$ rpki-client -vvf repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft File: E74A2346929DE84143E5DF0DD921764C285B01A2.mft (raw, json) Hash identifier: ePy+1sLgqN2BRmJU90p+K8U4RnZ+ktEOPJlwxMSLgOc= Subject key identifier: 6B:A3:F7:04:AD:F6:54:11:E6:3A:9D:E8:70:AF:BE:77:ED:62:CF:71 Authority key identifier: E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2 Certificate issuer: /CN=E74A2346929DE84143E5DF0DD921764C285B01A2 Certificate serial: 030060F0E674C7F067F02F1B36CEA9290DAE6CB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft Manifest number: 9D Signing time: Sat 19 Jul 2025 17:21:14 +0000 Manifest this update: Sat 19 Jul 2025 17:16:14 +0000 Manifest next update: Tue 22 Jul 2025 19:59:14 +0000 Files and hashes: 1: 3130332e3131302e3130302e302f32332d3233203d3e20313530393337.roa (hash: QWlvcWw+MqtfsyLo2e2j057MAyn4Zw7MQ10D6boTyYA=) 2: E74A2346929DE84143E5DF0DD921764C285B01A2.crl (hash: KZL/Nojpkpk7eWJF7rcosEQdWa85uLtfbv53HTxuvJ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 19:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:00:60:f0:e6:74:c7:f0:67:f0:2f:1b:36:ce:a9:29:0d:ae:6c:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E74A2346929DE84143E5DF0DD921764C285B01A2 Validity Not Before: Jul 19 17:16:14 2025 GMT Not After : Jul 22 19:59:14 2025 GMT Subject: CN=6BA3F704ADF65411E63A9DE870AFBE77ED62CF71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f2:4f:ea:7e:22:2a:cc:f3:1b:55:af:19:02: 0c:25:32:2d:2b:a8:c5:89:81:97:c9:87:a8:a3:7a: a0:4c:e1:4a:98:f9:57:c7:da:7b:6d:1a:69:3a:45: da:b4:2c:2b:1f:1f:f9:5e:ab:52:ad:65:15:d2:31: 17:9c:40:0a:c5:10:ef:27:55:f7:2d:23:0a:51:e7: e1:3e:9b:c5:0f:d9:9c:12:f8:75:7d:fc:d3:90:7d: 29:72:06:c7:93:7d:f3:f8:6d:51:11:8e:50:de:3e: 70:db:a1:5b:6a:47:30:65:6b:02:70:7e:6b:41:54: a2:d0:af:41:86:b8:3b:d4:8d:f3:78:5b:aa:45:0f: 01:8c:dc:8c:b4:14:ec:99:18:b1:ed:3c:bc:cd:d1: 02:ca:65:14:58:2e:4a:34:87:0a:ba:99:19:af:60: 98:86:52:cb:17:aa:46:01:db:3a:68:10:e6:dc:3c: a9:9d:b0:c7:31:0d:45:26:7f:3d:b6:9e:27:c8:e8: 5d:33:b1:96:7d:98:06:fd:07:f1:c8:9b:2a:40:d1: dd:74:27:0b:6c:86:bf:a1:c4:6a:fd:16:cf:c7:3f: 30:5b:77:da:38:91:b1:9d:a1:16:7b:55:fe:36:be: c0:9d:73:04:ec:bb:8d:79:22:44:54:15:e3:2c:6a: e5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A3:F7:04:AD:F6:54:11:E6:3A:9D:E8:70:AF:BE:77:ED:62:CF:71 X509v3 Authority Key Identifier: keyid:E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:c9:5d:74:40:a2:63:2a:45:f3:2a:23:66:35:ef:ad:7e:72: 47:1e:d3:a7:04:c7:33:33:4a:03:60:09:07:1a:5a:53:13:03: 65:b6:22:c1:e6:bb:b3:f8:47:b7:f2:a2:6e:ff:53:80:ce:1d: 07:fa:13:6f:cc:9c:43:db:6b:69:85:a4:c3:4b:47:51:19:61: 2c:dc:4c:0c:22:06:e7:1b:7f:96:a3:6e:cf:79:da:99:e8:83: fa:7e:37:60:e6:c4:84:59:c5:6b:6a:a6:01:03:23:71:8a:66: 4b:c0:7d:94:7f:dd:89:f4:d8:b2:7f:df:ed:00:5d:2e:da:bd: f7:ce:c4:4b:f6:36:c1:e1:fb:e8:db:b0:2e:ee:a5:4b:d5:0c: f9:a9:f3:cb:6f:20:42:82:bd:ac:ef:87:9d:9f:5c:18:b1:76: ef:09:54:77:da:70:73:8a:4f:35:62:0c:21:d6:c5:65:ff:ef: 29:39:f9:b2:f1:fb:69:a7:06:e6:bb:3b:27:91:b8:1d:10:14: e6:92:6f:d2:7b:7d:34:01:5b:07:f9:9d:53:3c:0d:bc:ee:25: 91:fe:d5:0b:ee:0c:f1:0a:db:34:50:bd:b2:05:d9:37:13:fb: b9:7f:bc:ff:0a:e4:3e:ca:86:17:7a:77:bc:de:54:66:4f:5b: be:1c:b9:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAwBg8OZ0x/Bn8C8bNs6pKQ2ubLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2NEMy ODVCMDFBMjAeFw0yNTA3MTkxNzE2MTRaFw0yNTA3MjIxOTU5MTRaMDMxMTAvBgNV BAMTKDZCQTNGNzA0QURGNjU0MTFFNjNBOURFODcwQUZCRTc3RUQ2MkNGNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS8k/qfiIqzPMbVa8ZAgwlMi0r qMWJgZfJh6ijeqBM4UqY+VfH2nttGmk6Rdq0LCsfH/leq1KtZRXSMRecQArFEO8n VfctIwpR5+E+m8UP2ZwS+HV9/NOQfSlyBseTffP4bVERjlDePnDboVtqRzBlawJw fmtBVKLQr0GGuDvUjfN4W6pFDwGM3Iy0FOyZGLHtPLzN0QLKZRRYLko0hwq6mRmv YJiGUssXqkYB2zpoEObcPKmdsMcxDUUmfz22nifI6F0zsZZ9mAb9B/HImypA0d10 Jwtshr+hxGr9Fs/HPzBbd9o4kbGdoRZ7Vf42vsCdcwTsu415IkRUFeMsauVfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa6P3BK32VBHmOp3ocK++d+1iz3EwHwYDVR0j BBgwFoAU50ojRpKd6EFD5d8N2SF2TChbAaIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2RlNTAzNS04NGUxLTQ0YzYtOWNmOS00ZWEwYmJhYTA5M2YvMC9FNzRBMjM0Njky OURFODQxNDNFNURGMEREOTIxNzY0QzI4NUIwMUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2NEMyODVC MDFBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNkZTUwMzUtODRlMS00NGM2LTlj ZjktNGVhMGJiYWEwOTNmLzAvRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2 NEMyODVCMDFBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPJXXRAomMqRfMqI2Y1761+ckce06cExzMz SgNgCQcaWlMTA2W2IsHmu7P4R7fyom7/U4DOHQf6E2/MnEPba2mFpMNLR1EZYSzc TAwiBucbf5ajbs952pnog/p+N2DmxIRZxWtqpgEDI3GKZkvAfZR/3Yn02LJ/3+0A XS7avffOxEv2NsHh++jbsC7upUvVDPmp88tvIEKCvazvh52fXBixdu8JVHfacHOK TzViDCHWxWX/7yk5+bLx+2mnBua7OyeRuB0QFOaSb9J7fTQBWwf5nVM8DbzuJZH+ 1QvuDPEK2zRQvbIF2TcT+7l/vP8K5D7Khhd6d7zeVGZPW74cuaY= -----END CERTIFICATE-----Generated at Mon Jul 21 18:14:09 2025 by rpki-client