$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft File: E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft (raw, json) Hash identifier: CPIkAXH4GD8lEu2jhsj66wIB5zRES0yiq1nTWhntYZw= Subject key identifier: 6A:10:5F:80:B1:C0:86:EC:89:34:45:45:8A:5E:06:1A:59:90:14:B1 Authority key identifier: E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 Certificate issuer: /CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Certificate serial: 1AD6823BA9CA88C0E723312BECAC5563B05DD220 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft Manifest number: AF Signing time: Mon 21 Jul 2025 05:52:06 +0000 Manifest this update: Mon 21 Jul 2025 05:47:06 +0000 Manifest next update: Thu 24 Jul 2025 07:48:06 +0000 Files and hashes: 1: 323030313a6466333a653563303a3a2f34382d3438203d3e20313532383231.roa (hash: pQCtNd2+RXtFnrSf+6sVuQqtxv0QiGcHuuERYnQ23YQ=) 2: E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl (hash: iNeqXWcYZqRDTd6fVv115HenJBnAscOcAXPeVB5aM7Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 07:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d6:82:3b:a9:ca:88:c0:e7:23:31:2b:ec:ac:55:63:b0:5d:d2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Validity Not Before: Jul 21 05:47:06 2025 GMT Not After : Jul 24 07:48:06 2025 GMT Subject: CN=6A105F80B1C086EC893445458A5E061A599014B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:81:af:d4:f9:b0:7e:ab:31:2d:8c:32:f7:7a: dc:b8:06:f1:fb:05:dc:a8:ca:57:e6:a2:f8:e9:7a: 6f:da:2c:1b:eb:ce:4e:48:9f:91:9b:52:c4:00:fa: b9:6d:02:ae:81:6f:6b:09:87:2c:fc:c2:ba:53:02: 8e:27:fc:75:32:2a:05:25:8b:95:b2:00:91:40:2c: 1e:74:2b:2c:5c:3e:9d:a0:26:c9:e2:2c:cc:95:b1: c8:55:b0:7b:cf:5d:0a:70:2f:d6:89:e8:4f:07:a2: f1:dd:ad:ab:67:59:f1:cd:6a:b6:0d:eb:c5:43:bf: 99:09:48:ae:22:b4:f4:20:18:08:dd:81:92:b0:8a: 53:18:12:4c:66:b8:3e:eb:07:eb:1e:51:d9:8b:96: 37:30:26:f7:71:60:4c:8b:56:09:33:c0:f3:d8:41: 0c:27:d0:1c:19:ca:6d:19:e2:7f:73:c4:aa:93:42: 84:59:a3:f6:69:e2:c4:d3:4b:37:35:f7:bf:72:1f: d0:01:50:fd:a5:d0:0f:d1:f0:16:c2:3c:e0:d4:c3: b1:d6:cd:83:b2:75:d4:04:19:5a:fd:8c:49:78:58: e4:02:ad:bb:be:21:c7:e4:67:27:b2:2c:45:7f:0e: 7f:34:9b:c0:7a:e4:91:31:fd:a1:aa:37:20:dc:72: f1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:10:5F:80:B1:C0:86:EC:89:34:45:45:8A:5E:06:1A:59:90:14:B1 X509v3 Authority Key Identifier: keyid:E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:67:07:62:99:65:6d:1e:91:50:1a:9c:b0:17:6f:7e:92:28: fa:46:88:ff:c6:44:0e:a6:7a:81:fb:03:d2:76:90:a8:72:40: 1a:e4:25:64:ef:4b:75:d1:bf:14:61:dd:4b:cd:3a:d0:8e:62: b8:b1:c4:c7:a6:a2:52:ee:18:b8:1d:56:b1:de:a3:38:18:b4: 3f:23:49:ea:3f:8f:1f:20:a0:42:c9:18:db:12:48:b0:0c:75: 73:7a:2f:d4:25:eb:2b:cf:a5:ae:a2:0d:31:de:a3:0d:9e:13: 61:74:84:3d:a8:f8:ce:80:1a:4b:87:7f:18:e5:9a:15:df:e0: e6:9c:dc:66:36:6f:80:99:09:d8:ac:20:bf:55:b9:d9:0d:ac: 3b:b4:08:3b:61:ef:f9:a3:a0:5a:cf:be:4f:9a:1e:b5:62:7f: 4e:db:76:79:87:aa:b9:81:ef:3e:52:da:d1:98:14:1f:43:a8: 9d:bc:8e:03:1e:04:63:ac:26:a8:58:eb:e1:5a:f2:5d:ed:7a: 3e:b8:de:5f:de:81:d9:1e:90:61:d5:45:9c:03:20:5a:f0:04: 65:54:8f:57:79:0d:82:bc:12:1b:54:d2:18:57:c5:36:d3:7a: 2d:9f:d5:bd:cc:e8:08:c5:2c:87:ae:14:0b:ad:de:d7:01:af: db:ff:ed:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGtaCO6nKiMDnIzEr7KxVY7Bd0iAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1 MTM2QzAwMjAeFw0yNTA3MjEwNTQ3MDZaFw0yNTA3MjQwNzQ4MDZaMDMxMTAvBgNV BAMTKDZBMTA1RjgwQjFDMDg2RUM4OTM0NDU0NThBNUUwNjFBNTk5MDE0QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgga/U+bB+qzEtjDL3ety4BvH7 Bdyoylfmovjpem/aLBvrzk5In5GbUsQA+rltAq6Bb2sJhyz8wrpTAo4n/HUyKgUl i5WyAJFALB50KyxcPp2gJsniLMyVschVsHvPXQpwL9aJ6E8HovHdratnWfHNarYN 68VDv5kJSK4itPQgGAjdgZKwilMYEkxmuD7rB+seUdmLljcwJvdxYEyLVgkzwPPY QQwn0BwZym0Z4n9zxKqTQoRZo/Zp4sTTSzc1979yH9ABUP2l0A/R8BbCPODUw7HW zYOyddQEGVr9jEl4WOQCrbu+IcfkZyeyLEV/Dn80m8B65JEx/aGqNyDccvEtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUahBfgLHAhuyJNEVFil4GGlmQFLEwHwYDVR0j BBgwFoAU5wjJd7Bqz66Lr8ayGeWkWFE2wAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMS9FNzA4Qzk3N0Iw NkFDRkFFOEJBRkM2QjIxOUU1QTQ1ODUxMzZDMDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1MTM2 QzAwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzEvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0 NTg1MTM2QzAwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJNnB2KZZW0ekVAanLAXb36SKPpGiP/GRA6m eoH7A9J2kKhyQBrkJWTvS3XRvxRh3UvNOtCOYrixxMemolLuGLgdVrHeozgYtD8j Seo/jx8goELJGNsSSLAMdXN6L9Ql6yvPpa6iDTHeow2eE2F0hD2o+M6AGkuHfxjl mhXf4Oac3GY2b4CZCdisIL9VudkNrDu0CDth7/mjoFrPvk+aHrVif07bdnmHqrmB 7z5S2tGYFB9DqJ28jgMeBGOsJqhY6+Fa8l3tej643l/egdkekGHVRZwDIFrwBGVU j1d5DYK8EhtU0hhXxTbTei2f1b3M6AjFLIeuFAut3tcBr9v/7Xk= -----END CERTIFICATE-----Generated at Mon Jul 21 10:31:00 2025 by rpki-client