$ rpki-client -vvf repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft File: E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft (raw, json) Hash identifier: 6ed7skRdI2Vapxi87hoM77SdlqSavcABqvGRC2Md+/g= Subject key identifier: 72:99:8A:D4:22:43:47:FA:76:9D:0C:DF:1E:8A:39:B4:CF:72:79:C0 Authority key identifier: E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C Certificate issuer: /CN=E530A7B43C0C79FD8707007080E2F7AEA478FD1C Certificate serial: 37C73BEAB52368B8E07667B85ACAA2B8B5C0BBB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft Manifest number: 04E7 Signing time: Sun 29 Jun 2025 01:20:00 +0000 Manifest this update: Sun 29 Jun 2025 01:15:00 +0000 Manifest next update: Wed 02 Jul 2025 03:58:00 +0000 Files and hashes: 1: E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl (hash: njLooThsJJbl7rK8TPv6B6c34OWUAqAUAVIxRn0ps4w=) 2: 323430323a613630303a3a2f33322d3332203d3e203137393936.roa (hash: mhHbC7IIWFFORZdV/WAdZvBGn0b08EabDQByz7GAvr4=) 3: 3230322e3136322e33322e302f32302d3234203d3e203137393936.roa (hash: 7t1UfL5E/ZJwSEO7orDivflRDFpoQvNkURGau+OZ9WE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 03:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:c7:3b:ea:b5:23:68:b8:e0:76:67:b8:5a:ca:a2:b8:b5:c0:bb:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E530A7B43C0C79FD8707007080E2F7AEA478FD1C Validity Not Before: Jun 29 01:15:00 2025 GMT Not After : Jul 2 03:58:00 2025 GMT Subject: CN=72998AD4224347FA769D0CDF1E8A39B4CF7279C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:3b:3a:65:81:2f:d9:d1:25:e8:82:14:a9:00: 38:79:9d:78:62:77:28:88:9f:dd:6b:81:ad:52:73: ca:71:94:71:67:ca:a8:81:40:33:fb:3e:a0:2f:f6: 81:7c:ad:00:a4:71:2d:4d:79:d6:76:5f:36:3e:76: 5a:c8:c1:a2:e5:7b:85:07:07:9c:d1:77:dc:92:ad: 86:af:d3:5e:a1:a6:c4:a7:d9:b5:7c:69:c7:3a:05: 39:16:30:a9:79:53:d8:e4:9e:cd:47:a2:f6:96:14: aa:9b:03:e4:9f:42:b3:fa:b9:7c:22:b1:ff:d4:b4: 4c:ad:ce:75:4f:31:91:0e:6f:06:ee:fb:8a:d6:aa: 86:87:c1:27:e7:4f:5c:7b:a1:6c:98:51:8a:f6:56: 2c:a3:e8:b5:9a:5c:63:43:70:fc:cf:94:d9:70:f2: 5a:ee:6d:57:80:19:24:fa:54:c9:dc:f4:b5:6e:2f: 79:e4:fb:aa:26:f8:b8:c7:b3:91:c1:72:08:13:a3: b2:8a:1b:f3:c6:30:88:c8:3c:e1:d8:64:c0:c8:42: 06:56:bb:f8:8c:da:f9:d3:ac:0d:00:c7:26:d2:fb: ca:ea:ca:b7:21:bf:b8:41:6c:64:fd:e3:ba:12:cf: 75:79:1a:d3:c6:0f:00:71:fc:70:99:a3:ef:32:eb: c8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:99:8A:D4:22:43:47:FA:76:9D:0C:DF:1E:8A:39:B4:CF:72:79:C0 X509v3 Authority Key Identifier: keyid:E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a4:c9:fd:28:3a:52:6e:d8:14:ac:ba:eb:93:05:2f:39:19: 38:8d:33:f7:40:7b:ef:37:d1:61:f2:72:66:c8:4f:00:59:81: a1:ff:bb:0e:fa:df:c5:b0:d8:21:91:a2:e4:cd:85:a2:96:a3: c3:1a:29:0a:3e:b4:a9:91:75:01:55:9f:24:70:18:ec:99:6e: f1:f4:7f:81:af:39:5c:cc:b8:1e:23:03:c1:0c:7e:ad:ff:93: 0e:5e:f6:99:7f:2c:47:3f:8b:75:19:42:e9:38:85:17:32:1b: 24:fc:ab:1d:53:ec:af:15:92:fb:b0:ce:52:db:91:ef:1a:7f: 87:af:c0:83:bb:c0:e5:57:08:cd:fc:f6:39:00:cf:a8:98:6a: 71:6b:fa:63:29:26:0c:62:96:9a:88:76:30:fb:dc:44:a4:e2: ed:ff:9a:77:0e:2a:f2:3a:c5:78:eb:42:5b:ef:1b:34:02:55: 08:0b:c9:33:f3:b8:db:cc:60:f9:bc:44:03:b0:f1:c9:ed:65: df:03:1e:07:e1:cd:c8:92:0f:9b:ae:b1:0a:40:72:17:26:80: a3:be:e1:44:bb:cd:cf:53:19:bb:43:bc:ec:bc:3d:78:3c:4e: 62:8a:d0:9a:e4:19:c6:d7:2f:b8:98:86:ca:da:5a:57:b8:6e: 16:61:c8:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN8c76rUjaLjgdme4WsqiuLXAu7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3QUVB NDc4RkQxQzAeFw0yNTA2MjkwMTE1MDBaFw0yNTA3MDIwMzU4MDBaMDMxMTAvBgNV BAMTKDcyOTk4QUQ0MjI0MzQ3RkE3NjlEMENERjFFOEEzOUI0Q0Y3Mjc5QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzOzplgS/Z0SXoghSpADh5nXhi dyiIn91rga1Sc8pxlHFnyqiBQDP7PqAv9oF8rQCkcS1NedZ2XzY+dlrIwaLle4UH B5zRd9ySrYav016hpsSn2bV8acc6BTkWMKl5U9jkns1HovaWFKqbA+SfQrP6uXwi sf/UtEytznVPMZEObwbu+4rWqoaHwSfnT1x7oWyYUYr2Viyj6LWaXGNDcPzPlNlw 8lrubVeAGST6VMnc9LVuL3nk+6om+LjHs5HBcggTo7KKG/PGMIjIPOHYZMDIQgZW u/iM2vnTrA0AxybS+8rqyrchv7hBbGT947oSz3V5GtPGDwBx/HCZo+8y68gFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcpmK1CJDR/p2nQzfHoo5tM9yecAwHwYDVR0j BBgwFoAU5TCntDwMef2HBwBwgOL3rqR4/RwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2QyZjJmOC0zNTEyLTQzZTUtYmUxNy1iMTFiNThmOTYwODMvMC9FNTMwQTdCNDND MEM3OUZEODcwNzAwNzA4MEUyRjdBRUE0NzhGRDFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3QUVBNDc4 RkQxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNkMmYyZjgtMzUxMi00M2U1LWJl MTctYjExYjU4Zjk2MDgzLzAvRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3 QUVBNDc4RkQxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACukyf0oOlJu2BSsuuuTBS85GTiNM/dAe+83 0WHycmbITwBZgaH/uw7638Ww2CGRouTNhaKWo8MaKQo+tKmRdQFVnyRwGOyZbvH0 f4GvOVzMuB4jA8EMfq3/kw5e9pl/LEc/i3UZQuk4hRcyGyT8qx1T7K8VkvuwzlLb ke8af4evwIO7wOVXCM389jkAz6iYanFr+mMpJgxilpqIdjD73ESk4u3/mncOKvI6 xXjrQlvvGzQCVQgLyTPzuNvMYPm8RAOw8cntZd8DHgfhzciSD5uusQpAchcmgKO+ 4US7zc9TGbtDvOy8PXg8TmKK0JrkGcbXL7iYhsraWle4bhZhyPY= -----END CERTIFICATE-----Generated at Sun Jun 29 18:21:11 2025 by rpki-client