$ rpki-client -vvf repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft File: E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft (raw, json) Hash identifier: gxvkwkmD37qXLn+ygKuNfrUYeGT/kjNyvkQMjqI8xCU= Subject key identifier: 4A:7F:7D:C8:D6:11:00:0A:7E:E8:EE:73:57:42:1C:F0:D0:64:F8:18 Authority key identifier: E3:5D:44:33:8E:59:37:B4:AE:26:9D:DD:CD:A4:0A:28:F8:7F:3E:C8 Certificate issuer: /CN=E35D44338E5937B4AE269DDDCDA40A28F87F3EC8 Certificate serial: 0A5327732184C11048818031466A122FAAD901F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft Manifest number: 01D1 Signing time: Sat 28 Jun 2025 16:21:49 +0000 Manifest this update: Sat 28 Jun 2025 16:16:49 +0000 Manifest next update: Wed 02 Jul 2025 01:40:49 +0000 Files and hashes: 1: E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl (hash: 5wwicA0t/Fj1bD77U6JVLkyOkUCRFtQW4PYlsbGwg1s=) 2: 3130332e32312e3139352e302f32342d3234203d3e20313439393637.roa (hash: ztOieajHr1k+CIYjNgErkUbe6vEvP2EXx+nQ8S+WL90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 01:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:53:27:73:21:84:c1:10:48:81:80:31:46:6a:12:2f:aa:d9:01:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E35D44338E5937B4AE269DDDCDA40A28F87F3EC8 Validity Not Before: Jun 28 16:16:49 2025 GMT Not After : Jul 2 01:40:49 2025 GMT Subject: CN=4A7F7DC8D611000A7EE8EE7357421CF0D064F818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:02:eb:d9:3a:b8:ef:88:ca:4f:cf:e7:cb:b3: a1:c4:db:a2:45:12:97:97:a6:ee:d2:ad:e4:5a:a5: bf:8e:21:69:31:0a:02:1d:88:4c:81:7f:1f:c5:72: a2:65:8a:20:9b:1d:f7:d1:56:e6:cf:b6:65:4e:82: 13:3b:82:99:b4:10:00:93:54:8c:5f:5a:28:03:d5: 0c:e9:ea:b6:60:df:a3:70:47:05:ec:fb:ef:a6:ec: 67:35:bd:d3:22:c9:43:a5:61:0e:3a:b7:32:7d:f5: 38:dc:18:f6:32:e7:40:29:16:89:1e:e6:b8:7c:12: a7:13:17:0d:ff:be:b5:54:54:64:03:ee:37:b8:a4: 6f:6b:89:b0:3f:26:27:e6:6f:32:19:13:84:29:27: d0:0d:96:a6:3d:55:68:db:28:fc:af:8d:9b:bd:4b: 06:b1:9c:24:9e:63:58:be:0c:eb:60:57:f2:b9:47: 4c:90:c0:dc:eb:c2:6c:42:3b:11:5c:89:0e:24:da: 6a:13:a7:1f:a0:bf:83:52:9b:61:9e:f4:2c:51:bd: 80:af:57:4c:e3:3f:91:28:2f:86:6e:c5:a2:25:99: 41:8d:ab:b8:28:d7:4d:1b:48:92:5b:0a:21:fe:30: be:0a:9a:ed:44:cb:a0:fe:09:e3:f2:a6:02:47:8d: 48:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7F:7D:C8:D6:11:00:0A:7E:E8:EE:73:57:42:1C:F0:D0:64:F8:18 X509v3 Authority Key Identifier: keyid:E3:5D:44:33:8E:59:37:B4:AE:26:9D:DD:CD:A4:0A:28:F8:7F:3E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:1b:cb:b4:8e:74:f7:b6:d1:45:66:06:bc:81:82:26:c9:31: fc:b3:07:0d:52:ce:1e:a6:90:aa:d7:bf:9f:1b:f3:bf:df:60: 3e:15:6f:18:4c:3a:2b:f3:f3:14:c1:44:82:b3:71:37:a6:53: a8:47:de:58:9a:2c:c4:61:1e:11:ad:00:42:3c:3a:e5:cb:37: 83:67:d9:af:9c:25:17:04:70:32:fa:61:b9:e0:c0:da:46:c7: ea:de:bd:e7:5c:ec:c3:68:2e:2f:ea:6c:d4:5a:d9:f4:b6:da: fd:81:87:33:e4:d5:5e:a1:e0:09:dd:ea:e9:13:c6:95:bf:74: 7c:34:5b:33:86:c3:ac:d9:39:34:7d:27:e7:f1:2b:6c:03:18: ac:b4:8d:c3:7a:be:f9:34:7d:d0:a7:5c:1b:52:a3:f8:28:8e: b4:39:1e:e9:90:38:5f:2d:a1:25:30:ca:e0:0d:f1:c6:d2:9e: 02:68:0b:c3:1a:00:4d:20:f9:39:4c:6a:4f:20:09:bd:56:1e: e5:e0:c5:0b:00:ef:4c:ae:ab:f2:8a:8a:e0:b4:1b:29:9a:f2: 5e:23:0a:c2:09:4c:7e:d3:9d:0c:50:22:ce:3b:54:57:0b:8e: 91:48:6d:cf:00:bf:02:6c:7d:91:49:02:04:e6:70:06:db:ac: d5:99:85:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUClMncyGEwRBIgYAxRmoSL6rZAfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBBMjhG ODdGM0VDODAeFw0yNTA2MjgxNjE2NDlaFw0yNTA3MDIwMTQwNDlaMDMxMTAvBgNV BAMTKDRBN0Y3REM4RDYxMTAwMEE3RUU4RUU3MzU3NDIxQ0YwRDA2NEY4MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiAuvZOrjviMpPz+fLs6HE26JF EpeXpu7SreRapb+OIWkxCgIdiEyBfx/FcqJliiCbHffRVubPtmVOghM7gpm0EACT VIxfWigD1Qzp6rZg36NwRwXs+++m7Gc1vdMiyUOlYQ46tzJ99TjcGPYy50ApFoke 5rh8EqcTFw3/vrVUVGQD7je4pG9ribA/JifmbzIZE4QpJ9ANlqY9VWjbKPyvjZu9 SwaxnCSeY1i+DOtgV/K5R0yQwNzrwmxCOxFciQ4k2moTpx+gv4NSm2Ge9CxRvYCv V0zjP5EoL4ZuxaIlmUGNq7go100bSJJbCiH+ML4Kmu1Ey6D+CePypgJHjUjTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSn99yNYRAAp+6O5zV0Ic8NBk+BgwHwYDVR0j BBgwFoAU411EM45ZN7SuJp3dzaQKKPh/PsgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjgzYjI3Yy1hNzMwLTQwMDItOTFiOC1kMDM2NmRmYWM3N2UvMC9FMzVENDQzMzhF NTkzN0I0QUUyNjlERERDREE0MEEyOEY4N0YzRUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBBMjhGODdG M0VDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY4M2IyN2MtYTczMC00MDAyLTkx YjgtZDAzNjZkZmFjNzdlLzAvRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBB MjhGODdGM0VDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwby7SOdPe20UVmBryBgibJMfyzBw1Szh6m kKrXv58b87/fYD4VbxhMOivz8xTBRIKzcTemU6hH3liaLMRhHhGtAEI8OuXLN4Nn 2a+cJRcEcDL6YbngwNpGx+revedc7MNoLi/qbNRa2fS22v2BhzPk1V6h4And6ukT xpW/dHw0WzOGw6zZOTR9J+fxK2wDGKy0jcN6vvk0fdCnXBtSo/gojrQ5HumQOF8t oSUwyuAN8cbSngJoC8MaAE0g+TlMak8gCb1WHuXgxQsA70yuq/KKiuC0Gyma8l4j CsIJTH7TnQxQIs47VFcLjpFIbc8AvwJsfZFJAgTmcAbbrNWZhWI= -----END CERTIFICATE-----Generated at Sun Jun 29 18:30:48 2025 by rpki-client