$ rpki-client -vvf repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft File: E0D54A271CD04583E0304613C7075C15FA03E497.mft (raw, json) Hash identifier: pemf360P+MSoo/8/TyeqW/V3qi7tZPL7KtSn9cwreCs= Subject key identifier: 78:E4:72:52:E4:13:3D:0D:E7:64:64:A4:8A:06:9A:2A:2F:9B:F2:C0 Authority key identifier: E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 Certificate issuer: /CN=E0D54A271CD04583E0304613C7075C15FA03E497 Certificate serial: 7F1C0CEF7196A944F8BCB04BA0DCB8D6F5E46E07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft Manifest number: 03BA Signing time: Thu 03 Jul 2025 15:02:14 +0000 Manifest this update: Thu 03 Jul 2025 14:57:14 +0000 Manifest next update: Sun 06 Jul 2025 22:00:14 +0000 Files and hashes: 1: 3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa (hash: iaC5WCoK/QU+xKaB0vnR2mTORiwDsx2/t1ElkG42yQ8=) 2: 323430343a636263303a3a2f33322d3332203d3e20313338383433.roa (hash: CUX/FZUFqFLVmfqcGn4Uxf38ndBFpWWkwqBCc1O0Nwg=) 3: E0D54A271CD04583E0304613C7075C15FA03E497.crl (hash: 6GaCAjF0voLKjbSCVXZ/wJD3PMDa0495K4rhNkYRv/k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 22:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:1c:0c:ef:71:96:a9:44:f8:bc:b0:4b:a0:dc:b8:d6:f5:e4:6e:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0D54A271CD04583E0304613C7075C15FA03E497 Validity Not Before: Jul 3 14:57:14 2025 GMT Not After : Jul 6 22:00:14 2025 GMT Subject: CN=78E47252E4133D0DE76464A48A069A2A2F9BF2C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:41:eb:71:f6:76:ae:76:c4:11:3c:c8:36:c6: d4:68:85:30:55:13:1f:a0:e2:84:da:84:e4:e1:30: 1b:a8:99:8d:16:11:1a:f0:17:67:dc:e6:18:35:26: e0:3b:53:38:da:2d:34:e8:63:0d:a9:2f:70:b4:22: 00:c3:b8:4a:23:02:ba:ea:cc:ff:b0:35:e6:37:bf: d8:0b:33:01:d8:1d:84:5b:b6:a0:df:9d:22:27:94: 5f:da:c3:b1:c0:2b:21:75:79:24:31:9b:d0:6c:7b: 40:47:31:fe:cf:c6:19:27:bf:2e:e1:84:1c:32:44: dc:d9:c1:d6:a5:18:16:ed:86:ee:68:c3:f5:fc:9d: ae:da:a9:1a:f9:a8:3a:57:0e:60:e1:8b:7f:29:05: 3e:07:f1:13:2e:89:ea:b0:a8:0c:d7:2f:2a:aa:f8: a7:ac:08:7c:c0:96:1a:06:b4:a9:0f:d6:87:d1:6d: 57:fe:a8:f1:70:4a:a8:2d:1b:fa:64:c9:50:a0:61: 79:c7:d1:32:a4:23:55:69:e2:ef:81:d8:4e:7e:b8: 82:07:a3:63:1c:6f:14:90:34:de:ae:3e:5a:d2:a7: e2:f3:31:cf:22:1b:50:b6:9e:bf:e2:d9:2e:3c:35: eb:dc:6d:e8:af:bc:2f:44:f3:9a:fa:27:f6:91:48: fe:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E4:72:52:E4:13:3D:0D:E7:64:64:A4:8A:06:9A:2A:2F:9B:F2:C0 X509v3 Authority Key Identifier: keyid:E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:7c:ba:f0:9f:23:04:a2:8f:3f:e2:80:91:9a:a5:af:dc:5a: 43:68:31:fc:dc:32:07:17:a5:1e:96:82:63:60:0b:c0:09:18: ac:b5:1e:74:52:0f:9d:bd:7e:35:ce:6e:13:e8:98:15:38:4a: 68:33:69:f1:ca:e0:d9:c1:29:84:15:4f:7c:f5:27:e4:1e:41: 87:cb:c7:a5:06:21:bc:8d:d9:6e:87:82:cc:23:82:85:ed:da: d3:ad:58:5c:2c:bd:a9:2d:cb:91:4d:fe:3a:94:98:c7:4a:7a: d5:1e:0a:72:d9:2a:1e:0d:f2:17:f7:7d:b8:c1:28:f8:ce:6c: 64:cd:4a:b8:91:56:c6:cf:32:26:cd:75:28:fc:fb:b4:7a:e7: f1:0d:3f:7a:8f:bc:75:ec:2b:cc:27:c1:bf:53:e0:77:6b:3e: 90:07:9f:f7:45:8f:43:16:61:eb:eb:73:92:02:ad:51:cb:f7: 49:71:49:a6:7d:b3:48:73:85:58:62:48:c5:49:d2:51:7f:6e: dd:73:74:6e:6e:d7:cf:2f:ae:ea:9e:79:90:23:90:9c:d1:f7: a8:63:bc:7d:9d:58:32:75:0e:72:95:b3:eb:64:7a:0b:de:0f: 86:96:dc:01:78:69:b9:55:68:fe:48:66:e0:04:6e:7c:f6:4d: 6d:86:23:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfxwM73GWqUT4vLBLoNy41vXkbgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVG QTAzRTQ5NzAeFw0yNTA3MDMxNDU3MTRaFw0yNTA3MDYyMjAwMTRaMDMxMTAvBgNV BAMTKDc4RTQ3MjUyRTQxMzNEMERFNzY0NjRBNDhBMDY5QTJBMkY5QkYyQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtQetx9naudsQRPMg2xtRohTBV Ex+g4oTahOThMBuomY0WERrwF2fc5hg1JuA7UzjaLTToYw2pL3C0IgDDuEojArrq zP+wNeY3v9gLMwHYHYRbtqDfnSInlF/aw7HAKyF1eSQxm9Bse0BHMf7Pxhknvy7h hBwyRNzZwdalGBbthu5ow/X8na7aqRr5qDpXDmDhi38pBT4H8RMuieqwqAzXLyqq +KesCHzAlhoGtKkP1ofRbVf+qPFwSqgtG/pkyVCgYXnH0TKkI1Vp4u+B2E5+uIIH o2McbxSQNN6uPlrSp+LzMc8iG1C2nr/i2S48NevcbeivvC9E85r6J/aRSP69AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeORyUuQTPQ3nZGSkigaaKi+b8sAwHwYDVR0j BBgwFoAU4NVKJxzQRYPgMEYTxwdcFfoD5JcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzU4NjdkOC0zZDZmLTQ4MTYtYjg0Zi1mZGQ1YzUwMmI2MzQvMC9FMEQ1NEEyNzFD RDA0NTgzRTAzMDQ2MTNDNzA3NUMxNUZBMDNFNDk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVGQTAz RTQ5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmM1ODY3ZDgtM2Q2Zi00ODE2LWI4 NGYtZmRkNWM1MDJiNjM0LzAvRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVD MTVGQTAzRTQ5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZ8uvCfIwSijz/igJGapa/cWkNoMfzcMgcX pR6WgmNgC8AJGKy1HnRSD529fjXObhPomBU4SmgzafHK4NnBKYQVT3z1J+QeQYfL x6UGIbyN2W6HgswjgoXt2tOtWFwsvakty5FN/jqUmMdKetUeCnLZKh4N8hf3fbjB KPjObGTNSriRVsbPMibNdSj8+7R65/ENP3qPvHXsK8wnwb9T4HdrPpAHn/dFj0MW Yevrc5ICrVHL90lxSaZ9s0hzhVhiSMVJ0lF/bt1zdG5u188vruqeeZAjkJzR96hj vH2dWDJ1DnKVs+tkegveD4aW3AF4ablVaP5IZuAEbnz2TW2GI8Y= -----END CERTIFICATE-----Generated at Fri Jul 4 06:08:23 2025 by rpki-client