$ rpki-client -vvf repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft File: E4C33FFA425046D044E7F503AC8065468BAF739E.mft (raw, json) Hash identifier: yw0VQo9aLkX2dbshaaoqslhUXKY8eIHwxVEsm5cBopM= Subject key identifier: 9A:5F:EA:D1:1A:20:88:61:B6:28:1D:52:7F:4B:5D:68:27:4D:A0:43 Authority key identifier: E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E Certificate issuer: /CN=E4C33FFA425046D044E7F503AC8065468BAF739E Certificate serial: 17D7CD18BFDC6FDEA0E70E7D8BF5D53F011FED78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft Manifest number: 019C Signing time: Sat 28 Jun 2025 18:42:01 +0000 Manifest this update: Sat 28 Jun 2025 18:37:01 +0000 Manifest next update: Wed 02 Jul 2025 05:10:01 +0000 Files and hashes: 1: 3130332e39392e32372e302f32342d3234203d3e20313530323739.roa (hash: 4oIhooNcjswOY06c5BLFSgUgdzWhNc2IjQmbzeqQDiU=) 2: E4C33FFA425046D044E7F503AC8065468BAF739E.crl (hash: xLkSzSOvSeeWHhxMhSzTzv1R67K8f0MB6Xzpd5JdrbY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.crl rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 05:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:d7:cd:18:bf:dc:6f:de:a0:e7:0e:7d:8b:f5:d5:3f:01:1f:ed:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4C33FFA425046D044E7F503AC8065468BAF739E Validity Not Before: Jun 28 18:37:01 2025 GMT Not After : Jul 2 05:10:01 2025 GMT Subject: CN=9A5FEAD11A208861B6281D527F4B5D68274DA043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:02:c4:b2:42:71:34:76:22:c0:4f:f9:32:e1: 5c:0f:c8:09:d6:2a:4c:44:72:8c:29:f2:7d:ca:5c: e1:3f:02:48:8c:3b:cc:65:99:0e:0e:76:f2:e2:4b: b1:6b:f7:1c:bb:f2:9f:29:ed:87:b4:3a:af:29:d6: 32:29:32:bc:a6:83:f0:be:0b:d4:a7:84:37:70:3a: b7:72:3d:c6:68:7c:24:7e:5f:c7:87:d8:8e:0b:84: 79:64:d0:57:26:7f:d6:c3:ec:1a:55:ec:26:03:3f: 78:ea:c5:eb:17:f0:80:21:0f:ba:f6:93:22:a7:bc: b8:fe:52:d8:e7:d4:13:71:cd:0e:db:74:22:cd:84: 42:4c:08:19:94:83:99:9a:4b:94:52:8c:d0:95:27: b1:37:1a:64:93:6e:00:09:81:04:27:3b:dc:95:7d: 4f:68:15:f1:f1:2e:aa:3e:b3:73:81:1b:19:d1:fd: 56:85:dc:9e:19:1d:47:08:57:e4:4f:3a:06:21:e3: a1:0b:27:be:a0:e0:1e:af:44:91:d9:c9:b1:94:8b: 5b:4b:df:52:0f:65:ca:f9:70:16:ba:6d:58:7d:63: c7:b3:ac:6e:45:be:ee:0b:4b:73:70:94:b9:46:cb: 32:2c:e1:b5:ea:b2:97:3a:e0:db:02:95:4d:76:13: d5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5F:EA:D1:1A:20:88:61:B6:28:1D:52:7F:4B:5D:68:27:4D:A0:43 X509v3 Authority Key Identifier: keyid:E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:36:52:17:37:c9:72:79:a0:58:71:d4:e8:e9:b2:b3:66:ea: e9:ea:47:b8:ec:3d:1e:1a:22:e2:54:b1:02:4f:a9:85:ae:a7: e4:64:19:5f:df:2e:71:38:9c:ee:82:ac:d4:07:84:66:13:c8: e6:c6:71:56:68:cd:3b:c0:ff:44:e6:0c:9c:f6:37:66:db:e6: e7:f4:21:de:af:d5:f9:9a:aa:a8:04:ca:8b:f8:2b:57:65:7a: f1:0e:55:49:41:0c:10:68:ab:68:e7:09:c9:4d:42:cc:6f:01: af:d1:8f:6c:03:99:b5:2b:8f:f6:12:7c:ed:73:7f:1e:b9:97: 34:38:ec:aa:a2:b1:6a:ac:e3:c6:c9:39:19:8c:cf:a9:5f:f0: c5:2d:7f:da:b6:c7:bf:7c:76:5f:6b:14:a2:28:71:d1:68:af: af:78:53:ed:31:76:cb:e4:f8:a6:21:fc:51:8c:74:60:bd:d5: 4f:3c:07:12:e1:06:6a:9a:5b:39:43:3a:f1:26:fd:ca:af:37: ce:99:40:42:67:23:1b:36:cc:4a:a5:01:69:af:5c:78:a6:14: eb:ff:78:5f:2a:80:32:37:44:08:7f:d7:25:16:5f:dd:2e:37: 9f:9b:79:13:e2:ec:e1:c9:8c:e1:a9:9b:15:bc:ea:e2:9f:1d: 8e:a3:a9:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF9fNGL/cb96g5w59i/XVPwEf7XgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1NDY4 QkFGNzM5RTAeFw0yNTA2MjgxODM3MDFaFw0yNTA3MDIwNTEwMDFaMDMxMTAvBgNV BAMTKDlBNUZFQUQxMUEyMDg4NjFCNjI4MUQ1MjdGNEI1RDY4Mjc0REEwNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXAsSyQnE0diLAT/ky4VwPyAnW KkxEcowp8n3KXOE/AkiMO8xlmQ4OdvLiS7Fr9xy78p8p7Ye0Oq8p1jIpMrymg/C+ C9SnhDdwOrdyPcZofCR+X8eH2I4LhHlk0Fcmf9bD7BpV7CYDP3jqxesX8IAhD7r2 kyKnvLj+Utjn1BNxzQ7bdCLNhEJMCBmUg5maS5RSjNCVJ7E3GmSTbgAJgQQnO9yV fU9oFfHxLqo+s3OBGxnR/VaF3J4ZHUcIV+RPOgYh46ELJ76g4B6vRJHZybGUi1tL 31IPZcr5cBa6bVh9Y8ezrG5Fvu4LS3NwlLlGyzIs4bXqspc64NsClU12E9XlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUml/q0RogiGG2KB1Sf0tdaCdNoEMwHwYDVR0j BBgwFoAU5MM/+kJQRtBE5/UDrIBlRouvc54wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDk3NmUyNi05NTEzLTQ4ZmYtOWY3Zi1lYTNmZGNmM2UyZTgvMC9FNEMzM0ZGQTQy NTA0NkQwNDRFN0Y1MDNBQzgwNjU0NjhCQUY3MzlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1NDY4QkFG NzM5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA5NzZlMjYtOTUxMy00OGZmLTlm N2YtZWEzZmRjZjNlMmU4LzAvRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1 NDY4QkFGNzM5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEI2Uhc3yXJ5oFhx1OjpsrNm6unqR7jsPR4a IuJUsQJPqYWup+RkGV/fLnE4nO6CrNQHhGYTyObGcVZozTvA/0TmDJz2N2bb5uf0 Id6v1fmaqqgEyov4K1dlevEOVUlBDBBoq2jnCclNQsxvAa/Rj2wDmbUrj/YSfO1z fx65lzQ47KqisWqs48bJORmMz6lf8MUtf9q2x798dl9rFKIocdFor694U+0xdsvk +KYh/FGMdGC91U88BxLhBmqaWzlDOvEm/cqvN86ZQEJnIxs2zEqlAWmvXHimFOv/ eF8qgDI3RAh/1yUWX90uN5+beRPi7OHJjOGpmxW86uKfHY6jqYA= -----END CERTIFICATE-----Generated at Sun Jun 29 18:35:44 2025 by rpki-client