$ rpki-client -vvf repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft File: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft (raw, json) Hash identifier: txpsylTmpnQt8i7fMNAX3LCzQ0/vNcVROTb6N8EwxCE= Subject key identifier: 92:5A:6B:31:95:9C:31:43:D2:83:AB:47:17:4E:3E:99:34:51:FA:BF Authority key identifier: E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F Certificate issuer: /CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Certificate serial: 5CC552980FB65F25A650707EE631B45F6490468C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft Manifest number: D2 Signing time: Mon 21 Jul 2025 23:01:49 +0000 Manifest this update: Mon 21 Jul 2025 22:56:49 +0000 Manifest next update: Fri 25 Jul 2025 01:24:49 +0000 Files and hashes: 1: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl (hash: FgflOuPD+Cgtk9YaX3wQHpyckUUeoZOQkXhNcMLj4I8=) 2: 3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa (hash: PEcDYL2YEDwvOwIh2isXFSsdo3mWol6RplkSJ7kPOGI=) 3: 3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (hash: 0+ulOJPEXxfRU9rDzPOyAhCIeStaBB8o7bfVtpS93+A=) 4: 323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa (hash: k742tyOIX18+4IlFbV4FgY2xaEXxztUec+tXVFs15vs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 01:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c5:52:98:0f:b6:5f:25:a6:50:70:7e:e6:31:b4:5f:64:90:46:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Validity Not Before: Jul 21 22:56:49 2025 GMT Not After : Jul 25 01:24:49 2025 GMT Subject: CN=925A6B31959C3143D283AB47174E3E993451FABF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:42:29:97:c4:34:d1:06:54:cf:b7:28:88:42: 61:94:2c:09:f9:fe:3a:eb:c6:d7:e1:62:be:cb:ea: fa:cb:67:60:f8:16:b9:0f:e2:b2:40:36:91:e6:d3: a8:3c:91:61:bf:7b:2d:a6:29:98:1f:1b:14:f6:21: 98:fc:bf:0b:50:f6:15:8a:80:dd:cc:e1:4c:08:ab: 2a:b0:03:ae:8e:ef:56:ab:14:37:48:e9:3e:05:1d: 69:2c:3d:6c:a0:38:4e:89:fa:13:30:37:87:49:41: 42:48:bc:1d:6f:c1:1d:61:e0:21:88:5a:0c:38:0f: f0:61:ff:66:4a:1e:2a:eb:86:de:c0:aa:92:90:02: d6:9c:06:ce:d9:e6:bc:82:ba:f2:da:93:d1:73:1a: 75:56:0a:1c:6b:bc:42:d6:7d:2d:72:c4:78:b5:ba: 63:a5:a4:2a:ba:b5:fc:12:cf:35:b0:6b:35:27:87: d0:4e:c4:4a:95:f1:ea:cb:39:b5:03:c6:ac:03:a6: ec:61:80:1e:75:9b:95:d9:69:f2:0c:8c:d4:23:3c: 29:c0:96:20:bc:14:e2:18:76:ed:a5:90:65:ac:46: e0:32:e1:f3:67:e1:77:c6:ac:41:26:54:42:f1:17: be:47:33:ec:b0:2f:30:2f:a6:ba:7a:bf:43:dd:b5: 59:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5A:6B:31:95:9C:31:43:D2:83:AB:47:17:4E:3E:99:34:51:FA:BF X509v3 Authority Key Identifier: keyid:E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:3d:3a:18:78:08:49:84:15:b9:c1:aa:81:e4:3b:c4:bb:4f: 5c:e2:8d:6a:a0:d2:a8:94:b4:69:86:97:a3:00:91:2d:3c:ed: 30:87:2d:51:48:45:6d:08:ed:61:f3:21:26:55:76:24:42:29: c4:7f:68:40:8a:42:80:b2:d6:8e:da:8f:80:ff:e9:8e:57:62: 90:46:56:14:52:69:37:aa:ef:20:4e:39:5b:75:fd:0e:49:05: da:0f:97:06:5b:6a:b9:db:cb:a6:56:31:2f:bc:62:c4:bc:4a: 83:9e:bf:e6:7f:dd:b0:cd:10:5b:22:01:fc:62:c3:23:56:1e: 3d:ef:b1:a3:02:0d:7e:01:32:3b:5f:77:b1:9f:2f:8e:5f:90: a7:d8:86:13:48:4e:3a:8a:1d:ad:c2:bb:97:93:c0:39:c1:19: 54:11:12:3c:e9:ca:f8:14:cd:b9:f8:5d:7d:87:c0:1f:ad:eb: d3:ea:63:6b:42:bb:85:a7:35:6e:a0:7c:86:3a:81:fa:ee:9c: c0:9b:33:11:54:ee:8b:fa:b1:a3:d5:60:11:77:31:0c:e2:3e: 89:ac:7a:05:1c:ba:d3:dd:9c:15:b4:71:ae:36:e3:d2:56:57: 83:51:f9:40:78:0a:01:21:07:dc:58:e2:80:09:ca:3e:5c:08: 0c:97:54:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXMVSmA+2XyWmUHB+5jG0X2SQRowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0Iy REJCRUQwRjAeFw0yNTA3MjEyMjU2NDlaFw0yNTA3MjUwMTI0NDlaMDMxMTAvBgNV BAMTKDkyNUE2QjMxOTU5QzMxNDNEMjgzQUI0NzE3NEUzRTk5MzQ1MUZBQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuQimXxDTRBlTPtyiIQmGULAn5 /jrrxtfhYr7L6vrLZ2D4FrkP4rJANpHm06g8kWG/ey2mKZgfGxT2IZj8vwtQ9hWK gN3M4UwIqyqwA66O71arFDdI6T4FHWksPWygOE6J+hMwN4dJQUJIvB1vwR1h4CGI Wgw4D/Bh/2ZKHirrht7AqpKQAtacBs7Z5ryCuvLak9FzGnVWChxrvELWfS1yxHi1 umOlpCq6tfwSzzWwazUnh9BOxEqV8erLObUDxqwDpuxhgB51m5XZafIMjNQjPCnA liC8FOIYdu2lkGWsRuAy4fNn4XfGrEEmVELxF75HM+ywLzAvprp6v0PdtVmHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUklprMZWcMUPSg6tHF04+mTRR+r8wHwYDVR0j BBgwFoAU5M7BHyRL8Nq+wTb4Of1Tey277Q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmYzZjVkOS1jZmI4LTQxMjMtYTJiMS1iMGI1Mjk5ZjljNmUvMC9FNENFQzExRjI0 NEJGMERBQkVDMTM2RjgzOUZENTM3QjJEQkJFRDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0IyREJC RUQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJmM2Y1ZDktY2ZiOC00MTIzLWEy YjEtYjBiNTI5OWY5YzZlLzAvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUz N0IyREJCRUQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJU9Ohh4CEmEFbnBqoHkO8S7T1zijWqg0qiU tGmGl6MAkS087TCHLVFIRW0I7WHzISZVdiRCKcR/aECKQoCy1o7aj4D/6Y5XYpBG VhRSaTeq7yBOOVt1/Q5JBdoPlwZbarnby6ZWMS+8YsS8SoOev+Z/3bDNEFsiAfxi wyNWHj3vsaMCDX4BMjtfd7GfL45fkKfYhhNITjqKHa3Cu5eTwDnBGVQREjzpyvgU zbn4XX2HwB+t69PqY2tCu4WnNW6gfIY6gfrunMCbMxFU7ov6saPVYBF3MQziPoms egUcutPdnBW0ca4249JWV4NR+UB4CgEhB9xY4oAJyj5cCAyXVIE= -----END CERTIFICATE-----Generated at Wed Jul 23 17:25:18 2025 by rpki-client