$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft File: E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft (raw, json) Hash identifier: N7IcMadLblJt4nYffCqYyH+DElNtXP/Lp1d/pGgh9oU= Subject key identifier: EF:B6:C9:70:F0:D6:A5:31:A8:1C:3C:B6:55:3E:4F:2F:06:27:F5:0D Authority key identifier: E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1 Certificate issuer: /CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1 Certificate serial: 5E2AF0C9A3953C0AE1126A374C479C509B3D9851 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft Manifest number: 02B3 Signing time: Sun 20 Jul 2025 00:42:20 +0000 Manifest this update: Sun 20 Jul 2025 00:37:20 +0000 Manifest next update: Wed 23 Jul 2025 04:11:20 +0000 Files and hashes: 1: E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl (hash: yRH090q0HPCdbGterU3TP83sbcagNbM2npeHN3gdaC4=) 2: 3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa (hash: MJveUDHHKCs24S4XkZveJi95FO/ZRzpAvr7f8xFl65E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 04:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:2a:f0:c9:a3:95:3c:0a:e1:12:6a:37:4c:47:9c:50:9b:3d:98:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1 Validity Not Before: Jul 20 00:37:20 2025 GMT Not After : Jul 23 04:11:20 2025 GMT Subject: CN=EFB6C970F0D6A531A81C3CB6553E4F2F0627F50D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:10:e0:d1:c3:b6:a5:8e:63:2d:61:c0:f3:88: 88:3a:99:94:67:3e:0b:f6:5e:c4:0c:e7:72:c2:80: df:4b:cb:ec:98:8e:ab:16:19:53:5c:cc:a1:aa:a6: be:7f:c2:4d:86:2e:23:90:5d:21:5c:6e:0c:2b:58: 55:2c:03:0f:61:4b:d7:e6:2b:6a:72:f2:dc:c1:fa: 91:cd:bd:34:d2:02:42:29:97:08:66:91:00:67:8b: 74:f5:36:31:9e:99:ab:03:6b:02:1b:b7:0f:db:a5: 7f:fa:3d:4f:63:d6:44:78:0b:b0:74:0b:10:d3:ce: ae:e1:17:63:64:9a:36:7f:bf:b9:d1:53:8c:0d:48: 96:31:6a:c1:9b:02:cc:70:04:f4:54:57:c8:c4:66: 51:0f:69:cc:63:4a:31:d4:a4:3e:4d:44:54:91:8b: af:c7:79:57:53:bf:c9:18:76:24:38:28:ad:9f:72: 70:11:d1:17:9e:8d:f5:48:e2:3b:e1:a9:9c:9d:3c: 53:bc:28:64:fc:70:91:bc:fc:15:42:e1:a6:66:b1: fb:d0:4e:38:45:dc:af:23:82:e0:8a:b9:99:8e:11: 2c:0a:f2:3a:d8:7e:ec:8d:74:0e:e9:51:a8:3c:f1: 3b:a3:2e:66:49:21:be:af:5d:35:b0:79:83:f7:9e: cd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B6:C9:70:F0:D6:A5:31:A8:1C:3C:B6:55:3E:4F:2F:06:27:F5:0D X509v3 Authority Key Identifier: keyid:E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:83:0c:a7:67:19:e1:1f:de:d4:dd:51:52:d0:24:b6:8f:17: 77:1a:25:57:75:16:53:52:81:a5:a8:1e:62:f8:91:a4:83:ae: 8b:aa:12:e4:4a:d2:d3:bd:82:86:67:d8:dd:e5:a0:7c:f8:5f: bd:b2:10:4e:78:8c:9f:1d:e1:69:1c:d2:9e:df:66:fb:64:c5: 12:b3:a7:cd:53:1c:a6:b7:b2:45:32:bd:fb:3b:39:3e:0e:26: 31:86:90:b3:e4:6a:02:dc:f0:c6:26:1b:2e:98:ee:c1:e3:b6: e1:84:b5:5a:cc:5e:63:a7:00:25:51:5a:a9:8a:4a:d1:90:69: 20:e1:e7:b5:f5:03:75:75:3b:08:5a:8f:f0:a7:96:40:79:dc: be:8b:82:85:d3:24:8a:5b:81:a3:52:44:1f:01:ac:1d:f4:29: 4a:c5:54:69:f5:64:87:bc:87:1d:6a:5d:58:aa:5a:15:af:40: b6:b1:9b:ce:27:6c:fe:b6:a2:46:75:ef:1f:cf:0e:f1:14:84: 24:d2:d6:b6:7e:a6:0b:7a:d4:84:58:37:a0:81:b0:92:e1:64: 62:86:5d:65:0a:56:73:27:c4:14:e5:57:3f:9f:de:87:51:e1: 99:57:98:44:fe:96:c5:46:16:ee:a4:cf:d9:7a:0d:70:69:e3: 4e:57:7b:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXirwyaOVPArhEmo3TEecUJs9mFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAxNEU2RUQwMzUzN0U0NTM1NjVEMDZFN0I4QTMxQUE4 QTA1MjVBMTAeFw0yNTA3MjAwMDM3MjBaFw0yNTA3MjMwNDExMjBaMDMxMTAvBgNV BAMTKEVGQjZDOTcwRjBENkE1MzFBODFDM0NCNjU1M0U0RjJGMDYyN0Y1MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwEODRw7aljmMtYcDziIg6mZRn Pgv2XsQM53LCgN9Ly+yYjqsWGVNczKGqpr5/wk2GLiOQXSFcbgwrWFUsAw9hS9fm K2py8tzB+pHNvTTSAkIplwhmkQBni3T1NjGemasDawIbtw/bpX/6PU9j1kR4C7B0 CxDTzq7hF2NkmjZ/v7nRU4wNSJYxasGbAsxwBPRUV8jEZlEPacxjSjHUpD5NRFSR i6/HeVdTv8kYdiQ4KK2fcnAR0ReejfVI4jvhqZydPFO8KGT8cJG8/BVC4aZmsfvQ TjhF3K8jguCKuZmOESwK8jrYfuyNdA7pUag88TujLmZJIb6vXTWweYP3ns2zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU77bJcPDWpTGoHDy2VT5PLwYn9Q0wHwYDVR0j BBgwFoAU4BTm7QNTfkU1ZdBue4oxqooFJaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmIyOTM3OC00NWYwLTQ5ZDMtYTZhZi01NzNiZTdkY2E2ZDAvMC9FMDE0RTZFRDAz NTM3RTQ1MzU2NUQwNkU3QjhBMzFBQThBMDUyNUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAxNEU2RUQwMzUzN0U0NTM1NjVEMDZFN0I4QTMxQUE4QTA1 MjVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJiMjkzNzgtNDVmMC00OWQzLWE2 YWYtNTczYmU3ZGNhNmQwLzAvRTAxNEU2RUQwMzUzN0U0NTM1NjVEMDZFN0I4QTMx QUE4QTA1MjVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHeDDKdnGeEf3tTdUVLQJLaPF3caJVd1FlNS gaWoHmL4kaSDrouqEuRK0tO9goZn2N3loHz4X72yEE54jJ8d4Wkc0p7fZvtkxRKz p81THKa3skUyvfs7OT4OJjGGkLPkagLc8MYmGy6Y7sHjtuGEtVrMXmOnACVRWqmK StGQaSDh57X1A3V1Owhaj/CnlkB53L6LgoXTJIpbgaNSRB8BrB30KUrFVGn1ZIe8 hx1qXViqWhWvQLaxm84nbP62okZ17x/PDvEUhCTS1rZ+pgt61IRYN6CBsJLhZGKG XWUKVnMnxBTlVz+f3odR4ZlXmET+lsVGFu6kz9l6DXBp405Xe6s= -----END CERTIFICATE-----Generated at Mon Jul 21 23:24:02 2025 by rpki-client