$ rpki-client -vvf repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft File: E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft (raw, json) Hash identifier: 2mFj071mKUyU9+YNmTdTvGpp4zk20lb/IA0vs/yiJbw= Subject key identifier: B8:D0:7E:47:C8:12:35:AD:D8:F5:CC:2F:76:8C:48:11:7A:6B:D9:BF Authority key identifier: E8:2A:E8:B6:91:C7:C5:3E:1C:E0:B3:96:D8:97:57:47:F1:56:04:D5 Certificate issuer: /CN=E82AE8B691C7C53E1CE0B396D8975747F15604D5 Certificate serial: 08807457BA85EAE4F1F5FA767DFE2C23F4044A4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft Manifest number: 01E0 Signing time: Wed 02 Jul 2025 11:50:56 +0000 Manifest this update: Wed 02 Jul 2025 11:45:56 +0000 Manifest next update: Sat 05 Jul 2025 19:54:56 +0000 Files and hashes: 1: 3130332e3137362e3235322e302f32332d3234203d3e20313437313433.roa (hash: 0eR/sossty6R9CW6sl77Vt0ZhuUxrN0f/0JSjyj94i0=) 2: E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl (hash: zO23Td8R1kIaWlwKtBLn4/3nS2efGH9TrAfpyXRvhT8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 19:54:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:80:74:57:ba:85:ea:e4:f1:f5:fa:76:7d:fe:2c:23:f4:04:4a:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E82AE8B691C7C53E1CE0B396D8975747F15604D5 Validity Not Before: Jul 2 11:45:56 2025 GMT Not After : Jul 5 19:54:56 2025 GMT Subject: CN=B8D07E47C81235ADD8F5CC2F768C48117A6BD9BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:80:6a:93:26:ac:c7:e9:98:f5:76:df:ca:d0: 39:ce:79:d6:18:04:59:c9:aa:04:32:f7:99:00:06: 3d:3c:61:13:ac:62:3d:19:dc:1b:6e:da:29:8f:98: c0:8f:50:55:13:88:34:3f:88:49:76:c8:71:a6:ed: ee:54:44:4e:7c:8a:fa:12:01:65:12:6a:be:db:73: f3:e9:c0:03:02:7d:8f:fb:2f:87:9b:ae:ea:e5:4a: 81:81:06:6f:16:89:15:f3:02:dc:6f:b6:75:19:3c: e9:c9:c3:20:7d:32:b9:78:21:6c:ea:b3:81:d0:8e: 53:37:02:50:e8:ce:8e:08:0d:1a:00:dc:60:c7:a4: ca:e9:cc:b6:d5:27:38:e4:1c:40:5c:34:0f:5e:aa: e6:eb:ca:b7:ef:ba:91:a0:31:fa:8b:85:c6:d3:1c: 2b:db:8a:9c:87:60:70:1b:d6:9a:6d:3b:bb:52:be: d7:5e:33:d2:5b:b6:d1:89:2a:ca:f6:f1:ff:5f:6d: 10:f5:c5:14:7e:ac:6b:52:32:6f:cd:d7:4f:71:05: 6d:91:90:94:23:01:51:72:ae:e1:f3:32:4b:83:93: 9e:66:23:84:11:4a:71:71:1e:03:5d:97:7b:d4:ab: 3c:fd:cd:45:42:3f:cd:b6:4f:6d:e9:80:65:8b:35: c9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D0:7E:47:C8:12:35:AD:D8:F5:CC:2F:76:8C:48:11:7A:6B:D9:BF X509v3 Authority Key Identifier: keyid:E8:2A:E8:B6:91:C7:C5:3E:1C:E0:B3:96:D8:97:57:47:F1:56:04:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:eb:a2:f7:f7:42:39:4b:a9:07:d2:e7:ef:8a:47:1d:fb:99: c0:2f:c9:0f:71:7f:c4:74:06:de:42:66:e4:28:e5:23:89:76: b1:8a:2c:a7:17:19:10:fb:bb:9d:36:17:7b:1f:51:58:8f:81: 78:30:d3:e0:50:ad:6d:c3:c7:2b:9e:da:28:22:f6:49:bd:82: a6:62:77:a6:1d:fd:d6:e1:e6:b2:5a:22:6c:b4:3f:82:04:d2: ae:e5:56:99:60:4c:fb:ad:4c:4f:6a:64:14:dd:47:de:16:b3: 9b:dc:ec:70:13:e3:88:a4:1f:e8:ea:16:3a:db:8e:02:c9:40: a6:38:6e:8e:1c:52:c0:72:86:c3:e5:4d:0d:d0:ed:1d:be:7f: ba:b4:6f:fd:c5:0e:c2:0e:12:19:54:89:3e:ca:80:80:c9:ea: 6a:34:aa:6f:a1:1d:da:82:e0:9e:25:88:e6:1d:7d:c9:ba:2f: e4:93:f3:e7:fe:08:93:72:39:8f:09:83:37:88:e8:8d:e0:b7: 29:f7:75:86:7e:9f:ff:61:30:ec:6d:a5:38:61:7e:47:c5:56: 4b:d1:7d:ff:4c:63:5d:8a:ad:1d:c7:17:bf:d2:ae:65:05:6e: 11:cb:a3:ad:f8:bc:bd:9a:1b:29:86:e7:d6:c8:ef:cb:ea:a7: 65:94:a2:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCIB0V7qF6uTx9fp2ff4sI/QESk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3NDdG MTU2MDRENTAeFw0yNTA3MDIxMTQ1NTZaFw0yNTA3MDUxOTU0NTZaMDMxMTAvBgNV BAMTKEI4RDA3RTQ3QzgxMjM1QUREOEY1Q0MyRjc2OEM0ODExN0E2QkQ5QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpgGqTJqzH6Zj1dt/K0DnOedYY BFnJqgQy95kABj08YROsYj0Z3Btu2imPmMCPUFUTiDQ/iEl2yHGm7e5URE58ivoS AWUSar7bc/PpwAMCfY/7L4ebrurlSoGBBm8WiRXzAtxvtnUZPOnJwyB9Mrl4IWzq s4HQjlM3AlDozo4IDRoA3GDHpMrpzLbVJzjkHEBcNA9equbryrfvupGgMfqLhcbT HCvbipyHYHAb1pptO7tSvtdeM9JbttGJKsr28f9fbRD1xRR+rGtSMm/N109xBW2R kJQjAVFyruHzMkuDk55mI4QRSnFxHgNdl3vUqzz9zUVCP822T23pgGWLNcnPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuNB+R8gSNa3Y9cwvdoxIEXpr2b8wHwYDVR0j BBgwFoAU6CrotpHHxT4c4LOW2JdXR/FWBNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWZmYjQzYi1mOGI1LTRmMWYtOWI4Zi01YjAyZGRiYjZmY2YvMC9FODJBRThCNjkx QzdDNTNFMUNFMEIzOTZEODk3NTc0N0YxNTYwNEQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3NDdGMTU2 MDRENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTlmZmI0M2ItZjhiNS00ZjFmLTli OGYtNWIwMmRkYmI2ZmNmLzAvRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3 NDdGMTU2MDRENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLrovf3QjlLqQfS5++KRx37mcAvyQ9xf8R0 Bt5CZuQo5SOJdrGKLKcXGRD7u502F3sfUViPgXgw0+BQrW3Dxyue2igi9km9gqZi d6Yd/dbh5rJaImy0P4IE0q7lVplgTPutTE9qZBTdR94Ws5vc7HAT44ikH+jqFjrb jgLJQKY4bo4cUsByhsPlTQ3Q7R2+f7q0b/3FDsIOEhlUiT7KgIDJ6mo0qm+hHdqC 4J4liOYdfcm6L+ST8+f+CJNyOY8JgzeI6I3gtyn3dYZ+n/9hMOxtpThhfkfFVkvR ff9MY12KrR3HF7/SrmUFbhHLo634vL2aGymG59bI78vqp2WUon8= -----END CERTIFICATE-----Generated at Thu Jul 3 06:49:56 2025 by rpki-client