$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft File: E94D4099064713F1C3A5E211E817CFC2A40E6370.mft (raw, json) Hash identifier: EnYQLA9W+YtxpQ0H2nIDBzGZdmt5ftEyOrXzrX1HVD0= Subject key identifier: 61:00:A0:D4:F6:F6:C6:0C:06:B1:D7:1D:21:4D:30:53:95:B3:CA:C5 Authority key identifier: E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 Certificate issuer: /CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Certificate serial: 2D797D60A96238C9C67D28E301D147A61836F562 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft Manifest number: 019D Signing time: Sun 29 Jun 2025 00:31:26 +0000 Manifest this update: Sun 29 Jun 2025 00:26:26 +0000 Manifest next update: Wed 02 Jul 2025 06:46:26 +0000 Files and hashes: 1: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: Qay85z2tBE2gSsJ1As2R1DyRPFo67yuecJZbDwWzf5g=) 2: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: Qa9xNMpYcP+9pVUvEHAtgK4Z1jgnm3adWlqql9bkWPc=) 3: E94D4099064713F1C3A5E211E817CFC2A40E6370.crl (hash: Oi6J+aAXM7eJSkFYWlPnL6OXcdZ/7M5Eklikdzc6wB0=) 4: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: 3oRl4FLRpqbW8xFTv+6cj6QVd2OEB0Ox6NTFkqNqehI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 06:46:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:79:7d:60:a9:62:38:c9:c6:7d:28:e3:01:d1:47:a6:18:36:f5:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Validity Not Before: Jun 29 00:26:26 2025 GMT Not After : Jul 2 06:46:26 2025 GMT Subject: CN=6100A0D4F6F6C60C06B1D71D214D305395B3CAC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:db:67:e7:8a:bb:46:28:e2:69:69:59:de:6f: 32:b1:b6:ec:8e:6d:be:c7:19:66:37:17:ce:f7:8e: 15:51:b5:bf:4d:bd:dd:fc:d0:18:2d:e8:6d:0e:70: 54:c0:03:ca:dd:95:b1:1e:56:ea:77:15:13:12:c6: 4a:6f:dc:04:fa:b1:f7:79:00:0a:7d:9c:a8:0c:9d: ad:d6:e0:ec:33:a0:be:6a:cc:dd:4f:e5:c7:eb:ca: 91:f8:0e:ba:fe:e1:ac:be:76:e2:a1:d7:59:35:ba: bd:b8:66:c6:54:59:9f:c4:bc:4f:c4:65:0d:62:97: 16:78:7c:e8:5c:bd:2f:8a:1b:61:d1:b3:f7:26:c7: 8c:e5:65:74:77:3e:34:a7:86:e4:b8:30:5d:64:f4: 9c:70:58:51:30:05:1f:59:51:e1:1f:41:8c:2f:ba: 0b:7e:5a:34:d6:f7:7d:39:61:27:1f:9a:03:64:ba: 34:78:c8:31:44:0f:70:d2:27:47:29:34:88:65:bf: 27:7b:b0:c7:3a:3a:54:2f:71:07:39:5c:c2:1d:98: eb:29:5a:0f:7d:f3:7a:9a:7a:f1:1a:29:b6:28:6e: 77:b8:8d:90:e9:30:2a:69:8a:88:b8:eb:cd:f3:43: 74:dd:ee:c5:56:53:eb:b5:3a:25:58:68:fc:5f:4e: 52:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:00:A0:D4:F6:F6:C6:0C:06:B1:D7:1D:21:4D:30:53:95:B3:CA:C5 X509v3 Authority Key Identifier: keyid:E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:15:b4:1b:ea:f9:66:fa:ba:89:d7:d0:65:59:94:e8:a3:12: f2:2c:ce:15:b8:e3:6f:66:28:d6:ed:7e:d6:81:1e:93:a4:92: 29:22:4e:57:42:8c:b9:eb:b9:11:9e:a5:11:6d:43:c2:83:aa: 2b:dc:d0:ea:0e:3a:67:6f:10:e0:c5:e6:9d:12:e2:37:c4:84: f4:87:44:c2:31:1c:7e:42:f0:ad:98:60:c6:05:f6:19:2f:99: 22:9f:b0:2e:d8:59:4f:6a:a0:5e:48:72:6e:a7:39:c5:af:be: 1d:e2:31:56:2e:b1:30:ce:66:5b:51:0f:03:eb:3f:88:9e:9b: 01:62:36:45:17:5b:88:4d:7b:b7:7c:45:91:59:19:61:62:b3: 97:42:b2:e4:e9:76:3f:31:8c:86:72:7e:6f:f7:f5:23:ea:64: 9b:43:b0:93:13:1a:d2:b9:8a:44:82:12:e0:93:13:05:8a:46: b6:ee:d7:54:96:23:04:63:43:91:09:75:51:72:1f:49:d2:d7: 55:21:2c:e7:ba:09:b7:11:8d:6e:49:a0:f2:68:60:97:cd:4a: aa:bb:76:75:94:bc:bf:d1:a9:dc:a8:d3:15:aa:4c:64:9f:0d: 27:92:45:55:a3:65:9b:25:e4:b6:2d:4d:a7:e7:78:0f:e3:78: f6:30:81:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULXl9YKliOMnGfSjjAdFHphg29WIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJB NDBFNjM3MDAeFw0yNTA2MjkwMDI2MjZaFw0yNTA3MDIwNjQ2MjZaMDMxMTAvBgNV BAMTKDYxMDBBMEQ0RjZGNkM2MEMwNkIxRDcxRDIxNEQzMDUzOTVCM0NBQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC622fnirtGKOJpaVnebzKxtuyO bb7HGWY3F873jhVRtb9Nvd380Bgt6G0OcFTAA8rdlbEeVup3FRMSxkpv3AT6sfd5 AAp9nKgMna3W4OwzoL5qzN1P5cfrypH4Drr+4ay+duKh11k1ur24ZsZUWZ/EvE/E ZQ1ilxZ4fOhcvS+KG2HRs/cmx4zlZXR3PjSnhuS4MF1k9JxwWFEwBR9ZUeEfQYwv ugt+WjTW9305YScfmgNkujR4yDFED3DSJ0cpNIhlvyd7sMc6OlQvcQc5XMIdmOsp Wg9983qaevEaKbYobne4jZDpMCppioi4683zQ3Td7sVWU+u1OiVYaPxfTlIHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYQCg1Pb2xgwGsdcdIU0wU5WzysUwHwYDVR0j BBgwFoAU6U1AmQZHE/HDpeIR6BfPwqQOY3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhZTgyZi01MzdlLTQ2MjYtYmU5ZS0zMzM5NGEyZGM5NjkvMC9FOTRENDA5OTA2 NDcxM0YxQzNBNUUyMTFFODE3Q0ZDMkE0MEU2MzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJBNDBF NjM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YWU4MmYtNTM3ZS00NjI2LWJl OWUtMzMzOTRhMmRjOTY5LzAvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NG QzJBNDBFNjM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4VtBvq+Wb6uonX0GVZlOijEvIszhW4429m KNbtftaBHpOkkikiTldCjLnruRGepRFtQ8KDqivc0OoOOmdvEODF5p0S4jfEhPSH RMIxHH5C8K2YYMYF9hkvmSKfsC7YWU9qoF5Icm6nOcWvvh3iMVYusTDOZltRDwPr P4iemwFiNkUXW4hNe7d8RZFZGWFis5dCsuTpdj8xjIZyfm/39SPqZJtDsJMTGtK5 ikSCEuCTEwWKRrbu11SWIwRjQ5EJdVFyH0nS11UhLOe6CbcRjW5JoPJoYJfNSqq7 dnWUvL/Rqdyo0xWqTGSfDSeSRVWjZZsl5LYtTafneA/jePYwgRg= -----END CERTIFICATE-----Generated at Tue Jul 1 03:04:25 2025 by rpki-client