$ rpki-client -vvf repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft File: E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft (raw, json) Hash identifier: /tBkVuB5uYZGSALbGK5XHXGVSci30EBpVTGCpy+/NbI= Subject key identifier: 84:9B:15:80:F7:6D:84:16:24:24:18:E2:E7:2F:6D:87:A9:69:E3:6C Authority key identifier: E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF Certificate issuer: /CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF Certificate serial: 799FCDA9B789371F4559420DF3C2BCE8E6B66BF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft Manifest number: 01B3 Signing time: Sat 19 Jul 2025 16:30:01 +0000 Manifest this update: Sat 19 Jul 2025 16:25:01 +0000 Manifest next update: Wed 23 Jul 2025 03:55:01 +0000 Files and hashes: 1: 323030313a6466303a376263303a3a2f34382d3438203d3e20313439333935.roa (hash: KmwxYNBof+9d1bN3iAjGOYXY8SVr0+E+UsBOHaijDGU=) 2: E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl (hash: DnebJSlPN5L6TUwloCkZOtXMgwWW/bkE31Rf6Bu+XIc=) 3: 3130332e3138312e3234362e302f32342d3234203d3e20313439333935.roa (hash: hDiPHgG6pnFjAwZiLnb6ef4keBf/i47WPM6YZu2zsYg=) 4: 3130332e3138312e3234362e302f32332d3234203d3e20313439333935.roa (hash: LZnbIIsLDElVInIW5qq+Xdda/Rypkb/0FARs3D1/0Rk=) 5: 3130332e3138312e3234372e302f32342d3234203d3e20313439333935.roa (hash: BCXvxmyioKQvXTQ7T8iVRvqkwhqhpqQP5I9ID9+agWk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 03:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:9f:cd:a9:b7:89:37:1f:45:59:42:0d:f3:c2:bc:e8:e6:b6:6b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF Validity Not Before: Jul 19 16:25:01 2025 GMT Not After : Jul 23 03:55:01 2025 GMT Subject: CN=849B1580F76D8416242418E2E72F6D87A969E36C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c5:b2:bd:d4:cb:bc:8a:a5:1e:82:b5:ab:03: 6e:af:66:93:9c:2c:28:50:42:a1:a0:c2:8b:e3:1e: 6d:dc:cc:26:b1:d5:3d:4f:37:38:40:78:37:d5:cb: 9a:5e:2e:1d:d8:f1:a2:7e:df:2d:3b:6e:1e:3f:41: 3b:18:61:01:02:12:7e:4f:f9:79:5e:5a:04:82:a3: 77:4c:c6:2d:bc:9c:99:9d:fa:8d:e3:95:9f:d1:6b: e1:ca:43:f3:ac:e2:7d:68:e6:06:4d:d3:f3:00:a8: 6e:d3:de:ba:f1:2a:4e:a9:ce:9a:d2:4c:0c:86:64: 9b:df:2c:31:a6:d6:a4:3a:d1:8c:f6:47:f3:f9:93: d4:10:4c:63:e8:45:a5:78:0d:80:00:96:12:89:75: f5:43:fe:e8:da:42:3f:90:ba:38:a1:be:c4:1e:6f: da:8b:df:d2:5c:d2:b1:08:26:79:6c:76:12:ea:cb: 4f:9c:3a:00:be:88:d4:f7:6d:eb:ab:7b:f0:3e:2a: 2c:14:62:fa:45:66:eb:ae:4f:e7:60:5d:46:e6:cc: af:26:a6:8b:f3:80:da:df:4c:d3:a0:26:92:c1:03: e9:02:92:2e:3a:e2:c0:9c:f9:d4:b6:e9:1f:5b:f4: e3:37:a0:1d:a8:f3:99:e2:2f:0a:12:13:af:e8:96: 14:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9B:15:80:F7:6D:84:16:24:24:18:E2:E7:2F:6D:87:A9:69:E3:6C X509v3 Authority Key Identifier: keyid:E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:58:3f:b8:e2:65:da:fc:db:b2:2c:40:80:ea:25:63:ad:8a: 95:fd:4c:c8:3a:19:2b:f5:94:c3:fe:62:60:e9:94:f4:d2:bd: f1:c2:f9:07:82:ff:87:b4:ea:f7:6c:4a:01:da:f3:cd:05:4f: 08:84:21:27:af:28:05:33:b8:3f:d1:26:72:88:a7:11:6b:6f: 9f:71:7e:af:56:2e:8c:9a:1b:71:d6:8a:29:9d:ca:d5:25:71: 30:e7:6a:9c:45:09:ce:a8:de:c0:44:5d:27:21:e1:b8:c1:5e: a9:17:cf:36:98:1c:71:90:19:ad:b8:7a:f5:16:67:3a:aa:4b: 15:7b:2f:ca:61:63:0c:05:51:64:13:3e:26:95:18:43:e0:9e: b2:6d:49:53:fd:a6:d5:b3:99:97:01:92:91:9d:00:cc:a1:75: 3b:d1:d1:7c:92:cf:56:e4:b9:58:64:68:e1:77:6f:f6:24:8b: 28:9e:8e:38:29:4a:da:42:a4:df:49:21:ff:21:f5:c9:cd:a9: 95:95:aa:cd:32:c1:a1:af:c6:21:c0:5b:94:d0:da:05:da:ab: b6:7d:9b:a8:86:c1:06:29:6e:41:4b:4b:fe:e7:1e:1d:0b:c4: 8c:1c:a3:8b:5c:2e:72:59:2d:9e:f1:9c:d3:cf:4b:39:ea:70: e7:24:bb:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeZ/NqbeJNx9FWUIN88K86Oa2a/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVENDhE NkY3M0ZBRjAeFw0yNTA3MTkxNjI1MDFaFw0yNTA3MjMwMzU1MDFaMDMxMTAvBgNV BAMTKDg0OUIxNTgwRjc2RDg0MTYyNDI0MThFMkU3MkY2RDg3QTk2OUUzNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAxbK91Mu8iqUegrWrA26vZpOc LChQQqGgwovjHm3czCax1T1PNzhAeDfVy5peLh3Y8aJ+3y07bh4/QTsYYQECEn5P +XleWgSCo3dMxi28nJmd+o3jlZ/Ra+HKQ/Os4n1o5gZN0/MAqG7T3rrxKk6pzprS TAyGZJvfLDGm1qQ60Yz2R/P5k9QQTGPoRaV4DYAAlhKJdfVD/ujaQj+QujihvsQe b9qL39Jc0rEIJnlsdhLqy0+cOgC+iNT3beure/A+KiwUYvpFZuuuT+dgXUbmzK8m povzgNrfTNOgJpLBA+kCki464sCc+dS26R9b9OM3oB2o85niLwoSE6/olhQrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhJsVgPdthBYkJBji5y9th6lp42wwHwYDVR0j BBgwFoAU6TFDB60UMC30DeGo7QtdSNb3P68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDFlMDhlZi0zYWU2LTRiOTAtYjQ3Ny0wZTkxNDBkMDQzODAvMC9FOTMxNDMwN0FE MTQzMDJERjQwREUxQThFRDBCNUQ0OEQ2RjczRkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVENDhENkY3 M0ZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQxZTA4ZWYtM2FlNi00YjkwLWI0 NzctMGU5MTQwZDA0MzgwLzAvRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVE NDhENkY3M0ZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZYP7jiZdr827IsQIDqJWOtipX9TMg6GSv1 lMP+YmDplPTSvfHC+QeC/4e06vdsSgHa880FTwiEISevKAUzuD/RJnKIpxFrb59x fq9WLoyaG3HWiimdytUlcTDnapxFCc6o3sBEXSch4bjBXqkXzzaYHHGQGa24evUW ZzqqSxV7L8phYwwFUWQTPiaVGEPgnrJtSVP9ptWzmZcBkpGdAMyhdTvR0XySz1bk uVhkaOF3b/YkiyiejjgpStpCpN9JIf8h9cnNqZWVqs0ywaGvxiHAW5TQ2gXaq7Z9 m6iGwQYpbkFLS/7nHh0LxIwco4tcLnJZLZ7xnNPPSznqcOcku/s= -----END CERTIFICATE-----Generated at Mon Jul 21 01:33:05 2025 by rpki-client