$ rpki-client -vvf repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft File: E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft (raw, json) Hash identifier: GNGmLssAsgxQJE7eod/OeNpR9f2sL3pMKg/MQzSNmhM= Subject key identifier: B7:F0:F6:7E:8C:E0:71:38:DC:18:3F:51:AD:F5:5C:E0:34:46:94:88 Authority key identifier: E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F Certificate issuer: /CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F Certificate serial: 6DA526A12528CFD3C9419BC728A8B2A004E7DCA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft Manifest number: B9 Signing time: Tue 01 Jul 2025 14:21:08 +0000 Manifest this update: Tue 01 Jul 2025 14:16:08 +0000 Manifest next update: Sat 05 Jul 2025 02:15:08 +0000 Files and hashes: 1: 3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa (hash: fkNU7FdVjKHsjFj1YpiV+gYURzvDFsZYzfTu/zHhcfE=) 2: E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl (hash: HnlUrZkM8VsjV0o4ZuzhzGzMBKrQdPLDZK0zV5oPXPw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 02:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:a5:26:a1:25:28:cf:d3:c9:41:9b:c7:28:a8:b2:a0:04:e7:dc:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F Validity Not Before: Jul 1 14:16:08 2025 GMT Not After : Jul 5 02:15:08 2025 GMT Subject: CN=B7F0F67E8CE07138DC183F51ADF55CE034469488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8d:f9:36:60:12:d8:d9:5c:12:6d:a4:1b:f4: 97:47:7c:10:53:c2:74:9f:2d:5e:0f:89:1a:4f:50: 7c:92:6f:9e:d0:8c:f0:62:04:20:46:84:0c:03:6d: 1e:f8:04:53:ac:32:6b:4a:4d:8f:8c:94:70:e6:93: ed:55:55:50:40:29:0a:f3:09:83:75:83:d5:98:74: 6b:a7:b3:cb:39:6e:9f:52:62:e7:78:65:ef:fb:1b: 18:26:f9:60:7f:58:dd:5c:06:6d:6b:d7:bb:f7:c8: 52:96:24:6a:95:d2:87:ff:ff:dd:80:5d:ef:e4:88: 20:70:ee:ac:85:5c:c8:98:29:50:7a:a4:7f:21:5d: 17:d4:ec:d5:a9:0a:9f:67:f4:4c:98:fb:68:59:0a: bf:d8:14:d6:88:fa:8d:6f:65:ab:29:32:e8:92:c7: 98:77:30:5d:5a:eb:7e:87:c0:d6:21:3e:b4:07:61: b6:86:9b:07:c1:78:48:05:6a:a5:5e:4f:9f:93:13: 8e:59:b8:10:df:a6:6d:50:13:97:f1:85:45:c4:57: 62:fb:ca:9a:43:1d:e1:8f:53:30:cc:9c:e4:b2:12: 2d:d3:6d:e2:fd:9f:74:d0:c5:54:ab:9e:ac:64:29: 3e:07:23:a0:7a:09:7e:0e:7a:52:be:c6:34:05:1a: 38:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F0:F6:7E:8C:E0:71:38:DC:18:3F:51:AD:F5:5C:E0:34:46:94:88 X509v3 Authority Key Identifier: keyid:E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ec:65:b5:1d:9b:5a:3f:ef:72:8a:2a:30:e0:f1:9e:d2:ee: e7:8d:bf:04:5f:96:ea:b9:e9:3f:a4:27:a0:ff:e4:a9:4a:49: 35:af:4d:a9:95:86:dc:1b:f5:02:16:41:ad:a3:5a:0c:a1:2f: 94:8c:d3:cd:51:0e:c4:da:11:c0:e1:83:ac:9a:96:3c:0d:3f: 42:a9:18:37:1b:c3:ab:cb:76:7b:d7:88:35:c4:d4:89:e1:61: 35:a7:ed:74:95:73:c2:83:1f:8a:07:38:29:47:5c:43:ec:bd: d8:fe:42:f8:bf:8b:d3:fc:bc:8d:e6:b6:75:31:0e:5f:3c:bf: b0:a3:d2:76:dd:80:68:6e:b5:02:98:20:1a:50:8b:92:d1:07: aa:4e:83:2b:03:f7:a2:03:e3:94:47:2b:34:7f:b0:ff:1a:a7: 45:de:cb:22:d9:9b:91:c3:1c:1e:1a:8b:1f:bc:8c:1c:6d:50: a6:04:5f:63:f5:b6:70:a4:ed:48:82:28:37:e1:37:cc:54:66: ea:ff:41:67:cc:a9:d9:99:5a:cf:11:98:89:cf:99:d2:45:c7: ed:bd:33:7b:ca:a4:f4:a2:1c:dc:10:59:06:a0:6e:09:35:c3: 25:f4:e5:b0:fa:14:55:a5:dd:ab:f0:1e:cd:a9:d8:b3:81:83: 4f:ba:b3:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbaUmoSUoz9PJQZvHKKiyoATn3KQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJFMDhD QzJGNUM3RjAeFw0yNTA3MDExNDE2MDhaFw0yNTA3MDUwMjE1MDhaMDMxMTAvBgNV BAMTKEI3RjBGNjdFOENFMDcxMzhEQzE4M0Y1MUFERjU1Q0UwMzQ0Njk0ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBjfk2YBLY2VwSbaQb9JdHfBBT wnSfLV4PiRpPUHySb57QjPBiBCBGhAwDbR74BFOsMmtKTY+MlHDmk+1VVVBAKQrz CYN1g9WYdGuns8s5bp9SYud4Ze/7Gxgm+WB/WN1cBm1r17v3yFKWJGqV0of//92A Xe/kiCBw7qyFXMiYKVB6pH8hXRfU7NWpCp9n9EyY+2hZCr/YFNaI+o1vZaspMuiS x5h3MF1a636HwNYhPrQHYbaGmwfBeEgFaqVeT5+TE45ZuBDfpm1QE5fxhUXEV2L7 yppDHeGPUzDMnOSyEi3TbeL9n3TQxVSrnqxkKT4HI6B6CX4OelK+xjQFGjjbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt/D2fozgcTjcGD9RrfVc4DRGlIgwHwYDVR0j BBgwFoAU6QK/TPydmX42qeGjL6ouCMwvXH8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmI0NjZjNi0zNzQzLTQ5NWYtYjFhOC0yNjA3Y2M5OTU3M2YvMC9FOTAyQkY0Q0ZD OUQ5OTdFMzZBOUUxQTMyRkFBMkUwOENDMkY1QzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJFMDhDQzJG NUM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZiNDY2YzYtMzc0My00OTVmLWIx YTgtMjYwN2NjOTk1NzNmLzAvRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJF MDhDQzJGNUM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPsZbUdm1o/73KKKjDg8Z7S7ueNvwRfluq5 6T+kJ6D/5KlKSTWvTamVhtwb9QIWQa2jWgyhL5SM081RDsTaEcDhg6yaljwNP0Kp GDcbw6vLdnvXiDXE1InhYTWn7XSVc8KDH4oHOClHXEPsvdj+Qvi/i9P8vI3mtnUx Dl88v7Cj0nbdgGhutQKYIBpQi5LRB6pOgysD96ID45RHKzR/sP8ap0XeyyLZm5HD HB4aix+8jBxtUKYEX2P1tnCk7UiCKDfhN8xUZur/QWfMqdmZWs8RmInPmdJFx+29 M3vKpPSiHNwQWQagbgk1wyX05bD6FFWl3avwHs2p2LOBg0+6sxU= -----END CERTIFICATE-----Generated at Wed Jul 2 14:45:41 2025 by rpki-client