$ rpki-client -vvf repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft File: E025EB5354ADB573B451D02820EA68FD4CAE920A.mft (raw, json) Hash identifier: mxxYiNHXrqc7bT20xoohjzTY9GWMKZXJuJ1RVVccZPA= Subject key identifier: C7:B7:CD:48:B1:D1:1B:D0:01:44:2F:7D:49:36:6F:BE:40:1D:52:82 Authority key identifier: E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A Certificate issuer: /CN=E025EB5354ADB573B451D02820EA68FD4CAE920A Certificate serial: 75521E41D188FCA1CEC13AED190694B6252A29F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft Manifest number: 0147 Signing time: Sat 28 Jun 2025 14:00:41 +0000 Manifest this update: Sat 28 Jun 2025 13:55:41 +0000 Manifest next update: Tue 01 Jul 2025 22:57:41 +0000 Files and hashes: 1: 3130332e3233302e38312e302f32342d3234203d3e20313530393631.roa (hash: BRyZcy7P9c9jO1spuL0mDoDN9aAC7pRi+y0OjtQk3Qc=) 2: E025EB5354ADB573B451D02820EA68FD4CAE920A.crl (hash: MXZk5L2Sk/lD0YRt1cxFUQn/Gmn+ZwXsdmNGACPYcKU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 22:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:52:1e:41:d1:88:fc:a1:ce:c1:3a:ed:19:06:94:b6:25:2a:29:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E025EB5354ADB573B451D02820EA68FD4CAE920A Validity Not Before: Jun 28 13:55:41 2025 GMT Not After : Jul 1 22:57:41 2025 GMT Subject: CN=C7B7CD48B1D11BD001442F7D49366FBE401D5282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:22:14:22:18:f8:62:d4:a1:33:fb:8f:d6:1f: b9:5a:42:89:47:d7:6f:af:0d:b9:85:a9:39:b3:fc: 99:6b:a7:e8:fe:d4:2c:7b:75:40:8a:4f:50:fa:ae: 19:af:87:1f:b5:32:b5:d8:36:8a:ef:2b:eb:6f:60: cb:e7:49:f2:45:b6:7b:68:6a:00:98:b0:6f:ca:b0: c0:5a:7a:1b:96:84:5b:0e:b5:c0:de:c6:84:eb:a2: 6c:ae:e1:d3:fd:12:d8:d4:02:3e:15:16:7f:ee:19: 59:c1:10:98:24:a7:f0:f0:5c:0e:d8:c1:b7:f2:be: 84:6b:98:14:38:41:5b:54:b0:b2:2b:9c:32:80:d2: 1e:4c:bf:09:49:ed:d8:70:a1:92:0d:a2:e2:3e:b8: 51:31:3a:b9:3f:86:14:a1:fb:57:6f:45:c7:c8:ac: 75:52:d2:f9:64:6e:38:ea:b6:b0:7f:67:43:c1:df: 6f:6b:12:31:5f:28:e3:5f:be:9f:12:2e:93:45:7b: 7a:74:f0:ab:2f:08:35:e0:65:e6:49:64:0d:8b:2a: a6:06:c2:81:19:01:26:20:72:de:f9:f6:be:3c:30: 06:72:bb:f3:83:c4:3e:b5:27:72:d9:b6:ff:1b:84: 5d:a5:a8:3d:24:8a:34:da:68:1c:11:bf:f2:b9:37: 4b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B7:CD:48:B1:D1:1B:D0:01:44:2F:7D:49:36:6F:BE:40:1D:52:82 X509v3 Authority Key Identifier: keyid:E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:8c:92:10:0f:1a:a3:d1:5e:f4:55:63:7d:5b:4f:79:31:20: e1:c3:b5:d5:bb:69:7a:36:07:e9:38:37:6b:c3:5a:8f:4e:90: 47:9b:06:e8:b7:55:b9:98:f3:59:ef:be:34:01:8b:42:a3:21: 86:44:4f:93:65:cd:1c:1b:43:8a:f3:d7:11:5e:63:3a:1b:78: 0b:e8:21:14:7a:7c:42:71:34:4c:e4:2a:16:af:70:c5:d2:9e: 7c:70:22:c8:68:0c:b0:62:55:b1:c6:9f:cf:30:26:84:f9:e6: 2b:ac:f9:92:ac:22:ce:66:c2:58:eb:a4:6e:72:b3:b9:41:e0: 7c:fa:a7:cc:31:20:12:d3:f8:10:c6:82:c1:8b:33:3d:77:a5: 06:06:ff:d0:fa:70:f7:18:6f:d6:c6:63:a6:9e:50:fc:33:9e: 70:1a:2c:ea:ad:f1:68:d4:0f:a4:6a:59:3f:ac:db:e0:60:38: 44:fa:2b:eb:e7:5b:14:68:91:f8:81:17:7f:fe:9b:6a:c0:a0: 5b:b9:81:f7:7f:8e:8b:dc:7f:bf:95:18:ad:7d:b8:03:08:bc: c3:bb:6e:d5:d4:0f:af:66:d9:ca:48:8d:85:82:04:61:e6:66: 26:7b:1c:01:49:bb:50:8f:8d:e6:66:81:fb:fe:75:59:11:65: 66:d0:ed:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdVIeQdGI/KHOwTrtGQaUtiUqKfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4RkQ0 Q0FFOTIwQTAeFw0yNTA2MjgxMzU1NDFaFw0yNTA3MDEyMjU3NDFaMDMxMTAvBgNV BAMTKEM3QjdDRDQ4QjFEMTFCRDAwMTQ0MkY3RDQ5MzY2RkJFNDAxRDUyODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFIhQiGPhi1KEz+4/WH7laQolH 12+vDbmFqTmz/Jlrp+j+1Cx7dUCKT1D6rhmvhx+1MrXYNorvK+tvYMvnSfJFtnto agCYsG/KsMBaehuWhFsOtcDexoTromyu4dP9EtjUAj4VFn/uGVnBEJgkp/DwXA7Y wbfyvoRrmBQ4QVtUsLIrnDKA0h5MvwlJ7dhwoZINouI+uFExOrk/hhSh+1dvRcfI rHVS0vlkbjjqtrB/Z0PB329rEjFfKONfvp8SLpNFe3p08KsvCDXgZeZJZA2LKqYG woEZASYgct759r48MAZyu/ODxD61J3LZtv8bhF2lqD0kijTaaBwRv/K5N0stAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx7fNSLHRG9ABRC99STZvvkAdUoIwHwYDVR0j BBgwFoAU4CXrU1SttXO0UdAoIOpo/UyukgowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTRhMmE0MS0yODM4LTQzNjktOTk3Yi00Mjk5ZjE3ZWVlOTAvMC9FMDI1RUI1MzU0 QURCNTczQjQ1MUQwMjgyMEVBNjhGRDRDQUU5MjBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4RkQ0Q0FF OTIwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE0YTJhNDEtMjgzOC00MzY5LTk5 N2ItNDI5OWYxN2VlZTkwLzAvRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4 RkQ0Q0FFOTIwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2MkhAPGqPRXvRVY31bT3kxIOHDtdW7aXo2 B+k4N2vDWo9OkEebBui3VbmY81nvvjQBi0KjIYZET5NlzRwbQ4rz1xFeYzobeAvo IRR6fEJxNEzkKhavcMXSnnxwIshoDLBiVbHGn88wJoT55ius+ZKsIs5mwljrpG5y s7lB4Hz6p8wxIBLT+BDGgsGLMz13pQYG/9D6cPcYb9bGY6aeUPwznnAaLOqt8WjU D6RqWT+s2+BgOET6K+vnWxRokfiBF3/+m2rAoFu5gfd/jovcf7+VGK19uAMIvMO7 btXUD69m2cpIjYWCBGHmZiZ7HAFJu1CPjeZmgfv+dVkRZWbQ7V4= -----END CERTIFICATE-----Generated at Sun Jun 29 23:34:43 2025 by rpki-client