$ rpki-client -vvf repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft File: E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft (raw, json) Hash identifier: b3Z9cf1M6eskzWFC1C70mQz4IVS6fvuPv7GKxdDr+z0= Subject key identifier: 64:DC:91:D4:E5:42:21:E6:18:68:AB:E2:B0:AD:32:8C:B9:4B:0A:8B Authority key identifier: E9:8B:5C:8D:E6:CD:8A:83:09:2F:B5:55:78:38:8B:B5:5D:80:21:A5 Certificate issuer: /CN=E98B5C8DE6CD8A83092FB55578388BB55D8021A5 Certificate serial: 39A03E5B6A18A9748B9BFE00F5D1918737A61E37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft Manifest number: 015C Signing time: Mon 30 Jun 2025 06:41:21 +0000 Manifest this update: Mon 30 Jun 2025 06:36:21 +0000 Manifest next update: Thu 03 Jul 2025 11:38:21 +0000 Files and hashes: 1: E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl (hash: jpQa3tH2VxpYMuBwtg45Zt3eWV2JhfLz/ejHhabdp2I=) 2: 3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa (hash: RVW6NTEFxtaBVN2tG8HTXDlbU79ZyUomhDvpDJYoqdQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 11:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:a0:3e:5b:6a:18:a9:74:8b:9b:fe:00:f5:d1:91:87:37:a6:1e:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E98B5C8DE6CD8A83092FB55578388BB55D8021A5 Validity Not Before: Jun 30 06:36:21 2025 GMT Not After : Jul 3 11:38:21 2025 GMT Subject: CN=64DC91D4E54221E61868ABE2B0AD328CB94B0A8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cb:5e:07:ed:71:43:23:fb:63:32:44:ef:10: 66:8b:52:69:2a:b9:55:dc:d0:00:b6:33:48:4f:fc: 66:a8:5c:fc:21:9e:ac:ec:32:32:92:a0:24:93:8a: 35:7f:ad:b1:ba:69:7d:8e:dc:cb:70:ac:73:b2:78: 06:84:d8:6c:fa:11:a1:fc:1a:ef:6c:4d:36:d7:e6: 58:a6:c5:77:8d:2b:81:21:01:9c:0e:ef:ed:56:16: fa:af:a1:da:59:41:7d:c0:22:39:a5:38:67:b0:b4: 5d:ee:c7:87:87:4b:64:82:8d:50:24:b1:95:b8:11: 97:99:54:cc:fa:6e:73:b2:4f:9b:cd:47:7e:ff:12: 1c:e4:48:e8:72:a8:35:a4:76:dc:5d:f9:05:ef:a5: 0e:97:a8:f1:ed:48:41:4b:91:d7:41:be:33:a3:a0: c9:25:65:3a:b4:8d:b0:76:35:1a:c5:d1:83:d5:d0: af:0f:89:cd:1c:da:32:38:3b:72:b9:fe:65:2c:b9: 2b:e8:8a:fd:d7:bf:fe:2e:c4:ca:08:25:d4:ae:ca: 2f:a1:a6:2e:bc:8b:39:1b:22:9a:dd:66:19:62:43: 5b:33:fa:4d:3d:59:46:f7:e6:82:30:b2:da:cb:51: 11:f7:bf:ce:34:ed:8f:bf:59:ba:a1:4e:2a:0c:eb: 85:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DC:91:D4:E5:42:21:E6:18:68:AB:E2:B0:AD:32:8C:B9:4B:0A:8B X509v3 Authority Key Identifier: keyid:E9:8B:5C:8D:E6:CD:8A:83:09:2F:B5:55:78:38:8B:B5:5D:80:21:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:19:e5:2d:63:1c:b4:67:96:41:ac:2f:ee:b1:6f:2d:7a:ab: f3:f9:4d:9a:b6:5b:d0:83:af:64:1b:f3:8c:ef:81:84:76:c0: 6f:ed:f0:d6:91:10:7a:5e:4e:4e:e8:e8:3b:dc:5c:73:2b:9c: e3:99:e5:6b:81:82:8f:19:d8:a5:91:60:bd:28:43:cf:13:97: d2:14:2f:55:86:a4:68:3a:4b:a4:93:53:8b:04:d7:6c:97:f6: 5e:e3:ff:bd:a0:15:be:e7:6e:f0:0d:6d:84:6a:23:53:48:44: cd:96:67:ef:3a:4a:97:d0:be:8c:7b:16:4a:17:74:85:70:3c: bf:18:91:a6:d4:19:c8:d7:c1:33:26:1c:1b:40:9a:bd:8e:11: b7:88:77:25:2f:03:0d:ec:d2:7c:23:b3:1e:da:6d:7c:44:87: 6e:51:21:2e:b9:76:75:3e:9e:06:60:ab:11:ed:82:83:81:be: cf:fb:3b:cc:d6:08:f6:e2:25:d8:b4:bc:d4:e5:fc:4c:5c:cf: e4:84:df:1b:28:a1:a9:4c:7b:ec:a5:4c:eb:e0:ad:3f:c5:bf: f2:f2:de:b7:66:fd:3b:88:a1:a3:88:aa:87:86:89:53:56:72: 60:c8:09:43:85:60:82:23:64:5a:e7:7c:14:00:5d:49:ba:39: 78:1e:fa:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOaA+W2oYqXSLm/4A9dGRhzemHjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhCQjU1 RDgwMjFBNTAeFw0yNTA2MzAwNjM2MjFaFw0yNTA3MDMxMTM4MjFaMDMxMTAvBgNV BAMTKDY0REM5MUQ0RTU0MjIxRTYxODY4QUJFMkIwQUQzMjhDQjk0QjBBOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBy14H7XFDI/tjMkTvEGaLUmkq uVXc0AC2M0hP/GaoXPwhnqzsMjKSoCSTijV/rbG6aX2O3MtwrHOyeAaE2Gz6EaH8 Gu9sTTbX5limxXeNK4EhAZwO7+1WFvqvodpZQX3AIjmlOGewtF3ux4eHS2SCjVAk sZW4EZeZVMz6bnOyT5vNR37/EhzkSOhyqDWkdtxd+QXvpQ6XqPHtSEFLkddBvjOj oMklZTq0jbB2NRrF0YPV0K8Pic0c2jI4O3K5/mUsuSvoiv3Xv/4uxMoIJdSuyi+h pi68izkbIprdZhliQ1sz+k09WUb35oIwstrLURH3v8407Y+/WbqhTioM64VTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZNyR1OVCIeYYaKvisK0yjLlLCoswHwYDVR0j BBgwFoAU6YtcjebNioMJL7VVeDiLtV2AIaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmRhZmU1Ni04NDM0LTRiYmEtYjE3Ni0zNWU4NzJjMWFjMTgvMC9FOThCNUM4REU2 Q0Q4QTgzMDkyRkI1NTU3ODM4OEJCNTVEODAyMUE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhCQjU1RDgw MjFBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZkYWZlNTYtODQzNC00YmJhLWIx NzYtMzVlODcyYzFhYzE4LzAvRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhC QjU1RDgwMjFBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQZ5S1jHLRnlkGsL+6xby16q/P5TZq2W9CD r2Qb84zvgYR2wG/t8NaREHpeTk7o6DvcXHMrnOOZ5WuBgo8Z2KWRYL0oQ88Tl9IU L1WGpGg6S6STU4sE12yX9l7j/72gFb7nbvANbYRqI1NIRM2WZ+86SpfQvox7FkoX dIVwPL8YkabUGcjXwTMmHBtAmr2OEbeIdyUvAw3s0nwjsx7abXxEh25RIS65dnU+ ngZgqxHtgoOBvs/7O8zWCPbiJdi0vNTl/Excz+SE3xsooalMe+ylTOvgrT/Fv/Ly 3rdm/TuIoaOIqoeGiVNWcmDICUOFYIIjZFrnfBQAXUm6OXge+so= -----END CERTIFICATE-----Generated at Wed Jul 2 00:37:26 2025 by rpki-client