$ rpki-client -vvf repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft File: E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft (raw, json) Hash identifier: /b6HGsbRRQlUqxOFB0SDSYqeEt1LnanxsUFF6UxQqr4= Subject key identifier: 1C:13:4A:BB:86:CC:AF:AA:1B:64:29:90:A5:A1:7F:1C:76:08:36:5D Authority key identifier: E4:81:3B:FD:9F:D2:7C:9C:A2:2A:77:0F:5D:84:6B:50:FC:78:3A:3C Certificate issuer: /CN=E4813BFD9FD27C9CA22A770F5D846B50FC783A3C Certificate serial: 073E700F61127FB74C42EE0A5A5A7074BCFF03D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft Manifest number: 01AF Signing time: Tue 22 Jul 2025 02:40:42 +0000 Manifest this update: Tue 22 Jul 2025 02:35:42 +0000 Manifest next update: Fri 25 Jul 2025 08:39:42 +0000 Files and hashes: 1: 3130332e3134372e37342e302f32332d3234203d3e203137373639.roa (hash: O88yPYmN6xDUFSj/RxvbUkag/UKNDi1pEvsS211Q2AQ=) 2: E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl (hash: kaz307eemSQ1vdi0s/Ka9QpDj+TyaXvFVIPhu2ufpeM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 08:39:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:3e:70:0f:61:12:7f:b7:4c:42:ee:0a:5a:5a:70:74:bc:ff:03:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4813BFD9FD27C9CA22A770F5D846B50FC783A3C Validity Not Before: Jul 22 02:35:42 2025 GMT Not After : Jul 25 08:39:42 2025 GMT Subject: CN=1C134ABB86CCAFAA1B642990A5A17F1C7608365D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8f:03:48:61:7d:ec:07:c3:1f:9e:a2:d1:bd: 63:a2:6c:fc:fa:68:d5:f7:39:70:e2:45:dd:92:f3: 30:13:ba:0e:8b:fa:85:b9:c1:ac:11:d1:69:a3:a1: 7c:04:0c:39:a0:ee:8d:e4:33:ea:d0:c0:21:23:de: e6:24:4e:e7:6b:5d:ec:52:d0:8e:a7:3f:b5:fd:62: d4:cb:44:d3:cf:ff:73:72:95:02:fe:44:70:04:78: 0f:b4:05:ac:af:0e:eb:e0:af:56:6f:3c:e4:4f:b6: b3:ce:d9:4b:2e:fb:b7:8e:5e:4f:a7:14:c9:8b:20: 46:fe:aa:91:c2:fd:01:02:61:e4:1e:c2:4d:69:76: c3:61:dd:9e:6c:ab:42:c9:72:ac:48:d4:1c:66:dc: 98:10:33:ec:ef:48:fe:fb:6d:46:2a:bc:d7:55:aa: 97:0c:37:da:02:2f:93:b5:9e:35:c2:00:99:7c:12: 7a:47:c0:f2:5f:ab:33:17:8f:f9:ab:69:72:4f:2b: 6c:f7:90:8f:9d:64:05:fb:85:13:f9:d0:69:5a:7b: f3:33:10:e3:4d:80:16:dc:d7:f8:79:d8:4a:86:30: 2a:c0:3f:db:8c:44:09:6c:49:28:8c:31:33:9d:d3: f6:89:40:3c:96:31:80:81:92:5d:5a:bd:ab:ce:fc: a1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:13:4A:BB:86:CC:AF:AA:1B:64:29:90:A5:A1:7F:1C:76:08:36:5D X509v3 Authority Key Identifier: keyid:E4:81:3B:FD:9F:D2:7C:9C:A2:2A:77:0F:5D:84:6B:50:FC:78:3A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:3b:9f:d7:22:18:5d:d5:e9:f2:5c:13:a6:cf:f2:17:1b:aa: f0:77:b5:9a:2c:f2:16:ac:aa:b6:4b:f9:cc:94:d8:d7:c7:60: 89:d4:4f:70:54:73:da:90:5f:0e:cc:b8:d0:75:b3:63:6d:b2: 5a:af:85:43:e5:f7:6d:6a:da:67:c2:2d:8e:fa:67:be:88:02: b5:34:68:de:a2:5a:67:b6:9e:b4:5a:c1:5d:b1:65:70:0f:e9: 24:71:90:15:35:4c:ee:95:8c:ed:ca:5f:2a:76:b3:b2:7f:a5: c1:d4:66:3c:cd:0d:1a:91:a1:e3:6c:1a:27:00:51:a1:6e:a6: 56:44:80:76:29:19:9a:e9:cf:64:d4:cc:9c:87:04:de:4e:81: ae:e0:5e:06:77:fd:7b:c6:af:bf:5a:22:91:d3:4a:f4:53:54: f7:40:72:76:6f:55:7b:39:a9:65:97:59:cd:9c:23:16:48:7a: 0d:8e:d2:3b:44:1b:03:99:fa:51:27:ee:40:d5:e3:76:94:0a: fc:75:96:3d:55:b8:5d:0d:9e:2d:aa:72:73:4a:6a:93:38:62: bb:6b:2e:3c:9a:ac:6b:43:25:4b:c0:29:ee:5e:1e:44:54:29: 65:60:83:8d:be:76:51:d2:40:74:bf:9d:be:08:ec:8b:0a:5d: 60:7f:a4:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBz5wD2ESf7dMQu4KWlpwdLz/A9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3NzBGNUQ4NDZCNTBG Qzc4M0EzQzAeFw0yNTA3MjIwMjM1NDJaFw0yNTA3MjUwODM5NDJaMDMxMTAvBgNV BAMTKDFDMTM0QUJCODZDQ0FGQUExQjY0Mjk5MEE1QTE3RjFDNzYwODM2NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIjwNIYX3sB8MfnqLRvWOibPz6 aNX3OXDiRd2S8zATug6L+oW5wawR0WmjoXwEDDmg7o3kM+rQwCEj3uYkTudrXexS 0I6nP7X9YtTLRNPP/3NylQL+RHAEeA+0BayvDuvgr1ZvPORPtrPO2Usu+7eOXk+n FMmLIEb+qpHC/QECYeQewk1pdsNh3Z5sq0LJcqxI1Bxm3JgQM+zvSP77bUYqvNdV qpcMN9oCL5O1njXCAJl8EnpHwPJfqzMXj/mraXJPK2z3kI+dZAX7hRP50Glae/Mz EONNgBbc1/h52EqGMCrAP9uMRAlsSSiMMTOd0/aJQDyWMYCBkl1avavO/KGvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHBNKu4bMr6obZCmQpaF/HHYINl0wHwYDVR0j BBgwFoAU5IE7/Z/SfJyiKncPXYRrUPx4OjwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzI5MDdkMy1iZTI0LTRkYTgtOTZiYi1mMTIyOGZjOTkyMDUvMC9FNDgxM0JGRDlG RDI3QzlDQTIyQTc3MEY1RDg0NkI1MEZDNzgzQTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3NzBGNUQ4NDZCNTBGQzc4 M0EzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjcyOTA3ZDMtYmUyNC00ZGE4LTk2 YmItZjEyMjhmYzk5MjA1LzAvRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3NzBGNUQ4NDZC NTBGQzc4M0EzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANY7n9ciGF3V6fJcE6bP8hcbqvB3tZos8has qrZL+cyU2NfHYInUT3BUc9qQXw7MuNB1s2NtslqvhUPl921q2mfCLY76Z76IArU0 aN6iWme2nrRawV2xZXAP6SRxkBU1TO6VjO3KXyp2s7J/pcHUZjzNDRqRoeNsGicA UaFuplZEgHYpGZrpz2TUzJyHBN5Oga7gXgZ3/XvGr79aIpHTSvRTVPdAcnZvVXs5 qWWXWc2cIxZIeg2O0jtEGwOZ+lEn7kDV43aUCvx1lj1VuF0Nni2qcnNKapM4Yrtr LjyarGtDJUvAKe5eHkRUKWVgg42+dlHSQHS/nb4I7IsKXWB/pL8= -----END CERTIFICATE-----Generated at Tue Jul 22 19:20:42 2025 by rpki-client