$ rpki-client -vvf repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft File: E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft (raw, json) Hash identifier: 8bquvG9s9ma0f+TkpuwC6oZKgKjxeiilgvIb/Y/Oh/k= Subject key identifier: 71:E4:0B:F0:3F:0A:2C:66:AC:89:AE:8E:F6:7E:94:DD:6D:BB:39:17 Authority key identifier: E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61 Certificate issuer: /CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61 Certificate serial: 62DAE249639E55DC5CB5FE344EF978433F9CD3A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft Manifest number: 04ED Signing time: Sat 19 Jul 2025 17:41:37 +0000 Manifest this update: Sat 19 Jul 2025 17:36:37 +0000 Manifest next update: Wed 23 Jul 2025 01:46:37 +0000 Files and hashes: 1: E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl (hash: Ce51npL9xBd53QxScq4Qk8BEuwSWybcnZg8u6xyKA7Y=) 2: 3138332e38312e3135322e302f32312d3234203d3e203234353237.roa (hash: HrGCjeL9LpaajCgOCMCFmtzXiHgvf2onAjSq9sq+a5M=) 3: 3230332e3136302e35362e302f32312d3234203d3e203234353237.roa (hash: P99HVIzqHVCWDBqJ4r8v17rUky9V8VmAdjN3/2RrLPI=) 4: 323430353a366334303a3a2f33322d3438203d3e203234353237.roa (hash: sdUNTLR9jp0dwpPELDIKx4SufivRxg0Tg+/QbjfBOQs=) 5: 3130332e3134382e34362e302f32332d3234203d3e203234353237.roa (hash: eQEzsyxVfpTHgHfaMJEWpEAU8ae5FhvdVXRN2kONR8w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 01:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:da:e2:49:63:9e:55:dc:5c:b5:fe:34:4e:f9:78:43:3f:9c:d3:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61 Validity Not Before: Jul 19 17:36:37 2025 GMT Not After : Jul 23 01:46:37 2025 GMT Subject: CN=71E40BF03F0A2C66AC89AE8EF67E94DD6DBB3917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:52:24:2d:a3:4a:8d:74:bb:55:73:83:cc:d6: 8d:c2:53:de:3f:85:f4:24:b1:f5:c6:76:46:34:32: 9a:64:60:97:cb:4a:bb:b0:0c:3a:11:89:fd:d3:c5: b5:f9:20:cf:ec:a3:77:ac:11:0d:3b:2c:fb:e7:80: 17:b0:02:dd:ab:74:99:d3:33:ae:82:7e:97:8c:d1: 46:ba:1f:f1:21:93:81:f9:89:d4:f5:21:a1:e3:38: 53:64:3e:24:b1:a5:fa:92:c8:21:e8:41:fe:dc:e5: 75:b2:6e:99:66:7e:34:40:97:0b:e2:6c:9c:79:4b: 80:4c:2a:00:a1:54:e8:4a:a9:91:b0:dd:0e:db:ab: 42:ea:cc:fd:d0:c9:c5:7d:44:2d:18:25:eb:20:22: 3e:1a:ed:a9:4d:8b:1c:71:0a:c6:82:2b:1d:09:6f: e4:6d:2f:2d:dd:23:08:9b:8b:d3:e4:ba:cb:10:0e: e8:39:a9:ea:af:1e:48:1d:ad:83:d6:b4:5f:eb:9e: 0b:5f:cc:dc:d1:a1:12:c6:3c:89:b2:b8:ea:31:d9: 4d:fc:f2:54:e5:25:08:9f:7c:a3:4c:fa:c9:f5:bf: 87:c1:5c:41:1a:5d:f6:f1:b2:2e:9b:6c:7d:46:25: f9:90:c0:ac:0f:46:16:42:61:44:48:dc:ff:de:53: e6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E4:0B:F0:3F:0A:2C:66:AC:89:AE:8E:F6:7E:94:DD:6D:BB:39:17 X509v3 Authority Key Identifier: keyid:E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:22:43:91:9d:af:45:d4:41:66:c9:69:f0:6a:fc:d5:b7:78: df:6a:5f:4f:41:c9:9a:16:78:f9:87:f1:44:29:69:1f:46:0a: 70:4a:76:df:a7:2f:18:d9:e5:64:4c:9c:db:7d:52:ab:18:f6: e2:d5:e9:6f:da:40:d3:61:09:e3:b3:2d:c6:c0:fa:a8:8d:38: 08:66:f4:24:1e:87:27:64:41:28:c0:07:95:38:50:12:e0:51: 0d:43:45:1d:83:9b:ab:f7:a1:2b:91:ef:47:d1:5f:b6:4d:6f: b2:53:21:45:f1:ae:37:31:44:66:7a:3f:17:88:56:f6:de:81: 76:8a:e3:eb:5b:10:50:7c:42:2a:6f:29:0e:1d:b3:4f:bb:be: c3:5b:0d:fb:67:6e:18:06:35:4f:c0:8a:d9:74:46:e5:c2:8d: 3a:8d:d4:93:49:80:a7:ba:f3:32:00:23:b0:a8:7b:73:15:65: 14:1f:2f:72:4c:99:ae:9d:b5:c4:4c:fe:69:7b:f8:c1:ca:74: bb:66:9b:6f:c6:33:5b:ac:6a:b9:88:0a:cd:9f:0e:8a:1c:3f: a6:59:1e:4e:08:e3:82:75:80:ab:9a:89:ce:9f:cb:81:85:8c: ef:4d:64:93:fd:58:c1:ce:fd:bc:dd:09:27:b3:82:e1:98:f8: 4b:da:e1:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYtriSWOeVdxctf40Tvl4Qz+c06QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0QTAw NEFCMkM2MTAeFw0yNTA3MTkxNzM2MzdaFw0yNTA3MjMwMTQ2MzdaMDMxMTAvBgNV BAMTKDcxRTQwQkYwM0YwQTJDNjZBQzg5QUU4RUY2N0U5NERENkRCQjM5MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcUiQto0qNdLtVc4PM1o3CU94/ hfQksfXGdkY0MppkYJfLSruwDDoRif3TxbX5IM/so3esEQ07LPvngBewAt2rdJnT M66CfpeM0Ua6H/Ehk4H5idT1IaHjOFNkPiSxpfqSyCHoQf7c5XWybplmfjRAlwvi bJx5S4BMKgChVOhKqZGw3Q7bq0LqzP3QycV9RC0YJesgIj4a7alNixxxCsaCKx0J b+RtLy3dIwibi9PkussQDug5qeqvHkgdrYPWtF/rngtfzNzRoRLGPImyuOox2U38 8lTlJQiffKNM+sn1v4fBXEEaXfbxsi6bbH1GJfmQwKwPRhZCYURI3P/eU+bdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUceQL8D8KLGasia6O9n6U3W27ORcwHwYDVR0j BBgwFoAU6fegqm3Mof99PWFGDVU0oASrLGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmI4N2ZlYi0wZmUyLTQxOGEtYTM3YS1iZTNkZDFmMGU2M2MvMC9FOUY3QTBBQTZE Q0NBMUZGN0QzRDYxNDYwRDU1MzRBMDA0QUIyQzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0QTAwNEFC MkM2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZiODdmZWItMGZlMi00MThhLWEz N2EtYmUzZGQxZjBlNjNjLzAvRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0 QTAwNEFCMkM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJciQ5Gdr0XUQWbJafBq/NW3eN9qX09ByZoW ePmH8UQpaR9GCnBKdt+nLxjZ5WRMnNt9UqsY9uLV6W/aQNNhCeOzLcbA+qiNOAhm 9CQehydkQSjAB5U4UBLgUQ1DRR2Dm6v3oSuR70fRX7ZNb7JTIUXxrjcxRGZ6PxeI VvbegXaK4+tbEFB8QipvKQ4ds0+7vsNbDftnbhgGNU/Aitl0RuXCjTqN1JNJgKe6 8zIAI7Coe3MVZRQfL3JMma6dtcRM/ml7+MHKdLtmm2/GM1usarmICs2fDoocP6ZZ Hk4I44J1gKuaic6fy4GFjO9NZJP9WMHO/bzdCSezguGY+Eva4Yc= -----END CERTIFICATE-----Generated at Sun Jul 20 21:55:32 2025 by rpki-client