA2RjlFMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Mb9Bb6+LTM+e7EGCm7qHbsIk q89+NyJs6UzxDeyPYqSFQi/yEWmYMa+/A7NEIxXtF8ppXBOdwYVtJHgpDi4xy3KP cmp3bx4CVuvW7EsVya676aDNa0nkjHL0f6PwmmsPlPull2Qfq/Q339izR23rFs1q IHHaDDbnRMWEvU4KovLY05LEnbeZwKeS5KU2Fh18s6Xca1/2w18tz2jlc488bi6Q AzcfHqwGBFsDpbPqQw55nGFrZ3mWNudr0d8QvwHNXzSiK4xsypDMil5aFpYEkU9X uF2EhHelQCjFuXHN5jLc+BjPDWNPqn6/vMU5dQZHEcUD/4QQXeg57hOPevx3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM0GtH7LXESSLC78zco09wvBvnggwHwYDVR0j BBgwFoAU5wjJd7Bqz66Lr8ayGeWkWFE2wAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMS9FNzA4Qzk3N0Iw NkFDRkFFOEJBRkM2QjIxOUU1QTQ1ODUxMzZDMDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1MTM2 QzAwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzEvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0 NTg1MTM2QzAwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcKDdopVMbe9jxbRyVyoEPlLgc0Etl3j9x5 XRq+lPIdiWC+RJruzwaa6e06AlHcg/uILVnI36CU2I20+k3828sKHJ8EFLgTAVgx fBJVnUEk04nsrun/RFb3b9SlhZvGdw2XA9QgWhwlxCpPUS+ixcRlsqlxkx8VMP6r 8W1LKpAXX3mzgULGfx5Lm5DtXsv6v6EZl7/1BRvs+W1IYNd8K23nAoVCWPB22Fcs vDbLTDDXNvKru9sw4X29HmdhKs574URzlwwI7e2gVze4ic+zaFfBrNJW3tixUlzj 2uiOFRBXjjNP9MKwDnmGuOZT7sa4DlHFwuGJdW2pwX9gU1yDpX8= -----END CERTIFICATE-----Generated at Sun Jun 29 18:08:53 2025 by rpki-client