$ rpki-client -vvf repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft File: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft (raw, json) Hash identifier: IA0vLLrX5Dh2cvbSTPb81Qm+FKmOEjehfHuzq6sbNeA= Subject key identifier: C1:90:B5:04:1E:FB:DD:36:93:62:D8:5C:9E:E6:CF:66:4F:87:60:76 Authority key identifier: E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 Certificate issuer: /CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Certificate serial: 745B74944D0CE210B48BD4E89A766E04FB7A96D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft Manifest number: 0338 Signing time: Tue 01 Jul 2025 03:11:46 +0000 Manifest this update: Tue 01 Jul 2025 03:06:46 +0000 Manifest next update: Fri 04 Jul 2025 05:06:46 +0000 Files and hashes: 1: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl (hash: JU00IK1OQxdTLR+fDrU0niNwcJtpaOWq2YyeO5ABuQo=) 2: 3130332e3136342e3233312e302f32342d3234203d3e20313431393133.roa (hash: NK0HZEK3BAxoXUs/T9BsQ+3NHYIYmmtIH82zUm/fzDk=) 3: 3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa (hash: zTY/Xpdv3MSQoDsOl/9obTqa4WAjpeiNnIpy7In5lOI=) 4: 3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa (hash: Wwvtox4pnVKWLsRl/E/cxu7UuLzmLQJxzxgchSEOlMg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 05:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:5b:74:94:4d:0c:e2:10:b4:8b:d4:e8:9a:76:6e:04:fb:7a:96:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Validity Not Before: Jul 1 03:06:46 2025 GMT Not After : Jul 4 05:06:46 2025 GMT Subject: CN=C190B5041EFBDD369362D85C9EE6CF664F876076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c7:60:e1:3c:f9:a8:af:db:e8:a0:9b:30:6e: a2:1e:30:87:0c:ca:d0:cc:c6:75:b3:90:4b:1f:6e: 8d:27:28:45:74:04:8a:86:9b:ab:7e:f0:a4:f2:3a: 1c:5d:6b:25:6e:b0:b2:d3:7e:2e:da:b1:94:52:4b: 98:41:1a:58:35:6e:7b:20:42:32:31:7d:c0:21:43: 96:18:5f:f2:ac:64:63:b4:9c:af:48:dc:f7:02:12: 4d:74:cc:cb:9c:df:34:cb:fa:0b:d6:a5:59:f0:57: 25:29:91:54:30:f1:59:8f:d3:96:83:2f:3d:61:6c: 51:24:8f:d7:25:5d:ca:cf:58:ed:8c:a6:4f:bd:38: 9b:76:5f:aa:9c:fd:54:ac:97:4f:6f:b2:55:c9:66: bf:86:90:13:ca:23:d6:98:af:33:92:40:6d:e7:63: ce:82:10:62:12:08:2f:7b:90:bc:0e:05:59:6f:e8: 72:d3:22:31:37:16:23:08:ab:90:1b:1b:d8:85:b7: e3:b6:3a:eb:a1:9c:df:29:8e:40:f7:d8:8c:ce:a5: 67:07:34:1d:9d:51:e5:a9:4b:74:ae:84:eb:0f:b2: 5d:3e:10:29:ca:99:53:90:e9:e8:2f:3f:45:0f:e0: cf:17:71:33:d6:f4:50:f6:1b:83:bd:1a:ac:84:63: 07:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:90:B5:04:1E:FB:DD:36:93:62:D8:5C:9E:E6:CF:66:4F:87:60:76 X509v3 Authority Key Identifier: keyid:E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:9d:d1:c4:53:d4:66:4c:9e:9d:4b:0f:6f:35:ad:22:e5:bf: 05:1f:78:77:87:74:3b:bd:ac:97:18:4b:f1:a2:1a:4a:17:9e: 42:e0:70:d9:4a:54:c1:11:a5:dc:15:12:2d:7f:12:e1:4d:a5: 7c:58:90:7d:7d:c6:a2:d2:d9:e3:38:ab:12:b4:a8:fc:fc:8e: 7d:17:b2:2d:9a:91:67:14:8e:14:cc:50:73:df:55:a2:a2:02: 85:aa:9e:17:0d:59:de:85:d5:05:6a:95:f3:1b:6b:6e:3a:dc: bc:9e:d1:61:b3:72:ed:e6:e0:e9:5a:1c:94:42:85:e6:21:ea: 36:c0:0a:33:2f:c0:c6:bd:ab:4d:e0:a7:21:81:be:3a:d0:e6: 55:b0:1d:68:70:bb:70:22:ca:02:70:05:97:e6:75:93:ea:d6: 97:be:8b:6f:80:9f:df:7d:e3:f2:d7:84:1c:75:ee:8e:a0:5c: 40:d2:14:75:0a:25:d9:75:15:cb:78:29:32:0a:04:55:c2:a0: 05:a2:42:e6:c3:86:72:d3:f0:c5:3f:5c:cc:64:b2:e5:da:f9: 66:c6:e4:52:00:3b:f2:dc:c3:f0:33:91:7e:40:ed:18:bf:6b: 21:d3:f6:b5:29:22:dc:36:cf:3d:82:3d:76:b6:cc:8c:37:15: 43:01:3c:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdFt0lE0M4hC0i9TomnZuBPt6ltEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIz MzNFQkI1ODAeFw0yNTA3MDEwMzA2NDZaFw0yNTA3MDQwNTA2NDZaMDMxMTAvBgNV BAMTKEMxOTBCNTA0MUVGQkREMzY5MzYyRDg1QzlFRTZDRjY2NEY4NzYwNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCx2DhPPmor9vooJswbqIeMIcM ytDMxnWzkEsfbo0nKEV0BIqGm6t+8KTyOhxdayVusLLTfi7asZRSS5hBGlg1bnsg QjIxfcAhQ5YYX/KsZGO0nK9I3PcCEk10zMuc3zTL+gvWpVnwVyUpkVQw8VmP05aD Lz1hbFEkj9clXcrPWO2Mpk+9OJt2X6qc/VSsl09vslXJZr+GkBPKI9aYrzOSQG3n Y86CEGISCC97kLwOBVlv6HLTIjE3FiMIq5AbG9iFt+O2OuuhnN8pjkD32IzOpWcH NB2dUeWpS3SuhOsPsl0+ECnKmVOQ6egvP0UP4M8XcTPW9FD2G4O9GqyEYwc3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwZC1BB773TaTYthcnubPZk+HYHYwHwYDVR0j BBgwFoAU5yMdGj4FG9kD24bX3gB3wjM+u1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTE3OTRhYS0zMjkxLTQ4M2ItYWMwYi03YmM3YjFhNjdjYzYvMC9FNzIzMUQxQTNF MDUxQkQ5MDNEQjg2RDdERTAwNzdDMjMzM0VCQjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIzMzNF QkI1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWExNzk0YWEtMzI5MS00ODNiLWFj MGItN2JjN2IxYTY3Y2M2LzAvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3 QzIzMzNFQkI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGd0cRT1GZMnp1LD281rSLlvwUfeHeHdDu9 rJcYS/GiGkoXnkLgcNlKVMERpdwVEi1/EuFNpXxYkH19xqLS2eM4qxK0qPz8jn0X si2akWcUjhTMUHPfVaKiAoWqnhcNWd6F1QVqlfMba2463Lye0WGzcu3m4OlaHJRC heYh6jbACjMvwMa9q03gpyGBvjrQ5lWwHWhwu3AiygJwBZfmdZPq1pe+i2+An999 4/LXhBx17o6gXEDSFHUKJdl1Fct4KTIKBFXCoAWiQubDhnLT8MU/XMxksuXa+WbG 5FIAO/Lcw/AzkX5A7Ri/ayHT9rUpItw2zz2CPXa2zIw3FUMBPAA= -----END CERTIFICATE-----Generated at Wed Jul 2 10:18:13 2025 by rpki-client