$ rpki-client -vvf repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft File: E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft (raw, json) Hash identifier: m2ocry+QCWOJ8tBNP0COqsC6Ln36g/fCGvxGzIRxg0M= Subject key identifier: F6:C3:A6:0E:FF:ED:E9:F3:AD:4F:75:1F:37:A6:03:22:DF:3D:21:D8 Authority key identifier: E4:81:3B:FD:9F:D2:7C:9C:A2:2A:77:0F:5D:84:6B:50:FC:78:3A:3C Certificate issuer: /CN=E4813BFD9FD27C9CA22A770F5D846B50FC783A3C Certificate serial: 6C4BBE3F976AAC1C692CBBEBCA6F07A7C26FC3CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft Manifest number: 01A5 Signing time: Sat 28 Jun 2025 20:20:43 +0000 Manifest this update: Sat 28 Jun 2025 20:15:43 +0000 Manifest next update: Wed 02 Jul 2025 02:48:43 +0000 Files and hashes: 1: E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl (hash: G5HsG0TjY5qwHjyMa4dtytiIirJd81pBCGGEg5G7MIU=) 2: 3130332e3134372e37342e302f32332d3234203d3e203137373639.roa (hash: O88yPYmN6xDUFSj/RxvbUkag/UKNDi1pEvsS211Q2AQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 02:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:4b:be:3f:97:6a:ac:1c:69:2c:bb:eb:ca:6f:07:a7:c2:6f:c3:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4813BFD9FD27C9CA22A770F5D846B50FC783A3C Validity Not Before: Jun 28 20:15:43 2025 GMT Not After : Jul 2 02:48:43 2025 GMT Subject: CN=F6C3A60EFFEDE9F3AD4F751F37A60322DF3D21D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:23:ef:0f:7d:fb:20:da:eb:86:67:21:b9:92: ec:b3:29:ec:99:2b:c5:f8:93:43:28:10:a9:a0:23: 8e:95:7d:5a:f6:9e:35:7c:d6:c5:08:c0:e3:57:63: 47:e8:44:64:73:98:fc:69:f2:1f:39:e1:30:3f:3f: 5c:a3:5f:e7:21:9d:77:21:33:10:ad:fe:f5:cf:42: e8:9f:5d:df:c2:ed:d6:dc:3b:0d:62:db:21:e8:68: 36:07:ce:7b:ff:66:ab:df:1e:e9:bb:ec:ce:6e:c7: 87:19:b4:d9:4f:8b:27:1e:60:2a:8c:5a:97:a0:36: 7e:2f:87:2f:5d:42:9b:e4:f7:f6:52:b0:12:57:3f: a7:ce:e4:18:be:18:1e:a7:53:52:bd:fa:48:a4:3b: 1c:2d:84:96:2d:66:fb:73:dd:43:fc:f1:3b:42:fb: 0f:e9:a3:e8:f8:66:41:30:27:04:6b:c0:47:bb:88: 6c:30:08:21:ba:cc:0a:e1:93:27:05:61:94:1f:4e: b8:cd:b9:de:60:14:43:55:8c:bc:30:6e:f6:5a:80: b1:fc:aa:67:50:5e:d7:4d:aa:84:df:93:af:37:a5: 84:c7:b2:ee:3e:5e:03:42:e8:ae:55:d1:50:fa:03: f4:c4:bc:c1:4e:1f:ec:16:37:17:7a:40:d4:9c:52: 4a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C3:A6:0E:FF:ED:E9:F3:AD:4F:75:1F:37:A6:03:22:DF:3D:21:D8 X509v3 Authority Key Identifier: keyid:E4:81:3B:FD:9F:D2:7C:9C:A2:2A:77:0F:5D:84:6B:50:FC:78:3A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:80:5b:ae:eb:4d:4a:02:45:dd:cb:6c:f8:60:88:ea:e7:2b: 25:ea:c2:d2:44:7c:f5:07:40:d9:bc:99:9c:d8:5c:90:3f:2a: f4:7c:e7:11:3d:8a:85:a8:e8:6b:2e:e6:c2:47:f3:58:9b:17: 76:36:b5:bd:7c:06:21:89:1b:a3:2b:66:21:c4:ab:6d:09:65: d0:eb:4a:5a:e6:33:06:77:65:33:3d:29:63:92:80:cc:d1:6c: 13:fa:2b:5c:f5:56:35:73:03:23:c9:fd:32:97:2b:f2:f3:58: 44:17:b4:58:68:f4:0a:97:f7:16:b1:84:d0:4d:22:00:e0:dd: 2f:67:4c:d0:26:56:51:b9:1d:fd:73:77:33:ab:bc:a0:b6:4b: ea:44:5b:89:8c:af:41:7c:96:8d:d0:c7:89:ad:89:4d:11:f6: e2:f8:70:f4:c5:8d:5e:3f:db:4a:b8:18:a1:33:aa:50:15:d1: 2c:71:45:2d:bd:2c:7e:37:e9:3c:2d:20:12:b7:53:0a:5a:19: 20:8a:20:48:24:f3:8f:2d:c6:40:4d:1d:25:e9:df:86:e1:16: d4:f9:fe:33:f1:f2:40:36:75:f9:37:cc:49:d0:42:f8:28:cc: af:04:db:69:44:70:24:56:00:ae:03:25:31:df:bb:4a:18:23: 77:01:c5:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbEu+P5dqrBxpLLvrym8Hp8Jvw8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3NzBGNUQ4NDZCNTBG Qzc4M0EzQzAeFw0yNTA2MjgyMDE1NDNaFw0yNTA3MDIwMjQ4NDNaMDMxMTAvBgNV BAMTKEY2QzNBNjBFRkZFREU5RjNBRDRGNzUxRjM3QTYwMzIyREYzRDIxRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbI+8Pffsg2uuGZyG5kuyzKeyZ K8X4k0MoEKmgI46VfVr2njV81sUIwONXY0foRGRzmPxp8h854TA/P1yjX+chnXch MxCt/vXPQuifXd/C7dbcOw1i2yHoaDYHznv/ZqvfHum77M5ux4cZtNlPiyceYCqM WpegNn4vhy9dQpvk9/ZSsBJXP6fO5Bi+GB6nU1K9+kikOxwthJYtZvtz3UP88TtC +w/po+j4ZkEwJwRrwEe7iGwwCCG6zArhkycFYZQfTrjNud5gFENVjLwwbvZagLH8 qmdQXtdNqoTfk683pYTHsu4+XgNC6K5V0VD6A/TEvMFOH+wWNxd6QNScUko5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9sOmDv/t6fOtT3UfN6YDIt89IdgwHwYDVR0j BBgwFoAU5IE7/Z/SfJyiKncPXYRrUPx4OjwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzI5MDdkMy1iZTI0LTRkYTgtOTZiYi1mMTIyOGZjOTkyMDUvMC9FNDgxM0JGRDlG RDI3QzlDQTIyQTc3MEY1RDg0NkI1MEZDNzgzQTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3NzBGNUQ4NDZCNTBGQzc4 M0EzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjcyOTA3ZDMtYmUyNC00ZGE4LTk2 YmItZjEyMjhmYzk5MjA1LzAvRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3NzBGNUQ4NDZC NTBGQzc4M0EzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGAW67rTUoCRd3LbPhgiOrnKyXqwtJEfPUH QNm8mZzYXJA/KvR85xE9ioWo6Gsu5sJH81ibF3Y2tb18BiGJG6MrZiHEq20JZdDr SlrmMwZ3ZTM9KWOSgMzRbBP6K1z1VjVzAyPJ/TKXK/LzWEQXtFho9AqX9xaxhNBN IgDg3S9nTNAmVlG5Hf1zdzOrvKC2S+pEW4mMr0F8lo3Qx4mtiU0R9uL4cPTFjV4/ 20q4GKEzqlAV0SxxRS29LH436TwtIBK3UwpaGSCKIEgk848txkBNHSXp34bhFtT5 /jPx8kA2dfk3zEnQQvgozK8E22lEcCRWAK4DJTHfu0oYI3cBxRQ= -----END CERTIFICATE-----Generated at Tue Jul 1 01:06:29 2025 by rpki-client