$ rpki-client -vvf repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft File: E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft (raw, json) Hash identifier: zblGOuICudwJGqxyi5KR1l6+1v4rsdeFzMIev3IAg40= Subject key identifier: 9E:CE:FF:4E:10:49:A9:82:84:7A:C6:C6:98:C1:D5:68:99:31:71:A3 Authority key identifier: E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9 Certificate issuer: /CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9 Certificate serial: 6F6640AC585B0B80387D9909431FA0AD62470EAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft Manifest number: 01D2 Signing time: Sat 19 Jul 2025 12:21:28 +0000 Manifest this update: Sat 19 Jul 2025 12:16:28 +0000 Manifest next update: Tue 22 Jul 2025 21:11:28 +0000 Files and hashes: 1: 3130332e3138392e3234392e302f32342d3234203d3e20313439383838.roa (hash: D0t/YeMSaxANRp7Cjj+UYZjgVfcPEy0eqBQGOyEnZWA=) 2: 3130332e3138392e3234382e302f32342d3234203d3e20313439383838.roa (hash: imfZYd+PwuMIdN7UcBrml21Vlzc4h9f5RzLmotI9hlU=) 3: E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl (hash: KO1WC/ko6WAFZhESmxiUJnjZPaBwpWmMqSi/LD1b0HU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 21:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:66:40:ac:58:5b:0b:80:38:7d:99:09:43:1f:a0:ad:62:47:0e:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9 Validity Not Before: Jul 19 12:16:28 2025 GMT Not After : Jul 22 21:11:28 2025 GMT Subject: CN=9ECEFF4E1049A982847AC6C698C1D568993171A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:41:66:b5:a8:2d:44:52:ce:8b:bb:fb:55:01: 36:71:d4:9d:1c:1f:66:c1:5d:a2:d4:19:05:b1:3c: 10:d5:99:5b:3d:86:15:ba:8a:e7:71:81:c1:63:69: f1:cc:27:59:cf:15:ec:92:57:87:74:82:01:72:ec: f2:b4:3e:8a:f7:8b:e1:33:f7:b4:01:50:48:98:f1: 82:81:8a:ef:cc:d6:15:0c:1e:22:c1:c9:77:c7:21: 7e:2b:f4:95:33:ec:e0:b5:0e:f4:d1:25:28:47:09: 31:a4:44:34:28:87:a0:90:ae:67:38:3b:b8:5c:8c: 75:6d:41:3f:b6:9b:1e:92:12:85:18:50:e7:88:f6: 9f:fd:dc:f9:52:5f:3d:54:a8:e7:6a:d5:f9:82:5b: 05:e1:a0:c2:f5:fd:50:78:86:d5:a3:62:59:13:31: c2:9f:af:4f:06:54:ff:95:e6:fb:2c:13:b5:43:49: e2:bd:d3:49:34:73:b0:f4:34:2d:a1:0e:0c:3a:86: 9d:e4:fe:26:4c:10:c4:cd:f6:b2:2c:bf:40:c2:6e: 6c:c6:99:90:54:37:8c:c8:94:72:22:8c:10:aa:67: 9c:cb:5a:6a:68:9f:1c:80:78:1f:88:81:84:9a:5a: 6d:29:01:72:41:97:32:5a:f0:e2:aa:33:f1:d3:03: 23:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CE:FF:4E:10:49:A9:82:84:7A:C6:C6:98:C1:D5:68:99:31:71:A3 X509v3 Authority Key Identifier: keyid:E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:fa:f8:51:a3:ea:00:87:ab:73:b4:fc:2a:38:d9:b5:02:5d: 82:d0:8d:ae:65:f3:8d:df:ea:80:35:69:1f:7f:c8:69:d9:23: f3:b1:f7:c9:f3:9b:9a:80:a1:06:7a:ce:f8:df:26:a8:9c:ea: 03:39:1a:ac:5f:d3:f6:40:85:cb:65:ea:89:42:0d:6c:34:b1: 40:8f:0e:7d:18:89:81:fa:ab:38:de:1f:1a:ec:3a:7b:5f:97: f0:14:2c:a7:2b:e2:eb:ab:64:fc:c4:61:dc:9a:e1:e1:a4:b6: d4:eb:1e:78:47:e4:6e:11:72:8b:55:1e:a4:d5:05:f8:44:c1: 74:9f:f5:f0:fa:a2:94:f2:52:c0:2f:a8:5a:8e:9a:1d:a3:8d: 57:18:dc:1e:4b:ea:0d:90:e7:ea:6c:24:91:e5:f6:18:41:4d: 86:6f:ad:4c:4c:f3:11:9d:6a:1e:6c:e1:10:31:b7:f0:66:28: ea:db:cb:d0:17:2f:8f:07:a7:be:20:a7:0e:cc:1a:85:8e:52: ee:8d:31:64:81:8b:66:97:52:10:71:ff:3a:3a:1e:ca:85:ba: 0a:0b:d9:73:0d:7d:5c:2d:ef:09:9a:27:27:cd:91:fa:4d:0f: ab:f4:c7:3c:f2:a5:c6:b8:5c:c0:ac:a6:89:7e:b2:9d:aa:3c: 6a:26:6e:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb2ZArFhbC4A4fZkJQx+grWJHDq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VEMjEx QzlGMjFDOTAeFw0yNTA3MTkxMjE2MjhaFw0yNTA3MjIyMTExMjhaMDMxMTAvBgNV BAMTKDlFQ0VGRjRFMTA0OUE5ODI4NDdBQzZDNjk4QzFENTY4OTkzMTcxQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6QWa1qC1EUs6Lu/tVATZx1J0c H2bBXaLUGQWxPBDVmVs9hhW6iudxgcFjafHMJ1nPFeySV4d0ggFy7PK0Por3i+Ez 97QBUEiY8YKBiu/M1hUMHiLByXfHIX4r9JUz7OC1DvTRJShHCTGkRDQoh6CQrmc4 O7hcjHVtQT+2mx6SEoUYUOeI9p/93PlSXz1UqOdq1fmCWwXhoML1/VB4htWjYlkT McKfr08GVP+V5vssE7VDSeK900k0c7D0NC2hDgw6hp3k/iZMEMTN9rIsv0DCbmzG mZBUN4zIlHIijBCqZ5zLWmponxyAeB+IgYSaWm0pAXJBlzJa8OKqM/HTAyP1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUns7/ThBJqYKEesbGmMHVaJkxcaMwHwYDVR0j BBgwFoAU4s2qIjv7bysTlz64A1PtIRyfIckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGY0MTY0ZS03NGU1LTQwZDYtOWEzMC1iMzcyYTRkMmE0NTQvMC9FMkNEQUEyMjNC RkI2RjJCMTM5NzNFQjgwMzUzRUQyMTFDOUYyMUM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VEMjExQzlG MjFDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRmNDE2NGUtNzRlNS00MGQ2LTlh MzAtYjM3MmE0ZDJhNDU0LzAvRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VE MjExQzlGMjFDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACb6+FGj6gCHq3O0/Co42bUCXYLQja5l843f 6oA1aR9/yGnZI/Ox98nzm5qAoQZ6zvjfJqic6gM5Gqxf0/ZAhctl6olCDWw0sUCP Dn0YiYH6qzjeHxrsOntfl/AULKcr4uurZPzEYdya4eGkttTrHnhH5G4RcotVHqTV BfhEwXSf9fD6opTyUsAvqFqOmh2jjVcY3B5L6g2Q5+psJJHl9hhBTYZvrUxM8xGd ah5s4RAxt/BmKOrby9AXL48Hp74gpw7MGoWOUu6NMWSBi2aXUhBx/zo6HsqFugoL 2XMNfVwt7wmaJyfNkfpND6v0xzzypca4XMCspol+sp2qPGombqI= -----END CERTIFICATE-----Generated at Mon Jul 21 01:33:06 2025 by rpki-client