$ rpki-client -vvf repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft File: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft (raw, json) Hash identifier: BEvtpsEray5DYOWa77axTR+txWTC73jTEw7fHbCTVfw= Subject key identifier: 2F:FA:09:EF:55:D1:A3:94:DB:54:72:01:4F:74:0B:81:D1:6A:DD:C4 Authority key identifier: ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A Certificate issuer: /CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Certificate serial: 63786EECA94116DB1E0159FB97F40FFEDC13AC08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft Manifest number: 01EA Signing time: Thu 24 Jul 2025 14:41:10 +0000 Manifest this update: Thu 24 Jul 2025 14:36:10 +0000 Manifest next update: Sun 27 Jul 2025 19:38:10 +0000 Files and hashes: 1: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl (hash: S8Mc6S+qa4eOWnyTL55BSVGEy3LHDHrYrN+ZHkq3gSw=) 2: 3130332e3133352e34382e302f32322d3234203d3e203338333230.roa (hash: /cF+CKjnrx0BGZ8wL/sfXfp5hgNUQBZIeeM9AfAYFsU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:78:6e:ec:a9:41:16:db:1e:01:59:fb:97:f4:0f:fe:dc:13:ac:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Validity Not Before: Jul 24 14:36:10 2025 GMT Not After : Jul 27 19:38:10 2025 GMT Subject: CN=2FFA09EF55D1A394DB5472014F740B81D16ADDC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:09:6f:1e:de:7c:55:be:5f:70:d2:46:7c:90: 9e:d7:6a:b9:bb:81:8d:c7:ec:2b:71:6b:3d:de:99: 8c:06:bd:dc:98:bb:ce:59:d5:b3:7c:fb:35:87:12: 5a:f7:a1:11:31:f1:5b:a2:5b:e2:0c:66:e9:08:f2: c3:a9:28:af:6b:fc:a3:de:26:05:e8:2c:35:b1:ef: 07:06:26:18:85:45:e1:58:3d:00:41:fe:09:6d:f7: 9b:68:45:0f:2f:38:0e:74:b6:bc:40:ea:e8:b9:9c: 67:96:fd:34:38:a6:ab:05:d3:bd:de:a6:63:04:d0: 1d:a2:19:72:01:20:48:7b:54:ef:52:01:99:bf:64: a4:25:c8:20:f7:c9:26:0d:63:3a:74:0d:bf:6a:ab: ba:8d:fa:0d:2b:0f:16:08:eb:29:42:d2:90:15:ad: ce:30:9d:49:1f:6b:85:1c:28:a8:9c:83:01:0c:6c: 3f:f9:5d:2c:6a:7e:c2:27:a4:83:bb:c2:54:0c:64: 3f:55:ff:39:6f:83:9f:d6:b5:1d:ce:3c:d1:db:37: e3:26:8a:c2:70:30:3f:5b:d1:c9:aa:ae:c7:95:da: e7:f1:31:3b:9d:a2:d4:8b:7d:2c:c6:b1:94:e1:b6: 70:02:62:17:95:f6:57:97:43:a0:4f:21:18:b1:8f: ca:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:FA:09:EF:55:D1:A3:94:DB:54:72:01:4F:74:0B:81:D1:6A:DD:C4 X509v3 Authority Key Identifier: keyid:ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:94:c5:52:8a:90:40:66:56:2e:61:60:4e:ac:3e:39:72:ff: a5:b9:89:20:b3:ed:22:8e:36:d9:40:51:17:86:05:a2:b2:46: de:ff:99:16:66:de:44:91:4d:3e:24:8d:01:5e:7d:63:96:69: bc:91:5b:e0:22:7a:31:cc:77:3f:64:c9:8b:dc:89:f0:af:a9: 5e:26:d3:8f:77:a8:6f:f3:7d:47:8c:2f:5d:90:81:aa:23:4c: 57:fe:02:cc:87:2b:cf:96:22:7a:1f:e4:98:0d:7d:80:6a:4a: e0:c2:94:21:71:ea:41:32:36:bf:ce:21:ca:9a:1f:3e:d6:58: b4:42:5b:6c:e7:7b:c1:a4:89:bc:aa:46:e9:01:f1:e2:92:92: bc:e9:e2:0f:f8:ba:74:93:c4:98:67:77:19:c7:ee:30:50:0e: 99:48:cf:8a:4d:89:14:e3:79:c4:ef:d6:33:3c:5b:b1:42:43: 97:35:90:3b:3f:de:47:74:4f:cf:aa:44:d3:3a:1a:4e:83:c5: b0:5d:17:90:dd:07:a0:54:3a:dd:32:9d:07:08:dd:61:31:95: 1e:f8:20:49:bb:ec:d2:05:50:6a:f2:63:c7:07:20:cb:90:d9: 0f:fd:87:e6:52:6e:6b:d6:35:99:78:24:e2:94:8b:9d:0b:05: 69:2f:68:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY3hu7KlBFtseAVn7l/QP/twTrAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RB OTFDQTE1QTAeFw0yNTA3MjQxNDM2MTBaFw0yNTA3MjcxOTM4MTBaMDMxMTAvBgNV BAMTKDJGRkEwOUVGNTVEMUEzOTREQjU0NzIwMTRGNzQwQjgxRDE2QUREQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmCW8e3nxVvl9w0kZ8kJ7Xarm7 gY3H7Ctxaz3emYwGvdyYu85Z1bN8+zWHElr3oREx8VuiW+IMZukI8sOpKK9r/KPe JgXoLDWx7wcGJhiFReFYPQBB/glt95toRQ8vOA50trxA6ui5nGeW/TQ4pqsF073e pmME0B2iGXIBIEh7VO9SAZm/ZKQlyCD3ySYNYzp0Db9qq7qN+g0rDxYI6ylC0pAV rc4wnUkfa4UcKKicgwEMbD/5XSxqfsInpIO7wlQMZD9V/zlvg5/WtR3OPNHbN+Mm isJwMD9b0cmqrseV2ufxMTudotSLfSzGsZThtnACYheV9leXQ6BPIRixj8ofAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL/oJ71XRo5TbVHIBT3QLgdFq3cQwHwYDVR0j BBgwFoAU7TznJkVjrblA6vr0vYfNzakcoVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Y2NjMmFmNC1hNjJkLTQ3MDgtYjY4OC0xODkyNTk0YmE5ODkvMC9FRDNDRTcyNjQ1 NjNBREI5NDBFQUZBRjRCRDg3Q0RDREE5MUNBMTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RBOTFD QTE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGNjYzJhZjQtYTYyZC00NzA4LWI2 ODgtMTg5MjU5NGJhOTg5LzAvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NE Q0RBOTFDQTE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACyUxVKKkEBmVi5hYE6sPjly/6W5iSCz7SKO NtlAUReGBaKyRt7/mRZm3kSRTT4kjQFefWOWabyRW+AiejHMdz9kyYvcifCvqV4m 0493qG/zfUeML12QgaojTFf+AsyHK8+WInof5JgNfYBqSuDClCFx6kEyNr/OIcqa Hz7WWLRCW2zne8GkibyqRukB8eKSkrzp4g/4unSTxJhndxnH7jBQDplIz4pNiRTj ecTv1jM8W7FCQ5c1kDs/3kd0T8+qRNM6Gk6DxbBdF5DdB6BUOt0ynQcI3WExlR74 IEm77NIFUGryY8cHIMuQ2Q/9h+ZSbmvWNZl4JOKUi50LBWkvaF8= -----END CERTIFICATE-----Generated at Sat Jul 26 07:54:44 2025 by rpki-client