$ rpki-client -vvf repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft File: E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft (raw, json) Hash identifier: fpWYRSnNA4I2GMH4DabI4yFmPKXqHHm3WhqlnoQCVko= Subject key identifier: DC:77:2C:F6:F4:2A:95:FD:FC:C2:39:66:99:DA:65:DF:8E:AF:70:00 Authority key identifier: E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A Certificate issuer: /CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A Certificate serial: 34A3E597DB37A21D4B56AF3600E71DCFC1E8E398 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft Manifest number: 042D Signing time: Fri 04 Jul 2025 13:11:42 +0000 Manifest this update: Fri 04 Jul 2025 13:06:42 +0000 Manifest next update: Mon 07 Jul 2025 21:27:42 +0000 Files and hashes: 1: 3130332e3134382e32382e302f32342d3234203d3e20313430303132.roa (hash: +QupJ1EZByI+g6S06PODORTdzbTVZh4a1MkmGIToh1c=) 2: 323430353a633934303a3a2f33322d3332203d3e20313430303132.roa (hash: 0Ch00VaMiPntZrLpBaDMR1Y+kpCG3oxMGYz3YYRWkbY=) 3: E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl (hash: sfvMJrQCDY/vWes8qUwiSqVuiuXdsKmF8oK48K/RqO8=) 4: 3130332e3134382e32392e302f32342d3234203d3e20313430303132.roa (hash: 5eC7/I40aczbOTzlYXr05tpa3jo1C0J9l1xBueSDuOI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a3:e5:97:db:37:a2:1d:4b:56:af:36:00:e7:1d:cf:c1:e8:e3:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A Validity Not Before: Jul 4 13:06:42 2025 GMT Not After : Jul 7 21:27:42 2025 GMT Subject: CN=DC772CF6F42A95FDFCC2396699DA65DF8EAF7000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bb:12:56:6c:0f:79:1b:08:b8:fc:45:f4:6e: 9c:a4:7d:47:74:e5:eb:34:9a:93:56:d3:82:57:6b: af:7d:57:30:19:89:e5:d6:cd:0a:87:23:42:a2:b1: 4e:46:97:cd:cb:e0:2b:55:79:6e:1a:f7:f5:c0:3b: 8a:85:8b:2c:e2:c3:63:f7:b8:4d:4f:e9:88:5d:10: 8e:39:f2:c0:de:f8:75:41:3f:f5:75:28:e4:1a:30: 93:5f:94:7c:d8:9f:a8:cd:a8:f7:75:e6:b0:08:96: 9d:bb:66:a1:2a:0f:27:a8:d8:f5:82:ba:dc:04:f4: 4b:fd:ad:cf:47:38:34:56:ab:93:a8:93:9e:5e:2a: 22:72:18:69:f5:6e:22:e3:ce:de:79:18:b1:a4:7b: 2e:e8:1e:97:2f:21:e6:fb:8a:b7:e5:df:46:8a:3f: 63:08:70:a8:5e:29:a7:81:c2:38:b1:d2:a9:47:a8: 17:2d:8e:7f:09:04:84:7f:f9:d9:19:e7:d4:73:53: 04:62:9d:2c:96:a8:51:69:61:82:d1:ea:9d:ea:92: 94:bb:d2:af:3a:dc:77:19:fc:c5:44:9f:2e:bc:d5: 31:a4:01:af:b4:d2:68:57:f5:18:2f:dc:aa:c8:61: d6:fd:ad:2b:2a:04:1e:76:c8:a1:02:2b:e2:0d:da: 4b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:77:2C:F6:F4:2A:95:FD:FC:C2:39:66:99:DA:65:DF:8E:AF:70:00 X509v3 Authority Key Identifier: keyid:E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:f8:3e:d6:1b:db:43:86:2c:84:50:51:fd:d0:93:11:32:2e: 5f:b9:d1:90:4e:33:40:ca:e7:67:7e:2c:92:e5:28:12:5b:56: 78:11:bc:12:31:1e:98:96:86:5b:8f:c1:bc:66:4b:ab:f1:f0: 03:57:8a:06:52:24:5a:92:a4:46:61:34:1a:f2:f0:43:99:f0: 3d:4b:36:d2:c3:89:96:d2:17:32:89:0f:20:fb:f1:8d:78:85: c7:ee:b7:f0:55:60:1b:a5:41:a2:95:bd:99:1b:48:c3:05:43: a4:26:60:67:10:e6:60:da:15:8d:15:b3:a8:11:90:e2:6c:f4: 67:ef:7d:e9:a1:f5:46:61:56:f9:7b:ef:d4:67:b8:16:d1:08: c5:1b:3b:19:06:77:c2:37:76:57:80:67:f0:f1:91:36:46:b9: cf:01:ac:3a:0e:0a:f2:15:7b:a5:a1:86:05:53:1d:ff:8d:d1: b6:c6:75:98:77:e4:80:ea:e2:0b:69:d4:9e:66:62:4e:cd:d9: cc:70:3d:12:df:f3:f3:2c:b8:6f:b7:69:a6:01:79:d8:a5:26: 09:eb:53:3f:b9:ff:aa:a9:8b:1b:c7:94:89:81:42:a3:0b:8c: 5f:a0:f7:c5:b5:8e:82:a8:75:5e:32:2d:c2:6d:0c:3c:fa:4e: d4:16:50:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNKPll9s3oh1LVq82AOcdz8Ho45gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEyOTM2 QjkxMTY1QTAeFw0yNTA3MDQxMzA2NDJaFw0yNTA3MDcyMTI3NDJaMDMxMTAvBgNV BAMTKERDNzcyQ0Y2RjQyQTk1RkRGQ0MyMzk2Njk5REE2NURGOEVBRjcwMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiuxJWbA95Gwi4/EX0bpykfUd0 5es0mpNW04JXa699VzAZieXWzQqHI0KisU5Gl83L4CtVeW4a9/XAO4qFiyziw2P3 uE1P6YhdEI458sDe+HVBP/V1KOQaMJNflHzYn6jNqPd15rAIlp27ZqEqDyeo2PWC utwE9Ev9rc9HODRWq5Ook55eKiJyGGn1biLjzt55GLGkey7oHpcvIeb7irfl30aK P2MIcKheKaeBwjix0qlHqBctjn8JBIR/+dkZ59RzUwRinSyWqFFpYYLR6p3qkpS7 0q863HcZ/MVEny681TGkAa+00mhX9Rgv3KrIYdb9rSsqBB52yKECK+IN2ksHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Hcs9vQqlf38wjlmmdpl346vcAAwHwYDVR0j BBgwFoAU4XNX5B82RNE+vHxLJbiik2uRFlowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmFjOWU2My05ODkwLTQyMmUtODhkYy03Y2I2ZGRhYzIyZmEvMC9FMTczNTdFNDFG MzY0NEQxM0VCQzdDNEIyNUI4QTI5MzZCOTExNjVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEyOTM2Qjkx MTY1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJhYzllNjMtOTg5MC00MjJlLTg4 ZGMtN2NiNmRkYWMyMmZhLzAvRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEy OTM2QjkxMTY1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKb4PtYb20OGLIRQUf3QkxEyLl+50ZBOM0DK 52d+LJLlKBJbVngRvBIxHpiWhluPwbxmS6vx8ANXigZSJFqSpEZhNBry8EOZ8D1L NtLDiZbSFzKJDyD78Y14hcfut/BVYBulQaKVvZkbSMMFQ6QmYGcQ5mDaFY0Vs6gR kOJs9Gfvfemh9UZhVvl779RnuBbRCMUbOxkGd8I3dleAZ/DxkTZGuc8BrDoOCvIV e6WhhgVTHf+N0bbGdZh35IDq4gtp1J5mYk7N2cxwPRLf8/MsuG+3aaYBedilJgnr Uz+5/6qpixvHlImBQqMLjF+g98W1joKodV4yLcJtDDz6TtQWUK8= -----END CERTIFICATE-----Generated at Sat Jul 5 01:31:57 2025 by rpki-client