$ rpki-client -vvf repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft File: 04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft (raw, json) Hash identifier: fE0ycnlHjzqukVNDdcswcXRSNSVBcTPP+sM7krl/hbI= Subject key identifier: B6:66:84:21:89:7A:B0:FA:02:95:FE:FE:46:C9:E5:E5:C9:D2:CB:D1 Authority key identifier: 04:EE:3B:C3:69:17:32:E0:69:DF:0D:9D:29:DE:36:06:11:CC:F0:DB Certificate issuer: /CN=04EE3BC3691732E069DF0D9D29DE360611CCF0DB Certificate serial: 34EBC9F96525D822A8E1AAA35716BE0F85E52FA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft Manifest number: 01BA Signing time: Sat 28 Jun 2025 14:41:40 +0000 Manifest this update: Sat 28 Jun 2025 14:36:40 +0000 Manifest next update: Tue 01 Jul 2025 22:41:40 +0000 Files and hashes: 1: 3130332e38382e39302e302f32342d3234203d3e20313530323232.roa (hash: MYQMONKpGPj3bOstGyVvXnBKB1cjxaxprR+RC7x3cvc=) 2: 3130332e38382e39302e302f32332d3234203d3e20313530323232.roa (hash: mgCVjomXQMnFAcUzEYIqhnBEpG3Ap0N94FFecN/bKB0=) 3: 3130332e38382e39312e302f32342d3234203d3e20313530323232.roa (hash: Ey+hAeMC3FZdl/vgDwtSv8s2kkOb2B/dnDhrf0lue/o=) 4: 04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl (hash: 6YDDJe3xVqZXNM8zrYoDCtiU4Bk/E1WqGHA1DcTIuX0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 22:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:eb:c9:f9:65:25:d8:22:a8:e1:aa:a3:57:16:be:0f:85:e5:2f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04EE3BC3691732E069DF0D9D29DE360611CCF0DB Validity Not Before: Jun 28 14:36:40 2025 GMT Not After : Jul 1 22:41:40 2025 GMT Subject: CN=B6668421897AB0FA0295FEFE46C9E5E5C9D2CBD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:64:e3:15:6b:74:5b:ab:23:02:90:7f:bd:17: 09:b1:55:93:ad:1a:57:ff:5e:7f:db:b1:39:28:b0: 75:a0:67:88:b6:e8:1f:53:29:95:64:7a:29:ba:36: cb:3a:ab:20:13:a8:bb:06:2a:74:5b:42:9c:79:41: 20:36:5a:a9:e6:bb:0b:1e:fb:3f:74:c1:af:62:eb: 85:47:1c:93:86:a4:92:a0:4c:43:15:23:9e:c5:be: 89:31:fb:1e:65:58:77:56:36:3b:6b:c0:49:5e:81: 96:09:cf:1b:fd:f4:bb:38:e5:fa:c6:17:da:cd:89: cf:65:88:9e:96:d3:47:37:96:9c:b4:eb:83:de:ba: f0:b1:22:92:d3:55:a5:2b:f9:1c:1b:25:23:f7:9f: 6c:07:fd:5b:73:e6:69:86:f5:b0:80:49:21:8f:4e: eb:7d:dc:4e:62:32:99:fa:af:64:51:17:a4:04:9b: 6f:4f:a5:96:56:b6:0e:54:d4:d8:7b:b2:ee:0f:0a: ed:dc:3c:be:82:a8:43:96:f3:de:fa:ec:9f:78:ed: 82:c8:ee:9f:77:ce:bf:4c:b3:9b:8c:96:4e:c0:24: 2b:cd:44:a5:5f:21:f4:92:1b:9a:34:de:d0:0d:83: e3:08:61:1f:bb:a6:11:42:15:9b:3b:e5:be:b8:96: ba:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:66:84:21:89:7A:B0:FA:02:95:FE:FE:46:C9:E5:E5:C9:D2:CB:D1 X509v3 Authority Key Identifier: keyid:04:EE:3B:C3:69:17:32:E0:69:DF:0D:9D:29:DE:36:06:11:CC:F0:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:10:fd:62:c7:0f:cd:79:39:75:39:aa:99:85:17:58:e4:7c: 99:d3:a1:a4:b3:c0:ff:c4:e1:f3:d6:e2:07:af:4f:d8:cf:e6: c8:5f:11:88:9a:a4:e9:74:dc:e9:fa:48:76:a0:27:db:33:a4: 43:5f:eb:8f:77:ac:20:f4:a4:9e:b0:e2:da:47:5b:a2:5d:08: 61:f8:dd:05:4d:9e:92:bf:89:da:99:40:81:5d:82:a8:03:54: 1a:94:af:14:5d:ec:c2:7e:26:77:86:7e:85:fb:73:89:08:98: 32:5f:53:de:7e:26:17:4b:32:15:00:26:1b:43:6c:51:19:0e: 80:70:fa:35:97:b2:60:34:1b:bf:07:98:30:28:f5:ac:0a:89: e2:20:0c:4e:91:0b:0f:03:84:81:d8:3d:31:e5:77:67:be:af: 8e:0b:40:c9:85:c1:82:b2:9d:ea:f1:82:ef:0b:f9:ef:e8:7d: 53:5a:30:2b:df:dd:39:f5:d9:d6:1f:93:36:e8:99:dd:49:a5: a9:f0:f5:29:5c:c5:16:64:9e:d0:be:9d:a1:b7:fc:a7:90:5d: c4:81:ae:2f:4f:a9:b6:73:54:17:d7:85:bc:55:1a:bc:40:55: f7:72:d3:6d:1f:94:3f:29:0f:40:6d:11:27:7c:97:e3:61:59: 72:b4:c7:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNOvJ+WUl2CKo4aqjVxa+D4XlL6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2MDYx MUNDRjBEQjAeFw0yNTA2MjgxNDM2NDBaFw0yNTA3MDEyMjQxNDBaMDMxMTAvBgNV BAMTKEI2NjY4NDIxODk3QUIwRkEwMjk1RkVGRTQ2QzlFNUU1QzlEMkNCRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhZOMVa3RbqyMCkH+9FwmxVZOt Glf/Xn/bsTkosHWgZ4i26B9TKZVkeim6Nss6qyATqLsGKnRbQpx5QSA2Wqnmuwse +z90wa9i64VHHJOGpJKgTEMVI57Fvokx+x5lWHdWNjtrwElegZYJzxv99Ls45frG F9rNic9liJ6W00c3lpy064PeuvCxIpLTVaUr+RwbJSP3n2wH/Vtz5mmG9bCASSGP Tut93E5iMpn6r2RRF6QEm29PpZZWtg5U1Nh7su4PCu3cPL6CqEOW89767J947YLI 7p93zr9Ms5uMlk7AJCvNRKVfIfSSG5o03tANg+MIYR+7phFCFZs75b64lroLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtmaEIYl6sPoClf7+Rsnl5cnSy9EwHwYDVR0j BBgwFoAUBO47w2kXMuBp3w2dKd42BhHM8NswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTkxODA5ZS1kZDQ5LTRjNTItYjExZi0yYTUxOGMzYWE4NTYvMC8wNEVFM0JDMzY5 MTczMkUwNjlERjBEOUQyOURFMzYwNjExQ0NGMERCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2MDYxMUND RjBEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5MTgwOWUtZGQ0OS00YzUyLWIx MWYtMmE1MThjM2FhODU2LzAvMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2 MDYxMUNDRjBEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKIQ/WLHD815OXU5qpmFF1jkfJnToaSzwP/E 4fPW4gevT9jP5shfEYiapOl03On6SHagJ9szpENf6493rCD0pJ6w4tpHW6JdCGH4 3QVNnpK/idqZQIFdgqgDVBqUrxRd7MJ+JneGfoX7c4kImDJfU95+JhdLMhUAJhtD bFEZDoBw+jWXsmA0G78HmDAo9awKieIgDE6RCw8DhIHYPTHld2e+r44LQMmFwYKy nerxgu8L+e/ofVNaMCvf3Tn12dYfkzbomd1Jpanw9SlcxRZkntC+naG3/KeQXcSB ri9PqbZzVBfXhbxVGrxAVfdy020flD8pD0BtESd8l+NhWXK0x9g= -----END CERTIFICATE-----Generated at Sun Jun 29 18:40:10 2025 by rpki-client