$ rpki-client -vvf repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft File: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft (raw, json) Hash identifier: P97Gf8UUahnnAWQLei0j0xLGQVavK3XUVmjOS1Cu6WY= Subject key identifier: EC:91:92:2F:5D:00:DC:37:D0:4E:B6:0F:FA:2C:C3:DF:4F:70:1A:53 Authority key identifier: E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F Certificate issuer: /CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Certificate serial: 6DD00D1F58BA79D8F44A9D2C9F63C2F74651E382 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft Manifest number: C7 Signing time: Fri 27 Jun 2025 16:11:47 +0000 Manifest this update: Fri 27 Jun 2025 16:06:47 +0000 Manifest next update: Tue 01 Jul 2025 00:43:47 +0000 Files and hashes: 1: 3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa (hash: PEcDYL2YEDwvOwIh2isXFSsdo3mWol6RplkSJ7kPOGI=) 2: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl (hash: /OCi1yPuj5uHAlunEVOlPVyOgXY0y1vAQqpt9y1/4UA=) 3: 3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (hash: 0+ulOJPEXxfRU9rDzPOyAhCIeStaBB8o7bfVtpS93+A=) 4: 323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa (hash: k742tyOIX18+4IlFbV4FgY2xaEXxztUec+tXVFs15vs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 00:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:d0:0d:1f:58:ba:79:d8:f4:4a:9d:2c:9f:63:c2:f7:46:51:e3:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Validity Not Before: Jun 27 16:06:47 2025 GMT Not After : Jul 1 00:43:47 2025 GMT Subject: CN=EC91922F5D00DC37D04EB60FFA2CC3DF4F701A53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4b:5c:67:d5:ee:ef:67:9a:2d:37:8e:29:e0: 7f:c9:ba:1d:6a:d6:db:f6:84:f2:9f:50:4e:ab:51: c1:b1:0a:a3:58:74:70:3f:6d:b5:31:6a:48:0a:22: 61:de:2e:1c:c8:5f:8b:e5:3e:52:44:ae:ed:99:db: ae:a3:a0:3e:49:bf:ba:a8:5a:60:25:7e:c0:4f:e0: 2c:45:ef:83:8c:67:a5:7a:6c:79:2c:ba:f2:cb:b6: bf:4e:14:b0:3b:e1:98:6e:21:bc:15:c6:6b:00:73: 56:a1:29:f9:9c:19:4c:e7:2c:54:7d:b8:ca:40:75: fa:9a:d1:a6:5b:ac:b3:75:5b:1a:1e:34:60:40:52: b7:6f:59:02:b2:2b:fc:02:c1:8c:aa:50:a9:f7:1a: 64:3a:02:d3:35:63:39:1f:93:ef:69:82:b3:94:71: 6c:c0:af:24:35:7b:bc:ac:bb:c7:09:b0:86:d3:d5: 96:ce:7f:fe:e7:e0:4f:6b:3d:d2:41:e3:ef:69:d2: a3:b7:e0:62:52:50:bc:db:c4:9a:87:18:79:3c:4d: f2:3b:1c:4a:09:e5:e5:f4:e4:cc:bb:c0:d3:c1:52: 77:a9:35:35:24:99:54:da:14:4f:5b:51:76:7d:1d: c7:ce:e4:d0:c2:4a:d3:12:fd:bb:27:6f:b1:c3:b6: 16:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:91:92:2F:5D:00:DC:37:D0:4E:B6:0F:FA:2C:C3:DF:4F:70:1A:53 X509v3 Authority Key Identifier: keyid:E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:4a:e8:44:04:a5:ad:06:3e:5d:16:81:f8:9e:3b:d6:03:5e: 84:2e:ae:f5:ba:de:8c:8d:73:0c:fd:07:84:f9:32:ae:c4:67: a5:4a:7f:c8:f6:e2:c2:96:59:a6:ae:6f:9e:f0:fe:23:3c:a7: 45:be:53:01:76:b1:db:7a:d9:ed:59:5b:3d:f7:02:fc:e5:54: 7a:c3:5a:f8:fe:4f:ab:47:04:8e:97:e9:79:e1:57:8e:32:fe: 7a:76:9a:ba:4b:68:c3:1f:4a:14:53:ae:8e:4b:04:05:9d:82: 53:37:bd:51:73:77:72:58:df:6f:9f:eb:48:b5:59:fb:75:27: 5d:33:a5:65:e3:24:52:de:9a:d5:45:e8:35:4a:f7:f5:98:b9: 85:cc:cc:5f:d6:a1:2e:ac:56:47:58:22:19:31:8b:5f:c4:3f: 1a:15:fe:f7:73:50:b8:de:0b:42:98:a5:8d:01:a3:84:91:61: 18:21:e1:79:02:99:fe:f2:6d:17:a2:5a:d9:05:23:04:a1:02: e1:4d:aa:c9:a1:73:18:3f:8c:13:88:19:ef:27:0e:af:76:ab: 4a:cc:1d:b4:a6:cb:97:26:79:d1:06:bd:50:c5:05:34:40:bb: f6:a0:2d:e9:23:ef:db:ec:a6:65:72:d1:1d:a0:20:e3:81:cb: 0d:e8:60:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbdANH1i6edj0Sp0sn2PC90ZR44IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0Iy REJCRUQwRjAeFw0yNTA2MjcxNjA2NDdaFw0yNTA3MDEwMDQzNDdaMDMxMTAvBgNV BAMTKEVDOTE5MjJGNUQwMERDMzdEMDRFQjYwRkZBMkNDM0RGNEY3MDFBNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYS1xn1e7vZ5otN44p4H/Juh1q 1tv2hPKfUE6rUcGxCqNYdHA/bbUxakgKImHeLhzIX4vlPlJEru2Z266joD5Jv7qo WmAlfsBP4CxF74OMZ6V6bHksuvLLtr9OFLA74ZhuIbwVxmsAc1ahKfmcGUznLFR9 uMpAdfqa0aZbrLN1WxoeNGBAUrdvWQKyK/wCwYyqUKn3GmQ6AtM1Yzkfk+9pgrOU cWzAryQ1e7ysu8cJsIbT1ZbOf/7n4E9rPdJB4+9p0qO34GJSULzbxJqHGHk8TfI7 HEoJ5eX05My7wNPBUnepNTUkmVTaFE9bUXZ9HcfO5NDCStMS/bsnb7HDthYFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7JGSL10A3DfQTrYP+izD309wGlMwHwYDVR0j BBgwFoAU5M7BHyRL8Nq+wTb4Of1Tey277Q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmYzZjVkOS1jZmI4LTQxMjMtYTJiMS1iMGI1Mjk5ZjljNmUvMC9FNENFQzExRjI0 NEJGMERBQkVDMTM2RjgzOUZENTM3QjJEQkJFRDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0IyREJC RUQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJmM2Y1ZDktY2ZiOC00MTIzLWEy YjEtYjBiNTI5OWY5YzZlLzAvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUz N0IyREJCRUQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChK6EQEpa0GPl0WgfieO9YDXoQurvW63oyN cwz9B4T5Mq7EZ6VKf8j24sKWWaaub57w/iM8p0W+UwF2sdt62e1ZWz33AvzlVHrD Wvj+T6tHBI6X6XnhV44y/np2mrpLaMMfShRTro5LBAWdglM3vVFzd3JY32+f60i1 Wft1J10zpWXjJFLemtVF6DVK9/WYuYXMzF/WoS6sVkdYIhkxi1/EPxoV/vdzULje C0KYpY0Bo4SRYRgh4XkCmf7ybReiWtkFIwShAuFNqsmhcxg/jBOIGe8nDq92q0rM HbSmy5cmedEGvVDFBTRAu/agLekj79vspmVy0R2gIOOByw3oYDA= -----END CERTIFICATE-----Generated at Sun Jun 29 18:19:25 2025 by rpki-client