$ rpki-client -vvf repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft File: E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft (raw, json) Hash identifier: EXL4hXkAegsD4bEyeLIhzHG8hbJTzZqcBPt5Zv9GafY= Subject key identifier: 6F:E4:15:70:AA:D0:69:54:4C:4F:30:00:CF:BD:A5:C2:93:6A:1F:CC Authority key identifier: E0:7F:0E:8D:E2:57:2D:C7:B8:13:7E:C0:67:9F:42:64:5D:69:5A:54 Certificate issuer: /CN=E07F0E8DE2572DC7B8137EC0679F42645D695A54 Certificate serial: 095405CB7EF53646BF1D81CE62CA99826A98A410 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft Manifest number: A9 Signing time: Sat 19 Jul 2025 06:10:38 +0000 Manifest this update: Sat 19 Jul 2025 06:05:38 +0000 Manifest next update: Tue 22 Jul 2025 16:17:38 +0000 Files and hashes: 1: 323030313a6466333a666434303a3a2f34382d3438203d3e20313532303535.roa (hash: nQLud3Jn262khF6pI+ZrfSTaiFCpRTXR0OL4+TzR7ac=) 2: E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl (hash: hQFU8+6JgxeIuhAMtt6QQO3J1CgbmjiIhV7XlHowoh0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 16:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:54:05:cb:7e:f5:36:46:bf:1d:81:ce:62:ca:99:82:6a:98:a4:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E07F0E8DE2572DC7B8137EC0679F42645D695A54 Validity Not Before: Jul 19 06:05:38 2025 GMT Not After : Jul 22 16:17:38 2025 GMT Subject: CN=6FE41570AAD069544C4F3000CFBDA5C2936A1FCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c4:64:e4:49:1a:7a:0a:c6:10:50:7f:e1:94: 44:c8:f7:9e:f5:31:c6:70:d2:6d:52:84:1b:2e:b3: 4d:4a:b2:e6:a4:5c:b2:3b:37:54:8e:d5:2e:44:88: 15:6c:1a:16:02:be:26:b1:b0:84:aa:fb:0c:0a:d6: c1:3a:2b:6b:37:21:de:78:39:42:4d:23:af:3f:83: 4a:bb:38:20:37:16:a7:13:54:d6:b7:32:74:09:a0: 4b:56:b1:f9:07:1a:f2:55:47:4d:29:14:e6:1e:5f: 49:b6:8b:5b:0e:d8:f7:a6:11:bd:08:29:46:aa:a7: 26:c3:69:51:10:bc:30:a1:95:02:25:29:85:7f:e5: 27:65:fb:64:ff:33:84:65:f4:0a:9c:44:b6:d4:74: 26:1d:56:60:c4:d9:04:1e:cd:ea:f2:86:b6:bf:d3: 4e:9e:eb:29:b6:4e:b8:21:40:1c:b5:9b:86:fc:f7: c5:28:d7:48:34:12:37:49:c7:ee:9c:d7:b6:a7:97: 8e:b3:eb:f0:84:8a:a9:97:cb:35:7e:40:aa:09:90: 8e:a2:71:00:98:b1:f3:3e:c4:64:1a:f7:34:ea:ab: b9:ce:22:d0:01:de:57:bb:06:d6:c4:5f:5f:7e:c4: 85:00:e6:63:41:33:31:b3:ba:b5:78:23:a2:b4:a8: 60:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E4:15:70:AA:D0:69:54:4C:4F:30:00:CF:BD:A5:C2:93:6A:1F:CC X509v3 Authority Key Identifier: keyid:E0:7F:0E:8D:E2:57:2D:C7:B8:13:7E:C0:67:9F:42:64:5D:69:5A:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:21:d8:07:78:f4:d1:a0:b1:4d:74:f2:1c:f8:a5:63:c7:c1: 4a:7a:7f:45:c5:30:1d:2a:08:13:99:4a:fa:97:ce:02:d6:79: 56:fd:05:21:84:9f:7b:d9:75:1d:d0:36:ba:0f:e0:f6:35:75: 65:b1:45:54:53:d6:74:4a:83:09:ad:b7:24:67:67:49:b5:27: f9:82:c7:38:60:32:9e:38:e1:67:68:7b:d1:59:81:e1:c8:96: 2f:4a:e1:fc:c9:19:bb:af:58:76:b8:8d:3a:41:f4:11:97:5d: e0:9a:72:13:f1:4f:17:2b:fb:7b:66:07:2e:ea:f4:fd:e8:41: 80:99:40:b3:f7:bc:2d:f5:e1:ea:d4:6c:9c:3e:a4:ad:17:5e: 17:b0:30:7f:ad:d8:86:d1:7b:7d:77:9c:a5:0e:c9:66:00:fe: 38:2a:59:87:b3:42:1b:b1:1b:70:5f:e4:e5:31:cd:83:e2:c3: 54:09:7a:dc:0b:bb:15:77:de:d5:94:c4:c1:33:92:1d:2e:e8: e2:d5:d1:0f:c9:e0:d9:16:63:20:42:52:12:14:14:9c:87:83: b7:e1:ed:52:02:06:fb:00:ad:a9:44:1d:a6:17:3e:1f:63:96: 59:4f:34:d8:01:fd:eb:6e:69:ae:7e:11:91:61:37:82:96:69: 01:75:4b:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCVQFy371Nka/HYHOYsqZgmqYpBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA3RjBFOERFMjU3MkRDN0I4MTM3RUMwNjc5RjQyNjQ1 RDY5NUE1NDAeFw0yNTA3MTkwNjA1MzhaFw0yNTA3MjIxNjE3MzhaMDMxMTAvBgNV BAMTKDZGRTQxNTcwQUFEMDY5NTQ0QzRGMzAwMENGQkRBNUMyOTM2QTFGQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuxGTkSRp6CsYQUH/hlETI9571 McZw0m1ShBsus01KsuakXLI7N1SO1S5EiBVsGhYCviaxsISq+wwK1sE6K2s3Id54 OUJNI68/g0q7OCA3FqcTVNa3MnQJoEtWsfkHGvJVR00pFOYeX0m2i1sO2PemEb0I KUaqpybDaVEQvDChlQIlKYV/5Sdl+2T/M4Rl9AqcRLbUdCYdVmDE2QQezeryhra/ 006e6ym2TrghQBy1m4b898Uo10g0EjdJx+6c17anl46z6/CEiqmXyzV+QKoJkI6i cQCYsfM+xGQa9zTqq7nOItAB3le7BtbEX19+xIUA5mNBMzGzurV4I6K0qGBRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb+QVcKrQaVRMTzAAz72lwpNqH8wwHwYDVR0j BBgwFoAU4H8OjeJXLce4E37AZ59CZF1pWlQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGYyODVlZi0zNDUzLTQxNzktYTU1My1mMTk1OTdkZTlkZWQvMC9FMDdGMEU4REUy NTcyREM3QjgxMzdFQzA2NzlGNDI2NDVENjk1QTU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA3RjBFOERFMjU3MkRDN0I4MTM3RUMwNjc5RjQyNjQ1RDY5 NUE1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThmMjg1ZWYtMzQ1My00MTc5LWE1 NTMtZjE5NTk3ZGU5ZGVkLzAvRTA3RjBFOERFMjU3MkRDN0I4MTM3RUMwNjc5RjQy NjQ1RDY5NUE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8h2Ad49NGgsU108hz4pWPHwUp6f0XFMB0q CBOZSvqXzgLWeVb9BSGEn3vZdR3QNroP4PY1dWWxRVRT1nRKgwmttyRnZ0m1J/mC xzhgMp444Wdoe9FZgeHIli9K4fzJGbuvWHa4jTpB9BGXXeCachPxTxcr+3tmBy7q 9P3oQYCZQLP3vC314erUbJw+pK0XXhewMH+t2IbRe313nKUOyWYA/jgqWYezQhux G3Bf5OUxzYPiw1QJetwLuxV33tWUxMEzkh0u6OLV0Q/J4NkWYyBCUhIUFJyHg7fh 7VICBvsAralEHaYXPh9jlllPNNgB/etuaa5+EZFhN4KWaQF1SyQ= -----END CERTIFICATE-----Generated at Mon Jul 21 02:04:54 2025 by rpki-client