$ rpki-client -vvf repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft File: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft (raw, json) Hash identifier: U2DZD8MnpePVuT/X9yZbXg7bWb+w+6Vy8nx+0GBCytY= Subject key identifier: F1:48:DA:0E:AE:E6:70:2A:8E:FE:45:F5:CB:BB:57:C3:7B:00:18:56 Authority key identifier: E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42 Certificate issuer: /CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42 Certificate serial: 024A339D8FE951A4B039E4DCA738EC753F4927AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft Manifest number: 04EF Signing time: Tue 01 Jul 2025 10:50:05 +0000 Manifest this update: Tue 01 Jul 2025 10:45:05 +0000 Manifest next update: Fri 04 Jul 2025 15:26:05 +0000 Files and hashes: 1: 35392e3135332e32342e302f32332d3233203d3e203539323835.roa (hash: 1SizngiTVzIbRBWH1t3CjVmzzkPKhWLCfAxINTFYNoo=) 2: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl (hash: V5Xp67UXM+8wHYDkHLJV1LV8pIDtu6wxg90H46PFuP4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 15:26:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:4a:33:9d:8f:e9:51:a4:b0:39:e4:dc:a7:38:ec:75:3f:49:27:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42 Validity Not Before: Jul 1 10:45:05 2025 GMT Not After : Jul 4 15:26:05 2025 GMT Subject: CN=F148DA0EAEE6702A8EFE45F5CBBB57C37B001856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f3:c3:30:ce:5a:4d:de:5b:e8:8f:05:0c:78: f7:3d:0e:ae:9b:1b:a6:1a:48:5e:cb:cb:a2:86:cf: 8c:5e:a5:5e:6d:a0:b6:f3:e6:8f:0f:2d:63:48:a4: 5c:38:d1:fa:af:23:30:36:09:4f:77:37:78:83:93: bc:33:6d:0a:e8:3c:d3:08:17:56:5d:60:8e:0a:ea: f5:e4:f6:00:37:76:0a:28:63:0a:91:1e:f9:f2:1f: 01:43:a2:c9:d9:5f:7c:50:89:6b:e0:e6:b7:a7:90: b2:8f:bf:8a:88:3d:55:13:d3:5a:db:62:94:d3:b8: 95:04:b8:93:b3:cc:ae:a6:f8:3b:03:bf:78:1d:77: d1:77:1e:69:b5:39:92:57:a1:76:47:3f:94:45:39: a3:03:e3:5a:36:57:ab:33:4f:f0:4d:1d:d3:e6:c3: ba:c9:65:27:7b:0f:68:92:09:5d:65:3f:a0:f8:0b: cd:d2:f7:34:4f:45:03:9d:e0:8b:50:b0:75:5c:9b: 60:26:3d:ae:f7:2f:a7:f8:df:b4:17:91:80:e5:b4: db:6b:5b:02:87:75:bb:db:59:c5:08:9f:d0:71:6f: 77:96:50:1f:67:cc:d8:42:2e:81:92:3b:33:25:59: e4:4f:4b:0e:0c:14:37:d6:6a:bc:be:f0:df:40:bc: 7b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:48:DA:0E:AE:E6:70:2A:8E:FE:45:F5:CB:BB:57:C3:7B:00:18:56 X509v3 Authority Key Identifier: keyid:E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f9:12:ef:43:3a:c7:67:0b:67:3a:e1:95:85:b4:56:43:b6: c7:07:aa:a8:dc:21:46:68:56:2b:4d:9a:7c:62:b8:3f:9d:d9: 90:95:86:f1:9c:cb:13:dc:d5:57:c5:a0:cf:87:18:0c:1c:a7: ec:88:58:7f:79:01:57:e7:84:5b:ac:fa:36:3f:da:32:4d:e6: 34:cb:3a:6f:de:20:cf:5e:f8:85:18:d2:9e:70:88:99:1c:15: 42:95:62:3f:36:5a:ce:98:ce:89:15:41:8a:c4:25:40:81:d6: 8b:b0:f2:14:d0:e3:7b:4e:6a:19:10:7a:fc:b7:6e:1f:66:df: 8a:59:20:6c:65:4e:06:4f:f5:9b:68:e3:a1:95:84:68:3c:00: 58:79:46:f7:2c:07:fc:dc:5e:5e:55:40:1c:70:87:9c:c8:3d: 3b:bd:e4:a4:5e:79:52:ef:27:20:3e:2a:e9:24:f9:aa:82:18: 5a:31:a5:ae:b9:2b:38:bd:4a:cb:f7:56:10:fe:5e:b4:2c:80: 98:4c:8c:13:5a:ca:fb:9d:42:e5:8c:29:91:c7:41:f0:62:d9: d5:42:de:cb:17:1d:a9:1f:dc:54:70:d1:f7:0e:8d:84:fb:67: 1d:f5:98:24:3c:89:15:d5:c6:72:1f:53:40:c0:65:76:2e:2e: 03:21:62:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAkoznY/pUaSwOeTcpzjsdT9JJ68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRDNTYw MUJERUE0MjAeFw0yNTA3MDExMDQ1MDVaFw0yNTA3MDQxNTI2MDVaMDMxMTAvBgNV BAMTKEYxNDhEQTBFQUVFNjcwMkE4RUZFNDVGNUNCQkI1N0MzN0IwMDE4NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC488MwzlpN3lvojwUMePc9Dq6b G6YaSF7Ly6KGz4xepV5toLbz5o8PLWNIpFw40fqvIzA2CU93N3iDk7wzbQroPNMI F1ZdYI4K6vXk9gA3dgooYwqRHvnyHwFDosnZX3xQiWvg5renkLKPv4qIPVUT01rb YpTTuJUEuJOzzK6m+DsDv3gdd9F3Hmm1OZJXoXZHP5RFOaMD41o2V6szT/BNHdPm w7rJZSd7D2iSCV1lP6D4C83S9zRPRQOd4ItQsHVcm2AmPa73L6f437QXkYDltNtr WwKHdbvbWcUIn9Bxb3eWUB9nzNhCLoGSOzMlWeRPSw4MFDfWary+8N9AvHs9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8UjaDq7mcCqO/kX1y7tXw3sAGFYwHwYDVR0j BBgwFoAU4PugPWtolc61NyLO/blMVgG96kIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTFmM2IzNy1iZDU0LTQ5MTEtOTA1Yi0zNjU0OTY2ODdjOGQvMC9FMEZCQTAzRDZC Njg5NUNFQjUzNzIyQ0VGREI5NEM1NjAxQkRFQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRDNTYwMUJE RUE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExZjNiMzctYmQ1NC00OTExLTkw NWItMzY1NDk2Njg3YzhkLzAvRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRD NTYwMUJERUE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAr5Eu9DOsdnC2c64ZWFtFZDtscHqqjcIUZo VitNmnxiuD+d2ZCVhvGcyxPc1VfFoM+HGAwcp+yIWH95AVfnhFus+jY/2jJN5jTL Om/eIM9e+IUY0p5wiJkcFUKVYj82Ws6YzokVQYrEJUCB1ouw8hTQ43tOahkQevy3 bh9m34pZIGxlTgZP9Zto46GVhGg8AFh5RvcsB/zcXl5VQBxwh5zIPTu95KReeVLv JyA+Kukk+aqCGFoxpa65Kzi9Ssv3VhD+XrQsgJhMjBNayvudQuWMKZHHQfBi2dVC 3ssXHakf3FRw0fcOjYT7Zx31mCQ8iRXVxnIfU0DAZXYuLgMhYiE= -----END CERTIFICATE-----Generated at Tue Jul 1 15:44:02 2025 by rpki-client