$ rpki-client -vvf repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft File: E420F134FA1A6BA70588424BD4E862EE6C50C188.mft (raw, json) Hash identifier: mBhWGJuUjj+YO2Ko7GgDtLHzFCMJGfJXf3C5NARBGX8= Subject key identifier: 2C:8E:AF:0E:20:EF:9E:89:CA:8E:E5:5D:78:7C:8C:04:9E:B7:3C:23 Authority key identifier: E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88 Certificate issuer: /CN=E420F134FA1A6BA70588424BD4E862EE6C50C188 Certificate serial: 3EA26A7A1F517E9259E23A8B297E78D97D1FC5CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft Manifest number: 04E4 Signing time: Sat 28 Jun 2025 14:51:16 +0000 Manifest this update: Sat 28 Jun 2025 14:46:16 +0000 Manifest next update: Tue 01 Jul 2025 23:41:16 +0000 Files and hashes: 1: E420F134FA1A6BA70588424BD4E862EE6C50C188.crl (hash: k2kH3tV1ELYe9a7aBkX7XYZ+TiKh+jIrJFI1fZgLwxc=) 2: 323430323a636438303a3a2f33322d3438203d3e203633383835.roa (hash: MDl2DN2os7/fU39oaMG8yA+MKomCGHMu/9vzlZ9xU2U=) 3: 3130332e3139342e3137322e302f32322d3234203d3e203633383835.roa (hash: nIcaXDvKx2+XVxNFuL8CckiCEV48hFgqOSdn9qzzkF4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 23:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:a2:6a:7a:1f:51:7e:92:59:e2:3a:8b:29:7e:78:d9:7d:1f:c5:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E420F134FA1A6BA70588424BD4E862EE6C50C188 Validity Not Before: Jun 28 14:46:16 2025 GMT Not After : Jul 1 23:41:16 2025 GMT Subject: CN=2C8EAF0E20EF9E89CA8EE55D787C8C049EB73C23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:70:17:42:97:c5:95:b4:37:4d:c7:5f:a5:ba: 77:9b:4f:84:e8:c4:45:2a:9a:9c:37:d6:c7:20:7c: dc:39:27:80:f4:59:0a:55:ff:b4:9c:46:ed:fa:14: 3e:74:df:b1:00:f4:96:aa:22:c0:a9:01:3d:38:1c: cc:c2:ca:9b:b1:db:1b:e9:e8:c8:5f:11:84:e7:e1: af:23:f7:3d:8d:95:0a:ef:55:f3:87:e3:de:d5:8b: 02:0c:a0:59:64:fa:5e:d8:8b:9a:c5:a5:bf:ae:f0: c2:c5:18:8f:7a:6f:90:b0:ed:73:9f:fb:2c:27:a4: be:50:3b:03:6d:d1:65:29:20:d5:59:9e:39:53:af: 1c:a0:40:6e:0d:d6:a3:62:57:db:b4:a6:de:fe:86: a8:6f:48:0b:bb:c6:58:69:4a:59:5f:f2:9d:be:f1: f7:ab:03:46:2b:c9:2f:1f:f3:43:cc:d6:01:09:08: cf:33:41:22:53:3e:1f:5c:c2:50:ce:23:32:d8:11: 8e:3c:d5:7d:58:6e:2b:56:0b:29:75:e0:b6:8e:43: 1d:71:d7:ed:53:41:ab:5c:46:b9:06:f4:c6:ab:18: 46:81:55:33:09:f0:32:30:3f:6f:99:62:13:e4:b9: 98:62:5e:37:54:0b:35:95:b4:c6:12:0d:1f:5b:d2: ce:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8E:AF:0E:20:EF:9E:89:CA:8E:E5:5D:78:7C:8C:04:9E:B7:3C:23 X509v3 Authority Key Identifier: keyid:E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:14:74:0f:7d:ba:d0:2a:e3:50:4b:ef:bd:b8:b7:78:b8:30: 6a:96:19:ae:e4:36:ad:40:c6:56:60:08:7d:ad:47:f0:5e:85: 68:eb:90:d6:62:8a:cc:e9:17:d6:ea:c6:44:31:2a:1b:1d:db: eb:42:60:ac:ba:15:3b:98:59:25:6b:11:e0:8b:07:c0:31:9f: ef:35:61:19:89:94:35:49:ef:f4:ab:95:f8:a4:1c:b5:d7:27: bb:3a:48:38:64:f5:cb:bd:14:7b:ae:f8:49:da:7b:61:a6:ab: 13:9f:d2:a4:f2:d2:72:b7:a7:40:55:14:70:ff:eb:27:68:90: 5b:07:76:8b:38:c6:66:91:07:b4:ed:73:01:7c:f7:f0:77:c2: 1f:0e:cf:ba:04:58:b1:48:7d:e0:03:f7:20:97:b9:56:31:98: fe:01:b6:5d:95:65:0e:e5:fc:b3:37:67:d0:e0:2d:35:0a:61: de:8c:b4:39:89:6f:28:71:b6:a2:40:4e:a7:6a:87:05:e6:a9: 2e:1f:7d:1a:e8:0e:1e:27:67:25:82:fa:6b:00:3b:56:5b:cd: 5b:06:e9:9e:b8:0a:c9:69:47:f4:18:4f:1c:49:92:48:73:46: 62:26:55:cc:68:92:0d:6d:09:78:ec:2a:49:c1:76:db:fb:c0: a8:f2:0f:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPqJqeh9RfpJZ4jqLKX542X0fxc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYyRUU2 QzUwQzE4ODAeFw0yNTA2MjgxNDQ2MTZaFw0yNTA3MDEyMzQxMTZaMDMxMTAvBgNV BAMTKDJDOEVBRjBFMjBFRjlFODlDQThFRTU1RDc4N0M4QzA0OUVCNzNDMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4cBdCl8WVtDdNx1+lunebT4To xEUqmpw31scgfNw5J4D0WQpV/7ScRu36FD5037EA9JaqIsCpAT04HMzCypux2xvp 6MhfEYTn4a8j9z2NlQrvVfOH497ViwIMoFlk+l7Yi5rFpb+u8MLFGI96b5Cw7XOf +ywnpL5QOwNt0WUpINVZnjlTrxygQG4N1qNiV9u0pt7+hqhvSAu7xlhpSllf8p2+ 8ferA0YryS8f80PM1gEJCM8zQSJTPh9cwlDOIzLYEY481X1YbitWCyl14LaOQx1x 1+1TQatcRrkG9MarGEaBVTMJ8DIwP2+ZYhPkuZhiXjdUCzWVtMYSDR9b0s4jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULI6vDiDvnonKjuVdeHyMBJ63PCMwHwYDVR0j BBgwFoAU5CDxNPoaa6cFiEJL1Ohi7mxQwYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZmUzNWZhYS1lZDJiLTQyNzEtYjQ4Yy00ZWEyMWMzMDkzNTIvMC9FNDIwRjEzNEZB MUE2QkE3MDU4ODQyNEJENEU4NjJFRTZDNTBDMTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYyRUU2QzUw QzE4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZlMzVmYWEtZWQyYi00MjcxLWI0 OGMtNGVhMjFjMzA5MzUyLzAvRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYy RUU2QzUwQzE4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAUdA99utAq41BL7724t3i4MGqWGa7kNq1A xlZgCH2tR/BehWjrkNZiiszpF9bqxkQxKhsd2+tCYKy6FTuYWSVrEeCLB8Axn+81 YRmJlDVJ7/SrlfikHLXXJ7s6SDhk9cu9FHuu+Enae2GmqxOf0qTy0nK3p0BVFHD/ 6ydokFsHdos4xmaRB7TtcwF89/B3wh8Oz7oEWLFIfeAD9yCXuVYxmP4Btl2VZQ7l /LM3Z9DgLTUKYd6MtDmJbyhxtqJATqdqhwXmqS4ffRroDh4nZyWC+msAO1ZbzVsG 6Z64CslpR/QYTxxJkkhzRmImVcxokg1tCXjsKknBdtv7wKjyD60= -----END CERTIFICATE-----Generated at Mon Jun 30 18:52:58 2025 by rpki-client