$ rpki-client -vvf repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft File: E3928623409C1C10E292F838F8308E11636E6C03.mft (raw, json) Hash identifier: Gk9VNaKFqzYm4ReKT2Fq+NzcJFir4SWhNXq/OWPbsc8= Subject key identifier: ED:2B:FF:B0:C6:E5:1D:F5:FB:1B:14:4B:14:17:DF:7D:F8:5F:9A:13 Authority key identifier: E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03 Certificate issuer: /CN=E3928623409C1C10E292F838F8308E11636E6C03 Certificate serial: 68EACCF8B917A881F1E4A8A8FE333D3374FACB58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft Manifest number: 9C Signing time: Mon 30 Jun 2025 14:32:07 +0000 Manifest this update: Mon 30 Jun 2025 14:27:07 +0000 Manifest next update: Thu 03 Jul 2025 22:29:07 +0000 Files and hashes: 1: E3928623409C1C10E292F838F8308E11636E6C03.crl (hash: PjOXJBay4o8ve8kyZKn+uF8epV+SEmonxnLooC8d3gI=) 2: 323030313a6466343a6334303a3a2f34382d3438203d3e20313533303639.roa (hash: yKi1/CgLy/vSnVRFpQJ8qbRC3Gfhckznl3idTXbJhUE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.crl rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 22:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ea:cc:f8:b9:17:a8:81:f1:e4:a8:a8:fe:33:3d:33:74:fa:cb:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3928623409C1C10E292F838F8308E11636E6C03 Validity Not Before: Jun 30 14:27:07 2025 GMT Not After : Jul 3 22:29:07 2025 GMT Subject: CN=ED2BFFB0C6E51DF5FB1B144B1417DF7DF85F9A13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:38:f1:b7:af:d9:23:0c:86:f8:f1:0c:d5:86: c2:7f:97:05:2d:de:f4:83:24:06:2b:2c:48:18:73: 3c:d7:90:fa:f8:5c:a4:7d:5a:d7:41:66:73:a3:e4: da:bb:0b:bd:a0:70:aa:d2:bc:96:5b:df:2e:19:2a: f0:f0:7d:d1:48:cd:f8:b5:9b:28:5f:bf:87:c9:6b: 79:b7:55:c4:f3:fe:b9:63:17:85:6e:83:b3:67:f5: f6:63:3e:1e:57:59:4d:d2:f5:79:e3:7e:ea:58:31: 5c:27:41:32:f6:25:bf:35:51:1c:33:da:5f:4d:36: 6b:61:e0:70:c4:ee:9f:79:db:33:29:54:34:fb:48: 37:2c:28:8b:d3:35:68:2d:7f:3a:7e:05:be:77:f5: 4b:bb:42:9d:53:04:8a:0f:41:0b:69:23:6a:fd:1a: 33:1f:c1:8e:64:64:10:5d:5a:9d:88:27:41:95:3d: d8:12:71:09:b4:68:c3:93:38:85:9f:c5:fa:ab:a6: 7c:8a:62:ce:08:af:98:33:fa:a2:15:e3:7b:a3:aa: 19:71:72:74:29:04:48:1c:b6:0f:73:49:03:c4:e8: b6:da:75:e6:b8:97:65:4d:b0:35:a6:20:c7:7e:12: a4:03:4d:4e:53:59:12:0d:c3:09:03:45:7e:ff:c7: 5d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2B:FF:B0:C6:E5:1D:F5:FB:1B:14:4B:14:17:DF:7D:F8:5F:9A:13 X509v3 Authority Key Identifier: keyid:E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:83:64:51:ac:e0:1a:2d:ff:31:f7:90:81:4e:83:47:8b:71: ab:06:8d:b6:17:0b:7c:dc:47:7b:12:07:3d:c4:de:26:e3:b1: c4:a9:95:6d:71:3e:6c:2a:ee:09:59:bb:3f:d9:05:62:83:17: b1:b8:87:f5:ec:fd:14:c5:db:d4:f9:41:93:18:4b:b9:74:d2: 00:16:fa:ed:4b:36:0a:2b:e4:2b:0c:be:eb:b2:73:51:41:5e: 92:33:37:76:35:1a:0f:d3:8f:73:a9:85:ec:6f:28:65:3a:a5: 12:7c:d4:07:dc:b4:a2:ef:df:28:05:8a:e4:af:0f:19:08:08: 5b:70:70:62:82:4b:5e:5e:0f:51:f8:7e:08:76:b3:23:50:d8: 27:58:34:a8:82:00:26:75:8a:9d:0a:79:d7:5b:13:4f:2a:a5: c5:08:8d:58:e0:4b:95:f1:66:ed:c0:7a:64:e6:ba:25:43:14: 8d:48:48:e7:71:60:a0:8b:43:51:33:b4:9e:55:6c:29:ca:58: b2:bb:06:98:c0:43:12:25:17:18:58:da:37:8d:e5:ae:b8:ac: 91:ff:d8:2f:ce:4d:fa:6b:32:86:e4:f2:ec:e4:53:8a:bd:bc: 9c:53:53:4d:76:5d:3e:da:53:e1:19:27:cf:a6:4e:6e:52:5a: 76:5d:4b:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaOrM+LkXqIHx5Kio/jM9M3T6y1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM5Mjg2MjM0MDlDMUMxMEUyOTJGODM4RjgzMDhFMTE2 MzZFNkMwMzAeFw0yNTA2MzAxNDI3MDdaFw0yNTA3MDMyMjI5MDdaMDMxMTAvBgNV BAMTKEVEMkJGRkIwQzZFNTFERjVGQjFCMTQ0QjE0MTdERjdERjg1RjlBMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxOPG3r9kjDIb48QzVhsJ/lwUt 3vSDJAYrLEgYczzXkPr4XKR9WtdBZnOj5Nq7C72gcKrSvJZb3y4ZKvDwfdFIzfi1 myhfv4fJa3m3VcTz/rljF4Vug7Nn9fZjPh5XWU3S9XnjfupYMVwnQTL2Jb81URwz 2l9NNmth4HDE7p952zMpVDT7SDcsKIvTNWgtfzp+Bb539Uu7Qp1TBIoPQQtpI2r9 GjMfwY5kZBBdWp2IJ0GVPdgScQm0aMOTOIWfxfqrpnyKYs4Ir5gz+qIV43ujqhlx cnQpBEgctg9zSQPE6Lbadea4l2VNsDWmIMd+EqQDTU5TWRINwwkDRX7/x107AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Sv/sMblHfX7GxRLFBffffhfmhMwHwYDVR0j BBgwFoAU45KGI0CcHBDikvg4+DCOEWNubAMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzY1NjFkNC0yM2M4LTRjOWItODkwZS00ZjI2MzJlNTJjOTcvMS9FMzkyODYyMzQw OUMxQzEwRTI5MkY4MzhGODMwOEUxMTYzNkU2QzAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM5Mjg2MjM0MDlDMUMxMEUyOTJGODM4RjgzMDhFMTE2MzZF NkMwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzEvRTM5Mjg2MjM0MDlDMUMxMEUyOTJGODM4RjgzMDhF MTE2MzZFNkMwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKeDZFGs4Bot/zH3kIFOg0eLcasGjbYXC3zc R3sSBz3E3ibjscSplW1xPmwq7glZuz/ZBWKDF7G4h/Xs/RTF29T5QZMYS7l00gAW +u1LNgor5CsMvuuyc1FBXpIzN3Y1Gg/Tj3OphexvKGU6pRJ81AfctKLv3ygFiuSv DxkICFtwcGKCS15eD1H4fgh2syNQ2CdYNKiCACZ1ip0KeddbE08qpcUIjVjgS5Xx Zu3AemTmuiVDFI1ISOdxYKCLQ1EztJ5VbCnKWLK7BpjAQxIlFxhY2jeN5a64rJH/ 2C/OTfprMobk8uzkU4q9vJxTU012XT7aU+EZJ8+mTm5SWnZdS9E= -----END CERTIFICATE-----Generated at Tue Jul 1 11:49:59 2025 by rpki-client