$ rpki-client -vvf repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft File: EC973BE13EF324E7D59046CF7690A12F9DF12932.mft (raw, json) Hash identifier: eHd6GoMrPzAYx3nabVWo9S50PCBMzZ/72zpRsU1P92c= Subject key identifier: 63:95:91:8D:DF:66:F0:72:D4:6A:37:1E:AE:4D:ED:B7:01:B4:D7:FE Authority key identifier: EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 Certificate issuer: /CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Certificate serial: 5E646E5FBE10F1D90D8E315373BC599B4DAB3A8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft Manifest number: 0240 Signing time: Sat 23 Aug 2025 14:01:19 +0000 Manifest this update: Sat 23 Aug 2025 13:56:19 +0000 Manifest next update: Wed 27 Aug 2025 01:53:19 +0000 Files and hashes: 1: EC973BE13EF324E7D59046CF7690A12F9DF12932.crl (hash: r+7XQmF77nYTsEQ+S1VMLdaUEomskV9V4RsQR16YCtw=) 2: 3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (hash: Fd7yVNtVPCM6piUfSXh9X3JKHqUDZdjbopzWmm3ObMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 23:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:64:6e:5f:be:10:f1:d9:0d:8e:31:53:73:bc:59:9b:4d:ab:3a:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Validity Not Before: Aug 23 13:56:19 2025 GMT Not After : Aug 27 01:53:19 2025 GMT Subject: CN=6395918DDF66F072D46A371EAE4DEDB701B4D7FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:39:6a:08:89:ee:74:9c:c6:17:19:27:62:52: cb:45:3e:64:b7:06:24:8b:a6:cd:88:b5:ac:d9:88: 69:00:f9:0a:4e:85:a7:b3:e2:39:02:36:67:3f:99: 50:24:b1:08:ac:00:e4:21:c0:b3:c1:eb:a9:20:e8: 53:44:ac:89:07:e6:b2:b8:66:c7:76:aa:3d:4b:fd: d7:5d:8d:2f:77:03:ac:44:c0:17:f9:0f:b9:0a:16: ec:c8:20:c5:ce:ff:cd:7e:0b:26:3a:79:8a:2c:2f: bd:19:2c:af:96:f7:2d:63:20:9a:74:19:23:79:4e: df:32:b8:1d:dc:6b:d9:77:ea:c8:77:06:fd:e5:e4: 91:09:c4:3a:1f:89:3c:ec:19:d8:e8:a4:58:44:6b: b0:b5:a2:d1:04:5f:83:b1:17:8e:d5:5a:c1:d2:67: fd:ba:d1:a4:aa:72:6f:a5:22:f1:98:ff:9f:d0:55: 5e:db:93:fc:f9:5d:bb:52:d9:4d:6b:e9:2b:4a:a7: 68:41:04:5d:90:a1:c3:b9:24:40:45:01:3e:b8:06: ec:14:f5:7c:15:e5:b8:25:48:63:1e:63:dd:ec:af: 86:84:9b:b4:96:1f:d6:37:d5:65:46:b0:fd:f9:4b: 31:1b:5a:eb:3d:fc:13:b1:87:62:2e:38:34:ca:6f: 81:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:95:91:8D:DF:66:F0:72:D4:6A:37:1E:AE:4D:ED:B7:01:B4:D7:FE X509v3 Authority Key Identifier: keyid:EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:2e:2a:0d:c5:cb:7f:13:92:bd:1b:45:ca:77:28:f8:55:06: b5:c3:39:8c:20:11:4e:e2:62:d3:eb:68:8f:f3:b1:d0:59:de: c0:89:1e:a2:f5:2f:a5:41:60:93:39:8e:22:d8:5a:d0:70:e0: 69:ac:77:33:58:88:df:20:f8:ab:02:34:56:3b:c2:de:ff:c5: 3c:5e:b6:7f:4f:cd:49:9b:1c:9b:46:55:2c:1e:12:25:9a:57: d8:62:60:f8:6c:c9:2e:e3:72:58:a1:ae:d1:27:66:10:91:c0: 68:c6:54:4d:a5:af:0a:a0:61:8a:b8:8e:70:9a:ae:25:30:47: 1b:9d:de:e0:ff:dd:9f:2b:cb:4d:22:c5:86:f8:8d:8c:9a:ae: e1:77:88:ba:f6:2c:7f:54:9a:1d:49:25:8c:24:64:cd:41:f7: 4a:eb:d0:ea:64:62:e2:80:51:76:0b:8b:cd:2e:a1:bf:a8:0c: 9f:8a:7b:0b:26:3e:07:c8:f8:ce:45:cd:97:13:34:c5:17:66: 40:34:e9:09:37:90:f2:8b:a0:7d:33:c8:34:fc:49:1e:d3:06: a3:1b:de:e4:ce:0c:84:93:36:df:4f:22:6d:5a:cd:ee:58:81: 2f:47:db:c8:8f:26:50:22:b7:93:89:65:03:e2:db:13:b6:e1: 8e:41:72:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXmRuX74Q8dkNjjFTc7xZm02rOo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5 REYxMjkzMjAeFw0yNTA4MjMxMzU2MTlaFw0yNTA4MjcwMTUzMTlaMDMxMTAvBgNV BAMTKDYzOTU5MThEREY2NkYwNzJENDZBMzcxRUFFNERFREI3MDFCNEQ3RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8OWoIie50nMYXGSdiUstFPmS3 BiSLps2ItazZiGkA+QpOhaez4jkCNmc/mVAksQisAOQhwLPB66kg6FNErIkH5rK4 Zsd2qj1L/dddjS93A6xEwBf5D7kKFuzIIMXO/81+CyY6eYosL70ZLK+W9y1jIJp0 GSN5Tt8yuB3ca9l36sh3Bv3l5JEJxDofiTzsGdjopFhEa7C1otEEX4OxF47VWsHS Z/260aSqcm+lIvGY/5/QVV7bk/z5XbtS2U1r6StKp2hBBF2QocO5JEBFAT64BuwU 9XwV5bglSGMeY93sr4aEm7SWH9Y31WVGsP35SzEbWus9/BOxh2IuODTKb4ELAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY5WRjd9m8HLUajcerk3ttwG01/4wHwYDVR0j BBgwFoAU7Jc74T7zJOfVkEbPdpChL53xKTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTFjYmQ3OS04ZjI2LTRiMGUtOGIzYi1hYjllOTkzOGZjYWUvMC9FQzk3M0JFMTNF RjMyNEU3RDU5MDQ2Q0Y3NjkwQTEyRjlERjEyOTMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5REYx MjkzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmUxY2JkNzktOGYyNi00YjBlLThi M2ItYWI5ZTk5MzhmY2FlLzAvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEEx MkY5REYxMjkzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8uKg3Fy38Tkr0bRcp3KPhVBrXDOYwgEU7i YtPraI/zsdBZ3sCJHqL1L6VBYJM5jiLYWtBw4GmsdzNYiN8g+KsCNFY7wt7/xTxe tn9PzUmbHJtGVSweEiWaV9hiYPhsyS7jclihrtEnZhCRwGjGVE2lrwqgYYq4jnCa riUwRxud3uD/3Z8ry00ixYb4jYyaruF3iLr2LH9Umh1JJYwkZM1B90rr0OpkYuKA UXYLi80uob+oDJ+KewsmPgfI+M5FzZcTNMUXZkA06Qk3kPKLoH0zyDT8SR7TBqMb 3uTODISTNt9PIm1aze5YgS9H28iPJlAit5OJZQPi2xO24Y5Bcpo= -----END CERTIFICATE-----Generated at Sat Aug 23 17:40:40 2025 by rpki-client