$ rpki-client -vvf repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft File: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft (raw, json) Hash identifier: Jbs0hyN1p/X6FyASRAJYyv575y8OcOLIKPg++1dkWAw= Subject key identifier: 42:10:C1:7B:5C:02:A6:D6:33:F1:5D:08:F1:7B:E3:90:5F:9D:A5:7C Authority key identifier: E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE Certificate issuer: /CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Certificate serial: 20E8D6B913706455999AB83E46D59AB663C9AD27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft Manifest number: C2 Signing time: Sun 29 Jun 2025 01:52:04 +0000 Manifest this update: Sun 29 Jun 2025 01:47:04 +0000 Manifest next update: Wed 02 Jul 2025 04:30:04 +0000 Files and hashes: 1: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl (hash: l5iVzsL8xRiXPg7GBXUaiQcMiUTnWuDw/XpNcfenbhE=) 2: 3130332e36302e38382e302f32342d3234203d3e20313531353732.roa (hash: k2+2S8JNGrIJgA3B1fWsPdcHVnZQhwJAO8DfE0j/qJE=) 3: 3130332e36302e38392e302f32342d3234203d3e20313531353732.roa (hash: Enf4GZpiw8yRCRJ559txgbwn9cUloBn5l+xZd4CiSI4=) 4: 3130332e36302e38382e302f32332d3233203d3e20313531353732.roa (hash: sj/Mmz0IkuIImkgMrX5NfmBzqbmlEbbflvN0FkIxBO4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 04:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:e8:d6:b9:13:70:64:55:99:9a:b8:3e:46:d5:9a:b6:63:c9:ad:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Validity Not Before: Jun 29 01:47:04 2025 GMT Not After : Jul 2 04:30:04 2025 GMT Subject: CN=4210C17B5C02A6D633F15D08F17BE3905F9DA57C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:84:ee:4c:fc:d1:65:86:3d:48:91:6f:a8:ff: c7:3e:2d:18:0e:af:63:b8:5f:34:4b:61:99:c8:8d: ea:2b:33:2a:b0:bb:ea:b8:35:47:d7:c0:ef:88:0b: a8:6c:58:76:02:c9:3e:ed:4b:4c:57:4e:1e:ab:41: fb:ce:f2:a8:f8:5c:d5:67:3f:a6:11:68:4a:d5:c2: 7b:86:fe:4d:68:38:c3:76:6c:d4:ac:31:56:83:d7: 37:01:d6:96:50:30:ab:6d:7a:fc:d2:83:72:7a:1e: cc:6d:03:2e:8e:9a:7f:bd:15:70:2b:ea:5c:f3:64: 65:f4:86:16:93:2f:97:7b:06:f4:5f:96:3d:d1:6e: 42:d5:bc:6f:5c:c1:5f:f5:2e:cd:e8:bd:1b:c1:a4: d2:9d:83:ba:fc:48:c9:6c:13:a0:bc:fd:15:0f:d7: e3:a5:18:f6:52:dc:41:99:7a:e2:c8:54:8c:53:69: 1e:8c:6b:bc:da:63:c9:6d:f6:22:83:50:9c:5d:74: b8:04:e9:91:8b:5a:f2:d3:3d:97:63:fd:fe:87:6a: ad:e9:a4:1c:d1:30:91:52:7b:7f:4f:d8:f6:50:03: 7e:85:13:bc:5a:45:29:38:64:33:aa:64:27:dc:81: 85:31:32:15:1e:85:e5:dd:d5:a6:77:52:62:d3:1a: 4a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:10:C1:7B:5C:02:A6:D6:33:F1:5D:08:F1:7B:E3:90:5F:9D:A5:7C X509v3 Authority Key Identifier: keyid:E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:b5:c4:be:24:c0:86:79:63:76:e4:06:bf:a5:ef:95:94:69: b2:1a:e4:5c:41:74:18:86:68:6f:08:58:eb:fe:c1:11:9d:9d: d7:39:5d:0f:8b:ec:39:f0:b7:33:87:57:d7:0c:5e:77:83:d9: 22:80:34:f5:1d:17:76:4f:f7:23:b2:a3:75:9b:1b:13:f2:25: c8:4c:f1:7b:1e:4f:5e:d7:42:28:6c:9b:63:6b:ba:2f:3a:ab: 44:cc:03:e2:8e:34:ba:b5:59:04:1f:fd:67:8e:3b:6e:5d:06: 64:d3:dc:ae:2b:1b:f5:78:fc:71:2a:53:68:3d:c0:29:65:f3: d5:5b:fc:f9:23:82:7c:64:1b:77:4d:64:86:f6:98:44:06:7d: bf:b9:47:e9:9e:57:c0:fd:9b:90:bc:af:69:09:7c:44:b0:25: 3e:4d:62:ce:f7:20:f5:90:4f:a1:51:8b:27:27:7e:29:6e:2d: 65:2c:a7:ec:5d:87:52:11:35:4b:a0:86:39:1b:b8:4c:79:b2: 59:97:80:7c:79:b7:5d:11:19:ba:c5:02:14:13:a5:f7:b0:0c: 0a:fe:a9:de:a9:bf:32:84:08:74:63:88:be:7c:9f:47:7c:b1: bb:bc:78:18:72:a2:3e:8b:34:30:c5:9c:c8:eb:34:66:b2:8d: 7c:3c:77:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIOjWuRNwZFWZmrg+RtWatmPJrScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZF ODIxMkRERTAeFw0yNTA2MjkwMTQ3MDRaFw0yNTA3MDIwNDMwMDRaMDMxMTAvBgNV BAMTKDQyMTBDMTdCNUMwMkE2RDYzM0YxNUQwOEYxN0JFMzkwNUY5REE1N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZhO5M/NFlhj1IkW+o/8c+LRgO r2O4XzRLYZnIjeorMyqwu+q4NUfXwO+IC6hsWHYCyT7tS0xXTh6rQfvO8qj4XNVn P6YRaErVwnuG/k1oOMN2bNSsMVaD1zcB1pZQMKttevzSg3J6HsxtAy6Omn+9FXAr 6lzzZGX0hhaTL5d7BvRflj3RbkLVvG9cwV/1Ls3ovRvBpNKdg7r8SMlsE6C8/RUP 1+OlGPZS3EGZeuLIVIxTaR6Ma7zaY8lt9iKDUJxddLgE6ZGLWvLTPZdj/f6Haq3p pBzRMJFSe39P2PZQA36FE7xaRSk4ZDOqZCfcgYUxMhUeheXd1aZ3UmLTGkoTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQhDBe1wCptYz8V0I8XvjkF+dpXwwHwYDVR0j BBgwFoAU58nk5cjqmJ8P99b+bb1qT+ghLd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzExYWE0Ni1mMjhlLTRjNTUtYjliYS03ZDViZGM5NWI0ZjYvMC9FN0M5RTRFNUM4 RUE5ODlGMEZGN0Q2RkU2REJENkE0RkU4MjEyRERFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZFODIx MkRERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxMWFhNDYtZjI4ZS00YzU1LWI5 YmEtN2Q1YmRjOTViNGY2LzAvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZB NEZFODIxMkRERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALO1xL4kwIZ5Y3bkBr+l75WUabIa5FxBdBiG aG8IWOv+wRGdndc5XQ+L7DnwtzOHV9cMXneD2SKANPUdF3ZP9yOyo3WbGxPyJchM 8XseT17XQihsm2Nrui86q0TMA+KONLq1WQQf/WeOO25dBmTT3K4rG/V4/HEqU2g9 wCll89Vb/PkjgnxkG3dNZIb2mEQGfb+5R+meV8D9m5C8r2kJfESwJT5NYs73IPWQ T6FRiycnfiluLWUsp+xdh1IRNUughjkbuEx5slmXgHx5t10RGbrFAhQTpfewDAr+ qd6pvzKECHRjiL58n0d8sbu8eBhyoj6LNDDFnMjrNGayjXw8dx4= -----END CERTIFICATE-----Generated at Sun Jun 29 22:08:45 2025 by rpki-client