$ rpki-client -vvf repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.mft File: E377371E82C6C53C7A5796B49B085190AFB64B4C.mft (raw, json) Hash identifier: AR/Swuf3AMpFbdVqulr5fKUEZk6FzNvMRrRFVsCFr9E= Subject key identifier: 5D:8C:0C:3A:C2:47:F2:AC:77:20:48:BA:B5:2C:69:BA:60:3C:55:99 Authority key identifier: E3:77:37:1E:82:C6:C5:3C:7A:57:96:B4:9B:08:51:90:AF:B6:4B:4C Certificate issuer: /CN=E377371E82C6C53C7A5796B49B085190AFB64B4C Certificate serial: 647F7DE667E296530F1B02DF77DCDC77223036DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E377371E82C6C53C7A5796B49B085190AFB64B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.mft Manifest number: 0185 Signing time: Sat 19 Jul 2025 11:01:42 +0000 Manifest this update: Sat 19 Jul 2025 10:56:42 +0000 Manifest next update: Tue 22 Jul 2025 21:32:42 +0000 Files and hashes: 1: 3130332e38392e3234322e302f32342d3234203d3e20313530393133.roa (hash: Wq0HxmVMzepldSWl2tLo0jkVOCM3LQ2XSCQDbU6pmew=) 2: E377371E82C6C53C7A5796B49B085190AFB64B4C.crl (hash: MhuElfb53ZGO+2cT7eS33GgetPENSbXRfTemGSZRR90=) 3: 3130332e38392e3234332e302f32342d3234203d3e20313530393133.roa (hash: otr3kFi0uUngcjSenFt7w7igUVSs51cTPJ2XyknCg2A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.crl rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E377371E82C6C53C7A5796B49B085190AFB64B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 21:32:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:7f:7d:e6:67:e2:96:53:0f:1b:02:df:77:dc:dc:77:22:30:36:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E377371E82C6C53C7A5796B49B085190AFB64B4C Validity Not Before: Jul 19 10:56:42 2025 GMT Not After : Jul 22 21:32:42 2025 GMT Subject: CN=5D8C0C3AC247F2AC772048BAB52C69BA603C5599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:09:b3:9d:4d:56:0f:3b:f9:3b:d6:62:13:67: 79:ae:28:2d:ee:52:f8:d5:14:a5:db:c7:22:ba:d0: a0:15:e3:ee:b5:44:f1:b1:3d:31:69:31:26:5f:31: dd:8f:0e:1a:94:5f:dd:15:91:9a:b2:1f:97:87:2c: d4:cd:f3:d3:0e:4b:46:df:73:f0:d1:b2:4a:7f:4b: 58:d1:6c:c3:be:ca:35:48:79:d1:f6:d2:27:93:9c: b5:2c:9a:f7:3c:22:11:d0:89:d1:d2:54:19:fa:1f: c9:ff:bc:22:c2:7a:e9:ad:23:ea:f1:9d:11:c0:3b: 5d:c9:9a:0e:f8:ae:a0:3d:c2:cb:49:8b:be:e2:a2: 11:34:93:fb:48:6a:6c:3f:26:31:61:da:d4:db:88: 35:6c:5e:76:0f:07:ae:64:d6:b7:8d:f7:32:cc:8c: 9d:dc:06:dd:b2:2f:80:f2:35:2b:3f:1e:4a:05:11: 98:5f:48:9d:f7:9e:ab:90:d7:8c:ce:9e:8d:4a:78: 83:9c:29:3b:80:3f:bb:7d:da:5c:1c:a5:c9:d3:5a: b1:e5:53:1f:2c:bd:77:95:14:d5:03:cb:8a:b7:e6: 74:fd:34:ef:a8:a9:6a:94:5f:0b:44:33:f8:f0:9a: 17:cc:3d:b4:7e:a8:21:5d:d3:25:c7:da:a9:0f:0a: f4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:8C:0C:3A:C2:47:F2:AC:77:20:48:BA:B5:2C:69:BA:60:3C:55:99 X509v3 Authority Key Identifier: keyid:E3:77:37:1E:82:C6:C5:3C:7A:57:96:B4:9B:08:51:90:AF:B6:4B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E377371E82C6C53C7A5796B49B085190AFB64B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:89:db:83:fd:23:f5:99:68:1e:10:b4:69:7c:a5:7a:43:05: ae:80:aa:ed:51:4a:8a:9b:46:39:f1:ee:e4:28:8a:e5:89:3a: 73:4d:b4:ca:9b:d3:df:16:4c:ea:4b:b7:64:e5:d3:b2:75:10: 44:69:03:9e:57:57:34:13:a1:f1:5f:8e:63:aa:48:fd:a4:9c: 33:a3:d2:e1:a3:8a:0a:c3:37:21:2b:ba:ac:88:29:52:a3:46: 4b:44:1a:c1:04:0c:32:8a:ad:93:6c:9c:2e:b2:9e:36:2b:6e: d9:a1:a3:72:d8:2b:e5:4a:d0:94:5b:87:b4:15:8f:a0:81:a8: c5:c4:10:62:71:30:11:c1:28:a3:25:b0:b8:7a:59:ba:e6:4d: 30:73:1f:7b:89:c3:80:9d:a6:93:5f:47:22:8e:75:20:a2:97: 89:fd:1e:5c:01:5b:9f:cd:51:12:fc:fc:59:70:ec:2e:bd:ef: 75:c5:6a:36:40:43:ba:d0:fd:ef:66:cd:76:63:6b:83:f9:5b: 28:bd:cb:0b:ab:20:5a:f0:ab:db:6c:b1:d8:2c:e3:e8:01:77: ae:cc:f5:89:74:3a:f0:15:4a:45:43:ec:6a:0c:e5:5b:c7:21: f4:e6:57:32:30:82:d1:ae:70:02:28:60:57:d7:bb:f6:ce:32: f8:71:2e:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZH995mfillMPGwLfd9zcdyIwNt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM3NzM3MUU4MkM2QzUzQzdBNTc5NkI0OUIwODUxOTBB RkI2NEI0QzAeFw0yNTA3MTkxMDU2NDJaFw0yNTA3MjIyMTMyNDJaMDMxMTAvBgNV BAMTKDVEOEMwQzNBQzI0N0YyQUM3NzIwNDhCQUI1MkM2OUJBNjAzQzU1OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZCbOdTVYPO/k71mITZ3muKC3u UvjVFKXbxyK60KAV4+61RPGxPTFpMSZfMd2PDhqUX90VkZqyH5eHLNTN89MOS0bf c/DRskp/S1jRbMO+yjVIedH20ieTnLUsmvc8IhHQidHSVBn6H8n/vCLCeumtI+rx nRHAO13Jmg74rqA9wstJi77iohE0k/tIamw/JjFh2tTbiDVsXnYPB65k1reN9zLM jJ3cBt2yL4DyNSs/HkoFEZhfSJ33nquQ14zOno1KeIOcKTuAP7t92lwcpcnTWrHl Ux8svXeVFNUDy4q35nT9NO+oqWqUXwtEM/jwmhfMPbR+qCFd0yXH2qkPCvTVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXYwMOsJH8qx3IEi6tSxpumA8VZkwHwYDVR0j BBgwFoAU43c3HoLGxTx6V5a0mwhRkK+2S0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTMzMDg3Ni03ZTY4LTQ3MDctYTUzZC05MmJiZmRiMmYyM2MvMC9FMzc3MzcxRTgy QzZDNTNDN0E1Nzk2QjQ5QjA4NTE5MEFGQjY0QjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM3NzM3MUU4MkM2QzUzQzdBNTc5NkI0OUIwODUxOTBBRkI2 NEI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGUzMzA4NzYtN2U2OC00NzA3LWE1 M2QtOTJiYmZkYjJmMjNjLzAvRTM3NzM3MUU4MkM2QzUzQzdBNTc5NkI0OUIwODUx OTBBRkI2NEI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANmJ24P9I/WZaB4QtGl8pXpDBa6Aqu1RSoqb Rjnx7uQoiuWJOnNNtMqb098WTOpLt2Tl07J1EERpA55XVzQTofFfjmOqSP2knDOj 0uGjigrDNyEruqyIKVKjRktEGsEEDDKKrZNsnC6ynjYrbtmho3LYK+VK0JRbh7QV j6CBqMXEEGJxMBHBKKMlsLh6WbrmTTBzH3uJw4CdppNfRyKOdSCil4n9HlwBW5/N URL8/Flw7C6973XFajZAQ7rQ/e9mzXZja4P5Wyi9ywurIFrwq9tssdgs4+gBd67M 9Yl0OvAVSkVD7GoM5VvHIfTmVzIwgtGucAIoYFfXu/bOMvhxLjE= -----END CERTIFICATE-----Generated at Sun Jul 20 21:24:22 2025 by rpki-client