$ rpki-client -vvf repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft File: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft (raw, json) Hash identifier: BvE9r2yrdojzEDX5VpewxGBVOfTW+vFUzcyMzOpxmOk= Subject key identifier: 85:45:00:74:11:81:F5:F6:79:9A:24:56:8A:77:3B:68:07:60:3E:CD Authority key identifier: E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 Certificate issuer: /CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Certificate serial: 389C0D36E042A65066D8ED048EF562E97180C390 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft Manifest number: E9 Signing time: Sun 20 Jul 2025 00:21:07 +0000 Manifest this update: Sun 20 Jul 2025 00:16:07 +0000 Manifest next update: Wed 23 Jul 2025 09:27:07 +0000 Files and hashes: 1: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl (hash: VNdH0zqkahd5aiKYId5gMkV5DbQEU26k2igHAUzVU00=) 2: 3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa (hash: geAKj9+TOtyfNH9PasUiph/Br+j89slGEUwYIqBnSpQ=) 3: 3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (hash: RhGN57E/ZSjGvHHK5MWz3epa97gXAk4w6YjAbvPV0fg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 09:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:9c:0d:36:e0:42:a6:50:66:d8:ed:04:8e:f5:62:e9:71:80:c3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Validity Not Before: Jul 20 00:16:07 2025 GMT Not After : Jul 23 09:27:07 2025 GMT Subject: CN=854500741181F5F6799A24568A773B6807603ECD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:51:ef:f7:4b:e8:97:78:3a:8d:b0:bf:30:5f: 70:ca:f9:81:42:6c:ca:b3:4b:1f:a7:29:d5:48:fd: 61:e4:9c:9b:fd:87:17:4f:6e:d6:bd:0c:4d:d8:85: 48:1c:88:7c:60:99:b7:39:4e:04:77:0d:c1:bd:49: fa:76:91:4b:ae:40:96:1f:44:2b:1c:af:ac:7c:18: ac:46:2f:f5:aa:d2:90:78:b8:56:f6:52:c4:ab:93: 27:e2:b6:75:bd:8a:ef:8c:16:11:48:49:6d:30:7a: 7c:be:d6:79:11:79:ac:b9:2f:42:49:c1:6a:b0:61: fb:b2:0e:58:70:18:29:2d:7b:13:5b:70:bc:4a:80: 90:b8:66:90:ee:41:23:b6:52:d6:1a:61:b6:bc:04: de:9c:7e:bf:bb:41:61:3f:28:12:fe:15:69:05:49: 5d:0a:c6:fe:1d:ef:25:40:1f:18:44:da:ee:2c:7b: 33:d0:05:a6:d5:9c:15:bd:f1:65:e2:f3:c1:9e:18: 8c:88:24:a2:c5:78:b4:71:fe:4e:3c:28:2b:77:e6: d8:48:29:73:2f:10:bd:6c:58:08:b3:65:85:7d:2a: 32:f3:39:1c:4e:a3:b9:25:5a:49:2e:91:45:2f:f1: 95:6d:35:53:d4:31:bd:82:62:89:b6:68:24:b4:25: 9a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:45:00:74:11:81:F5:F6:79:9A:24:56:8A:77:3B:68:07:60:3E:CD X509v3 Authority Key Identifier: keyid:E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:aa:7d:82:f0:bd:86:6d:47:fb:d0:4b:58:aa:f2:ae:74:45: 79:0c:37:af:71:03:4a:bb:c2:39:e1:32:f9:64:f6:42:85:39: 67:6d:4b:5a:56:6c:65:96:43:80:7e:d4:c0:86:8f:87:f8:a1: af:da:ad:f7:bd:ad:03:fe:ed:94:00:f8:68:c5:be:a3:da:a8: a8:dc:25:9c:0f:dc:80:9d:53:7c:df:21:f2:aa:d4:4a:8a:ba: b3:14:32:11:73:9c:55:d8:39:95:22:1a:5e:d6:0e:1e:93:71: 02:4b:14:ea:72:7e:a6:8e:6f:02:00:f8:a1:a4:19:31:cd:b2: e1:8e:90:de:43:d2:b7:5c:14:fa:94:fd:11:a9:09:33:f5:6c: a4:c6:89:3a:d2:ad:f1:cb:de:0f:ec:41:0b:b9:2f:69:e9:44: be:36:14:0c:11:bb:f2:45:09:d4:eb:07:ee:b3:3c:9e:5a:b1: 09:fd:16:90:f7:f9:94:ae:3d:06:f2:22:d4:ed:61:84:b3:08: 6a:40:7a:18:44:f5:df:3d:21:9f:4d:d7:ff:2b:bf:a8:30:95: 27:ab:0e:89:e0:7b:01:b2:37:6e:a2:5c:72:83:55:ea:60:c9: d1:56:0b:15:5f:a3:89:78:bb:bb:bf:5a:35:d7:84:f1:9a:f2: c4:25:15:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOJwNNuBCplBm2O0EjvVi6XGAw5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUz MkI4RTk0MzAeFw0yNTA3MjAwMDE2MDdaFw0yNTA3MjMwOTI3MDdaMDMxMTAvBgNV BAMTKDg1NDUwMDc0MTE4MUY1RjY3OTlBMjQ1NjhBNzczQjY4MDc2MDNFQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhUe/3S+iXeDqNsL8wX3DK+YFC bMqzSx+nKdVI/WHknJv9hxdPbta9DE3YhUgciHxgmbc5TgR3DcG9Sfp2kUuuQJYf RCscr6x8GKxGL/Wq0pB4uFb2UsSrkyfitnW9iu+MFhFISW0weny+1nkReay5L0JJ wWqwYfuyDlhwGCktexNbcLxKgJC4ZpDuQSO2UtYaYba8BN6cfr+7QWE/KBL+FWkF SV0Kxv4d7yVAHxhE2u4sezPQBabVnBW98WXi88GeGIyIJKLFeLRx/k48KCt35thI KXMvEL1sWAizZYV9KjLzORxOo7klWkkukUUv8ZVtNVPUMb2CYom2aCS0JZpnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhUUAdBGB9fZ5miRWinc7aAdgPs0wHwYDVR0j BBgwFoAU4p6DwsWJf6T2zv48N+4aZTK46UMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTdjZjlhMC1lOTI3LTQ4MTQtODQ0Ny04YjNhMDAyNzYwYTgvMC9FMjlFODNDMkM1 ODk3RkE0RjZDRUZFM0MzN0VFMUE2NTMyQjhFOTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUzMkI4 RTk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk3Y2Y5YTAtZTkyNy00ODE0LTg0 NDctOGIzYTAwMjc2MGE4LzAvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFB NjUzMkI4RTk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANeqfYLwvYZtR/vQS1iq8q50RXkMN69xA0q7 wjnhMvlk9kKFOWdtS1pWbGWWQ4B+1MCGj4f4oa/arfe9rQP+7ZQA+GjFvqPaqKjc JZwP3ICdU3zfIfKq1EqKurMUMhFznFXYOZUiGl7WDh6TcQJLFOpyfqaObwIA+KGk GTHNsuGOkN5D0rdcFPqU/RGpCTP1bKTGiTrSrfHL3g/sQQu5L2npRL42FAwRu/JF CdTrB+6zPJ5asQn9FpD3+ZSuPQbyItTtYYSzCGpAehhE9d89IZ9N1/8rv6gwlSer DongewGyN26iXHKDVepgydFWCxVfo4l4u7u/WjXXhPGa8sQlFeE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:18:12 2025 by rpki-client