$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft File: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft (raw, json) Hash identifier: QwtR/cJfOnSCv9bioCduUScQO8y5FwBLhVqpuFuKifQ= Subject key identifier: BA:2E:65:AC:53:B2:84:50:36:3C:19:E4:95:87:4A:D3:DB:A1:D4:F3 Authority key identifier: EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 Certificate issuer: /CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Certificate serial: 349B3C0A394D0FA5C9FBBC20EC46A9CEAA696CAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft Manifest number: 01B2 Signing time: Sun 29 Jun 2025 00:40:44 +0000 Manifest this update: Sun 29 Jun 2025 00:35:44 +0000 Manifest next update: Wed 02 Jul 2025 01:24:44 +0000 Files and hashes: 1: 3130332e32302e38362e302f32342d3234203d3e2039333431.roa (hash: VkkcM1AqEwXsS/hQawzqHg+YyvXNA8/GMbHDz4dyi9o=) 2: 3130332e32302e38362e302f32332d3233203d3e2039333431.roa (hash: X0XLAhvGZfiRvCVCUyNsPxOOwPw6McDgsETmSQQOHuM=) 3: 3130332e32302e38372e302f32342d3234203d3e2039333431.roa (hash: nU+kB+NyHUbVoehF82OX5jrQgK7DFWejShKduq8TLqc=) 4: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl (hash: gvbOmEXqqaIO/rdXAzme+MVEh8LaGzLecoqKC1LaYcE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 01:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:9b:3c:0a:39:4d:0f:a5:c9:fb:bc:20:ec:46:a9:ce:aa:69:6c:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Validity Not Before: Jun 29 00:35:44 2025 GMT Not After : Jul 2 01:24:44 2025 GMT Subject: CN=BA2E65AC53B28450363C19E495874AD3DBA1D4F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bc:d6:4e:a8:ae:e8:9e:74:c1:97:5e:b5:65: 37:e6:a9:2e:cc:3f:3d:0e:0e:9d:90:1a:9b:a4:a3: 05:f2:98:79:35:bf:5f:ed:4a:89:ff:3b:ec:e6:af: 50:e0:ca:0d:3e:a2:67:cf:75:3b:64:45:6a:0f:f7: 99:f6:20:fb:36:b0:f1:25:3e:42:69:5f:10:c8:ba: 29:78:b6:b1:68:b2:69:ff:37:b2:d4:53:02:0d:e5: 47:c8:70:94:d3:f1:d5:db:9f:1a:96:da:29:b7:01: 8e:e8:8d:be:69:c7:8e:99:20:b9:30:f8:9a:dc:f1: 44:8f:db:08:b0:65:ab:7a:12:ab:ca:53:c1:2e:14: 2b:46:95:a8:c9:23:2d:82:d7:48:4a:74:89:dc:a2: a8:02:81:ec:33:39:be:d2:69:4f:07:dc:a0:76:cf: b8:4e:aa:36:37:0b:ef:7b:00:bb:4b:8c:10:5a:0a: d8:0a:d3:cc:86:9d:97:d5:6f:23:70:f9:4d:f5:d5: 3f:6c:2d:13:d0:30:03:cf:6f:bc:ff:7b:64:1d:03: d1:a9:42:34:b2:6e:eb:59:82:ca:7c:4b:2a:c6:af: b0:52:bf:b0:2b:bd:97:77:0e:51:0f:e7:12:35:5f: 79:f0:d3:11:b2:ac:ba:fc:50:3e:8f:31:1c:db:cf: 87:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:2E:65:AC:53:B2:84:50:36:3C:19:E4:95:87:4A:D3:DB:A1:D4:F3 X509v3 Authority Key Identifier: keyid:EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:06:fd:95:d8:ff:cf:26:3a:d4:ac:29:a7:a4:27:19:75:0d: 19:96:9d:af:23:7b:0a:be:57:15:a3:98:ae:2a:aa:95:97:ae: ad:23:48:6d:bf:52:4c:ac:63:52:ff:bc:38:56:ca:a8:65:58: 06:7b:4a:64:f2:8f:22:aa:fe:30:fb:48:8f:4d:ab:9f:e6:5b: 64:9e:c4:67:06:d8:df:ec:48:45:8c:9f:c5:9f:60:d4:64:6a: fb:a8:b5:c6:57:2a:fd:43:6b:9a:4d:e0:55:78:7a:8d:9b:fa: b8:82:10:fb:94:45:2a:6a:a1:6c:e2:ec:ac:4a:e2:ce:89:11: c8:d2:d1:b2:c9:ea:67:09:61:75:73:f1:b1:b3:a5:bd:28:56: 6c:8c:4e:b4:93:6c:e5:78:3d:03:9d:a0:90:f0:b7:07:ee:18: de:84:22:c5:ee:32:41:8a:b2:c2:05:75:6a:56:56:a3:ad:2e: ed:0d:8a:57:a5:73:6f:aa:be:b4:c7:fc:7c:41:81:9f:ad:b6: 46:f0:82:b5:0f:0c:e3:f7:d8:a8:82:6b:23:d2:3f:5f:3c:f9: 96:d8:42:10:6c:1b:f4:e9:1e:c5:b6:a7:8d:ff:00:0d:5c:c3: c1:af:3c:fd:94:f0:79:25:71:03:b8:e2:59:60:50:a0:a2:ec: 98:2d:bf:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNJs8CjlND6XJ+7wg7EapzqppbKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVF N0U0NUQ2ODAeFw0yNTA2MjkwMDM1NDRaFw0yNTA3MDIwMTI0NDRaMDMxMTAvBgNV BAMTKEJBMkU2NUFDNTNCMjg0NTAzNjNDMTlFNDk1ODc0QUQzREJBMUQ0RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOvNZOqK7onnTBl161ZTfmqS7M Pz0ODp2QGpukowXymHk1v1/tSon/O+zmr1Dgyg0+omfPdTtkRWoP95n2IPs2sPEl PkJpXxDIuil4trFosmn/N7LUUwIN5UfIcJTT8dXbnxqW2im3AY7ojb5px46ZILkw +Jrc8USP2wiwZat6EqvKU8EuFCtGlajJIy2C10hKdIncoqgCgewzOb7SaU8H3KB2 z7hOqjY3C+97ALtLjBBaCtgK08yGnZfVbyNw+U311T9sLRPQMAPPb7z/e2QdA9Gp QjSybutZgsp8SyrGr7BSv7ArvZd3DlEP5xI1X3nw0xGyrLr8UD6PMRzbz4fhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUui5lrFOyhFA2PBnklYdK09uh1PMwHwYDVR0j BBgwFoAU7ixS975SoOtpWlSaQucB7ufkXWgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWE0ODlhNi01NDg1LTQ4N2YtYjVkZC04ZjRlZGViNDZiY2IvMC9FRTJDNTJGN0JF NTJBMEVCNjk1QTU0OUE0MkU3MDFFRUU3RTQ1RDY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVFN0U0 NUQ2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhNDg5YTYtNTQ4NS00ODdmLWI1 ZGQtOGY0ZWRlYjQ2YmNiLzAvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAx RUVFN0U0NUQ2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4G/ZXY/88mOtSsKaekJxl1DRmWna8jewq+ VxWjmK4qqpWXrq0jSG2/UkysY1L/vDhWyqhlWAZ7SmTyjyKq/jD7SI9Nq5/mW2Se xGcG2N/sSEWMn8WfYNRkavuotcZXKv1Da5pN4FV4eo2b+riCEPuURSpqoWzi7KxK 4s6JEcjS0bLJ6mcJYXVz8bGzpb0oVmyMTrSTbOV4PQOdoJDwtwfuGN6EIsXuMkGK ssIFdWpWVqOtLu0Nilelc2+qvrTH/HxBgZ+ttkbwgrUPDOP32KiCayPSP188+ZbY QhBsG/TpHsW2p43/AA1cw8GvPP2U8HklcQO44llgUKCi7JgtvxQ= -----END CERTIFICATE-----Generated at Sun Jun 29 22:02:08 2025 by rpki-client