$ rpki-client -vvf repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft File: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft (raw, json) Hash identifier: C4Qr5EiNbuvqbCOsh319/GrbwUVBENGAYjPNAHqSHEU= Subject key identifier: 94:64:2C:69:57:B1:2D:C5:61:44:65:4D:09:52:2C:9A:34:CE:1C:7D Authority key identifier: E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70 Certificate issuer: /CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70 Certificate serial: 75CB2B0D0C2F660B3C27120E8874D31AF27CF4B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft Manifest number: 0213 Signing time: Mon 21 Jul 2025 13:30:58 +0000 Manifest this update: Mon 21 Jul 2025 13:25:58 +0000 Manifest next update: Thu 24 Jul 2025 20:57:58 +0000 Files and hashes: 1: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl (hash: DUAYYZRc9uoi6ZZmJI9A5BevVG6CZzPaWY/UfClFrSU=) 2: 3130332e3138362e302e302f32332d3234203d3e20313336303532.roa (hash: YlWhhG5+SXJ+RtEZrRBNLk9BnFzp5Av7c11ptEycGe4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 20:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:cb:2b:0d:0c:2f:66:0b:3c:27:12:0e:88:74:d3:1a:f2:7c:f4:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70 Validity Not Before: Jul 21 13:25:58 2025 GMT Not After : Jul 24 20:57:58 2025 GMT Subject: CN=94642C6957B12DC56144654D09522C9A34CE1C7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fa:b1:d0:53:c8:f4:10:a5:7f:de:be:34:0b: c7:a3:98:b5:57:95:1c:a6:85:4d:da:b8:95:73:35: 02:aa:9b:4a:f0:7d:f8:d1:51:75:85:c4:e3:27:9d: a9:66:59:52:0b:c1:12:77:ff:50:f0:fc:8d:7d:61: e6:07:dd:cc:49:d3:6f:96:ce:21:f2:3f:4f:d3:66: da:2e:38:1c:ab:04:8d:d7:ea:94:21:ab:33:1c:bb: 5e:cd:6c:35:bb:08:4a:5b:59:51:f7:a9:28:8b:e7: 60:82:ee:2f:25:ae:f7:8e:a1:f5:e9:85:9f:ac:48: b9:4b:ab:cf:76:e1:f2:bd:9a:a6:cb:d3:49:48:fd: 91:7e:3f:9f:ae:4e:72:bf:17:8e:bf:af:63:5f:0c: 64:f2:f2:31:14:fb:18:b5:73:d3:40:2b:5a:c7:83: 17:e0:b6:f4:e8:83:9c:40:80:a7:6e:e3:ea:db:aa: c2:b2:b4:61:96:93:8e:6f:2c:1e:80:05:6c:f1:2d: 49:94:34:30:ff:33:dd:de:f1:f6:cc:db:56:3f:21: 75:77:38:fe:30:c5:59:f5:44:64:8f:fa:30:73:fa: 28:bc:81:71:9b:49:8f:32:1f:d2:08:ec:80:62:8c: 65:65:d9:6c:15:7a:13:f3:a6:18:99:8b:42:13:ff: ea:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:64:2C:69:57:B1:2D:C5:61:44:65:4D:09:52:2C:9A:34:CE:1C:7D X509v3 Authority Key Identifier: keyid:E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:f4:a7:7c:9e:68:13:12:72:c5:5d:4f:03:53:da:79:e2:18: 26:b2:e2:23:d4:f8:84:27:88:35:b4:64:91:d7:b3:91:7f:44: 0b:34:21:d8:94:29:99:85:e7:8c:f0:ff:b3:85:4c:87:0b:58: dc:2f:95:eb:c7:85:49:78:ff:33:a3:8b:ac:5e:3a:f1:af:7f: 3b:08:80:fb:31:9e:27:80:3d:88:de:ff:56:1e:33:cb:58:59: ee:a5:94:1a:8e:79:86:37:c6:ff:50:8c:07:ac:5f:ca:06:57: 8d:d9:b6:5b:f9:94:0f:e0:30:2f:fb:d7:70:d4:15:f5:37:3a: fd:fc:92:23:2b:9a:b9:46:20:10:9b:6b:31:02:53:d9:ec:79: 2b:cd:79:9a:f7:42:72:0d:80:41:50:1b:83:b9:04:77:f4:68: 02:3e:b4:ef:c5:2c:6c:24:14:81:07:90:be:43:fd:74:c0:fb: b1:c3:77:ba:e8:2e:e8:fa:8e:e0:d7:f6:20:1f:63:ed:70:3b: 10:d2:91:58:4a:4c:fc:c4:0a:74:fb:76:dd:42:b6:07:e7:97: eb:15:47:14:b8:32:20:aa:4b:e9:c1:3c:0b:16:66:85:65:bf: 55:51:26:73:8c:86:9b:a6:15:b3:ba:2e:3e:a3:3d:5c:6d:ba: 29:4a:3d:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdcsrDQwvZgs8JxIOiHTTGvJ89LMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0Ex QURBNUQ3MDAeFw0yNTA3MjExMzI1NThaFw0yNTA3MjQyMDU3NThaMDMxMTAvBgNV BAMTKDk0NjQyQzY5NTdCMTJEQzU2MTQ0NjU0RDA5NTIyQzlBMzRDRTFDN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa+rHQU8j0EKV/3r40C8ejmLVX lRymhU3auJVzNQKqm0rwffjRUXWFxOMnnalmWVILwRJ3/1Dw/I19YeYH3cxJ02+W ziHyP0/TZtouOByrBI3X6pQhqzMcu17NbDW7CEpbWVH3qSiL52CC7i8lrveOofXp hZ+sSLlLq8924fK9mqbL00lI/ZF+P5+uTnK/F46/r2NfDGTy8jEU+xi1c9NAK1rH gxfgtvTog5xAgKdu4+rbqsKytGGWk45vLB6ABWzxLUmUNDD/M93e8fbM21Y/IXV3 OP4wxVn1RGSP+jBz+ii8gXGbSY8yH9II7IBijGVl2WwVehPzphiZi0IT/+r1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlGQsaVexLcVhRGVNCVIsmjTOHH0wHwYDVR0j BBgwFoAU4JZ1Se8y2J6f8WOPzxg0ehraXXAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzdhNmRkOC1hODQzLTQ2OTgtYTVmMy0zZWVjNDY4ZDE0YTQvMC9FMDk2NzU0OUVG MzJEODlFOUZGMTYzOEZDRjE4MzQ3QTFBREE1RDcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0ExQURB NUQ3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM3YTZkZDgtYTg0My00Njk4LWE1 ZjMtM2VlYzQ2OGQxNGE0LzAvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0 N0ExQURBNUQ3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFX0p3yeaBMScsVdTwNT2nniGCay4iPU+IQn iDW0ZJHXs5F/RAs0IdiUKZmF54zw/7OFTIcLWNwvlevHhUl4/zOji6xeOvGvfzsI gPsxnieAPYje/1YeM8tYWe6llBqOeYY3xv9QjAesX8oGV43Ztlv5lA/gMC/713DU FfU3Ov38kiMrmrlGIBCbazECU9nseSvNeZr3QnINgEFQG4O5BHf0aAI+tO/FLGwk FIEHkL5D/XTA+7HDd7roLuj6juDX9iAfY+1wOxDSkVhKTPzECnT7dt1Ctgfnl+sV RxS4MiCqS+nBPAsWZoVlv1VRJnOMhpumFbO6Lj6jPVxtuilKPc4= -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:35 2025 by rpki-client