$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft File: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft (raw, json) Hash identifier: OVbIOiSZKeRyrGcpMhfHGrZMRo1JwBz+w+vvICcfV88= Subject key identifier: 07:33:C0:44:32:9F:E1:05:9F:11:71:92:13:FB:E3:0E:1A:74:1E:FA Authority key identifier: E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F Certificate issuer: /CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F Certificate serial: 75DD2D79B0ABDDECA7B13EB6593F616E949D2E46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft Manifest number: 0185 Signing time: Sun 29 Jun 2025 15:50:50 +0000 Manifest this update: Sun 29 Jun 2025 15:45:50 +0000 Manifest next update: Thu 03 Jul 2025 01:14:50 +0000 Files and hashes: 1: 3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa (hash: L7eyl2XZ6A1jGQ7W7TcXIFdLoB9CiiJsysljc4+PR9I=) 2: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl (hash: aQ5cnJ1mxm7wzbh7oN6+O1J9vkdQ34S6w+y/HbvCEfk=) 3: 3130332e3137322e3234322e302f32342d3234203d3e20313437303836.roa (hash: BUZVEiAJYJLqmtOMsKiwoKkvjDG5Aqhzz5fYoIUA7O8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 01:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:dd:2d:79:b0:ab:dd:ec:a7:b1:3e:b6:59:3f:61:6e:94:9d:2e:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F Validity Not Before: Jun 29 15:45:50 2025 GMT Not After : Jul 3 01:14:50 2025 GMT Subject: CN=0733C044329FE1059F11719213FBE30E1A741EFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e6:f0:1e:72:f6:f1:94:4a:31:82:73:08:4e: 21:f8:ea:40:71:29:d4:f2:ae:37:72:48:87:15:d5: e6:62:a4:3e:13:ab:2e:4a:4a:0c:c5:0a:29:fb:03: 92:79:d2:9d:a6:c4:a7:8e:44:8a:74:08:54:96:22: 09:54:72:a9:7b:c3:90:a8:b7:33:86:f5:01:12:78: e9:f8:7c:ef:4a:0f:b9:b8:2c:db:4b:c9:07:a7:bc: 81:7f:33:8c:29:d8:d5:71:c6:61:ba:4c:d1:e0:7b: fd:be:ee:49:bd:e3:29:4f:22:25:8f:cc:4c:b6:50: 71:1a:d2:a6:ba:cb:ef:cc:7d:9e:86:f1:39:4f:85: ec:b0:8b:d6:40:c4:ee:57:0a:e8:13:0b:a7:90:bc: 7a:32:36:d3:8c:d4:b0:81:70:80:08:c7:69:25:5b: 9f:ce:ae:02:98:00:52:2d:ec:5d:c0:21:d3:58:95: af:9b:a9:5c:0e:24:e0:ec:26:6e:bd:52:2d:e8:98: be:41:40:15:47:f4:3e:76:a4:b3:eb:f7:51:ed:8f: d7:73:40:7f:d3:42:1f:a5:db:02:2b:20:e9:56:79: 23:12:0c:1a:08:24:0c:af:36:16:e1:82:96:d9:ea: 1d:57:60:5e:f0:c0:b6:01:7f:46:73:9b:5a:3d:62: 05:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:33:C0:44:32:9F:E1:05:9F:11:71:92:13:FB:E3:0E:1A:74:1E:FA X509v3 Authority Key Identifier: keyid:E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:34:35:57:28:81:65:90:bc:1c:bc:6b:72:41:6f:09:00:84: bd:d4:d6:10:58:61:ad:35:11:e2:7a:a1:2f:fd:c7:7a:b9:79: e0:fe:5f:45:87:a9:ad:63:83:62:95:7b:f9:41:c0:21:27:d5: a1:69:7a:1f:87:df:3e:ef:a5:9e:c6:f0:00:50:13:0e:ec:07: e9:36:d6:0a:dd:54:50:d9:cb:b1:33:ed:2d:9b:c8:1b:a4:53: 45:1a:6a:6a:1a:f6:fa:ee:6d:c8:a6:92:55:99:96:c9:1c:30: 74:03:ba:ad:ae:6d:1f:1d:7b:6c:84:0b:e3:fa:73:8c:96:c0: 5d:a8:ea:e2:29:3e:71:b2:65:94:b8:65:39:25:de:3d:6e:b6: 00:7a:1f:35:b5:16:83:3b:4a:18:56:90:f6:7e:a1:58:b4:8c: 8f:2e:a3:c9:34:f7:cd:16:12:93:1d:15:ac:16:4f:ef:97:56: 6c:45:88:16:43:d3:bc:ef:ac:cc:63:d2:20:a0:cc:b6:76:2c: 08:9c:c2:9a:69:96:f2:03:46:6d:d9:7c:74:cd:ee:c8:05:e7: d6:57:0c:43:a6:47:72:2e:f7:d5:69:71:1c:e6:bf:6f:0a:09: 16:a2:c0:10:e8:4e:a0:4b:1d:7b:2a:97:81:b3:30:27:90:cd: 02:60:07:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdd0tebCr3eynsT62WT9hbpSdLkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJBMDNG QUY1NzU2RjAeFw0yNTA2MjkxNTQ1NTBaFw0yNTA3MDMwMTE0NTBaMDMxMTAvBgNV BAMTKDA3MzNDMDQ0MzI5RkUxMDU5RjExNzE5MjEzRkJFMzBFMUE3NDFFRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA5vAecvbxlEoxgnMITiH46kBx KdTyrjdySIcV1eZipD4Tqy5KSgzFCin7A5J50p2mxKeORIp0CFSWIglUcql7w5Co tzOG9QESeOn4fO9KD7m4LNtLyQenvIF/M4wp2NVxxmG6TNHge/2+7km94ylPIiWP zEy2UHEa0qa6y+/MfZ6G8TlPheywi9ZAxO5XCugTC6eQvHoyNtOM1LCBcIAIx2kl W5/OrgKYAFIt7F3AIdNYla+bqVwOJODsJm69Ui3omL5BQBVH9D52pLPr91Htj9dz QH/TQh+l2wIrIOlWeSMSDBoIJAyvNhbhgpbZ6h1XYF7wwLYBf0Zzm1o9YgUDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBzPARDKf4QWfEXGSE/vjDhp0HvowHwYDVR0j BBgwFoAU4q7sffiXqdbk8NHRxDEqA/r1dW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjZkOGY5Ny1jODA2LTQ3OTktODVlMC04Y2NmMThkYmJiMzEvMC9FMkFFRUM3REY4 OTdBOUQ2RTRGMEQxRDFDNDMxMkEwM0ZBRjU3NTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJBMDNGQUY1 NzU2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2ZDhmOTctYzgwNi00Nzk5LTg1 ZTAtOGNjZjE4ZGJiYjMxLzAvRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJB MDNGQUY1NzU2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB00NVcogWWQvBy8a3JBbwkAhL3U1hBYYa01 EeJ6oS/9x3q5eeD+X0WHqa1jg2KVe/lBwCEn1aFpeh+H3z7vpZ7G8ABQEw7sB+k2 1grdVFDZy7Ez7S2byBukU0Uaamoa9vrubcimklWZlskcMHQDuq2ubR8de2yEC+P6 c4yWwF2o6uIpPnGyZZS4ZTkl3j1utgB6HzW1FoM7ShhWkPZ+oVi0jI8uo8k0980W EpMdFawWT++XVmxFiBZD07zvrMxj0iCgzLZ2LAicwppplvIDRm3ZfHTN7sgF59ZX DEOmR3Iu99VpcRzmv28KCRaiwBDoTqBLHXsql4GzMCeQzQJgB/A= -----END CERTIFICATE-----Generated at Mon Jun 30 11:02:53 2025 by rpki-client