$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft File: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft (raw, json) Hash identifier: bkQbyy/j5MKblIaOwoTbMAfw9RGtTa4NOlJdXQFGUmQ= Subject key identifier: 44:32:8F:B9:7E:62:6E:DF:E7:51:9A:23:C8:67:3C:B7:9E:00:86:46 Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 Certificate issuer: /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Certificate serial: 1DF6E4016BDE44A17C3D4A96F6BD3355C0384E27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft Manifest number: 04E3 Signing time: Sun 29 Jun 2025 15:22:04 +0000 Manifest this update: Sun 29 Jun 2025 15:17:04 +0000 Manifest next update: Wed 02 Jul 2025 21:20:04 +0000 Files and hashes: 1: 3130332e3133302e36312e302f32342d3234203d3e20313338303739.roa (hash: VmKn4H92OZlUtnRAAPlH3DAWvPgKEL7aXZz1kY1YrQ0=) 2: 3130332e3133302e36332e302f32342d3234203d3e20313338303739.roa (hash: BTJyyClQJ2ooNN9EN9agUZZ+ml+xViKf+qFHMjyGIK0=) 3: 3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa (hash: t1GlQPTqCX0tSN2oGwnozLwYbWtyVQRe58xqkUEfAuQ=) 4: 3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa (hash: 8GAdTJuNR1Zetl+ziDhBJwBFLCcefBc1zOZpq/utdAc=) 5: 3130332e3133302e36302e302f32322d3232203d3e20313338303739.roa (hash: dr1CQsFDr+grBIANLd3KqKBw7/lJxKh8r7O2jOMsoyE=) 6: 3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa (hash: gA/G4KU0S654m0JbYV6SpYNvybqVwcWtbGvUC8YnGdc=) 7: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl (hash: zh08LCJGcgjwSLAc0Mrl0zQbbP7L26E2W/mmjg5+oaE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 21:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:f6:e4:01:6b:de:44:a1:7c:3d:4a:96:f6:bd:33:55:c0:38:4e:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Validity Not Before: Jun 29 15:17:04 2025 GMT Not After : Jul 2 21:20:04 2025 GMT Subject: CN=44328FB97E626EDFE7519A23C8673CB79E008646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8a:8f:93:21:91:cf:2a:e8:77:bf:0e:f3:2f: a1:55:cb:af:02:1a:12:60:f4:3d:5e:49:bb:dd:d8: 9f:be:a0:d7:b6:79:44:9f:fa:84:e3:32:87:a8:c2: 2d:2d:0d:e4:22:45:8f:17:54:a7:eb:61:c9:bf:55: e3:07:6d:48:67:c9:35:f0:ef:67:82:03:47:04:30: 2f:dc:a5:77:ec:f4:60:9a:d1:bd:33:a2:53:62:53: 93:c3:1a:2d:c0:a0:28:eb:f1:91:77:c9:2f:c0:b2: 2c:fd:14:06:d5:16:20:22:8a:af:c3:79:f2:b4:8a: 9a:08:27:19:44:13:be:8a:f6:5f:5a:93:a9:b9:f5: 20:b2:c7:b9:17:fb:6f:2a:89:5e:c5:d2:5f:b8:ac: 69:fa:83:10:26:a2:09:93:04:bf:e1:d3:c0:28:47: 73:6e:55:a2:bb:d8:07:fd:dc:60:fe:6c:12:a9:68: 7e:59:1e:2b:a9:f9:96:05:08:a9:4f:ab:fc:91:0e: a7:a2:20:f4:c5:d9:d8:6a:64:6b:a5:12:7d:fe:1e: 2b:b2:8c:68:9a:d0:c1:ff:3e:50:0b:60:d5:5d:dd: 70:b1:b3:0e:55:dc:9e:ab:ee:a5:f4:64:d3:6f:bc: ec:22:fe:45:77:89:1c:9b:70:65:5b:b3:04:54:26: b3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:32:8F:B9:7E:62:6E:DF:E7:51:9A:23:C8:67:3C:B7:9E:00:86:46 X509v3 Authority Key Identifier: keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:3b:4c:78:9d:db:a1:25:96:e5:19:73:1f:ca:51:38:93:07: 84:65:52:cb:6b:f1:20:c0:ca:a8:52:7f:59:9e:54:1e:1f:94: 8d:fc:59:e7:52:68:9d:7c:18:6b:09:5e:45:71:56:66:51:c3: 6c:5b:e1:9b:53:00:60:47:e8:5d:e3:9a:bd:a6:d2:8e:ec:80: e4:e6:29:69:94:30:b8:e3:47:20:be:a5:8f:f2:f4:ce:a6:23: 1a:5d:2e:ca:cc:3b:2c:d1:7c:55:5f:5d:9e:6f:bd:b2:f2:b5: 14:1f:1a:7d:b2:f4:73:b0:1c:56:c6:2e:14:fb:a2:d0:74:87: d2:a0:7c:c8:db:88:d8:8b:4a:51:fb:53:e1:24:e9:ba:59:02: d4:d2:f6:68:cc:35:d5:42:dd:f8:fd:2e:6d:38:e0:85:18:50: 6a:83:4b:c7:a2:bb:54:8f:5f:15:2d:08:53:8d:9d:ae:60:92: 9a:3e:74:dd:b5:54:10:3e:92:3a:1c:97:b7:4d:49:b4:bd:a9: f2:ee:50:07:ab:8d:4a:e0:2d:a5:34:77:42:cc:e9:d5:2f:3f: f4:db:bc:c4:20:51:8f:50:13:3e:c7:ab:53:f6:20:0f:fb:0c: 34:2b:cb:df:dd:22:77:eb:52:d6:d7:45:d0:89:ce:cd:53:f8: ad:40:0d:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHfbkAWveRKF8PUqW9r0zVcA4TicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVE Q0YwOEY1MjAeFw0yNTA2MjkxNTE3MDRaFw0yNTA3MDIyMTIwMDRaMDMxMTAvBgNV BAMTKDQ0MzI4RkI5N0U2MjZFREZFNzUxOUEyM0M4NjczQ0I3OUUwMDg2NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYio+TIZHPKuh3vw7zL6FVy68C GhJg9D1eSbvd2J++oNe2eUSf+oTjMoeowi0tDeQiRY8XVKfrYcm/VeMHbUhnyTXw 72eCA0cEMC/cpXfs9GCa0b0zolNiU5PDGi3AoCjr8ZF3yS/Asiz9FAbVFiAiiq/D efK0ipoIJxlEE76K9l9ak6m59SCyx7kX+28qiV7F0l+4rGn6gxAmogmTBL/h08Ao R3NuVaK72Af93GD+bBKpaH5ZHiup+ZYFCKlPq/yRDqeiIPTF2dhqZGulEn3+Hiuy jGia0MH/PlALYNVd3XCxsw5V3J6r7qX0ZNNvvOwi/kV3iRybcGVbswRUJrOpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURDKPuX5ibt/nUZojyGc8t54AhkYwHwYDVR0j BBgwFoAU4XpeuUFW3iP83I8pshD83tzwj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTJhM2YyOC04MjczLTRkZDUtODdmYy0xZWYwMGFjYWM5YjYvMC9FMTdBNUVCOTQx NTZERTIzRkNEQzhGMjlCMjEwRkNERURDRjA4RjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVEQ0Yw OEY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTEyYTNmMjgtODI3My00ZGQ1LTg3 ZmMtMWVmMDBhY2FjOWI2LzAvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZD REVEQ0YwOEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADc7THid26ElluUZcx/KUTiTB4RlUstr8SDA yqhSf1meVB4flI38WedSaJ18GGsJXkVxVmZRw2xb4ZtTAGBH6F3jmr2m0o7sgOTm KWmUMLjjRyC+pY/y9M6mIxpdLsrMOyzRfFVfXZ5vvbLytRQfGn2y9HOwHFbGLhT7 otB0h9KgfMjbiNiLSlH7U+Ek6bpZAtTS9mjMNdVC3fj9Lm044IUYUGqDS8eiu1SP XxUtCFONna5gkpo+dN21VBA+kjocl7dNSbS9qfLuUAerjUrgLaU0d0LM6dUvP/Tb vMQgUY9QEz7Hq1P2IA/7DDQry9/dInfrUtbXRdCJzs1T+K1ADVs= -----END CERTIFICATE-----Generated at Mon Jun 30 04:39:42 2025 by rpki-client