$ rpki-client -vvf repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft File: E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft (raw, json) Hash identifier: PLrYuE4B3bJxaaCDOfgmq+1vU/qvsOcZldhGFA4gCl0= Subject key identifier: D7:7E:D7:0E:3B:33:3C:79:29:CE:36:93:2C:BC:C4:9D:1A:08:F3:22 Authority key identifier: E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1 Certificate issuer: /CN=E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1 Certificate serial: 2496D90B3EF33AAFA576A092441112888159771E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft Manifest number: 0267 Signing time: Sat 28 Jun 2025 00:42:10 +0000 Manifest this update: Sat 28 Jun 2025 00:37:10 +0000 Manifest next update: Tue 01 Jul 2025 05:00:10 +0000 Files and hashes: 1: 3130332e3137382e3137302e302f32342d3234203d3e20313339393532.roa (hash: s7ZRS2Zcu3hJueMyatfY5+9nMoD7nFYIofv5YO21v9A=) 2: E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl (hash: w7SZNnZ3r/hE0IVz728twxVsYPoY/TQkWWi2euoxjFY=) 3: 3130332e3137382e3137312e302f32342d3234203d3e20313339393532.roa (hash: qWtnu+D2OJjgUIAZhBWqF4N8kzQJfxmKrFVqp2H/d+E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 05:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:96:d9:0b:3e:f3:3a:af:a5:76:a0:92:44:11:12:88:81:59:77:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1 Validity Not Before: Jun 28 00:37:10 2025 GMT Not After : Jul 1 05:00:10 2025 GMT Subject: CN=D77ED70E3B333C7929CE36932CBCC49D1A08F322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:be:10:db:c9:41:c3:d9:d7:c4:00:80:90:61: 38:42:08:a1:32:b9:da:77:f3:ce:e3:0f:a1:05:05: 7d:c2:4f:aa:0a:a2:92:c0:26:b5:27:33:1f:1c:5c: 28:91:df:67:27:8d:ab:e7:b8:bc:2c:98:68:20:06: f1:eb:72:65:45:04:b5:94:78:b3:f6:83:9c:0f:7b: c6:c7:e7:4e:4f:b1:b3:62:11:fb:0b:fa:9a:97:d9: 23:38:1a:93:59:61:3d:87:2a:f5:c5:3f:0a:72:45: 2c:dc:ea:e6:86:25:89:83:e3:fe:a9:2c:2d:14:4a: e0:ac:e7:9c:40:42:8f:b2:bd:a7:a5:22:3a:f7:3c: 13:63:ef:9c:25:41:1b:fd:ef:e3:cd:10:8a:62:b0: 91:58:90:7b:40:dc:e8:db:82:34:08:b9:8f:e3:24: 75:b7:40:a8:76:aa:7e:f4:b4:bc:93:33:ba:ca:58: 4c:3c:9a:19:76:d3:1c:2f:9e:0a:c4:a7:eb:9b:10: c1:33:b3:d0:0f:91:7a:ca:59:2f:c6:b6:75:45:bd: c5:0b:3f:4a:4a:d3:b9:89:dd:f4:39:7e:35:70:b3: 0a:35:a1:2d:77:c3:b0:8a:75:47:bd:56:e0:3a:78: ac:b2:ce:d0:5f:04:05:2b:c1:ab:b8:99:0f:32:11: 09:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7E:D7:0E:3B:33:3C:79:29:CE:36:93:2C:BC:C4:9D:1A:08:F3:22 X509v3 Authority Key Identifier: keyid:E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:03:47:b5:47:ae:cb:55:c8:0b:c1:f2:65:ef:66:18:bc:f5: d2:1e:46:d6:b3:cd:b9:a6:9d:e8:ec:a3:a1:03:75:27:76:1f: f7:66:ff:09:97:9c:d4:1c:16:5a:22:5e:1d:5c:36:ad:e0:dc: 19:b4:6f:ce:78:f8:74:e9:91:dd:75:87:61:96:d0:64:a1:3b: 41:97:57:0a:eb:d7:1b:7f:f8:95:86:0b:12:1f:29:50:a5:f3: 5e:c0:54:9c:d5:44:b9:fe:9a:53:31:5c:45:62:c3:ed:6e:94: 3f:3c:c3:39:24:44:fd:d8:c7:4f:28:09:56:2a:35:db:3c:2a: 82:73:54:da:f6:04:9a:f2:3f:18:2c:1b:df:0f:f9:e3:9f:84: 44:64:ad:47:a3:bc:51:04:3b:f0:cf:95:90:78:ea:16:1f:e3: 7f:2e:13:29:b8:57:13:f7:d9:bc:26:1d:cb:06:9e:b1:d6:c9: d8:35:ae:a8:4c:3f:bf:75:cf:df:03:3b:4c:98:2d:56:44:52: 0b:2f:a1:be:d1:86:7e:91:c5:dc:f1:38:26:cd:d2:a5:9d:e2: 71:2a:16:b3:f0:c6:7a:8b:c6:17:7e:96:9b:a4:5d:42:9a:ff: 20:b5:3a:9f:8b:20:07:74:64:dc:3d:1e:58:75:95:4a:15:98: b2:4e:4c:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJJbZCz7zOq+ldqCSRBESiIFZdx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA5RDBFMUQyNjNEQkQ5MTREMEM0RTBDQUE3RTVFNTBE MDIyNDZGMTAeFw0yNTA2MjgwMDM3MTBaFw0yNTA3MDEwNTAwMTBaMDMxMTAvBgNV BAMTKEQ3N0VENzBFM0IzMzNDNzkyOUNFMzY5MzJDQkNDNDlEMUEwOEYzMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJvhDbyUHD2dfEAICQYThCCKEy udp3887jD6EFBX3CT6oKopLAJrUnMx8cXCiR32cnjavnuLwsmGggBvHrcmVFBLWU eLP2g5wPe8bH505PsbNiEfsL+pqX2SM4GpNZYT2HKvXFPwpyRSzc6uaGJYmD4/6p LC0USuCs55xAQo+yvaelIjr3PBNj75wlQRv97+PNEIpisJFYkHtA3OjbgjQIuY/j JHW3QKh2qn70tLyTM7rKWEw8mhl20xwvngrEp+ubEMEzs9APkXrKWS/GtnVFvcUL P0pK07mJ3fQ5fjVwswo1oS13w7CKdUe9VuA6eKyyztBfBAUrwau4mQ8yEQlpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU137XDjszPHkpzjaTLLzEnRoI8yIwHwYDVR0j BBgwFoAU4J0OHSY9vZFNDE4Mqn5eUNAiRvEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzAxZmQ0NC04Y2Q2LTRkOWYtOWJkMS04MzY3YWQ5Y2Q5ZWEvMC9FMDlEMEUxRDI2 M0RCRDkxNEQwQzRFMENBQTdFNUU1MEQwMjI0NkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA5RDBFMUQyNjNEQkQ5MTREMEM0RTBDQUE3RTVFNTBEMDIy NDZGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMwMWZkNDQtOGNkNi00ZDlmLTli ZDEtODM2N2FkOWNkOWVhLzAvRTA5RDBFMUQyNjNEQkQ5MTREMEM0RTBDQUE3RTVF NTBEMDIyNDZGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8DR7VHrstVyAvB8mXvZhi89dIeRtazzbmm nejso6EDdSd2H/dm/wmXnNQcFloiXh1cNq3g3Bm0b854+HTpkd11h2GW0GShO0GX Vwrr1xt/+JWGCxIfKVCl817AVJzVRLn+mlMxXEViw+1ulD88wzkkRP3Yx08oCVYq Nds8KoJzVNr2BJryPxgsG98P+eOfhERkrUejvFEEO/DPlZB46hYf438uEym4VxP3 2bwmHcsGnrHWydg1rqhMP791z98DO0yYLVZEUgsvob7Rhn6RxdzxOCbN0qWd4nEq FrPwxnqLxhd+lpukXUKa/yC1Op+LIAd0ZNw9Hlh1lUoVmLJOTBg= -----END CERTIFICATE-----Generated at Sun Jun 29 18:18:50 2025 by rpki-client