$ rpki-client -vvf repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft File: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft (raw, json) Hash identifier: FtBvtA/gFfPgrvuFvZLzWCiojmeW/Ephh0LZUFgKwVE= Subject key identifier: 49:1C:DD:1C:04:17:A9:9D:BA:12:BC:C6:BF:28:25:D9:9D:B3:DC:9A Authority key identifier: ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A Certificate issuer: /CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Certificate serial: 1701F93D420077193D92A421DCD641D4FD913CAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft Manifest number: 01E0 Signing time: Mon 30 Jun 2025 15:41:09 +0000 Manifest this update: Mon 30 Jun 2025 15:36:09 +0000 Manifest next update: Thu 03 Jul 2025 18:54:09 +0000 Files and hashes: 1: 3130332e3133352e34382e302f32322d3234203d3e203338333230.roa (hash: /cF+CKjnrx0BGZ8wL/sfXfp5hgNUQBZIeeM9AfAYFsU=) 2: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl (hash: Pw0G32kX0u1hkJWC1n0dBxe2doVpKPlVKi955jFuKq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 18:54:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:01:f9:3d:42:00:77:19:3d:92:a4:21:dc:d6:41:d4:fd:91:3c:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Validity Not Before: Jun 30 15:36:09 2025 GMT Not After : Jul 3 18:54:09 2025 GMT Subject: CN=491CDD1C0417A99DBA12BCC6BF2825D99DB3DC9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2f:90:4b:52:df:20:47:29:2d:ad:9e:7c:b0: d5:73:c4:d6:d0:37:54:4d:c6:d0:ec:5e:f7:68:65: 55:52:31:2c:1e:ac:f1:2b:84:1a:0e:b0:72:a7:dc: cc:33:78:e2:40:a9:ff:4c:2d:36:ec:9d:91:2d:1e: 58:71:c1:0c:4b:55:fe:5a:e4:8d:4b:ea:3c:27:35: b1:e2:57:2e:d7:65:c9:4b:1f:9b:4e:36:0c:36:04: c9:cc:aa:4c:80:75:19:20:53:44:4e:bd:36:a5:80: 69:47:09:17:68:47:0c:76:fc:16:d7:5d:9a:ab:18: 46:aa:5b:49:c7:d8:5e:21:ad:58:11:d2:31:de:2c: db:de:21:91:ea:3f:fd:a5:43:b8:10:78:f8:f7:b5: af:96:a9:87:a9:31:be:13:e7:88:5f:21:7e:a3:80: ad:f2:d1:37:0b:22:27:37:65:9f:53:dd:6f:75:ae: ed:87:ca:0d:9a:c8:1c:08:ec:6a:55:f4:ba:26:7b: 0d:cc:6e:e6:47:7e:40:54:e1:39:5d:6a:2f:5a:db: 9d:16:74:8c:b9:20:58:cc:a3:a7:77:ea:6c:24:5b: bf:83:10:3b:09:19:a8:ae:84:ae:ac:0a:ea:13:e1: a0:53:20:8e:a9:66:44:be:30:fa:4c:56:8b:a2:04: ce:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1C:DD:1C:04:17:A9:9D:BA:12:BC:C6:BF:28:25:D9:9D:B3:DC:9A X509v3 Authority Key Identifier: keyid:ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:77:3f:27:7b:7c:c3:2c:88:2e:b5:d5:ea:c6:4a:9d:cd:df: 41:d8:c9:ae:ed:12:0a:20:76:a7:5d:77:e7:99:30:f4:38:33: 1d:33:8e:50:42:d5:8c:41:31:4a:34:0b:2d:f5:52:c6:83:4f: 72:8b:54:d9:46:a9:a0:1b:83:86:54:0e:bd:18:66:72:51:37: ac:a1:74:6c:45:aa:e1:b0:b1:23:b0:a8:7b:d1:2a:e0:f8:c0: 2e:31:16:db:66:e2:12:ba:35:27:21:41:a8:4e:c1:52:d3:e9: 5a:f3:1e:9c:73:9b:ce:c1:0c:53:6a:89:1a:68:98:76:75:2c: 51:f3:eb:f6:bc:f9:f6:a4:c5:ed:00:e1:0e:ce:f4:dd:1f:cf: a2:0c:d5:44:be:35:fc:50:52:c9:3b:62:00:be:22:c0:f1:41: 13:ef:58:bc:b9:b4:ee:08:c6:e9:60:9d:41:62:1e:14:23:a2: 24:3e:40:26:00:bb:e9:b7:56:50:98:b1:94:75:7d:15:6b:91: ed:d6:68:c3:4f:05:f8:e4:25:60:0a:2d:12:76:f1:65:9e:b7: a5:86:c7:6a:e6:36:fa:02:0a:fa:25:62:63:ee:7a:70:87:71: 5e:e0:ae:55:51:e2:5c:18:87:cf:e1:43:64:8f:42:de:0e:4c: 01:78:81:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFwH5PUIAdxk9kqQh3NZB1P2RPK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RB OTFDQTE1QTAeFw0yNTA2MzAxNTM2MDlaFw0yNTA3MDMxODU0MDlaMDMxMTAvBgNV BAMTKDQ5MUNERDFDMDQxN0E5OURCQTEyQkNDNkJGMjgyNUQ5OURCM0RDOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNL5BLUt8gRyktrZ58sNVzxNbQ N1RNxtDsXvdoZVVSMSwerPErhBoOsHKn3MwzeOJAqf9MLTbsnZEtHlhxwQxLVf5a 5I1L6jwnNbHiVy7XZclLH5tONgw2BMnMqkyAdRkgU0ROvTalgGlHCRdoRwx2/BbX XZqrGEaqW0nH2F4hrVgR0jHeLNveIZHqP/2lQ7gQePj3ta+WqYepMb4T54hfIX6j gK3y0TcLIic3ZZ9T3W91ru2Hyg2ayBwI7GpV9Lomew3MbuZHfkBU4Tldai9a250W dIy5IFjMo6d36mwkW7+DEDsJGaiuhK6sCuoT4aBTII6pZkS+MPpMVouiBM6JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSRzdHAQXqZ26ErzGvygl2Z2z3JowHwYDVR0j BBgwFoAU7TznJkVjrblA6vr0vYfNzakcoVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Y2NjMmFmNC1hNjJkLTQ3MDgtYjY4OC0xODkyNTk0YmE5ODkvMC9FRDNDRTcyNjQ1 NjNBREI5NDBFQUZBRjRCRDg3Q0RDREE5MUNBMTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RBOTFD QTE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGNjYzJhZjQtYTYyZC00NzA4LWI2 ODgtMTg5MjU5NGJhOTg5LzAvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NE Q0RBOTFDQTE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZ3Pyd7fMMsiC611erGSp3N30HYya7tEgog dqddd+eZMPQ4Mx0zjlBC1YxBMUo0Cy31UsaDT3KLVNlGqaAbg4ZUDr0YZnJRN6yh dGxFquGwsSOwqHvRKuD4wC4xFttm4hK6NSchQahOwVLT6VrzHpxzm87BDFNqiRpo mHZ1LFHz6/a8+fakxe0A4Q7O9N0fz6IM1US+NfxQUsk7YgC+IsDxQRPvWLy5tO4I xulgnUFiHhQjoiQ+QCYAu+m3VlCYsZR1fRVrke3WaMNPBfjkJWAKLRJ28WWet6WG x2rmNvoCCvolYmPuenCHcV7grlVR4lwYh8/hQ2SPQt4OTAF4gRg= -----END CERTIFICATE-----Generated at Mon Jun 30 21:05:36 2025 by rpki-client