$ rpki-client -vvf repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft File: EC39D766063B56E5EA4DBFB2A502298FB995956A.mft (raw, json) Hash identifier: 439V4i4MuR4/bB4BRlTN0xI1hsGpDYDMfg6wPWxi3xI= Subject key identifier: 0D:2B:3A:CD:89:DA:BE:1B:1D:87:E5:38:6A:30:B4:27:1E:C3:6F:E9 Authority key identifier: EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A Certificate issuer: /CN=EC39D766063B56E5EA4DBFB2A502298FB995956A Certificate serial: 237A649E3AC381F0EF8262C3909E31B09E82FF23 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft Manifest number: 04EF Signing time: Sat 19 Jul 2025 18:20:36 +0000 Manifest this update: Sat 19 Jul 2025 18:15:36 +0000 Manifest next update: Wed 23 Jul 2025 02:22:36 +0000 Files and hashes: 1: 3130332e3133392e32352e302f32342d3234203d3e20313338383738.roa (hash: fXYsqxCjsvIrOq+7nStBZ2/w2ahyZCjmKRe5J8m8wVg=) 2: EC39D766063B56E5EA4DBFB2A502298FB995956A.crl (hash: ZGbSiNqGwLjIl0rK86pivE6eqg0tZPqj9Ikpq3P0CTY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 02:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:7a:64:9e:3a:c3:81:f0:ef:82:62:c3:90:9e:31:b0:9e:82:ff:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC39D766063B56E5EA4DBFB2A502298FB995956A Validity Not Before: Jul 19 18:15:36 2025 GMT Not After : Jul 23 02:22:36 2025 GMT Subject: CN=0D2B3ACD89DABE1B1D87E5386A30B4271EC36FE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e5:92:4a:e0:b5:72:25:ea:a9:3c:6f:20:1e: 85:8a:5b:6b:13:e9:ae:f6:ab:d0:9e:4d:d2:2f:7b: c3:d9:d6:5d:3f:2a:0f:7c:66:a9:1a:65:6f:79:2a: 38:92:9d:58:20:b2:06:ab:bb:70:c2:7d:3b:4d:70: a6:1a:51:1b:a7:f9:ab:e3:15:39:82:36:c0:62:0b: 0d:9a:c6:e6:08:d5:9b:81:6c:8b:25:f6:62:24:2e: b4:d3:bd:45:d7:04:12:41:60:0a:1b:ce:fb:f3:fa: 4f:5d:85:e0:5f:f6:f0:ad:b5:55:2b:a4:9d:fc:1a: 45:e7:1a:c9:fb:a3:34:cc:9b:2e:20:f9:9a:82:05: e5:8d:e8:a8:ce:66:48:03:b4:cd:78:9b:46:2a:16: 34:9c:89:d5:95:53:da:e1:84:bf:59:55:fe:8f:6c: a9:1f:25:58:b6:ae:1d:4e:5d:98:27:3d:ba:01:98: 7a:89:93:b0:4a:2c:76:88:ed:81:5c:34:4c:9b:ac: 8c:5c:90:20:74:c1:00:e4:14:20:34:85:0b:6a:f6: 0d:35:d1:98:c5:94:45:d7:43:cd:22:07:72:20:3a: 8d:f4:18:df:e1:f4:9b:f2:23:d9:a5:fc:83:04:07: d7:7e:72:db:5e:2d:ec:d0:9f:1d:23:20:fc:0b:3b: 05:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:2B:3A:CD:89:DA:BE:1B:1D:87:E5:38:6A:30:B4:27:1E:C3:6F:E9 X509v3 Authority Key Identifier: keyid:EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:01:22:3b:68:18:db:04:1f:fb:0f:ff:a4:bf:54:69:4d:74: 89:ae:10:dc:58:7a:05:24:a3:ed:78:12:ce:42:25:67:e2:70: 6e:13:11:df:e8:38:0a:62:b9:66:ab:ad:d1:0e:09:29:4b:ea: ee:59:dc:43:63:8e:91:0f:1f:3e:ba:e9:32:70:38:19:7a:01: 63:bb:e3:59:ae:f0:1d:08:cd:1c:85:9b:f6:e9:f7:c7:88:88: 25:c3:70:a1:54:3c:86:73:ef:54:19:65:ed:ce:68:83:57:66: f5:9e:ad:57:e4:88:20:85:f2:da:fd:cd:a6:29:26:4b:d2:e7: da:dd:61:15:8f:d3:a4:5a:27:f6:71:ed:1d:3f:d3:92:30:4d: 3c:1e:8b:0c:c8:73:a2:82:80:a4:82:31:a2:ab:99:57:49:3e: d3:a0:30:1d:50:8d:23:b7:b3:d2:46:fb:95:fb:c8:99:27:ab: 88:9a:b6:62:d8:88:4d:8a:ac:87:f0:98:4b:cf:23:21:67:1e: 0d:69:83:ce:e7:14:fd:e7:92:04:80:48:01:51:be:98:ac:98: 6e:d9:3d:4f:3e:c8:d0:90:19:0b:71:d2:e6:27:73:aa:28:e8: da:54:d7:b8:53:8d:d6:d4:b5:e1:d0:8a:08:04:c4:5b:ef:2e: 3b:f4:b2:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI3pknjrDgfDvgmLDkJ4xsJ6C/yMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5OEZC OTk1OTU2QTAeFw0yNTA3MTkxODE1MzZaFw0yNTA3MjMwMjIyMzZaMDMxMTAvBgNV BAMTKDBEMkIzQUNEODlEQUJFMUIxRDg3RTUzODZBMzBCNDI3MUVDMzZGRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs5ZJK4LVyJeqpPG8gHoWKW2sT 6a72q9CeTdIve8PZ1l0/Kg98ZqkaZW95KjiSnVggsgaru3DCfTtNcKYaURun+avj FTmCNsBiCw2axuYI1ZuBbIsl9mIkLrTTvUXXBBJBYAobzvvz+k9dheBf9vCttVUr pJ38GkXnGsn7ozTMmy4g+ZqCBeWN6KjOZkgDtM14m0YqFjScidWVU9rhhL9ZVf6P bKkfJVi2rh1OXZgnPboBmHqJk7BKLHaI7YFcNEybrIxckCB0wQDkFCA0hQtq9g01 0ZjFlEXXQ80iB3IgOo30GN/h9JvyI9ml/IMEB9d+ctteLezQnx0jIPwLOwUbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDSs6zYnavhsdh+U4ajC0Jx7Db+kwHwYDVR0j BBgwFoAU7DnXZgY7VuXqTb+ypQIpj7mVlWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2ZlNDI1NS0xZDkxLTRmY2MtYmNlNC04YTQyYWRmZTNjMjkvMC9FQzM5RDc2NjA2 M0I1NkU1RUE0REJGQjJBNTAyMjk4RkI5OTU5NTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5OEZCOTk1 OTU2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNmZTQyNTUtMWQ5MS00ZmNjLWJj ZTQtOGE0MmFkZmUzYzI5LzAvRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5 OEZCOTk1OTU2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQBIjtoGNsEH/sP/6S/VGlNdImuENxYegUk o+14Es5CJWficG4TEd/oOApiuWarrdEOCSlL6u5Z3ENjjpEPHz666TJwOBl6AWO7 41mu8B0IzRyFm/bp98eIiCXDcKFUPIZz71QZZe3OaINXZvWerVfkiCCF8tr9zaYp JkvS59rdYRWP06RaJ/Zx7R0/05IwTTweiwzIc6KCgKSCMaKrmVdJPtOgMB1QjSO3 s9JG+5X7yJknq4iatmLYiE2KrIfwmEvPIyFnHg1pg87nFP3nkgSASAFRvpismG7Z PU8+yNCQGQtx0uYnc6oo6NpU17hTjdbUteHQiggExFvvLjv0srk= -----END CERTIFICATE-----Generated at Mon Jul 21 13:07:16 2025 by rpki-client