$ rpki-client -vvf repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft File: E07D333345CD7D30F1DC10D98F6E73457739DF18.mft (raw, json) Hash identifier: E+iCm/DNh8sm1mdDYkWslSVg9GY+swwrr5QVuaGRLr0= Subject key identifier: 04:CA:26:4A:E4:1F:0A:01:45:E1:00:BA:78:A3:21:FA:F5:5B:69:CE Authority key identifier: E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18 Certificate issuer: /CN=E07D333345CD7D30F1DC10D98F6E73457739DF18 Certificate serial: 586B2990831D00B27E62D9BE3E64EF023DFCD216 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft Manifest number: 0297 Signing time: Sat 28 Jun 2025 07:42:03 +0000 Manifest this update: Sat 28 Jun 2025 07:37:03 +0000 Manifest next update: Tue 01 Jul 2025 17:08:03 +0000 Files and hashes: 1: E07D333345CD7D30F1DC10D98F6E73457739DF18.crl (hash: 86DfiDFSqO5BU9D9vaQqGwrvvUjADyk7u/dLHIQ6Ljw=) 2: 3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa (hash: Ss59sjtuzZzHxU4wVgffc5lRWrpUhdlYbl1sQ1q9oHY=) 3: 3130332e3137352e32342e302f32342d3234203d3e20313339393532.roa (hash: 6N2zZq51uiKWHkHr8bnvsHH+UdIZQrumHmhwLr8jJiM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 17:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:6b:29:90:83:1d:00:b2:7e:62:d9:be:3e:64:ef:02:3d:fc:d2:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E07D333345CD7D30F1DC10D98F6E73457739DF18 Validity Not Before: Jun 28 07:37:03 2025 GMT Not After : Jul 1 17:08:03 2025 GMT Subject: CN=04CA264AE41F0A0145E100BA78A321FAF55B69CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b6:c3:49:08:af:a5:3a:23:84:04:4d:64:c2: 7b:3a:43:24:b6:1d:39:1d:b0:72:88:f5:4f:84:7f: f2:26:ea:bc:4f:3f:d5:8f:c2:a0:86:ba:19:c3:08: f5:81:21:91:14:be:f3:02:19:f0:31:d0:1b:34:38: 52:39:73:42:56:1e:ef:98:55:d7:78:36:cc:1a:af: 2b:8c:9e:20:cc:0b:ef:84:2e:2c:67:79:7e:86:f2: 89:af:ea:0c:0a:5a:d6:a7:2a:ad:85:0d:33:46:ab: ed:57:30:87:91:39:51:1d:68:fd:19:40:ec:12:52: 5c:49:94:93:78:ae:41:93:ea:a7:89:46:d1:b5:22: 6b:10:80:0d:dc:6f:d0:18:f1:44:c9:99:1f:a2:4b: 6a:87:d0:c9:19:e6:7d:22:7f:09:bc:ae:22:32:71: 48:5d:b0:7a:71:3a:34:17:3c:1f:60:d3:d2:5d:1f: 53:86:c2:7a:8a:f0:06:25:90:89:f2:0c:fc:4d:9e: 19:01:50:3a:a1:41:a5:e0:f3:dc:6c:e9:f3:fc:64: be:c8:8b:00:89:c4:47:c2:67:57:53:2c:9a:e3:c9: 84:67:ad:80:c4:ef:81:61:8d:00:5d:9c:87:10:15: c2:35:b4:b3:24:4e:17:ba:de:a1:41:2e:15:fc:79: 43:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CA:26:4A:E4:1F:0A:01:45:E1:00:BA:78:A3:21:FA:F5:5B:69:CE X509v3 Authority Key Identifier: keyid:E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:de:4e:03:12:ae:60:21:33:93:44:1d:ea:49:e0:5e:d5:4b: 38:c0:79:60:27:05:d8:c1:8e:2e:30:ab:1b:7c:21:9c:fe:bb: 79:b2:77:41:84:fb:ee:84:18:96:b3:84:09:96:c9:09:e7:48: eb:b8:48:0a:63:40:e1:96:f3:9b:4d:37:48:be:a5:06:fe:72: fb:56:b4:45:4f:43:69:60:50:80:70:48:75:84:72:2d:d9:86: 63:2a:54:bc:02:1d:78:c9:60:09:5d:ff:b2:8a:07:a2:10:6a: 83:c4:cd:81:38:fe:12:bf:fa:8b:0f:8c:5a:5a:5c:83:4b:aa: 97:f9:13:bb:70:06:b1:93:85:c7:53:32:3b:22:9a:19:6f:cd: e7:03:c8:89:2c:c7:db:e9:f4:2a:24:e3:32:8b:52:e8:2e:75: 5d:fd:d5:29:5a:49:03:d4:40:63:48:7b:b3:8c:1f:7f:25:b7: 9a:5f:c9:07:41:9b:14:cb:56:24:84:f8:15:b8:9b:db:06:00: 76:1c:01:a5:55:70:8b:b9:63:0d:a5:8b:5c:82:e8:37:f3:61: df:d2:8b:3f:d8:80:df:bd:19:02:c6:20:fc:10:f0:cb:ba:a4: eb:55:71:78:76:cd:0a:bd:9c:7c:d9:1d:75:01:41:38:63:bb: ab:05:6a:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWGspkIMdALJ+Ytm+PmTvAj380hYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTczNDU3 NzM5REYxODAeFw0yNTA2MjgwNzM3MDNaFw0yNTA3MDExNzA4MDNaMDMxMTAvBgNV BAMTKDA0Q0EyNjRBRTQxRjBBMDE0NUUxMDBCQTc4QTMyMUZBRjU1QjY5Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDstsNJCK+lOiOEBE1kwns6QyS2 HTkdsHKI9U+Ef/Im6rxPP9WPwqCGuhnDCPWBIZEUvvMCGfAx0Bs0OFI5c0JWHu+Y Vdd4NswaryuMniDMC++ELixneX6G8omv6gwKWtanKq2FDTNGq+1XMIeROVEdaP0Z QOwSUlxJlJN4rkGT6qeJRtG1ImsQgA3cb9AY8UTJmR+iS2qH0MkZ5n0ifwm8riIy cUhdsHpxOjQXPB9g09JdH1OGwnqK8AYlkInyDPxNnhkBUDqhQaXg89xs6fP8ZL7I iwCJxEfCZ1dTLJrjyYRnrYDE74FhjQBdnIcQFcI1tLMkThe63qFBLhX8eUP9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBMomSuQfCgFF4QC6eKMh+vVbac4wHwYDVR0j BBgwFoAU4H0zM0XNfTDx3BDZj25zRXc53xgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTYyODgwZS1kNWYyLTQwNjktODhmZi0xMjY3YjdjYzAxYzUvMC9FMDdEMzMzMzQ1 Q0Q3RDMwRjFEQzEwRDk4RjZFNzM0NTc3MzlERjE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTczNDU3NzM5 REYxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU2Mjg4MGUtZDVmMi00MDY5LTg4 ZmYtMTI2N2I3Y2MwMWM1LzAvRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTcz NDU3NzM5REYxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANzeTgMSrmAhM5NEHepJ4F7VSzjAeWAnBdjB ji4wqxt8IZz+u3myd0GE++6EGJazhAmWyQnnSOu4SApjQOGW85tNN0i+pQb+cvtW tEVPQ2lgUIBwSHWEci3ZhmMqVLwCHXjJYAld/7KKB6IQaoPEzYE4/hK/+osPjFpa XINLqpf5E7twBrGThcdTMjsimhlvzecDyIksx9vp9Cok4zKLUugudV391SlaSQPU QGNIe7OMH38lt5pfyQdBmxTLViSE+BW4m9sGAHYcAaVVcIu5Yw2li1yC6DfzYd/S iz/YgN+9GQLGIPwQ8Mu6pOtVcXh2zQq9nHzZHXUBQThju6sFauM= -----END CERTIFICATE-----Generated at Mon Jun 30 00:52:19 2025 by rpki-client