$ rpki-client -vvf repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft File: E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft (raw, json) Hash identifier: y6HHGdaK4DUdybFOf0SNettQd2ECsdsXGF821xG7wjg= Subject key identifier: 97:9B:B7:63:C3:43:89:84:15:40:3C:66:6E:FE:0E:D7:C4:00:50:2B Authority key identifier: E7:DC:BB:5E:91:2C:56:AB:C8:9C:BB:C8:FA:42:B5:E6:3D:15:2A:F4 Certificate issuer: /CN=E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4 Certificate serial: 6AED63D72479AFF43708E8E922424140F04F04A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft Manifest number: 04F4 Signing time: Sat 19 Jul 2025 05:32:17 +0000 Manifest this update: Sat 19 Jul 2025 05:27:17 +0000 Manifest next update: Tue 22 Jul 2025 08:00:17 +0000 Files and hashes: 1: E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl (hash: I9ebs+DwWjB5RYmEJkEV/vQMRSdBXl08vqciqS/YH9Q=) 2: 3130332e3133392e3138362e302f32342d3234203d3e20313338383634.roa (hash: hCqKQAmBft8A8taUBcT8sOYve7SjkWXpgzjj9NA6B/s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 08:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ed:63:d7:24:79:af:f4:37:08:e8:e9:22:42:41:40:f0:4f:04:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4 Validity Not Before: Jul 19 05:27:17 2025 GMT Not After : Jul 22 08:00:17 2025 GMT Subject: CN=979BB763C343898415403C666EFE0ED7C400502B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f9:fe:63:dd:d5:69:5b:59:40:f0:9f:ee:ff: 35:d5:34:0b:a3:77:80:29:fc:ae:7b:47:e9:ce:2e: 51:b5:dd:b4:97:2b:78:4d:64:55:e5:d2:8f:33:8a: a4:c2:2a:f1:45:6e:2d:99:09:36:9c:67:10:e2:89: 91:ad:44:39:c3:a2:e7:c1:c8:b5:9d:d0:5d:ab:7e: 95:05:9e:cd:b6:73:9c:68:34:f2:41:22:28:76:56: 28:61:6a:6f:ed:c0:75:f8:d8:85:36:9a:5a:12:1b: 85:f7:ac:72:4c:fb:46:9f:1c:a2:b9:ee:49:f8:42: 56:1c:7b:73:c4:dc:8c:24:57:31:81:b2:0e:f0:9b: 0e:d0:ec:fc:3b:fe:ca:23:21:3f:5c:7d:7d:01:cc: 4e:34:17:f2:fd:9b:15:19:99:cb:01:c5:c2:50:6d: 92:d9:19:00:e3:60:95:a8:98:db:be:0c:1b:4e:00: 83:e5:24:95:a3:59:c1:3c:1f:a9:a0:0c:91:c2:be: 21:fd:fd:4f:0f:a3:47:62:75:ae:53:1f:0e:54:84: 55:dd:a6:62:0e:5d:42:e3:89:cb:6e:ce:57:d8:3f: c9:4a:9d:0a:27:bf:34:e0:01:a4:d9:90:67:7a:e4: 5f:36:05:a7:f4:ff:aa:77:7a:44:8f:02:cc:4d:34: c5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:9B:B7:63:C3:43:89:84:15:40:3C:66:6E:FE:0E:D7:C4:00:50:2B X509v3 Authority Key Identifier: keyid:E7:DC:BB:5E:91:2C:56:AB:C8:9C:BB:C8:FA:42:B5:E6:3D:15:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:06:96:19:5c:e3:b5:6c:fc:ae:16:b8:97:13:90:d2:89:21: fc:cf:10:97:81:1f:82:a4:1e:d1:95:fe:5a:56:ea:43:71:96: 28:67:96:93:76:8d:eb:5e:3b:dd:56:7a:0b:f2:d9:42:ff:eb: a8:c9:db:53:3a:14:49:d2:4d:5c:38:a5:2d:ea:8a:c9:0e:97: 7b:55:b0:78:99:9d:77:76:65:02:3f:dc:d5:cf:e0:5e:9b:a1: fc:9b:09:6d:5e:2e:9f:58:27:27:63:6c:0f:6d:e4:0a:4b:00: 34:ba:50:82:82:77:67:0e:3a:ad:88:ee:1f:31:38:f5:78:4c: 4d:6f:8f:9f:f1:35:c2:88:0b:f1:32:03:c4:50:8f:ec:1c:e3: 4c:dc:b4:38:8e:96:ae:d4:a7:43:1c:94:ab:9b:da:f7:38:79: 6b:97:21:09:82:ff:d9:aa:65:09:c4:24:56:86:6e:79:29:59: 87:2c:a0:82:e4:62:01:80:e1:24:7f:7f:2f:39:0e:da:5b:3e: cf:11:bc:84:e6:e5:37:64:4a:2e:3a:89:26:b6:03:1c:3e:a9: 20:44:38:25:eb:e8:5b:0c:39:3a:6c:23:ee:eb:0f:8c:09:58: a3:8d:e7:97:52:8d:8e:25:ac:29:8f:cb:c8:60:68:e1:de:fd: 3a:e7:cb:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUau1j1yR5r/Q3COjpIkJBQPBPBKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdEQ0JCNUU5MTJDNTZBQkM4OUNCQkM4RkE0MkI1RTYz RDE1MkFGNDAeFw0yNTA3MTkwNTI3MTdaFw0yNTA3MjIwODAwMTdaMDMxMTAvBgNV BAMTKDk3OUJCNzYzQzM0Mzg5ODQxNTQwM0M2NjZFRkUwRUQ3QzQwMDUwMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi+f5j3dVpW1lA8J/u/zXVNAuj d4Ap/K57R+nOLlG13bSXK3hNZFXl0o8ziqTCKvFFbi2ZCTacZxDiiZGtRDnDoufB yLWd0F2rfpUFns22c5xoNPJBIih2Vihham/twHX42IU2mloSG4X3rHJM+0afHKK5 7kn4QlYce3PE3IwkVzGBsg7wmw7Q7Pw7/sojIT9cfX0BzE40F/L9mxUZmcsBxcJQ bZLZGQDjYJWomNu+DBtOAIPlJJWjWcE8H6mgDJHCviH9/U8Po0dida5THw5UhFXd pmIOXULjictuzlfYP8lKnQonvzTgAaTZkGd65F82Baf0/6p3ekSPAsxNNMUVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl5u3Y8NDiYQVQDxmbv4O18QAUCswHwYDVR0j BBgwFoAU59y7XpEsVqvInLvI+kK15j0VKvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDM1OGIwMC0zMWNkLTQxYTMtOTUzNi1kYmIxOTNlN2Y0ZDAvMC9FN0RDQkI1RTkx MkM1NkFCQzg5Q0JCQzhGQTQyQjVFNjNEMTUyQUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdEQ0JCNUU5MTJDNTZBQkM4OUNCQkM4RkE0MkI1RTYzRDE1 MkFGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQzNThiMDAtMzFjZC00MWEzLTk1 MzYtZGJiMTkzZTdmNGQwLzAvRTdEQ0JCNUU5MTJDNTZBQkM4OUNCQkM4RkE0MkI1 RTYzRDE1MkFGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcGlhlc47Vs/K4WuJcTkNKJIfzPEJeBH4Kk HtGV/lpW6kNxlihnlpN2jeteO91Wegvy2UL/66jJ21M6FEnSTVw4pS3qiskOl3tV sHiZnXd2ZQI/3NXP4F6bofybCW1eLp9YJydjbA9t5ApLADS6UIKCd2cOOq2I7h8x OPV4TE1vj5/xNcKIC/EyA8RQj+wc40zctDiOlq7Up0MclKub2vc4eWuXIQmC/9mq ZQnEJFaGbnkpWYcsoILkYgGA4SR/fy85DtpbPs8RvITm5TdkSi46iSa2Axw+qSBE OCXr6FsMOTpsI+7rD4wJWKON55dSjY4lrCmPy8hgaOHe/Trny3s= -----END CERTIFICATE-----Generated at Mon Jul 21 08:59:34 2025 by rpki-client