$ rpki-client -vvf repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft File: E5B2AB049E75667C8F00ECB0EBF617859558571D.mft (raw, json) Hash identifier: o4qF9hNon3eUvDFtOOtVYFGbkJoW5aALKESg4PvNjhI= Subject key identifier: 9D:3B:01:61:3E:BC:24:5B:58:B5:2B:55:1B:C7:48:22:57:AE:EC:BD Authority key identifier: E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D Certificate issuer: /CN=E5B2AB049E75667C8F00ECB0EBF617859558571D Certificate serial: 2D37EF57E7376CD4F166615D5AE4792B15251358 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft Manifest number: 0119 Signing time: Sat 28 Jun 2025 17:40:35 +0000 Manifest this update: Sat 28 Jun 2025 17:35:35 +0000 Manifest next update: Tue 01 Jul 2025 23:15:35 +0000 Files and hashes: 1: 3130332e3232342e37362e302f32342d3234203d3e203536323535.roa (hash: Zqpcy0ugk8HAE+GYWRNcHEByrdTEefMutc7Cf14qofA=) 2: E5B2AB049E75667C8F00ECB0EBF617859558571D.crl (hash: i7ETDxGSgQYT3o67Rb2ck87wNGBRYtOQ9Sx4cXxJ49c=) 3: 3130332e3232342e37372e302f32342d3234203d3e203536323535.roa (hash: MHqEWkxk0lcqHf0DHOOzzwqgpatowmuSY53tgbg1pfo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 23:15:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:37:ef:57:e7:37:6c:d4:f1:66:61:5d:5a:e4:79:2b:15:25:13:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5B2AB049E75667C8F00ECB0EBF617859558571D Validity Not Before: Jun 28 17:35:35 2025 GMT Not After : Jul 1 23:15:35 2025 GMT Subject: CN=9D3B01613EBC245B58B52B551BC7482257AEECBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8f:fb:69:27:1a:ad:7c:50:6c:06:08:6b:d4: c5:46:cb:53:ee:8f:10:b8:c4:71:cc:c6:da:11:4a: a0:72:76:a1:66:ae:07:1f:46:77:c0:12:43:43:8c: cf:39:73:55:66:dd:41:be:03:a9:d4:7f:21:92:9a: 83:3c:37:27:eb:7e:e2:37:e9:f9:1a:f2:20:5b:31: fa:74:dc:ef:93:45:e9:2b:1a:44:d4:de:b9:27:25: 7c:12:ff:21:d5:07:c3:82:5c:56:fa:a3:a7:7b:d0: b3:0c:0a:c4:b4:7f:81:e7:7a:ee:30:92:51:4b:d6: 6b:c7:2b:cd:d1:51:25:bd:b0:72:47:db:ff:83:56: 02:af:99:b7:11:67:22:f2:d5:1e:3b:80:31:51:dc: b6:8d:98:64:a8:73:d5:95:43:fc:01:76:a4:22:3e: e0:7f:cc:63:53:eb:04:10:df:8f:e0:d2:3d:43:8c: b7:1f:08:ef:71:9b:e5:8e:bd:9b:09:82:b8:5c:3a: 5e:4b:5e:b9:3c:c2:5b:63:b1:a9:44:8d:de:a5:e2: ea:25:45:46:db:70:79:48:5b:2c:12:b2:6b:17:d0: 0d:3f:3f:ee:5d:5b:28:e2:de:90:07:f3:2e:6d:fa: 6e:f4:9c:5c:15:16:1a:2b:ee:56:99:fe:3b:0b:cd: 1e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3B:01:61:3E:BC:24:5B:58:B5:2B:55:1B:C7:48:22:57:AE:EC:BD X509v3 Authority Key Identifier: keyid:E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ff:5f:79:85:2b:f0:8b:6c:48:3c:c4:82:1b:79:77:f0:00: 32:05:25:03:dd:3a:b0:43:b3:13:6a:8c:0b:50:dc:57:f5:7c: df:8b:6f:f0:86:74:52:31:e4:a4:d5:4b:b3:d5:c3:2d:60:ce: d2:64:8c:60:7e:ff:86:71:a4:df:c3:6f:0c:ec:d6:9b:98:29: 7b:7a:74:cc:b7:6d:70:a3:a6:08:13:56:18:d1:d3:e3:e7:7c: 7c:02:78:0c:5c:15:57:83:8f:1b:14:6d:b9:c6:24:dd:e4:f8: 51:8a:13:6c:52:b1:a3:6f:4d:0e:e7:18:98:f6:b5:4d:73:99: 10:8a:de:42:36:e4:22:81:e1:95:2e:d3:d2:a1:82:85:bc:0d: 3a:9d:b7:14:22:c0:d3:6a:8e:23:fe:87:7d:64:32:44:3c:7e: 27:55:f5:3a:26:8e:ab:b1:9a:23:88:b6:92:b0:75:3c:38:9d: 56:e7:89:77:f4:bf:78:43:ca:18:4c:42:10:6d:4a:cb:8d:b0: c3:fd:86:c1:68:6e:d3:52:6c:7c:0a:cb:01:c9:31:36:1f:f1: 64:c8:fa:34:5b:af:ca:66:3e:57:d9:bc:1e:bb:3c:21:ed:0d: c2:09:41:c4:10:9d:d3:41:cc:35:7f:52:15:b0:0e:52:53:ab: 3b:2f:67:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULTfvV+c3bNTxZmFdWuR5KxUlE1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3ODU5 NTU4NTcxRDAeFw0yNTA2MjgxNzM1MzVaFw0yNTA3MDEyMzE1MzVaMDMxMTAvBgNV BAMTKDlEM0IwMTYxM0VCQzI0NUI1OEI1MkI1NTFCQzc0ODIyNTdBRUVDQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRj/tpJxqtfFBsBghr1MVGy1Pu jxC4xHHMxtoRSqBydqFmrgcfRnfAEkNDjM85c1Vm3UG+A6nUfyGSmoM8NyfrfuI3 6fka8iBbMfp03O+TRekrGkTU3rknJXwS/yHVB8OCXFb6o6d70LMMCsS0f4Hneu4w klFL1mvHK83RUSW9sHJH2/+DVgKvmbcRZyLy1R47gDFR3LaNmGSoc9WVQ/wBdqQi PuB/zGNT6wQQ34/g0j1DjLcfCO9xm+WOvZsJgrhcOl5LXrk8wltjsalEjd6l4uol RUbbcHlIWywSsmsX0A0/P+5dWyji3pAH8y5t+m70nFwVFhor7laZ/jsLzR4BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnTsBYT68JFtYtStVG8dIIleu7L0wHwYDVR0j BBgwFoAU5bKrBJ51ZnyPAOyw6/YXhZVYVx0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjI2YjNlMS1kN2Y2LTQ2NWUtODMwMi03ZDUyZjVjMzQwZmYvMC9FNUIyQUIwNDlF NzU2NjdDOEYwMEVDQjBFQkY2MTc4NTk1NTg1NzFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3ODU5NTU4 NTcxRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIyNmIzZTEtZDdmNi00NjVlLTgz MDItN2Q1MmY1YzM0MGZmLzAvRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3 ODU5NTU4NTcxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHL/X3mFK/CLbEg8xIIbeXfwADIFJQPdOrBD sxNqjAtQ3Ff1fN+Lb/CGdFIx5KTVS7PVwy1gztJkjGB+/4ZxpN/Dbwzs1puYKXt6 dMy3bXCjpggTVhjR0+PnfHwCeAxcFVeDjxsUbbnGJN3k+FGKE2xSsaNvTQ7nGJj2 tU1zmRCK3kI25CKB4ZUu09KhgoW8DTqdtxQiwNNqjiP+h31kMkQ8fidV9Tomjqux miOItpKwdTw4nVbniXf0v3hDyhhMQhBtSsuNsMP9hsFobtNSbHwKywHJMTYf8WTI +jRbr8pmPlfZvB67PCHtDcIJQcQQndNBzDV/UhWwDlJTqzsvZzo= -----END CERTIFICATE-----Generated at Sun Jun 29 19:06:15 2025 by rpki-client