$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft File: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft (raw, json) Hash identifier: VQaCdwwhtG/5j3mTSzMXcqtr1nxS61+bD+2govVK5a0= Subject key identifier: 06:51:B3:F2:D7:DB:85:10:DB:FC:A0:2A:F0:A6:19:F7:84:E8:68:24 Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 Certificate issuer: /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Certificate serial: 6CDA3B0E567CC010C1A7DBFD869E1DF8AC38EE01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft Manifest number: 04FB Signing time: Fri 22 Aug 2025 08:32:07 +0000 Manifest this update: Fri 22 Aug 2025 08:27:07 +0000 Manifest next update: Mon 25 Aug 2025 08:44:07 +0000 Files and hashes: 1: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl (hash: 20r/HGWCWFGZXl+pCIsNJmS8NaaKlmlG8giFex8FxrM=) 2: 3130332e3133302e36312e302f32342d3234203d3e20313338303739.roa (hash: VmKn4H92OZlUtnRAAPlH3DAWvPgKEL7aXZz1kY1YrQ0=) 3: 3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa (hash: gA/G4KU0S654m0JbYV6SpYNvybqVwcWtbGvUC8YnGdc=) 4: 3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa (hash: t1GlQPTqCX0tSN2oGwnozLwYbWtyVQRe58xqkUEfAuQ=) 5: 3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa (hash: 8GAdTJuNR1Zetl+ziDhBJwBFLCcefBc1zOZpq/utdAc=) 6: 3130332e3133302e36302e302f32322d3232203d3e20313338303739.roa (hash: dr1CQsFDr+grBIANLd3KqKBw7/lJxKh8r7O2jOMsoyE=) 7: 3130332e3133302e36332e302f32342d3234203d3e20313338303739.roa (hash: BTJyyClQJ2ooNN9EN9agUZZ+ml+xViKf+qFHMjyGIK0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 08:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:da:3b:0e:56:7c:c0:10:c1:a7:db:fd:86:9e:1d:f8:ac:38:ee:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Validity Not Before: Aug 22 08:27:07 2025 GMT Not After : Aug 25 08:44:07 2025 GMT Subject: CN=0651B3F2D7DB8510DBFCA02AF0A619F784E86824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ae:09:bc:07:41:ea:9a:db:a3:eb:5d:7d:86: 46:5a:f5:34:73:9d:af:55:8b:01:66:f6:71:7f:a2: a4:d5:56:21:76:fd:31:8e:6d:ea:a9:70:42:29:62: ce:34:6a:3b:58:58:80:36:55:ff:27:05:fd:8b:ac: 21:bb:27:4f:68:96:a3:10:13:fe:2f:c2:ec:58:5c: 99:32:cc:f9:84:37:79:cf:84:1f:b8:f0:9b:82:4f: e0:9b:f9:f6:61:55:28:7f:46:9f:ce:74:f1:0b:80: ae:09:f0:da:6b:1f:95:a5:5a:b1:75:44:b5:bb:bf: cc:e5:77:1e:b8:28:80:c8:da:79:c2:c5:11:0f:24: c7:87:68:28:e1:1b:63:da:25:ea:8d:e3:c8:32:f2: 91:91:0b:1e:c5:4c:48:ef:0f:bc:23:79:64:d9:0f: 03:14:5d:9c:15:78:76:d2:eb:1d:01:aa:00:0a:b0: 48:7d:60:fe:9b:0d:07:3b:68:ca:79:4c:c5:98:ac: 4d:ba:06:ba:03:8e:d2:33:71:0b:df:12:12:dc:32: 53:f5:13:07:6b:9e:79:d4:61:43:2b:4f:08:1e:29: f8:17:06:fe:d1:e7:0b:fa:6e:8b:8b:a9:48:35:82: 31:fe:a0:f8:4a:0a:f4:4f:7b:f6:c7:4a:42:e7:a5: be:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:51:B3:F2:D7:DB:85:10:DB:FC:A0:2A:F0:A6:19:F7:84:E8:68:24 X509v3 Authority Key Identifier: keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:0a:59:da:16:b6:63:52:e4:a0:5a:41:aa:f3:c2:64:e4:8e: 7d:2e:94:1b:fc:fa:92:c8:6d:00:36:04:23:1e:a5:73:98:a5: 81:d8:64:c1:1b:80:c1:31:c5:9c:2c:a8:75:e2:13:39:1d:bf: 71:9a:6f:06:66:b3:2f:e8:85:95:4a:77:43:a2:73:98:c1:79: 51:b3:47:8f:09:45:84:a9:83:4c:5b:dc:e8:97:c0:5e:1b:f8: 7f:46:c9:5a:9a:51:01:34:22:2f:78:4d:b3:ec:27:b8:72:a5: 60:21:c9:f9:9d:12:b0:d1:2f:9d:bd:d7:70:9d:d8:f9:7a:fc: 17:fb:1f:5c:52:ab:de:79:ac:0f:23:09:a2:84:a9:75:d1:a4: 90:61:0a:a6:f5:bf:e6:58:d4:a3:f1:dd:8e:87:58:0c:7c:15: 3b:28:12:85:e8:83:59:ed:eb:03:78:f7:73:c9:1b:70:42:02: 99:2b:bd:a1:0e:b1:96:c2:6f:ca:3c:d3:1d:52:98:ab:66:b1: 8d:17:98:5e:19:b5:01:a0:44:17:40:23:25:58:f9:8a:ec:0b: 6e:c8:3c:66:e7:9c:de:fe:0a:d9:b7:28:44:b2:b1:10:d5:e1: 7d:de:6e:79:bc:9e:6e:08:52:75:ef:06:43:43:a4:1b:1a:36: 6e:8c:b8:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbNo7DlZ8wBDBp9v9hp4d+Kw47gEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVE Q0YwOEY1MjAeFw0yNTA4MjIwODI3MDdaFw0yNTA4MjUwODQ0MDdaMDMxMTAvBgNV BAMTKDA2NTFCM0YyRDdEQjg1MTBEQkZDQTAyQUYwQTYxOUY3ODRFODY4MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQrgm8B0Hqmtuj6119hkZa9TRz na9ViwFm9nF/oqTVViF2/TGObeqpcEIpYs40ajtYWIA2Vf8nBf2LrCG7J09olqMQ E/4vwuxYXJkyzPmEN3nPhB+48JuCT+Cb+fZhVSh/Rp/OdPELgK4J8NprH5WlWrF1 RLW7v8zldx64KIDI2nnCxREPJMeHaCjhG2PaJeqN48gy8pGRCx7FTEjvD7wjeWTZ DwMUXZwVeHbS6x0BqgAKsEh9YP6bDQc7aMp5TMWYrE26BroDjtIzcQvfEhLcMlP1 EwdrnnnUYUMrTwgeKfgXBv7R5wv6bouLqUg1gjH+oPhKCvRPe/bHSkLnpb5ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBlGz8tfbhRDb/KAq8KYZ94ToaCQwHwYDVR0j BBgwFoAU4XpeuUFW3iP83I8pshD83tzwj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTJhM2YyOC04MjczLTRkZDUtODdmYy0xZWYwMGFjYWM5YjYvMC9FMTdBNUVCOTQx NTZERTIzRkNEQzhGMjlCMjEwRkNERURDRjA4RjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVEQ0Yw OEY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTEyYTNmMjgtODI3My00ZGQ1LTg3 ZmMtMWVmMDBhY2FjOWI2LzAvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZD REVEQ0YwOEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAcKWdoWtmNS5KBaQarzwmTkjn0ulBv8+pLI bQA2BCMepXOYpYHYZMEbgMExxZwsqHXiEzkdv3GabwZmsy/ohZVKd0Oic5jBeVGz R48JRYSpg0xb3OiXwF4b+H9GyVqaUQE0Ii94TbPsJ7hypWAhyfmdErDRL52913Cd 2Pl6/Bf7H1xSq955rA8jCaKEqXXRpJBhCqb1v+ZY1KPx3Y6HWAx8FTsoEoXog1nt 6wN493PJG3BCApkrvaEOsZbCb8o80x1SmKtmsY0XmF4ZtQGgRBdAIyVY+YrsC27I PGbnnN7+Ctm3KESysRDV4X3ebnm8nm4IUnXvBkNDpBsaNm6MuII= -----END CERTIFICATE-----Generated at Sat Aug 23 10:33:43 2025 by rpki-client