$ rpki-client -vvf repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft File: E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft (raw, json) Hash identifier: bnW75suBpGNfvJvWo5v3/JUr8HLfrp3PWSj71+PmgMA= Subject key identifier: 4F:CD:11:D8:A4:90:53:A1:D2:6A:45:5B:66:C0:F4:59:D9:03:28:D6 Authority key identifier: E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF Certificate issuer: /CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF Certificate serial: 5997E1C0256F5621CB68A6E8DFE38405F2820F55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft Manifest number: 01AA Signing time: Sun 29 Jun 2025 05:20:01 +0000 Manifest this update: Sun 29 Jun 2025 05:15:01 +0000 Manifest next update: Wed 02 Jul 2025 16:51:01 +0000 Files and hashes: 1: 3130332e3138312e3234362e302f32342d3234203d3e20313439333935.roa (hash: hDiPHgG6pnFjAwZiLnb6ef4keBf/i47WPM6YZu2zsYg=) 2: 3130332e3138312e3234372e302f32342d3234203d3e20313439333935.roa (hash: BCXvxmyioKQvXTQ7T8iVRvqkwhqhpqQP5I9ID9+agWk=) 3: 323030313a6466303a376263303a3a2f34382d3438203d3e20313439333935.roa (hash: KmwxYNBof+9d1bN3iAjGOYXY8SVr0+E+UsBOHaijDGU=) 4: 3130332e3138312e3234362e302f32332d3234203d3e20313439333935.roa (hash: LZnbIIsLDElVInIW5qq+Xdda/Rypkb/0FARs3D1/0Rk=) 5: E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl (hash: RG7XYeZofaWD82fwwcyzgGnbabw0YANWqnvMAFGN40w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:97:e1:c0:25:6f:56:21:cb:68:a6:e8:df:e3:84:05:f2:82:0f:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF Validity Not Before: Jun 29 05:15:01 2025 GMT Not After : Jul 2 16:51:01 2025 GMT Subject: CN=4FCD11D8A49053A1D26A455B66C0F459D90328D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d1:89:ae:66:5e:0d:df:6c:90:c7:55:24:07: ef:a4:6d:54:ca:b7:b6:ad:9f:27:92:d1:d8:62:34: 9c:bb:97:2a:65:f4:08:07:4f:f1:54:e7:a8:af:00: 2c:cc:b4:c0:25:84:28:09:7f:08:66:4c:87:33:f9: 1c:5a:86:0e:fa:ac:9e:7f:36:99:69:5b:91:65:cc: 19:d6:1a:a1:15:95:39:22:02:ef:bc:4f:c8:7f:96: e8:93:d9:cc:91:55:08:1a:96:ad:db:ab:d9:17:9c: b4:0b:da:e8:20:92:b6:24:4b:eb:d8:9f:db:b3:b1: 0b:ec:aa:79:8d:15:3f:fb:7f:ef:5b:68:e7:1c:c5: b5:ad:52:ae:7a:26:db:30:3b:a0:73:4c:0d:1b:6f: 8b:34:6c:67:f6:a6:81:73:eb:33:b1:67:fd:2f:79: d6:79:9a:1d:3b:85:50:69:3d:41:74:01:50:f5:79: 7a:5a:ad:10:fe:ac:bf:5d:dd:c6:57:4c:8e:e2:b8: 4c:21:29:39:f4:4f:2a:1b:a9:09:a1:ff:d2:f9:bf: 81:b9:f0:fe:cb:a1:d4:d2:a8:d6:a7:76:37:1a:47: 19:26:c6:03:9d:cd:d6:c5:f0:07:8f:d3:b0:8d:7b: b5:32:43:f3:33:77:0b:ae:c1:0d:53:99:d7:df:39: 65:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CD:11:D8:A4:90:53:A1:D2:6A:45:5B:66:C0:F4:59:D9:03:28:D6 X509v3 Authority Key Identifier: keyid:E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:fa:ad:54:ed:b5:79:85:5e:17:d1:af:30:1d:ef:6a:58:40: 38:38:13:b6:05:24:c6:72:62:ef:c9:65:c0:c8:75:23:e3:c2: f2:99:c2:db:6e:18:a0:e7:c8:37:04:45:64:c5:c7:64:0b:ff: ef:e4:b7:68:bc:7e:6a:df:48:3f:42:fd:79:02:08:9d:0e:48: 1d:5e:19:7a:2d:57:4c:a9:94:68:aa:a7:9c:19:aa:93:cf:07: 06:52:35:8a:79:9d:69:f2:7b:da:08:1d:82:f1:51:de:b2:56: 5e:9c:63:31:36:9e:85:f0:2e:00:06:a7:41:c3:63:1d:af:14: b5:8e:d6:3b:01:8e:1c:6b:8b:d3:78:71:49:d6:4b:f1:63:e6: 4e:6e:53:2e:32:b3:a1:26:a3:12:93:fe:d2:88:46:43:76:3e: 02:cf:83:05:eb:b6:c1:1f:9c:1e:ba:7a:7c:29:2e:a6:95:ba: f2:cc:25:b2:3f:28:71:aa:a7:da:42:a9:87:2c:81:5a:2e:0d: 17:76:b6:53:77:ce:b9:b8:d6:c4:f5:00:c1:99:16:5a:b3:52: 71:05:1d:1e:45:4c:2e:a5:d9:90:e6:e5:d4:9a:a4:6f:16:de: f0:0f:19:ce:7f:d0:63:a4:b9:b3:e9:8c:1e:b8:19:c8:a6:c0: 40:1e:49:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWZfhwCVvViHLaKbo3+OEBfKCD1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVENDhE NkY3M0ZBRjAeFw0yNTA2MjkwNTE1MDFaFw0yNTA3MDIxNjUxMDFaMDMxMTAvBgNV BAMTKDRGQ0QxMUQ4QTQ5MDUzQTFEMjZBNDU1QjY2QzBGNDU5RDkwMzI4RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ0YmuZl4N32yQx1UkB++kbVTK t7atnyeS0dhiNJy7lypl9AgHT/FU56ivACzMtMAlhCgJfwhmTIcz+Rxahg76rJ5/ NplpW5FlzBnWGqEVlTkiAu+8T8h/luiT2cyRVQgalq3bq9kXnLQL2uggkrYkS+vY n9uzsQvsqnmNFT/7f+9baOccxbWtUq56JtswO6BzTA0bb4s0bGf2poFz6zOxZ/0v edZ5mh07hVBpPUF0AVD1eXparRD+rL9d3cZXTI7iuEwhKTn0TyobqQmh/9L5v4G5 8P7LodTSqNandjcaRxkmxgOdzdbF8AeP07CNe7UyQ/MzdwuuwQ1TmdffOWWNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT80R2KSQU6HSakVbZsD0WdkDKNYwHwYDVR0j BBgwFoAU6TFDB60UMC30DeGo7QtdSNb3P68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDFlMDhlZi0zYWU2LTRiOTAtYjQ3Ny0wZTkxNDBkMDQzODAvMC9FOTMxNDMwN0FE MTQzMDJERjQwREUxQThFRDBCNUQ0OEQ2RjczRkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVENDhENkY3 M0ZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQxZTA4ZWYtM2FlNi00YjkwLWI0 NzctMGU5MTQwZDA0MzgwLzAvRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVE NDhENkY3M0ZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJT6rVTttXmFXhfRrzAd72pYQDg4E7YFJMZy Yu/JZcDIdSPjwvKZwttuGKDnyDcERWTFx2QL/+/kt2i8fmrfSD9C/XkCCJ0OSB1e GXotV0yplGiqp5wZqpPPBwZSNYp5nWnye9oIHYLxUd6yVl6cYzE2noXwLgAGp0HD Yx2vFLWO1jsBjhxri9N4cUnWS/Fj5k5uUy4ys6EmoxKT/tKIRkN2PgLPgwXrtsEf nB66enwpLqaVuvLMJbI/KHGqp9pCqYcsgVouDRd2tlN3zrm41sT1AMGZFlqzUnEF HR5FTC6l2ZDm5dSapG8W3vAPGc5/0GOkubPpjB64GcimwEAeSXI= -----END CERTIFICATE-----Generated at Sun Jun 29 18:48:55 2025 by rpki-client