$ rpki-client -vvf repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft File: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft (raw, json) Hash identifier: OBBW/Kc+ps6cezF3ujtTYn7xQvJo9sE0se1wuwpg2cI= Subject key identifier: E5:37:BB:1F:51:10:14:31:97:03:B8:0D:D7:1C:15:5E:E8:00:18:D1 Authority key identifier: E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE Certificate issuer: /CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE Certificate serial: 5FEBCA833895A38719F016A7A4BDA7C83539E286 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft Manifest number: 0209 Signing time: Mon 30 Jun 2025 09:20:51 +0000 Manifest this update: Mon 30 Jun 2025 09:15:51 +0000 Manifest next update: Thu 03 Jul 2025 14:51:51 +0000 Files and hashes: 1: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl (hash: YhEz0+R9bY12m+vgVx+LjLxnAr3khnwGus3e1MmsZj0=) 2: 3130332e3137322e3139342e302f32332d3233203d3e20313437303735.roa (hash: xYxxyrQkuQeP1ZXr19Z8s6G5oCtciWVbaGSbTT9Dbxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 14:51:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:eb:ca:83:38:95:a3:87:19:f0:16:a7:a4:bd:a7:c8:35:39:e2:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE Validity Not Before: Jun 30 09:15:51 2025 GMT Not After : Jul 3 14:51:51 2025 GMT Subject: CN=E537BB1F511014319703B80DD71C155EE80018D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b1:a0:e0:42:99:a9:e4:bf:ea:26:8b:bd:39: b2:b4:2b:a7:87:d8:79:36:8d:50:a7:10:98:cd:7d: 3f:ef:4f:ba:d8:4a:04:e9:48:12:49:e4:49:55:aa: c4:b5:47:e9:f6:6d:f8:ae:77:a5:7f:81:1c:ac:da: be:c7:20:96:6c:de:db:e8:ad:9c:2d:37:6c:0e:cd: 30:ab:f5:2a:21:1f:64:03:79:72:09:28:93:a2:1a: 4e:58:99:31:af:8d:32:05:1f:9b:cb:17:55:0c:99: d0:48:61:1a:d7:e0:d9:e9:1a:4e:fd:49:e1:99:47: 53:8d:11:fc:0f:76:0b:3c:30:3e:a4:0a:52:89:78: a4:e3:76:a4:55:7d:5e:ef:e5:15:50:83:48:8c:6e: 82:2d:1d:b8:6c:f6:4a:8e:b6:e5:1b:5d:d1:f4:e3: 80:1f:7e:a3:b4:22:8e:e5:81:ef:d1:ba:33:c6:ac: 55:b9:d2:d3:15:31:df:a0:89:cd:93:49:53:a8:28: 6a:50:b4:28:9e:86:d2:37:09:cd:f3:ab:47:24:04: 8f:43:a0:04:cc:ca:40:1b:41:76:68:2c:4d:de:76: cb:b2:5c:16:27:37:05:51:a5:f2:66:a7:b1:73:4c: cf:1b:27:52:ec:ff:69:41:1f:a1:66:a7:d5:d4:c8: 83:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:37:BB:1F:51:10:14:31:97:03:B8:0D:D7:1C:15:5E:E8:00:18:D1 X509v3 Authority Key Identifier: keyid:E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:12:7a:eb:fe:32:4f:05:cb:5e:9a:96:64:3e:d0:90:06:b5: 65:1f:8e:be:e3:25:3f:a6:4e:ea:36:2e:6c:e8:7a:b2:d2:c1: 7f:f1:8e:88:a1:23:5f:0d:1b:07:cf:68:32:f5:01:cf:3e:ed: 16:b9:eb:e0:09:61:b7:c8:7d:af:c1:99:f4:46:5e:23:79:88: 44:ed:de:c6:bf:c5:44:78:15:54:90:dc:be:af:76:8b:38:c4: 3c:52:39:e1:a4:9b:e0:48:f5:99:c8:8a:1d:31:d1:41:4a:62: f4:0f:f4:68:f4:0e:4b:a7:d5:40:90:c8:e3:32:f8:41:b4:bd: e0:0b:7c:92:36:8d:cc:ed:6a:c0:06:c7:92:78:82:29:b4:41: cb:b7:93:aa:c3:92:e9:eb:d3:34:49:59:34:97:14:ed:b6:45: c0:21:34:9b:b5:d4:aa:b6:90:0e:02:45:00:df:75:cd:55:b2: 4c:ce:00:a1:6b:c1:fa:ef:fc:ab:7c:ce:67:4a:67:3a:89:1e: cf:1c:d3:8f:60:c8:7d:66:5f:46:81:e0:d1:9f:02:2f:1c:10: 7e:f5:a5:3a:d8:c1:43:c9:17:36:76:bc:45:a2:fc:20:ba:87: 0f:bb:20:45:a2:87:6c:d4:a9:8a:74:bb:bf:8b:b6:2f:d6:db: d7:9c:99:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX+vKgziVo4cZ8BanpL2nyDU54oYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3 QjJBRTRCRTAeFw0yNTA2MzAwOTE1NTFaFw0yNTA3MDMxNDUxNTFaMDMxMTAvBgNV BAMTKEU1MzdCQjFGNTExMDE0MzE5NzAzQjgwREQ3MUMxNTVFRTgwMDE4RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgsaDgQpmp5L/qJou9ObK0K6eH 2Hk2jVCnEJjNfT/vT7rYSgTpSBJJ5ElVqsS1R+n2bfiud6V/gRys2r7HIJZs3tvo rZwtN2wOzTCr9SohH2QDeXIJKJOiGk5YmTGvjTIFH5vLF1UMmdBIYRrX4NnpGk79 SeGZR1ONEfwPdgs8MD6kClKJeKTjdqRVfV7v5RVQg0iMboItHbhs9kqOtuUbXdH0 44AffqO0Io7lge/RujPGrFW50tMVMd+gic2TSVOoKGpQtCiehtI3Cc3zq0ckBI9D oATMykAbQXZoLE3edsuyXBYnNwVRpfJmp7FzTM8bJ1Ls/2lBH6Fmp9XUyIPDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Te7H1EQFDGXA7gN1xwVXugAGNEwHwYDVR0j BBgwFoAU5IY04db7LooGpIgltNfuxHsq5L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2VjMmNiNi0zNWFkLTQxMDEtOTgyZS0yZTM0ZDU2NmVmZGEvMC9FNDg2MzRFMUQ2 RkIyRThBMDZBNDg4MjVCNEQ3RUVDNDdCMkFFNEJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3QjJB RTRCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNlYzJjYjYtMzVhZC00MTAxLTk4 MmUtMmUzNGQ1NjZlZmRhLzAvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VF QzQ3QjJBRTRCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwSeuv+Mk8Fy16almQ+0JAGtWUfjr7jJT+m Tuo2LmzoerLSwX/xjoihI18NGwfPaDL1Ac8+7Ra56+AJYbfIfa/BmfRGXiN5iETt 3sa/xUR4FVSQ3L6vdos4xDxSOeGkm+BI9ZnIih0x0UFKYvQP9Gj0Dkun1UCQyOMy +EG0veALfJI2jcztasAGx5J4gim0Qcu3k6rDkunr0zRJWTSXFO22RcAhNJu11Kq2 kA4CRQDfdc1VskzOAKFrwfrv/Kt8zmdKZzqJHs8c049gyH1mX0aB4NGfAi8cEH71 pTrYwUPJFzZ2vEWi/CC6hw+7IEWih2zUqYp0u7+Lti/W29ecmTE= -----END CERTIFICATE-----Generated at Tue Jul 1 05:08:24 2025 by rpki-client