$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft File: E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft (raw, json) Hash identifier: B7dBl2BVUM/dMMHcoVBtS1bKlTmT7Gq5qCQGU8d4va0= Subject key identifier: 4F:3E:B1:6A:40:97:41:C7:E1:5D:93:95:CC:AF:F3:1C:14:5C:95:2E Authority key identifier: E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 Certificate issuer: /CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Certificate serial: 3E63F448264520C7DA87147045E2C0DF9A27618B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft Manifest number: BE Signing time: Fri 22 Aug 2025 13:22:04 +0000 Manifest this update: Fri 22 Aug 2025 13:17:04 +0000 Manifest next update: Mon 25 Aug 2025 17:14:04 +0000 Files and hashes: 1: 323030313a6466333a653563303a3a2f34382d3438203d3e20313532383231.roa (hash: qxwzYie9RBuV/7W0nohtPX4U19ZjLN0Jy/HLrDrkfAc=) 2: E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl (hash: nBmGfQkcYluj/gUD8fFL9seMLNF/BWllQyURYh8GexM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 17:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:63:f4:48:26:45:20:c7:da:87:14:70:45:e2:c0:df:9a:27:61:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Validity Not Before: Aug 22 13:17:04 2025 GMT Not After : Aug 25 17:14:04 2025 GMT Subject: CN=4F3EB16A409741C7E15D9395CCAFF31C145C952E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:61:83:e9:d3:10:ef:07:bc:87:cf:4f:a7:f4: 6c:4f:6e:7a:3b:53:3a:9d:0d:56:95:39:cc:56:7b: f3:86:d7:df:8a:7e:4a:f1:bc:40:db:d8:81:d5:4a: 63:d3:bd:9c:3f:a9:47:ab:15:b6:34:f9:b2:42:e2: 9b:d2:40:86:19:c0:cb:51:c8:c8:78:a9:d6:dc:da: d8:4f:56:47:20:21:b8:eb:6d:41:21:ee:22:1e:6d: 18:53:8b:f4:17:0a:74:fb:44:6d:7a:37:85:42:b6: 80:ff:95:e5:c5:b2:67:ec:06:b1:f0:9b:6e:ca:8b: 56:ec:6b:e2:82:65:06:d7:47:d9:6d:2d:49:10:7c: 29:7d:93:73:11:27:13:59:f3:c0:8a:1f:14:bc:a1: 61:97:b4:ce:f2:d9:5a:d1:73:1f:79:3e:a2:80:50: dd:2e:f1:3e:e2:30:29:7a:5e:ac:1f:42:cb:5f:33: 15:bc:48:2d:82:fd:87:b7:05:b9:90:c6:89:f5:26: 16:92:73:24:8d:06:a2:a8:d8:1d:93:34:5e:e9:87: 63:06:1f:bd:27:be:b3:2d:39:30:c4:f2:7d:28:5d: 98:c5:d2:b9:5d:a9:22:04:1a:dd:f8:d3:7a:a5:c3: ee:5b:78:12:05:6f:05:03:a7:ea:38:f8:8d:f9:29: 02:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3E:B1:6A:40:97:41:C7:E1:5D:93:95:CC:AF:F3:1C:14:5C:95:2E X509v3 Authority Key Identifier: keyid:E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:fa:5c:dc:19:2a:c9:d6:0f:d7:db:6d:99:9f:4e:60:9f:92: b2:0a:7b:61:99:76:04:36:7a:9f:54:44:86:5d:fd:1d:7f:c8: 95:aa:2f:95:d3:cb:d6:8f:80:30:b8:94:d7:2a:59:d1:a2:22: b6:e7:82:39:78:f1:24:45:a7:66:00:04:da:35:7b:b6:da:3a: 58:c0:7c:28:ec:be:b2:0d:d0:8c:81:4b:eb:cd:51:69:36:1c: b8:2b:dc:4d:79:52:8e:e1:8b:d7:4e:79:40:f1:cc:08:26:7d: 7d:0a:16:c7:5c:23:12:dc:95:ea:2b:33:86:de:49:43:5e:c5: 93:20:a9:af:f9:7c:bb:5b:32:21:0f:d8:88:a7:47:9c:49:8d: 44:99:02:15:0f:ea:af:f0:7d:b4:f6:f8:00:d0:ed:89:70:ee: 8c:ad:36:0e:06:df:64:06:fc:6c:65:11:5e:86:62:bc:fe:8b: 73:b6:4f:02:90:7d:e2:e0:a5:ad:1c:09:e4:a3:5a:ed:06:65: 38:b1:d5:09:37:76:86:93:58:c1:b6:75:dc:65:92:9e:3e:e2: 2f:c8:db:5e:50:d1:65:c0:f2:12:38:5e:e9:ef:6f:9e:80:57: e8:70:fb:70:22:fa:50:4c:60:43:c9:20:82:3f:48:ec:6c:ac: db:ac:80:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPmP0SCZFIMfahxRwReLA35onYYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1 MTM2QzAwMjAeFw0yNTA4MjIxMzE3MDRaFw0yNTA4MjUxNzE0MDRaMDMxMTAvBgNV BAMTKDRGM0VCMTZBNDA5NzQxQzdFMTVEOTM5NUNDQUZGMzFDMTQ1Qzk1MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSYYPp0xDvB7yHz0+n9GxPbno7 UzqdDVaVOcxWe/OG19+KfkrxvEDb2IHVSmPTvZw/qUerFbY0+bJC4pvSQIYZwMtR yMh4qdbc2thPVkcgIbjrbUEh7iIebRhTi/QXCnT7RG16N4VCtoD/leXFsmfsBrHw m27Ki1bsa+KCZQbXR9ltLUkQfCl9k3MRJxNZ88CKHxS8oWGXtM7y2VrRcx95PqKA UN0u8T7iMCl6XqwfQstfMxW8SC2C/Ye3BbmQxon1JhaScySNBqKo2B2TNF7ph2MG H70nvrMtOTDE8n0oXZjF0rldqSIEGt3403qlw+5beBIFbwUDp+o4+I35KQIbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTz6xakCXQcfhXZOVzK/zHBRclS4wHwYDVR0j BBgwFoAU5wjJd7Bqz66Lr8ayGeWkWFE2wAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMS9FNzA4Qzk3N0Iw NkFDRkFFOEJBRkM2QjIxOUU1QTQ1ODUxMzZDMDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1MTM2 QzAwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzEvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0 NTg1MTM2QzAwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABb6XNwZKsnWD9fbbZmfTmCfkrIKe2GZdgQ2 ep9URIZd/R1/yJWqL5XTy9aPgDC4lNcqWdGiIrbngjl48SRFp2YABNo1e7baOljA fCjsvrIN0IyBS+vNUWk2HLgr3E15Uo7hi9dOeUDxzAgmfX0KFsdcIxLcleorM4be SUNexZMgqa/5fLtbMiEP2IinR5xJjUSZAhUP6q/wfbT2+ADQ7Ylw7oytNg4G32QG /GxlEV6GYrz+i3O2TwKQfeLgpa0cCeSjWu0GZTix1Qk3doaTWMG2ddxlkp4+4i/I 215Q0WXA8hI4Xunvb56AV+hw+3Ai+lBMYEPJIII/SOxsrNusgIA= -----END CERTIFICATE-----Generated at Sat Aug 23 11:59:02 2025 by rpki-client