$ rpki-client -vvf repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft File: E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft (raw, json) Hash identifier: xETStdvM2Xipw+JMjUQCFsOAfN5o6ROlgn01PLp9Vfc= Subject key identifier: 6A:03:56:2D:09:D9:9C:D6:17:04:7F:10:0C:57:BF:0D:C9:25:99:E8 Authority key identifier: E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61 Certificate issuer: /CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61 Certificate serial: 1E53DD7727565B9DDC1D8F847269CDA2C7C1B052 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft Manifest number: 04E4 Signing time: Sun 29 Jun 2025 06:51:37 +0000 Manifest this update: Sun 29 Jun 2025 06:46:37 +0000 Manifest next update: Wed 02 Jul 2025 13:09:37 +0000 Files and hashes: 1: E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl (hash: nfZ+fAwVOZtrYXYtX8IxV6XqHZtWqs+c1D+KyGxCA4s=) 2: 3130332e3134382e34362e302f32332d3234203d3e203234353237.roa (hash: eQEzsyxVfpTHgHfaMJEWpEAU8ae5FhvdVXRN2kONR8w=) 3: 3138332e38312e3135322e302f32312d3234203d3e203234353237.roa (hash: HrGCjeL9LpaajCgOCMCFmtzXiHgvf2onAjSq9sq+a5M=) 4: 3230332e3136302e35362e302f32312d3234203d3e203234353237.roa (hash: P99HVIzqHVCWDBqJ4r8v17rUky9V8VmAdjN3/2RrLPI=) 5: 323430353a366334303a3a2f33322d3438203d3e203234353237.roa (hash: sdUNTLR9jp0dwpPELDIKx4SufivRxg0Tg+/QbjfBOQs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:53:dd:77:27:56:5b:9d:dc:1d:8f:84:72:69:cd:a2:c7:c1:b0:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61 Validity Not Before: Jun 29 06:46:37 2025 GMT Not After : Jul 2 13:09:37 2025 GMT Subject: CN=6A03562D09D99CD617047F100C57BF0DC92599E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d7:11:5b:a6:a3:23:21:5a:d2:66:d0:f6:3c: 46:e8:02:a7:5d:14:e2:44:89:2a:37:0c:f3:88:11: 32:a8:93:95:42:8f:a6:f8:5c:d7:27:83:5d:d0:ed: b7:91:f5:b9:0c:1f:9e:ab:bc:3b:9b:1f:4c:ff:80: e0:0c:3b:2f:d8:d1:53:d0:ab:87:c2:3d:7f:a8:82: fd:2b:d9:6a:78:5c:69:c5:a4:c5:1c:a3:4d:55:d5: 76:e9:54:00:3f:c6:6b:5a:b7:5f:47:30:09:44:e6: 2f:c5:e2:0e:5a:a4:0a:69:a9:65:1b:24:83:94:c7: 70:ac:3f:e6:35:8a:3f:29:5e:2c:b2:3f:c0:a4:c3: 8c:dc:27:f8:e9:f5:c9:95:6d:d6:dd:8d:c5:ec:27: 4f:dd:f8:42:5f:2f:07:0e:86:31:0e:9c:c4:d2:51: c2:43:80:03:95:82:60:a4:b1:6c:92:57:93:53:f4: 77:24:f3:ad:16:d1:db:b2:8b:1d:f8:b5:6f:b7:b9: d4:14:2d:f4:7c:68:1d:4c:84:dc:f9:80:3c:54:d2: 5d:5a:cd:03:07:ba:9f:29:22:96:fc:66:a7:5e:c2: 83:fa:16:36:be:03:4e:97:9e:0c:d8:7a:d6:30:15: 4f:9e:3d:ba:1a:db:96:09:54:b9:fc:3c:e0:c0:7f: da:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:03:56:2D:09:D9:9C:D6:17:04:7F:10:0C:57:BF:0D:C9:25:99:E8 X509v3 Authority Key Identifier: keyid:E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:9c:cc:27:c7:9f:31:fc:1a:61:98:af:74:05:10:a9:c5:9e: 9d:86:52:96:b1:1c:7e:a3:f0:23:b7:a4:81:70:d6:8d:e1:49: a0:89:5e:cd:76:cd:e3:bb:f6:74:4b:4f:ea:9a:7e:11:72:cc: 5e:4f:41:42:49:41:db:02:5d:ed:33:e8:43:b9:1e:28:1c:31: 47:6c:f6:09:9f:53:25:0a:7d:4c:24:f6:37:32:a7:2b:7f:fb: d4:f9:c5:ee:20:45:f5:c9:f1:5f:70:d8:6f:01:c3:52:81:15: ab:1d:74:a8:1f:7f:57:b0:65:85:46:f0:15:5b:db:59:f5:f2: 14:dd:1f:3e:27:61:f5:1a:1a:c3:08:7c:00:45:4b:d4:71:8f: d7:82:f4:35:c1:56:a9:b7:d7:38:2e:57:62:21:47:8e:06:c2: f6:64:4c:ad:e3:29:91:60:4c:15:05:51:95:47:85:65:b9:a6: b4:7f:bd:63:80:18:44:fb:9b:b8:8b:e6:1a:63:9b:f4:e1:a1: 45:0d:e2:37:56:1f:ad:d7:2b:39:0e:83:89:c4:57:38:21:28: ed:ae:ba:82:c7:ab:e4:fc:68:14:2f:d9:85:f6:38:b1:52:39: ae:c4:40:84:c2:e4:57:80:22:f8:d9:16:88:ce:5a:be:c1:6d: 58:fa:d0:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHlPddydWW53cHY+EcmnNosfBsFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0QTAw NEFCMkM2MTAeFw0yNTA2MjkwNjQ2MzdaFw0yNTA3MDIxMzA5MzdaMDMxMTAvBgNV BAMTKDZBMDM1NjJEMDlEOTlDRDYxNzA0N0YxMDBDNTdCRjBEQzkyNTk5RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa1xFbpqMjIVrSZtD2PEboAqdd FOJEiSo3DPOIETKok5VCj6b4XNcng13Q7beR9bkMH56rvDubH0z/gOAMOy/Y0VPQ q4fCPX+ogv0r2Wp4XGnFpMUco01V1XbpVAA/xmtat19HMAlE5i/F4g5apAppqWUb JIOUx3CsP+Y1ij8pXiyyP8Ckw4zcJ/jp9cmVbdbdjcXsJ0/d+EJfLwcOhjEOnMTS UcJDgAOVgmCksWySV5NT9Hck860W0duyix34tW+3udQULfR8aB1MhNz5gDxU0l1a zQMHup8pIpb8ZqdewoP6Fja+A06XngzYetYwFU+ePboa25YJVLn8PODAf9q7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUagNWLQnZnNYXBH8QDFe/DcklmegwHwYDVR0j BBgwFoAU6fegqm3Mof99PWFGDVU0oASrLGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmI4N2ZlYi0wZmUyLTQxOGEtYTM3YS1iZTNkZDFmMGU2M2MvMC9FOUY3QTBBQTZE Q0NBMUZGN0QzRDYxNDYwRDU1MzRBMDA0QUIyQzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0QTAwNEFC MkM2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZiODdmZWItMGZlMi00MThhLWEz N2EtYmUzZGQxZjBlNjNjLzAvRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0 QTAwNEFCMkM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFaczCfHnzH8GmGYr3QFEKnFnp2GUpaxHH6j 8CO3pIFw1o3hSaCJXs12zeO79nRLT+qafhFyzF5PQUJJQdsCXe0z6EO5HigcMUds 9gmfUyUKfUwk9jcypyt/+9T5xe4gRfXJ8V9w2G8Bw1KBFasddKgff1ewZYVG8BVb 21n18hTdHz4nYfUaGsMIfABFS9Rxj9eC9DXBVqm31zguV2IhR44GwvZkTK3jKZFg TBUFUZVHhWW5prR/vWOAGET7m7iL5hpjm/ThoUUN4jdWH63XKzkOg4nEVzghKO2u uoLHq+T8aBQv2YX2OLFSOa7EQITC5FeAIvjZFojOWr7BbVj60Cc= -----END CERTIFICATE-----Generated at Sun Jun 29 18:12:48 2025 by rpki-client