$ rpki-client -vvf repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft File: E0D54A271CD04583E0304613C7075C15FA03E497.mft (raw, json) Hash identifier: qgcf+jqkG2hRtYVbOy56XZa0XgMiSv5QD8ZKT8l6Grc= Subject key identifier: 4B:41:BA:0E:04:6B:D6:CF:13:6A:35:61:4F:47:35:24:96:13:85:D6 Authority key identifier: E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 Certificate issuer: /CN=E0D54A271CD04583E0304613C7075C15FA03E497 Certificate serial: 0FD2CCBCA8D6CC378FBD99EFDDBB02CC8121CF38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft Manifest number: 03D0 Signing time: Thu 21 Aug 2025 07:52:18 +0000 Manifest this update: Thu 21 Aug 2025 07:47:18 +0000 Manifest next update: Sun 24 Aug 2025 13:45:18 +0000 Files and hashes: 1: 323430343a636263303a3a2f33322d3332203d3e20313338383433.roa (hash: CUX/FZUFqFLVmfqcGn4Uxf38ndBFpWWkwqBCc1O0Nwg=) 2: 3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa (hash: iaC5WCoK/QU+xKaB0vnR2mTORiwDsx2/t1ElkG42yQ8=) 3: E0D54A271CD04583E0304613C7075C15FA03E497.crl (hash: H+OQsQPO4sUlXRIqyWa5MD6p5T6hESBZWTw1yOfZQPA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d2:cc:bc:a8:d6:cc:37:8f:bd:99:ef:dd:bb:02:cc:81:21:cf:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0D54A271CD04583E0304613C7075C15FA03E497 Validity Not Before: Aug 21 07:47:18 2025 GMT Not After : Aug 24 13:45:18 2025 GMT Subject: CN=4B41BA0E046BD6CF136A35614F473524961385D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8f:47:09:38:15:46:3e:9d:c1:ee:ba:ea:9e: 82:05:a3:94:81:3a:23:1f:c1:d9:a7:e5:54:e1:45: f4:e5:83:b1:62:c7:50:31:39:a9:a7:fb:a4:56:48: 6a:ec:4b:4a:44:c8:3e:d4:55:68:5c:78:ba:6a:f3: f0:fb:42:34:02:b8:a7:a8:3d:ca:c8:68:57:7c:13: 6b:cf:f1:23:92:9b:1f:b0:2d:53:d1:df:59:a2:42: 10:1c:12:fe:f2:a9:43:df:c6:ad:7f:70:a1:1b:35: 0b:70:39:72:5b:60:c3:ef:a3:40:3c:b1:90:5b:66: c5:15:05:56:e3:ca:78:fb:85:89:cb:bf:6c:b4:1a: be:42:2c:51:59:79:e7:90:5b:a1:53:9f:6d:d0:08: 18:f4:81:48:33:67:d4:cb:f9:e4:7e:84:e2:6d:9b: 8a:d0:00:ee:ba:d1:fe:41:f7:28:df:a7:5a:4a:17: ac:f4:37:19:89:68:60:3f:5c:ec:0f:aa:4e:95:59: a7:8b:1b:a0:b8:51:7e:20:ef:9e:48:92:63:42:08: 38:d6:b5:7d:43:4c:10:f1:b2:6d:3f:4f:58:d1:61: 2e:48:86:b2:44:7e:0a:f5:7d:29:0f:88:ad:3b:6d: ec:0c:33:d4:18:b4:ef:cd:d9:24:ca:db:de:e7:7d: 80:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:41:BA:0E:04:6B:D6:CF:13:6A:35:61:4F:47:35:24:96:13:85:D6 X509v3 Authority Key Identifier: keyid:E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:a8:37:cd:8a:b5:20:26:c3:49:c3:32:8c:d5:9d:0f:ea:6e: 2a:e7:7d:c1:ea:2a:0a:45:79:36:07:d8:4a:32:0d:e0:e1:67: df:f4:f7:dd:06:3d:99:3a:be:b5:2f:e4:78:df:86:d2:87:f3: a6:13:3e:d2:40:a1:48:7e:29:01:d8:c3:5d:92:61:5d:30:32: 78:a3:d7:4b:93:1c:76:4f:1b:67:59:0f:c3:8e:80:c4:45:3b: 84:0b:9f:f2:88:e6:99:d3:55:19:13:8a:88:89:d6:71:4f:2b: c0:74:dd:76:5f:74:03:82:5d:66:fc:81:11:f9:29:b2:c3:68: 3b:6d:66:a2:da:6e:b5:b7:dd:ca:2b:8b:4a:0f:c4:1c:d0:c7: f9:9d:f3:88:46:b3:5c:33:b3:99:ca:5e:fe:cc:ff:9f:3d:76: 66:f8:d5:30:32:86:62:f2:bc:2d:99:90:d1:18:e1:0c:36:57: 5c:0f:d2:e5:c9:43:a1:bd:c2:36:ca:1f:61:26:33:d4:51:97: 53:0c:5b:b5:b1:f1:56:57:93:78:d3:5e:40:19:df:8a:05:56: a4:af:be:67:4f:b2:ec:55:39:25:71:cd:c9:c6:04:68:10:a6: 62:cd:27:51:00:37:aa:cf:5c:2e:65:6c:12:5a:71:b8:3d:5c: 32:c1:ab:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD9LMvKjWzDePvZnv3bsCzIEhzzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVG QTAzRTQ5NzAeFw0yNTA4MjEwNzQ3MThaFw0yNTA4MjQxMzQ1MThaMDMxMTAvBgNV BAMTKDRCNDFCQTBFMDQ2QkQ2Q0YxMzZBMzU2MTRGNDczNTI0OTYxMzg1RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxj0cJOBVGPp3B7rrqnoIFo5SB OiMfwdmn5VThRfTlg7Fix1AxOamn+6RWSGrsS0pEyD7UVWhceLpq8/D7QjQCuKeo PcrIaFd8E2vP8SOSmx+wLVPR31miQhAcEv7yqUPfxq1/cKEbNQtwOXJbYMPvo0A8 sZBbZsUVBVbjynj7hYnLv2y0Gr5CLFFZeeeQW6FTn23QCBj0gUgzZ9TL+eR+hOJt m4rQAO660f5B9yjfp1pKF6z0NxmJaGA/XOwPqk6VWaeLG6C4UX4g755IkmNCCDjW tX1DTBDxsm0/T1jRYS5IhrJEfgr1fSkPiK07bewMM9QYtO/N2STK297nfYA5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS0G6DgRr1s8TajVhT0c1JJYThdYwHwYDVR0j BBgwFoAU4NVKJxzQRYPgMEYTxwdcFfoD5JcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzU4NjdkOC0zZDZmLTQ4MTYtYjg0Zi1mZGQ1YzUwMmI2MzQvMC9FMEQ1NEEyNzFD RDA0NTgzRTAzMDQ2MTNDNzA3NUMxNUZBMDNFNDk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVGQTAz RTQ5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmM1ODY3ZDgtM2Q2Zi00ODE2LWI4 NGYtZmRkNWM1MDJiNjM0LzAvRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVD MTVGQTAzRTQ5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFeoN82KtSAmw0nDMozVnQ/qbirnfcHqKgpF eTYH2EoyDeDhZ9/0990GPZk6vrUv5HjfhtKH86YTPtJAoUh+KQHYw12SYV0wMnij 10uTHHZPG2dZD8OOgMRFO4QLn/KI5pnTVRkTioiJ1nFPK8B03XZfdAOCXWb8gRH5 KbLDaDttZqLabrW33cori0oPxBzQx/md84hGs1wzs5nKXv7M/589dmb41TAyhmLy vC2ZkNEY4Qw2V1wP0uXJQ6G9wjbKH2EmM9RRl1MMW7Wx8VZXk3jTXkAZ34oFVqSv vmdPsuxVOSVxzcnGBGgQpmLNJ1EAN6rPXC5lbBJacbg9XDLBq3Q= -----END CERTIFICATE-----Generated at Sat Aug 23 14:13:07 2025 by rpki-client