$ rpki-client -vvf repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft File: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft (raw, json) Hash identifier: OZvi18HMlDjOYuwvGea51x78cjQE/uVuzSlb8NRPJEU= Subject key identifier: AB:C7:F3:28:A7:61:1D:BC:90:CE:6E:FF:2F:75:D7:99:DD:90:4E:0D Authority key identifier: E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 Certificate issuer: /CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Certificate serial: 4F58A84D89315E28A5C138CB231D17D1DA7047B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft Manifest number: E0 Signing time: Mon 30 Jun 2025 01:21:08 +0000 Manifest this update: Mon 30 Jun 2025 01:16:08 +0000 Manifest next update: Thu 03 Jul 2025 08:20:08 +0000 Files and hashes: 1: 3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (hash: RhGN57E/ZSjGvHHK5MWz3epa97gXAk4w6YjAbvPV0fg=) 2: 3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa (hash: geAKj9+TOtyfNH9PasUiph/Br+j89slGEUwYIqBnSpQ=) 3: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl (hash: N2LF/kZW6dNk9Xwjjt+A5aWctLo1HlEE0wvovIgA9uE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 08:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:58:a8:4d:89:31:5e:28:a5:c1:38:cb:23:1d:17:d1:da:70:47:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Validity Not Before: Jun 30 01:16:08 2025 GMT Not After : Jul 3 08:20:08 2025 GMT Subject: CN=ABC7F328A7611DBC90CE6EFF2F75D799DD904E0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bc:94:2c:6b:68:af:16:b0:ec:4f:51:e3:d7: 20:29:06:c2:00:c1:4b:eb:88:95:14:68:64:6a:23: 89:75:b6:c7:51:53:d3:16:01:1d:32:e8:e2:4a:3a: 31:1e:41:31:84:2f:33:15:1f:82:bf:39:3d:1d:a2: d0:43:ff:bb:d4:52:5b:9f:6c:e6:b6:36:64:51:3b: 20:79:99:44:95:7d:70:67:cf:c3:9c:c1:4d:0b:f1: 64:ab:fb:b2:d9:51:a6:78:7e:03:e6:50:5d:e3:e3: d7:68:aa:15:76:1d:d6:34:60:11:bf:c0:e7:c8:dc: 43:45:6a:5d:f4:46:3f:fc:01:30:f2:8c:5d:d7:ed: 56:d3:1d:b5:05:97:a2:8a:28:5a:c6:83:5d:b8:9f: b0:99:69:08:5d:3c:56:73:30:62:8b:72:b1:4c:19: 37:c8:1e:6f:f8:bb:65:23:0f:55:75:62:f5:7c:d7: b5:ee:b9:2b:f2:0b:5b:3d:28:cd:a1:df:6f:20:d0: b2:71:29:55:ae:98:15:c5:1a:2d:6c:1c:cf:8d:f0: e0:5a:58:ab:ce:55:20:a2:9c:06:b5:f8:ab:bd:3e: 57:1e:47:14:32:e0:80:fb:08:a2:68:d6:be:ef:79: b6:ff:68:25:cb:32:44:fd:e0:58:1a:64:0a:45:5d: a9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C7:F3:28:A7:61:1D:BC:90:CE:6E:FF:2F:75:D7:99:DD:90:4E:0D X509v3 Authority Key Identifier: keyid:E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:ce:bf:d3:12:36:14:5b:dd:b6:d5:a4:da:9c:18:24:9e:80: b5:27:ad:ca:40:b5:f6:0b:8f:d2:4c:9b:19:9e:2d:6a:b7:ed: d8:f5:e8:e0:92:35:60:8a:4d:d1:b1:00:6d:e1:78:3a:09:4b: be:29:9e:93:89:f9:f8:08:7d:b5:17:6b:eb:a1:df:9a:83:ea: b3:0b:3e:d3:7e:dc:5c:2f:12:97:3a:22:9a:49:34:0d:d3:95: e1:16:28:4f:4d:ea:bd:20:fb:e4:1b:64:12:ab:84:3b:79:3e: d2:13:f5:ca:ae:76:d8:7d:42:86:60:2d:3d:7d:a4:5a:15:e8: 88:6c:9a:a8:8b:2d:1c:6c:5c:7a:9a:5c:c2:10:94:f1:a9:a8: 31:83:f6:de:52:ae:57:22:52:e0:4a:eb:aa:52:e4:be:d3:61: 2b:9d:a5:b8:95:8b:00:76:10:4d:a1:a2:62:7f:16:02:40:87: f0:4a:69:9b:cf:cc:50:59:95:87:db:81:ef:12:12:6e:5c:86: d3:28:3d:fa:09:1c:9a:ed:6d:b3:26:96:c9:32:d2:33:90:e0: 2d:b8:b1:d6:0c:58:f6:d4:e5:12:44:5f:4c:6c:5f:58:c8:81: 87:77:52:6a:7e:93:bd:08:3e:ee:1e:6f:41:4b:e8:df:25:56: 33:97:13:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT1ioTYkxXiilwTjLIx0X0dpwR7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUz MkI4RTk0MzAeFw0yNTA2MzAwMTE2MDhaFw0yNTA3MDMwODIwMDhaMDMxMTAvBgNV BAMTKEFCQzdGMzI4QTc2MTFEQkM5MENFNkVGRjJGNzVENzk5REQ5MDRFMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vJQsa2ivFrDsT1Hj1yApBsIA wUvriJUUaGRqI4l1tsdRU9MWAR0y6OJKOjEeQTGELzMVH4K/OT0dotBD/7vUUluf bOa2NmRROyB5mUSVfXBnz8OcwU0L8WSr+7LZUaZ4fgPmUF3j49doqhV2HdY0YBG/ wOfI3ENFal30Rj/8ATDyjF3X7VbTHbUFl6KKKFrGg124n7CZaQhdPFZzMGKLcrFM GTfIHm/4u2UjD1V1YvV817XuuSvyC1s9KM2h328g0LJxKVWumBXFGi1sHM+N8OBa WKvOVSCinAa1+Ku9PlceRxQy4ID7CKJo1r7vebb/aCXLMkT94FgaZApFXal9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq8fzKKdhHbyQzm7/L3XXmd2QTg0wHwYDVR0j BBgwFoAU4p6DwsWJf6T2zv48N+4aZTK46UMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTdjZjlhMC1lOTI3LTQ4MTQtODQ0Ny04YjNhMDAyNzYwYTgvMC9FMjlFODNDMkM1 ODk3RkE0RjZDRUZFM0MzN0VFMUE2NTMyQjhFOTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUzMkI4 RTk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk3Y2Y5YTAtZTkyNy00ODE0LTg0 NDctOGIzYTAwMjc2MGE4LzAvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFB NjUzMkI4RTk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfOv9MSNhRb3bbVpNqcGCSegLUnrcpAtfYL j9JMmxmeLWq37dj16OCSNWCKTdGxAG3heDoJS74pnpOJ+fgIfbUXa+uh35qD6rML PtN+3FwvEpc6IppJNA3TleEWKE9N6r0g++QbZBKrhDt5PtIT9cqudth9QoZgLT19 pFoV6IhsmqiLLRxsXHqaXMIQlPGpqDGD9t5SrlciUuBK66pS5L7TYSudpbiViwB2 EE2homJ/FgJAh/BKaZvPzFBZlYfbge8SEm5chtMoPfoJHJrtbbMmlsky0jOQ4C24 sdYMWPbU5RJEX0xsX1jIgYd3Ump+k70IPu4eb0FL6N8lVjOXE4o= -----END CERTIFICATE-----Generated at Mon Jun 30 08:28:04 2025 by rpki-client