$ rpki-client -vvf repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft File: E420F134FA1A6BA70588424BD4E862EE6C50C188.mft (raw, json) Hash identifier: EvtH3fOQP4xj7U1YsIHujImtVk64nt/sTmv+rGs8Nuc= Subject key identifier: FC:64:CB:AA:77:20:9E:A3:04:8C:AC:F5:0B:DC:6B:68:38:84:6A:3D Authority key identifier: E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88 Certificate issuer: /CN=E420F134FA1A6BA70588424BD4E862EE6C50C188 Certificate serial: 0D07AC611F7B550B726C49EBD3433654F297EFA9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft Manifest number: 04EE Signing time: Mon 21 Jul 2025 03:33:04 +0000 Manifest this update: Mon 21 Jul 2025 03:28:04 +0000 Manifest next update: Thu 24 Jul 2025 08:55:04 +0000 Files and hashes: 1: E420F134FA1A6BA70588424BD4E862EE6C50C188.crl (hash: ++NA1BS16O5yzFNJg/QEvBKx8MWCaEfT5+wydksNtuI=) 2: 323430323a636438303a3a2f33322d3438203d3e203633383835.roa (hash: MDl2DN2os7/fU39oaMG8yA+MKomCGHMu/9vzlZ9xU2U=) 3: 3130332e3139342e3137322e302f32322d3234203d3e203633383835.roa (hash: nIcaXDvKx2+XVxNFuL8CckiCEV48hFgqOSdn9qzzkF4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 08:55:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:07:ac:61:1f:7b:55:0b:72:6c:49:eb:d3:43:36:54:f2:97:ef:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E420F134FA1A6BA70588424BD4E862EE6C50C188 Validity Not Before: Jul 21 03:28:04 2025 GMT Not After : Jul 24 08:55:04 2025 GMT Subject: CN=FC64CBAA77209EA3048CACF50BDC6B6838846A3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:29:cd:a3:2a:6e:91:42:83:ec:34:b1:49:63: d8:0d:e1:65:e5:e2:2a:47:98:40:8d:7f:d5:a1:ba: c4:38:a5:36:2f:d1:75:e0:34:eb:62:f0:68:73:3e: 5c:60:d4:97:1d:b2:d4:a0:36:30:82:ab:1b:7a:aa: 4b:ea:67:b7:ad:60:47:2c:a5:cb:1e:cd:0e:5b:39: bf:3c:76:16:e9:77:97:51:fc:d0:ab:04:dc:65:b7: 50:a8:d6:04:92:61:1d:fb:16:d0:e2:8b:31:d1:39: b2:d0:7c:33:ef:fc:12:3d:d8:a3:24:7a:8e:61:d4: 47:ea:94:3e:92:66:19:12:cc:56:5d:f6:3e:ad:ce: be:87:76:29:70:60:a9:74:6a:55:3d:3f:87:71:15: e6:b1:0e:16:c7:a3:af:7e:6a:7f:f8:6b:02:a7:1d: 58:4b:60:76:18:da:38:24:a1:6b:fc:ba:a4:d2:3d: 1c:be:ef:7b:9a:97:65:47:5d:5a:b0:7d:09:4e:79: 94:5d:f2:f5:69:0f:6d:68:64:f6:b3:be:b5:53:1b: 06:20:89:82:ce:40:9f:dd:7d:95:eb:e4:d0:6e:28: 2f:83:ea:e2:d9:de:38:09:3e:77:bb:b6:c2:68:4a: 7e:5e:de:82:90:a0:57:0f:b8:d7:e7:d9:8f:bb:af: 7e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:64:CB:AA:77:20:9E:A3:04:8C:AC:F5:0B:DC:6B:68:38:84:6A:3D X509v3 Authority Key Identifier: keyid:E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:80:6e:7c:ea:1f:6d:08:7e:3b:f8:68:c4:56:7b:46:30:ca: 76:ef:0d:50:25:2e:c4:b0:ea:a1:0e:05:bd:5a:2e:68:81:d9: dc:25:bf:fc:ed:00:94:24:b5:b1:d5:4a:70:fa:40:83:79:a8: 74:93:0c:62:91:12:9e:00:b0:e2:44:48:60:a9:57:78:4c:91: 81:74:c5:b5:ee:16:f3:13:9d:6b:70:08:a4:5b:74:d3:40:30: fc:20:9a:7f:22:7a:4a:40:45:0f:00:24:e9:ca:ef:f0:13:33: f0:bf:14:bb:50:03:4c:e3:ab:d1:f2:4d:40:00:0f:8b:39:39: 4d:12:1f:fa:4a:b4:01:93:54:3d:6e:0e:1e:f5:02:67:35:6a: 73:c5:f8:bf:09:e3:8a:d4:5a:c8:64:62:c5:43:fa:2e:82:8d: 1e:69:cb:8d:e9:8d:0a:11:8a:8a:67:49:d8:53:3f:29:44:8b: 9e:cf:fc:59:52:06:5b:50:e2:ce:3b:63:fb:86:c8:32:51:a0: 2c:db:01:23:28:e5:9b:1e:ed:b9:75:3f:51:a2:ff:0a:6b:51: dc:d5:b4:bf:09:1e:3d:70:7a:8d:da:d1:12:d8:0f:d4:fb:c4: ce:b0:d0:f0:c5:71:70:0c:ff:50:f0:0d:67:00:fd:ff:d3:06: ca:53:ee:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDQesYR97VQtybEnr00M2VPKX76kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYyRUU2 QzUwQzE4ODAeFw0yNTA3MjEwMzI4MDRaFw0yNTA3MjQwODU1MDRaMDMxMTAvBgNV BAMTKEZDNjRDQkFBNzcyMDlFQTMwNDhDQUNGNTBCREM2QjY4Mzg4NDZBM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Kc2jKm6RQoPsNLFJY9gN4WXl 4ipHmECNf9WhusQ4pTYv0XXgNOti8GhzPlxg1JcdstSgNjCCqxt6qkvqZ7etYEcs pcsezQ5bOb88dhbpd5dR/NCrBNxlt1Co1gSSYR37FtDiizHRObLQfDPv/BI92KMk eo5h1EfqlD6SZhkSzFZd9j6tzr6HdilwYKl0alU9P4dxFeaxDhbHo69+an/4awKn HVhLYHYY2jgkoWv8uqTSPRy+73ual2VHXVqwfQlOeZRd8vVpD21oZPazvrVTGwYg iYLOQJ/dfZXr5NBuKC+D6uLZ3jgJPne7tsJoSn5e3oKQoFcPuNfn2Y+7r34DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/GTLqncgnqMEjKz1C9xraDiEaj0wHwYDVR0j BBgwFoAU5CDxNPoaa6cFiEJL1Ohi7mxQwYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZmUzNWZhYS1lZDJiLTQyNzEtYjQ4Yy00ZWEyMWMzMDkzNTIvMC9FNDIwRjEzNEZB MUE2QkE3MDU4ODQyNEJENEU4NjJFRTZDNTBDMTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYyRUU2QzUw QzE4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZlMzVmYWEtZWQyYi00MjcxLWI0 OGMtNGVhMjFjMzA5MzUyLzAvRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYy RUU2QzUwQzE4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGAbnzqH20Ifjv4aMRWe0YwynbvDVAlLsSw 6qEOBb1aLmiB2dwlv/ztAJQktbHVSnD6QIN5qHSTDGKREp4AsOJESGCpV3hMkYF0 xbXuFvMTnWtwCKRbdNNAMPwgmn8iekpARQ8AJOnK7/ATM/C/FLtQA0zjq9HyTUAA D4s5OU0SH/pKtAGTVD1uDh71Amc1anPF+L8J44rUWshkYsVD+i6CjR5py43pjQoR iopnSdhTPylEi57P/FlSBltQ4s47Y/uGyDJRoCzbASMo5Zse7bl1P1Gi/wprUdzV tL8JHj1weo3a0RLYD9T7xM6w0PDFcXAM/1DwDWcA/f/TBspT7lw= -----END CERTIFICATE-----Generated at Wed Jul 23 01:26:16 2025 by rpki-client