$ rpki-client -vvf repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft File: EC973BE13EF324E7D59046CF7690A12F9DF12932.mft (raw, json) Hash identifier: rA0K57gfLghQd3JkA9QYTWKPMdEgQ3yhTqFMylxOFtk= Subject key identifier: 66:7A:60:05:FB:EB:AC:A8:2C:E1:43:C4:65:DA:91:A9:27:35:B6:34 Authority key identifier: EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 Certificate issuer: /CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Certificate serial: 0C35B83A62327DB3DE88238A1B23801F69F20CFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft Manifest number: 0227 Signing time: Sat 28 Jun 2025 14:01:19 +0000 Manifest this update: Sat 28 Jun 2025 13:56:19 +0000 Manifest next update: Tue 01 Jul 2025 15:23:19 +0000 Files and hashes: 1: EC973BE13EF324E7D59046CF7690A12F9DF12932.crl (hash: 1kUpp86H8tD2CVYrbGgLrPMcyle7mQ7lI/faPAJN234=) 2: 3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (hash: Fd7yVNtVPCM6piUfSXh9X3JKHqUDZdjbopzWmm3ObMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 15:23:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:35:b8:3a:62:32:7d:b3:de:88:23:8a:1b:23:80:1f:69:f2:0c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Validity Not Before: Jun 28 13:56:19 2025 GMT Not After : Jul 1 15:23:19 2025 GMT Subject: CN=667A6005FBEBACA82CE143C465DA91A92735B634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:46:2a:f5:16:44:e7:61:7c:fd:5c:70:c7:f3: a2:e4:5b:97:a0:c8:d7:12:c1:66:97:ca:ad:6c:31: fe:4a:72:dc:49:4c:3c:58:c5:32:2f:b9:57:4a:53: c5:39:52:af:af:58:bf:84:bf:25:cf:96:3b:ff:5d: 65:69:63:28:9f:e7:eb:c8:c3:1b:50:5e:23:28:c6: 7a:1a:fe:d9:29:d0:1b:08:87:51:96:90:40:9e:14: 90:09:ef:00:3c:65:e1:29:aa:e1:42:d6:75:92:93: f4:17:f3:26:1a:58:a0:1f:c1:60:0f:ab:d8:b9:16: 8b:02:70:f1:2a:be:fc:5e:26:66:ae:09:3d:63:e2: fd:43:26:75:34:be:43:91:f7:54:6b:f8:d3:17:56: 33:f9:ab:f0:f2:0c:71:ad:a7:f6:7e:d1:05:e9:e6: 6a:86:07:6d:0d:e5:bb:ce:1f:4b:4e:d1:c8:c5:ea: 5a:e6:d3:c8:02:ab:83:06:ce:67:c3:19:95:e8:a0: 9a:9f:17:01:10:ca:ed:5b:a7:b0:92:3f:a0:47:31: a2:a5:29:a9:53:7c:66:85:bc:90:97:eb:50:d2:dc: 01:32:eb:34:29:87:14:c7:ea:2b:24:b8:be:75:5c: 5c:cf:d6:df:08:a6:89:b9:44:d4:61:b5:3c:dc:fc: 90:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7A:60:05:FB:EB:AC:A8:2C:E1:43:C4:65:DA:91:A9:27:35:B6:34 X509v3 Authority Key Identifier: keyid:EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:20:a2:ff:d1:e1:2e:e1:8a:1b:48:56:bc:a7:aa:e4:bd:3b: 52:b1:91:1d:f2:13:b5:bc:4d:84:a7:93:d2:3a:7f:a8:8b:6a: a0:60:77:a7:98:be:d3:2f:78:29:c9:a3:24:77:7a:e1:d5:08: 65:8e:04:ee:75:02:74:04:7a:37:1e:74:1f:14:9d:5d:28:de: 9c:93:12:5a:b1:a8:ee:e2:1a:c1:9a:dd:81:ff:10:b5:56:d8: 27:b4:d7:14:5e:37:3a:eb:4d:5e:0f:87:ad:5e:56:fe:1b:55: 1b:19:00:ad:46:25:f8:5b:af:0d:12:bb:1e:d9:9a:a3:f1:67: 4b:eb:d6:31:43:43:4a:be:25:92:e1:f5:06:33:f0:38:02:e6: c9:e5:c3:29:9f:1b:12:4f:39:1c:e6:50:5e:04:82:ec:22:0b: 8b:c0:2b:d1:82:aa:0a:c4:25:4f:be:b4:7c:ac:ed:db:e6:82: 2d:d3:e1:21:83:8c:30:9d:37:28:e0:cb:fc:52:88:6f:ba:69: e9:7e:36:e6:3c:96:f0:d4:cd:ed:2f:7a:77:9c:a2:49:9f:ea: e4:94:9d:35:00:3f:ef:05:50:be:b9:8d:11:98:05:f2:f0:73: 22:8f:03:e1:08:54:24:c5:87:c2:73:d5:9d:51:48:7d:b7:bc: 1b:4b:06:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDDW4OmIyfbPeiCOKGyOAH2nyDP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5 REYxMjkzMjAeFw0yNTA2MjgxMzU2MTlaFw0yNTA3MDExNTIzMTlaMDMxMTAvBgNV BAMTKDY2N0E2MDA1RkJFQkFDQTgyQ0UxNDNDNDY1REE5MUE5MjczNUI2MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Rir1FkTnYXz9XHDH86LkW5eg yNcSwWaXyq1sMf5KctxJTDxYxTIvuVdKU8U5Uq+vWL+EvyXPljv/XWVpYyif5+vI wxtQXiMoxnoa/tkp0BsIh1GWkECeFJAJ7wA8ZeEpquFC1nWSk/QX8yYaWKAfwWAP q9i5FosCcPEqvvxeJmauCT1j4v1DJnU0vkOR91Rr+NMXVjP5q/DyDHGtp/Z+0QXp 5mqGB20N5bvOH0tO0cjF6lrm08gCq4MGzmfDGZXooJqfFwEQyu1bp7CSP6BHMaKl KalTfGaFvJCX61DS3AEy6zQphxTH6iskuL51XFzP1t8Ipom5RNRhtTzc/JCJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZnpgBfvrrKgs4UPEZdqRqSc1tjQwHwYDVR0j BBgwFoAU7Jc74T7zJOfVkEbPdpChL53xKTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTFjYmQ3OS04ZjI2LTRiMGUtOGIzYi1hYjllOTkzOGZjYWUvMC9FQzk3M0JFMTNF RjMyNEU3RDU5MDQ2Q0Y3NjkwQTEyRjlERjEyOTMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5REYx MjkzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmUxY2JkNzktOGYyNi00YjBlLThi M2ItYWI5ZTk5MzhmY2FlLzAvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEEx MkY5REYxMjkzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4gov/R4S7hihtIVrynquS9O1KxkR3yE7W8 TYSnk9I6f6iLaqBgd6eYvtMveCnJoyR3euHVCGWOBO51AnQEejcedB8UnV0o3pyT ElqxqO7iGsGa3YH/ELVW2Ce01xReNzrrTV4Ph61eVv4bVRsZAK1GJfhbrw0Sux7Z mqPxZ0vr1jFDQ0q+JZLh9QYz8DgC5snlwymfGxJPORzmUF4EguwiC4vAK9GCqgrE JU++tHys7dvmgi3T4SGDjDCdNyjgy/xSiG+6ael+NuY8lvDUze0venecokmf6uSU nTUAP+8FUL65jRGYBfLwcyKPA+EIVCTFh8Jz1Z1RSH23vBtLBhE= -----END CERTIFICATE-----Generated at Mon Jun 30 00:38:17 2025 by rpki-client