$ rpki-client -vvf repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft File: E0D54A271CD04583E0304613C7075C15FA03E497.mft (raw, json) Hash identifier: tr3NQ8A849VFOC9U9n+xHVpWqmAW9BcG1pXvxgVm9tY= Subject key identifier: A0:02:2F:7F:DD:33:EE:0F:77:CF:FD:34:7C:9A:1F:B9:DD:44:E9:6C Authority key identifier: E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 Certificate issuer: /CN=E0D54A271CD04583E0304613C7075C15FA03E497 Certificate serial: 788E9DF4FC24AF72EBB457FCE04F0EEBFF26B278 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft Manifest number: 03C2 Signing time: Mon 21 Jul 2025 12:42:15 +0000 Manifest this update: Mon 21 Jul 2025 12:37:15 +0000 Manifest next update: Thu 24 Jul 2025 17:35:15 +0000 Files and hashes: 1: E0D54A271CD04583E0304613C7075C15FA03E497.crl (hash: Xar2gxeRyOrz91TzOSlAHuAX+5hhhM2dIuXYdqjTpME=) 2: 3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa (hash: iaC5WCoK/QU+xKaB0vnR2mTORiwDsx2/t1ElkG42yQ8=) 3: 323430343a636263303a3a2f33322d3332203d3e20313338383433.roa (hash: CUX/FZUFqFLVmfqcGn4Uxf38ndBFpWWkwqBCc1O0Nwg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 17:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:8e:9d:f4:fc:24:af:72:eb:b4:57:fc:e0:4f:0e:eb:ff:26:b2:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0D54A271CD04583E0304613C7075C15FA03E497 Validity Not Before: Jul 21 12:37:15 2025 GMT Not After : Jul 24 17:35:15 2025 GMT Subject: CN=A0022F7FDD33EE0F77CFFD347C9A1FB9DD44E96C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:69:54:9b:80:55:81:25:9a:a2:77:aa:06:b4: 8d:e9:be:54:ba:85:e1:c9:e9:6a:fc:8c:71:e0:be: 03:a6:fa:a3:86:c0:2f:4d:02:5a:a8:7a:19:80:f1: 09:a5:da:b7:68:9a:20:c4:0b:a6:cb:3c:85:f2:77: 13:60:98:9b:d6:bb:61:ef:55:e2:45:c9:41:16:41: 5f:f6:1e:df:43:9f:da:6c:8c:bf:1c:72:32:c1:1f: ea:cd:be:04:49:f5:98:86:e4:f0:14:5a:7f:73:91: 2f:b8:50:9b:4f:d7:da:f2:da:69:f5:68:7d:c5:13: 70:3c:8e:be:19:f0:50:49:21:06:19:99:d6:64:3c: 3b:98:7a:9b:c9:5e:99:44:e2:b5:5f:e6:96:01:ca: 3e:64:89:8d:67:02:3d:af:d0:1c:3c:72:83:55:dc: 07:0c:62:eb:52:73:80:96:ee:c2:89:1a:8b:c7:93: fa:c0:ee:46:92:4b:e9:ec:ff:a8:9f:13:3d:00:79: 7e:d5:15:f6:13:89:b1:46:48:c6:20:7b:23:3f:3a: 59:a3:37:a2:85:bf:09:12:0b:77:72:8e:31:bf:c2: 3c:c4:40:fd:fe:8e:87:0c:d1:f2:e8:00:cc:96:16: d6:66:4e:8c:15:f3:8a:49:59:4a:f9:cc:18:1d:79: da:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:02:2F:7F:DD:33:EE:0F:77:CF:FD:34:7C:9A:1F:B9:DD:44:E9:6C X509v3 Authority Key Identifier: keyid:E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:0c:0a:25:84:48:86:7c:7b:cd:db:9d:36:6a:f9:3b:80:4b: bb:7a:86:41:f3:2b:07:08:cc:3e:b5:e2:28:f5:56:b6:c7:e3: 18:1a:d3:f2:ac:9b:c0:6a:50:0b:03:93:56:a4:0a:04:83:a0: d2:26:11:99:54:df:81:f8:34:7e:d9:1d:05:cb:46:08:78:cb: 9c:26:14:26:75:d1:4d:46:59:b4:e9:ce:64:fb:95:85:06:c0: 22:28:08:7c:15:e0:f4:67:9b:0a:a6:e1:65:ce:b1:4a:7b:b2: ad:aa:9e:f9:3f:cb:35:e3:b4:61:28:d7:1d:53:c4:56:fb:c7: 40:8b:99:d2:7a:99:ad:83:ab:8a:fb:d1:11:5f:f0:a9:5a:98: 5e:1c:a1:d7:c9:98:11:ee:3a:41:32:dc:49:a2:11:b0:f4:cd: 43:13:8b:46:1e:b1:1a:98:b2:4a:04:69:3c:16:22:49:13:a7: 88:fc:ca:dd:d2:67:b2:26:21:15:ed:35:bd:9d:03:e4:41:74: 1f:25:9f:e3:b8:aa:2c:d8:da:57:7a:97:14:5d:13:46:f0:f3: b4:11:6e:e9:25:e4:c8:b2:c3:fe:8e:39:68:42:a5:d0:77:be: 86:e3:82:2c:3d:b7:1e:80:c7:f8:45:62:0f:a9:fe:99:39:b5: c6:33:c5:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeI6d9Pwkr3LrtFf84E8O6/8msngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVG QTAzRTQ5NzAeFw0yNTA3MjExMjM3MTVaFw0yNTA3MjQxNzM1MTVaMDMxMTAvBgNV BAMTKEEwMDIyRjdGREQzM0VFMEY3N0NGRkQzNDdDOUExRkI5REQ0NEU5NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaaVSbgFWBJZqid6oGtI3pvlS6 heHJ6Wr8jHHgvgOm+qOGwC9NAlqoehmA8Qml2rdomiDEC6bLPIXydxNgmJvWu2Hv VeJFyUEWQV/2Ht9Dn9psjL8ccjLBH+rNvgRJ9ZiG5PAUWn9zkS+4UJtP19ry2mn1 aH3FE3A8jr4Z8FBJIQYZmdZkPDuYepvJXplE4rVf5pYByj5kiY1nAj2v0Bw8coNV 3AcMYutSc4CW7sKJGovHk/rA7kaSS+ns/6ifEz0AeX7VFfYTibFGSMYgeyM/Olmj N6KFvwkSC3dyjjG/wjzEQP3+jocM0fLoAMyWFtZmTowV84pJWUr5zBgdedppAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoAIvf90z7g93z/00fJofud1E6WwwHwYDVR0j BBgwFoAU4NVKJxzQRYPgMEYTxwdcFfoD5JcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzU4NjdkOC0zZDZmLTQ4MTYtYjg0Zi1mZGQ1YzUwMmI2MzQvMC9FMEQ1NEEyNzFD RDA0NTgzRTAzMDQ2MTNDNzA3NUMxNUZBMDNFNDk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVGQTAz RTQ5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmM1ODY3ZDgtM2Q2Zi00ODE2LWI4 NGYtZmRkNWM1MDJiNjM0LzAvRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVD MTVGQTAzRTQ5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcMCiWESIZ8e83bnTZq+TuAS7t6hkHzKwcI zD614ij1VrbH4xga0/Ksm8BqUAsDk1akCgSDoNImEZlU34H4NH7ZHQXLRgh4y5wm FCZ10U1GWbTpzmT7lYUGwCIoCHwV4PRnmwqm4WXOsUp7sq2qnvk/yzXjtGEo1x1T xFb7x0CLmdJ6ma2Dq4r70RFf8KlamF4codfJmBHuOkEy3EmiEbD0zUMTi0YesRqY skoEaTwWIkkTp4j8yt3SZ7ImIRXtNb2dA+RBdB8ln+O4qizY2ld6lxRdE0bw87QR bukl5Miyw/6OOWhCpdB3vobjgiw9tx6Ax/hFYg+p/pk5tcYzxVI= -----END CERTIFICATE-----Generated at Wed Jul 23 02:01:55 2025 by rpki-client