$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft File: E3FB5E3343EC63D705FF51B645113F74C7965236.mft (raw, json) Hash identifier: W/5XXPMNSJ0yoNxmTfr8M/NFNuthAJiRfJcipC/O3BQ= Subject key identifier: 9B:3D:BB:DE:8D:B7:80:FF:CA:FF:B2:EA:9C:8B:17:C1:39:E0:7A:DA Authority key identifier: E3:FB:5E:33:43:EC:63:D7:05:FF:51:B6:45:11:3F:74:C7:96:52:36 Certificate issuer: /CN=E3FB5E3343EC63D705FF51B645113F74C7965236 Certificate serial: 7FC0D5F8E29BECEC49518255AB8B0E6FF54BC619 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft Manifest number: 94 Signing time: Sat 28 Jun 2025 19:01:34 +0000 Manifest this update: Sat 28 Jun 2025 18:56:34 +0000 Manifest next update: Wed 02 Jul 2025 02:13:34 +0000 Files and hashes: 1: 3136302e32352e3232332e302f32342d3234203d3e20313533303837.roa (hash: uhnIJdLtefBKzdvxmoXqy4MkPaqyIvVlQc7Roas8llw=) 2: 3136302e32352e3232322e302f32332d3233203d3e20313533303837.roa (hash: jz7yjPO/h0Hd3tRfN+ZclqniexoPCfBHldRalYARglE=) 3: 3136302e32352e3232322e302f32342d3234203d3e20313533303837.roa (hash: fko1jOuBFtLKmds09e8hEEDpVGQwTcV/tpYHBgYWWus=) 4: E3FB5E3343EC63D705FF51B645113F74C7965236.crl (hash: 9z9ywMWRsT+rB8Gtc9KROIZv4iBncGvyWDtY6ReHdCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 02:13:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:c0:d5:f8:e2:9b:ec:ec:49:51:82:55:ab:8b:0e:6f:f5:4b:c6:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3FB5E3343EC63D705FF51B645113F74C7965236 Validity Not Before: Jun 28 18:56:34 2025 GMT Not After : Jul 2 02:13:34 2025 GMT Subject: CN=9B3DBBDE8DB780FFCAFFB2EA9C8B17C139E07ADA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f5:b3:1c:f7:ec:2f:b6:5c:ce:b0:75:f8:68: f3:db:0d:93:2c:f7:c1:51:b8:6c:24:60:6f:a7:2b: a1:43:ae:6b:00:00:a6:dd:77:19:7b:4a:69:d1:6b: db:4e:5f:76:cf:54:d8:89:46:7f:dc:d0:7e:fb:4b: 64:89:4b:93:7d:1e:bc:b8:09:b1:ee:59:6c:04:b7: ae:da:45:cc:fb:20:fa:e0:29:bd:ed:8f:3c:39:0d: 5e:3d:77:36:2d:98:40:5d:c9:cc:e4:69:b2:c8:dc: d0:d0:17:78:79:ef:b7:d6:2e:ea:9c:58:c7:51:23: f7:26:df:47:05:27:d5:89:c4:8f:c9:6a:4c:1a:1f: c7:4a:f8:49:ca:e3:10:71:25:a9:3c:e1:20:e8:71: 45:ee:83:ac:de:8e:f1:82:0c:e5:ae:32:83:5c:eb: e8:3f:91:f3:ee:57:11:51:15:7d:4d:ad:68:46:c3: 3e:30:ba:1d:9b:10:b1:86:36:96:b8:0b:cc:ed:40: 0a:9d:f5:ca:ef:c7:7c:9b:64:8e:a8:3c:3e:9d:b7: 73:92:12:b0:93:0e:5a:31:eb:61:5c:44:11:3a:2f: 77:f6:d8:b7:b4:d9:b4:04:10:fd:4b:ef:0d:6a:97: 63:b6:60:a8:dd:5c:0f:0c:f9:bb:10:77:0b:14:f0: a1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:3D:BB:DE:8D:B7:80:FF:CA:FF:B2:EA:9C:8B:17:C1:39:E0:7A:DA X509v3 Authority Key Identifier: keyid:E3:FB:5E:33:43:EC:63:D7:05:FF:51:B6:45:11:3F:74:C7:96:52:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:fd:9b:13:9d:bb:94:0a:f5:b2:e3:85:de:6e:f6:8e:61:2f: 7c:33:e9:a0:0e:f3:7a:30:b4:66:21:17:34:fa:01:2a:1a:8a: d6:e3:4f:8e:4e:a3:f9:1b:2e:24:64:ba:3d:35:d8:40:52:bd: 45:04:b5:27:d7:81:8e:5d:ff:10:0d:81:14:c8:90:5d:8e:a3: 43:cf:60:ce:04:e8:7a:15:7c:85:72:6b:3d:49:b1:81:f3:f4: 37:ae:c9:3d:22:41:89:5c:b7:cc:b9:a3:20:30:6c:64:55:cd: 1a:dd:7c:28:c1:4b:9c:44:7f:00:c1:1c:65:10:01:4f:cb:fb: 48:c4:47:4a:5c:6b:d8:23:18:42:f5:05:67:01:5b:4c:40:20: 1d:48:aa:7e:b9:b1:bc:d7:80:6d:48:78:51:c9:48:3f:12:15: d6:86:bf:db:ca:ec:1e:c8:5f:0a:c6:de:f9:6c:00:e7:3f:aa: 79:06:f3:52:d3:b0:b7:8e:42:71:ee:4a:2c:c5:c2:e4:bd:a0: ed:15:ad:ab:e5:75:b1:95:ac:e5:64:a2:6f:38:ca:15:50:d5: ba:cf:08:a7:c8:7e:1e:92:08:5a:64:44:36:6e:0f:88:84:e6: 9a:2b:13:81:a3:0e:d7:51:e5:72:f1:cd:c5:47:66:e4:5f:51: b6:d7:82:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf8DV+OKb7OxJUYJVq4sOb/VLxhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNGNzRD Nzk2NTIzNjAeFw0yNTA2MjgxODU2MzRaFw0yNTA3MDIwMjEzMzRaMDMxMTAvBgNV BAMTKDlCM0RCQkRFOERCNzgwRkZDQUZGQjJFQTlDOEIxN0MxMzlFMDdBREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC09bMc9+wvtlzOsHX4aPPbDZMs 98FRuGwkYG+nK6FDrmsAAKbddxl7SmnRa9tOX3bPVNiJRn/c0H77S2SJS5N9Hry4 CbHuWWwEt67aRcz7IPrgKb3tjzw5DV49dzYtmEBdyczkabLI3NDQF3h577fWLuqc WMdRI/cm30cFJ9WJxI/JakwaH8dK+EnK4xBxJak84SDocUXug6zejvGCDOWuMoNc 6+g/kfPuVxFRFX1NrWhGwz4wuh2bELGGNpa4C8ztQAqd9crvx3ybZI6oPD6dt3OS ErCTDlox62FcRBE6L3f22Le02bQEEP1L7w1ql2O2YKjdXA8M+bsQdwsU8KFpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmz273o23gP/K/7LqnIsXwTngetowHwYDVR0j BBgwFoAU4/teM0PsY9cF/1G2RRE/dMeWUjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMC9FM0ZCNUUzMzQz RUM2M0Q3MDVGRjUxQjY0NTExM0Y3NEM3OTY1MjM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNGNzRDNzk2 NTIzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZDU4MTEtYmU1MC00Y2FhLTlm OTYtNjNkMzcyMDMxMWRlLzAvRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNG NzRDNzk2NTIzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIb9mxOdu5QK9bLjhd5u9o5hL3wz6aAO83ow tGYhFzT6ASoaitbjT45Oo/kbLiRkuj012EBSvUUEtSfXgY5d/xANgRTIkF2Oo0PP YM4E6HoVfIVyaz1JsYHz9DeuyT0iQYlct8y5oyAwbGRVzRrdfCjBS5xEfwDBHGUQ AU/L+0jER0pca9gjGEL1BWcBW0xAIB1Iqn65sbzXgG1IeFHJSD8SFdaGv9vK7B7I XwrG3vlsAOc/qnkG81LTsLeOQnHuSizFwuS9oO0VravldbGVrOVkom84yhVQ1brP CKfIfh6SCFpkRDZuD4iE5porE4GjDtdR5XLxzcVHZuRfUbbXgmA= -----END CERTIFICATE-----Generated at Mon Jun 30 17:12:56 2025 by rpki-client