$ rpki-client -vvf repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft File: E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft (raw, json) Hash identifier: l8/FO8p5KlO9kv1IAq3TiE1qBZzpr54255hxJri5tkA= Subject key identifier: 14:D7:E7:1C:27:27:62:BC:EE:B4:3D:5A:EC:A4:0B:84:14:9C:21:D2 Authority key identifier: E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27 Certificate issuer: /CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27 Certificate serial: 03E91C1FCFD89518B632ED321DA66799FA4BA32D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft Manifest number: 01AC Signing time: Sun 20 Jul 2025 00:21:02 +0000 Manifest this update: Sun 20 Jul 2025 00:16:02 +0000 Manifest next update: Wed 23 Jul 2025 02:34:02 +0000 Files and hashes: 1: E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl (hash: BsF5MjnjIyUirRL9d306MF84vZFeFfrHg0bUxGH9+js=) 2: 3130332e34372e31302e302f32332d3233203d3e203539323733.roa (hash: rlKPT6Sw2+EZPDLUv/m04ksSr2kbhw7VmVT/BAYmQMM=) 3: 3130332e34372e31312e302f32342d3234203d3e203539323733.roa (hash: HBlBl4qnEWmFIIHkU9MPENaLHFOkHGNLtTU92POPS9Q=) 4: 3130332e34372e31302e302f32342d3234203d3e203539323733.roa (hash: dFHjmVg8iByyDE0AoUz/kaQtWk08pnPg8xzNojTvhm0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 02:34:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:e9:1c:1f:cf:d8:95:18:b6:32:ed:32:1d:a6:67:99:fa:4b:a3:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27 Validity Not Before: Jul 20 00:16:02 2025 GMT Not After : Jul 23 02:34:02 2025 GMT Subject: CN=14D7E71C272762BCEEB43D5AECA40B84149C21D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ba:40:95:b7:71:d3:15:1c:96:d8:e4:97:7e: b8:63:b9:9f:12:5a:a6:02:b8:80:01:0a:67:4a:9f: 52:95:90:05:eb:5c:79:32:2e:97:e0:85:57:a1:20: db:f4:f3:53:20:d7:6d:fd:d1:80:38:8c:f5:3c:da: a9:63:f8:1a:e0:b6:30:9b:aa:35:d5:3e:39:c1:67: e4:65:11:1d:97:94:aa:c2:e6:de:eb:d9:3d:7c:0f: 7b:13:9f:f1:9c:3e:b7:27:f7:1a:9a:f3:2b:7d:db: a4:5e:20:15:e5:82:f6:15:7c:51:07:d7:71:86:4d: d5:42:e9:4a:62:54:f2:91:d5:45:42:95:56:54:b2: 71:ea:c5:72:08:fe:fe:81:3f:29:68:e2:64:10:68: fc:03:b0:f1:a8:c3:d8:6e:65:0f:b5:8a:98:6d:8b: 32:18:17:d2:3e:7a:6b:f8:c5:48:02:cb:a4:f0:5d: c5:d3:8a:47:d5:4c:e6:a8:6b:da:f1:0c:89:01:68: 39:0d:e7:7b:de:73:d6:8a:a1:82:cc:bf:4d:55:cb: e6:5b:0e:da:be:b4:d7:69:21:3b:13:f2:c2:1c:c4: c9:99:1b:35:97:72:ac:d3:ad:9c:43:55:ec:d8:94: 8a:13:1b:3e:8a:50:92:4a:55:9f:2e:40:3f:22:a3: 85:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D7:E7:1C:27:27:62:BC:EE:B4:3D:5A:EC:A4:0B:84:14:9C:21:D2 X509v3 Authority Key Identifier: keyid:E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:80:0c:6b:c9:eb:35:f6:ff:23:15:8b:e9:2e:48:c4:a7:de: dc:73:b2:5e:0d:0e:3f:9f:cc:16:87:43:f6:2b:0d:14:03:6d: 63:56:bc:e8:50:ca:98:9c:32:03:a1:ed:87:6d:21:0d:32:41: 0f:d0:a3:c3:92:fa:7e:dc:35:39:58:85:79:9d:14:90:84:97: 22:38:e9:e8:5e:93:25:af:ea:44:80:96:9b:57:d0:3a:7d:77: 00:23:5d:58:80:8c:22:37:d4:cd:19:e5:4a:b2:a6:1e:83:37: 17:c3:84:06:ef:68:e5:9a:1d:b4:c7:f4:a4:48:aa:c6:d3:ca: 4f:3c:46:ce:a9:1d:79:5c:12:52:5f:6c:d7:bc:e7:8b:07:9a: 94:27:9a:5f:5e:dc:93:65:b2:3e:9c:31:34:7b:ab:e6:57:d0: 2f:47:8a:5e:0a:bb:94:e4:f1:1e:ce:81:02:ac:09:07:0a:24: bb:4e:23:58:50:66:1a:14:9f:a9:90:f7:29:5c:df:5b:32:80: f5:f7:60:f6:a7:40:f9:cc:6e:dd:10:3b:ff:ac:84:f3:8b:8e: 52:4d:d3:97:6a:c0:d8:06:4b:3e:6d:16:be:6e:24:4d:04:fa: 4b:8b:3e:26:32:60:54:25:e7:29:d0:7a:88:8f:6f:9a:b5:60: 05:8f:5e:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA+kcH8/YlRi2Mu0yHaZnmfpLoy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZG QTI5QUIyNzAeFw0yNTA3MjAwMDE2MDJaFw0yNTA3MjMwMjM0MDJaMDMxMTAvBgNV BAMTKDE0RDdFNzFDMjcyNzYyQkNFRUI0M0Q1QUVDQTQwQjg0MTQ5QzIxRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ukCVt3HTFRyW2OSXfrhjuZ8S WqYCuIABCmdKn1KVkAXrXHkyLpfghVehINv081Mg12390YA4jPU82qlj+BrgtjCb qjXVPjnBZ+RlER2XlKrC5t7r2T18D3sTn/GcPrcn9xqa8yt926ReIBXlgvYVfFEH 13GGTdVC6UpiVPKR1UVClVZUsnHqxXII/v6BPylo4mQQaPwDsPGow9huZQ+1ipht izIYF9I+emv4xUgCy6TwXcXTikfVTOaoa9rxDIkBaDkN53vec9aKoYLMv01Vy+Zb Dtq+tNdpITsT8sIcxMmZGzWXcqzTrZxDVezYlIoTGz6KUJJKVZ8uQD8io4W3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFNfnHCcnYrzutD1a7KQLhBScIdIwHwYDVR0j BBgwFoAU6R1R5UqJwN29V/AKE+luNvopqycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWE3MmViOS04ZTUzLTQ0NzItYTM1YS1mZWU4YmYwYWY0NmYvMC9FOTFENTFFNTRB ODlDMEREQkQ1N0YwMEExM0U5NkUzNkZBMjlBQjI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZGQTI5 QUIyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVhNzJlYjktOGU1My00NDcyLWEz NWEtZmVlOGJmMGFmNDZmLzAvRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZF MzZGQTI5QUIyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWADGvJ6zX2/yMVi+kuSMSn3txzsl4NDj+f zBaHQ/YrDRQDbWNWvOhQypicMgOh7YdtIQ0yQQ/Qo8OS+n7cNTlYhXmdFJCElyI4 6ehekyWv6kSAlptX0Dp9dwAjXViAjCI31M0Z5Uqyph6DNxfDhAbvaOWaHbTH9KRI qsbTyk88Rs6pHXlcElJfbNe854sHmpQnml9e3JNlsj6cMTR7q+ZX0C9Hil4Ku5Tk 8R7OgQKsCQcKJLtOI1hQZhoUn6mQ9ylc31sygPX3YPanQPnMbt0QO/+shPOLjlJN 05dqwNgGSz5tFr5uJE0E+kuLPiYyYFQl5ynQeoiPb5q1YAWPXgk= -----END CERTIFICATE-----Generated at Mon Jul 21 00:05:44 2025 by rpki-client