$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft File: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft (raw, json) Hash identifier: h6fSwbED8qdetFoGy4aombIYZT5iknZyMPbF/VI1suU= Subject key identifier: 6A:10:EF:FC:16:46:73:AF:7B:71:B5:83:D0:32:26:FF:5A:04:59:8D Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 Certificate issuer: /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Certificate serial: 3DBFD589EF9F949F30F70D4D416B342699EDC014 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft Manifest number: 04EC Signing time: Sat 19 Jul 2025 16:32:04 +0000 Manifest this update: Sat 19 Jul 2025 16:27:04 +0000 Manifest next update: Wed 23 Jul 2025 01:14:04 +0000 Files and hashes: 1: 3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa (hash: 8GAdTJuNR1Zetl+ziDhBJwBFLCcefBc1zOZpq/utdAc=) 2: 3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa (hash: gA/G4KU0S654m0JbYV6SpYNvybqVwcWtbGvUC8YnGdc=) 3: 3130332e3133302e36312e302f32342d3234203d3e20313338303739.roa (hash: VmKn4H92OZlUtnRAAPlH3DAWvPgKEL7aXZz1kY1YrQ0=) 4: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl (hash: 4BBiNCv/YOFz9CaSywPjUljKajkxqW4wrL8HCKp6jkc=) 5: 3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa (hash: t1GlQPTqCX0tSN2oGwnozLwYbWtyVQRe58xqkUEfAuQ=) 6: 3130332e3133302e36302e302f32322d3232203d3e20313338303739.roa (hash: dr1CQsFDr+grBIANLd3KqKBw7/lJxKh8r7O2jOMsoyE=) 7: 3130332e3133302e36332e302f32342d3234203d3e20313338303739.roa (hash: BTJyyClQJ2ooNN9EN9agUZZ+ml+xViKf+qFHMjyGIK0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 01:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:bf:d5:89:ef:9f:94:9f:30:f7:0d:4d:41:6b:34:26:99:ed:c0:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Validity Not Before: Jul 19 16:27:04 2025 GMT Not After : Jul 23 01:14:04 2025 GMT Subject: CN=6A10EFFC164673AF7B71B583D03226FF5A04598D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0a:d2:04:aa:f9:77:fa:70:57:87:e6:ad:33: e1:ae:b8:18:d7:a4:44:f9:08:0f:0a:ac:11:75:e2: b2:ec:9c:dd:74:f0:08:46:c6:e6:4b:a7:4b:5e:28: 83:21:59:62:d1:a0:ca:03:90:5f:56:ff:e8:f6:36: d4:a3:9c:04:6c:aa:b8:aa:a6:fa:9c:e1:54:ab:e7: d7:7f:bc:65:7c:c0:f9:67:22:28:de:75:a1:9c:8c: 5a:2f:a2:b2:6b:d7:2e:0d:fd:5e:c0:57:55:ca:79: 91:6c:ac:db:06:40:b2:ca:23:ac:43:ff:b5:96:55: 01:bb:b5:21:93:c1:d1:4e:79:f1:78:34:60:d2:c4: 05:af:bb:5c:32:3d:67:66:aa:70:c8:99:a6:f3:08: 6e:64:59:f5:fc:4d:18:81:b2:54:cb:61:d9:42:80: 65:35:59:db:d5:76:bf:f5:e3:91:a9:22:d6:4c:33: e8:7a:0f:fa:0f:7c:4f:5e:27:02:1b:3f:1e:ef:45: b3:b2:86:78:40:34:5e:1e:33:1c:11:6e:d1:27:ac: ed:f1:6f:78:d0:97:20:62:ff:ed:de:5a:90:ab:86: a1:7f:13:82:da:9a:56:eb:e3:1f:5e:2a:fb:e3:d3: 7e:ba:8a:85:02:18:e3:1b:df:33:f1:25:a3:48:be: 74:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:10:EF:FC:16:46:73:AF:7B:71:B5:83:D0:32:26:FF:5A:04:59:8D X509v3 Authority Key Identifier: keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ef:0c:0d:10:4a:ae:81:3a:ee:e7:4d:9d:b9:66:3f:8a:54: 81:f6:5e:4e:53:2e:81:40:82:0e:ff:43:50:3d:5a:2a:8f:ba: 4f:0c:cc:14:ef:72:96:73:f2:e4:a9:a9:91:7a:f4:7d:c2:93: 72:fd:e3:bb:fe:c7:f1:5f:7d:e9:a7:70:2f:f0:b7:5f:bc:8a: 42:9c:58:06:60:e3:ab:f0:ab:22:f7:26:00:37:f4:34:7c:4c: 89:e9:48:2b:8e:df:da:67:08:45:1d:ec:0b:db:b1:01:b7:ce: 1d:19:64:2e:38:dc:71:ac:e0:33:34:76:17:d3:a4:e2:fc:8a: 7c:7f:00:d4:ee:98:31:21:ee:c5:77:d9:5d:41:62:d9:fe:75: 1d:b3:a7:4f:ca:63:13:15:d6:65:e9:21:a4:96:2d:0f:af:08: 8a:bb:13:60:21:eb:bb:40:c1:bf:35:29:bc:44:09:7a:0d:05: 17:f0:0a:a6:3a:4b:9d:0d:28:48:1a:96:7b:4e:af:ae:37:89: 06:27:74:ab:45:42:1f:ad:79:53:27:46:d1:58:c2:ca:0c:44: 36:b6:03:b3:ec:bd:6a:9e:9a:5a:af:95:63:68:6a:4c:8e:89: bb:89:ea:eb:9e:a3:aa:bf:f0:2d:ae:81:2c:ce:14:2c:69:98: f6:7e:31:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPb/Vie+flJ8w9w1NQWs0JpntwBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVE Q0YwOEY1MjAeFw0yNTA3MTkxNjI3MDRaFw0yNTA3MjMwMTE0MDRaMDMxMTAvBgNV BAMTKDZBMTBFRkZDMTY0NjczQUY3QjcxQjU4M0QwMzIyNkZGNUEwNDU5OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6CtIEqvl3+nBXh+atM+GuuBjX pET5CA8KrBF14rLsnN108AhGxuZLp0teKIMhWWLRoMoDkF9W/+j2NtSjnARsqriq pvqc4VSr59d/vGV8wPlnIijedaGcjFovorJr1y4N/V7AV1XKeZFsrNsGQLLKI6xD /7WWVQG7tSGTwdFOefF4NGDSxAWvu1wyPWdmqnDImabzCG5kWfX8TRiBslTLYdlC gGU1WdvVdr/145GpItZMM+h6D/oPfE9eJwIbPx7vRbOyhnhANF4eMxwRbtEnrO3x b3jQlyBi/+3eWpCrhqF/E4Lamlbr4x9eKvvj0366ioUCGOMb3zPxJaNIvnRFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUahDv/BZGc697cbWD0DIm/1oEWY0wHwYDVR0j BBgwFoAU4XpeuUFW3iP83I8pshD83tzwj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTJhM2YyOC04MjczLTRkZDUtODdmYy0xZWYwMGFjYWM5YjYvMC9FMTdBNUVCOTQx NTZERTIzRkNEQzhGMjlCMjEwRkNERURDRjA4RjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVEQ0Yw OEY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTEyYTNmMjgtODI3My00ZGQ1LTg3 ZmMtMWVmMDBhY2FjOWI2LzAvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZD REVEQ0YwOEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJbvDA0QSq6BOu7nTZ25Zj+KVIH2Xk5TLoFA gg7/Q1A9WiqPuk8MzBTvcpZz8uSpqZF69H3Ck3L947v+x/FffemncC/wt1+8ikKc WAZg46vwqyL3JgA39DR8TInpSCuO39pnCEUd7AvbsQG3zh0ZZC443HGs4DM0dhfT pOL8inx/ANTumDEh7sV32V1BYtn+dR2zp0/KYxMV1mXpIaSWLQ+vCIq7E2Ah67tA wb81KbxECXoNBRfwCqY6S50NKEgalntOr643iQYndKtFQh+teVMnRtFYwsoMRDa2 A7PsvWqemlqvlWNoakyOibuJ6uueo6q/8C2ugSzOFCxpmPZ+MUQ= -----END CERTIFICATE-----Generated at Mon Jul 21 18:07:59 2025 by rpki-client