$ rpki-client -vvf repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft File: EC39D766063B56E5EA4DBFB2A502298FB995956A.mft (raw, json) Hash identifier: 0pso32bSUjye4J9hW8sRv1asaE5bTMoebIXFf92bD80= Subject key identifier: A5:A4:5B:FD:4F:A4:66:03:E7:64:51:D1:8A:2F:F2:9D:78:0E:E5:3C Authority key identifier: EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A Certificate issuer: /CN=EC39D766063B56E5EA4DBFB2A502298FB995956A Certificate serial: 540C071DDC0EC91C4A1657F8245EF5FB3CE2EE56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft Manifest number: 04FE Signing time: Sat 23 Aug 2025 06:30:38 +0000 Manifest this update: Sat 23 Aug 2025 06:25:38 +0000 Manifest next update: Tue 26 Aug 2025 12:53:38 +0000 Files and hashes: 1: EC39D766063B56E5EA4DBFB2A502298FB995956A.crl (hash: GU4NC2416vzvnY1RBkmFd3UL3NqcqLU4OLF/3rSfBjg=) 2: 3130332e3133392e32352e302f32342d3234203d3e20313338383738.roa (hash: fXYsqxCjsvIrOq+7nStBZ2/w2ahyZCjmKRe5J8m8wVg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:0c:07:1d:dc:0e:c9:1c:4a:16:57:f8:24:5e:f5:fb:3c:e2:ee:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC39D766063B56E5EA4DBFB2A502298FB995956A Validity Not Before: Aug 23 06:25:38 2025 GMT Not After : Aug 26 12:53:38 2025 GMT Subject: CN=A5A45BFD4FA46603E76451D18A2FF29D780EE53C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:29:46:c4:7f:65:2b:f7:47:7b:9e:e4:7b:51: 91:74:44:14:e0:25:37:0a:80:aa:8c:3c:06:ac:34: 6c:fb:05:50:b0:df:46:5c:1f:e6:58:ff:8a:f6:ae: e5:41:bc:53:73:b8:27:18:1a:4d:c7:e3:2a:f7:4a: 7a:1c:2c:d0:95:c7:93:30:c6:f3:1d:df:94:08:b7: eb:07:dc:04:dd:3c:b8:71:b2:9d:b2:8e:85:d4:f4: 5b:f6:7e:a2:6d:52:b9:7c:03:48:dd:17:da:f1:ae: aa:14:96:67:96:86:eb:8e:b0:01:f8:5c:a7:a4:9e: d7:1d:1c:1c:d4:98:61:f6:25:a0:7d:9e:33:a1:77: 7d:7d:0f:47:a1:d5:18:90:23:f2:11:6a:c2:49:46: 3d:2c:3e:bb:a6:57:48:6d:dc:91:6a:db:9e:d8:fc: 2c:30:cb:26:ec:cb:54:f5:11:fc:2b:1c:e7:26:96: e7:97:cb:e1:9c:dd:a8:56:94:2e:04:9c:5b:c5:e4: fe:73:e3:60:19:b5:d3:70:59:73:67:35:70:51:20: a7:25:bc:c6:23:54:f6:3c:40:85:3c:2a:7f:72:07: b9:02:3e:10:e3:fa:9f:a9:a1:e6:39:b9:3b:4a:f3: 41:c5:1a:ed:df:06:dc:a8:83:ba:53:7e:54:79:77: a6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A4:5B:FD:4F:A4:66:03:E7:64:51:D1:8A:2F:F2:9D:78:0E:E5:3C X509v3 Authority Key Identifier: keyid:EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f3:07:68:a1:4b:be:2d:32:12:2c:35:54:f8:3b:ad:65:c8: 69:fc:02:48:93:3d:ea:6c:8e:b7:7e:73:95:ee:5c:bf:eb:82: ca:b7:5f:2e:0b:30:ea:48:0e:25:df:12:db:3d:07:12:cc:49: 5f:c4:93:0b:db:aa:4a:67:fc:50:5f:94:1f:21:7b:07:0d:9c: 83:8a:dc:f0:c7:51:ae:55:68:23:36:68:72:ce:74:c9:5c:be: cd:1e:9a:08:92:7f:3d:14:bf:b4:c2:01:a6:c5:7a:9f:b8:c7: 4d:6d:d5:7c:3e:3c:e6:c4:65:9e:a8:ff:68:52:0f:a8:82:87: 0f:c2:64:6c:53:5d:3b:5b:a5:69:c2:94:ea:7f:8b:6f:a8:45: 0f:16:f4:58:f7:be:43:51:12:02:f8:a6:1b:3c:29:59:19:cc: f0:99:c7:b0:80:cc:42:07:1e:68:b8:c1:10:90:02:af:af:3c: f8:80:e0:0b:20:73:ab:77:eb:29:06:e1:c3:c6:7c:fe:e2:70: fd:3f:ab:99:a8:ba:80:18:1c:cd:e6:34:e2:9e:78:13:33:68: ea:97:0b:91:28:5d:d6:fa:95:4b:a3:99:83:fc:ed:56:f7:2e: 7e:9b:b4:0f:19:da:f4:8d:1d:69:31:ba:8c:41:3c:de:8d:8a: c3:1f:f6:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVAwHHdwOyRxKFlf4JF71+zzi7lYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5OEZC OTk1OTU2QTAeFw0yNTA4MjMwNjI1MzhaFw0yNTA4MjYxMjUzMzhaMDMxMTAvBgNV BAMTKEE1QTQ1QkZENEZBNDY2MDNFNzY0NTFEMThBMkZGMjlENzgwRUU1M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/KUbEf2Ur90d7nuR7UZF0RBTg JTcKgKqMPAasNGz7BVCw30ZcH+ZY/4r2ruVBvFNzuCcYGk3H4yr3SnocLNCVx5Mw xvMd35QIt+sH3ATdPLhxsp2yjoXU9Fv2fqJtUrl8A0jdF9rxrqoUlmeWhuuOsAH4 XKekntcdHBzUmGH2JaB9njOhd319D0eh1RiQI/IRasJJRj0sPrumV0ht3JFq257Y /Cwwyybsy1T1EfwrHOcmlueXy+Gc3ahWlC4EnFvF5P5z42AZtdNwWXNnNXBRIKcl vMYjVPY8QIU8Kn9yB7kCPhDj+p+poeY5uTtK80HFGu3fBtyog7pTflR5d6aJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpaRb/U+kZgPnZFHRii/ynXgO5TwwHwYDVR0j BBgwFoAU7DnXZgY7VuXqTb+ypQIpj7mVlWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2ZlNDI1NS0xZDkxLTRmY2MtYmNlNC04YTQyYWRmZTNjMjkvMC9FQzM5RDc2NjA2 M0I1NkU1RUE0REJGQjJBNTAyMjk4RkI5OTU5NTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5OEZCOTk1 OTU2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNmZTQyNTUtMWQ5MS00ZmNjLWJj ZTQtOGE0MmFkZmUzYzI5LzAvRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5 OEZCOTk1OTU2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/zB2ihS74tMhIsNVT4O61lyGn8AkiTPeps jrd+c5XuXL/rgsq3Xy4LMOpIDiXfEts9BxLMSV/Ekwvbqkpn/FBflB8hewcNnIOK 3PDHUa5VaCM2aHLOdMlcvs0emgiSfz0Uv7TCAabFep+4x01t1Xw+PObEZZ6o/2hS D6iChw/CZGxTXTtbpWnClOp/i2+oRQ8W9Fj3vkNREgL4phs8KVkZzPCZx7CAzEIH Hmi4wRCQAq+vPPiA4Asgc6t36ykG4cPGfP7icP0/q5mouoAYHM3mNOKeeBMzaOqX C5EoXdb6lUujmYP87Vb3Ln6btA8Z2vSNHWkxuoxBPN6NisMf9lw= -----END CERTIFICATE-----Generated at Sat Aug 23 14:20:28 2025 by rpki-client