$ rpki-client -vvf repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft File: E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft (raw, json) Hash identifier: LwyOjpyAbgqfVMw6WiXCxHX1BvYO9YiRm40/Gus5eNI= Subject key identifier: AF:38:AC:71:46:61:12:C3:FD:27:47:39:F5:C2:4C:2A:B4:73:A6:7F Authority key identifier: E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C Certificate issuer: /CN=E530A7B43C0C79FD8707007080E2F7AEA478FD1C Certificate serial: 334635EDAA417B21107E9BFCA040C54245504123 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft Manifest number: 04F0 Signing time: Sat 19 Jul 2025 06:40:00 +0000 Manifest this update: Sat 19 Jul 2025 06:35:00 +0000 Manifest next update: Tue 22 Jul 2025 15:37:00 +0000 Files and hashes: 1: 3230322e3136322e33322e302f32302d3234203d3e203137393936.roa (hash: 7t1UfL5E/ZJwSEO7orDivflRDFpoQvNkURGau+OZ9WE=) 2: E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl (hash: S6VVSFzbSh8MZaF/7F5WHXMdCLuLjjJi5AG6UkSSIdg=) 3: 323430323a613630303a3a2f33322d3332203d3e203137393936.roa (hash: mhHbC7IIWFFORZdV/WAdZvBGn0b08EabDQByz7GAvr4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 15:37:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:46:35:ed:aa:41:7b:21:10:7e:9b:fc:a0:40:c5:42:45:50:41:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E530A7B43C0C79FD8707007080E2F7AEA478FD1C Validity Not Before: Jul 19 06:35:00 2025 GMT Not After : Jul 22 15:37:00 2025 GMT Subject: CN=AF38AC71466112C3FD274739F5C24C2AB473A67F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:84:87:fa:1e:46:ee:2b:9e:d9:30:f3:9d:b0: d4:0a:9e:41:72:5f:68:c2:c3:c2:75:e8:f8:e1:7f: 2e:55:38:07:3e:52:93:b5:3a:76:f7:1f:7a:93:8a: d7:34:df:aa:bb:20:03:af:31:ee:50:f3:be:65:23: 90:c1:72:f8:62:89:a4:d6:10:86:e5:93:c4:ab:e4: b3:2d:9e:4a:11:5d:b1:11:d7:18:ac:8a:6e:df:ec: a5:02:a8:ca:d5:12:d4:69:59:d6:0f:9a:42:4f:10: cc:00:51:44:34:66:ec:e7:4d:0a:25:43:5c:e2:f1: 92:7e:c9:9c:79:38:d5:f3:b9:a4:f5:bf:ca:b0:58: 88:dd:40:5a:9a:51:9b:ce:dc:38:39:84:cf:74:b6: 46:3a:ba:c6:ab:6a:75:13:7f:f8:75:7e:f3:6c:66: 70:08:25:02:ce:d5:c3:4e:ef:39:26:3b:e9:06:18: 34:4b:02:b7:0f:65:d5:ea:91:7d:5b:f1:30:fc:c5: e4:09:39:fd:7a:89:37:3d:2f:86:41:75:56:9e:ec: 9e:bf:3a:85:85:a0:b5:be:a1:c4:ab:09:d6:d0:81: b3:3b:1c:0f:24:ec:7f:b5:55:7f:2a:ae:a0:4e:6d: 2d:41:72:02:29:d9:3b:f1:83:1d:42:8e:a2:d9:2f: 1d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:38:AC:71:46:61:12:C3:FD:27:47:39:F5:C2:4C:2A:B4:73:A6:7F X509v3 Authority Key Identifier: keyid:E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:fc:85:1e:17:cf:1f:08:44:58:80:25:be:7e:0b:e3:eb:82: 8d:27:a3:b5:c9:53:eb:3e:16:97:0e:5c:84:fd:07:85:ae:3d: 8a:7e:77:55:e9:8a:0e:8f:25:ee:29:d4:9d:ab:af:e9:54:f2: b8:94:e2:08:4b:31:26:3b:2f:f0:ff:43:0f:05:16:81:27:93: 45:d9:51:6b:a3:ce:e7:3f:70:f9:e5:a3:b8:46:f8:aa:f9:d8: 37:89:e4:90:45:22:73:9a:f2:c8:a3:fb:22:d5:61:5f:53:51: 8c:2d:9e:af:b0:1b:34:e6:34:40:a4:29:98:e8:56:4c:43:82: 9e:6b:07:0f:98:7e:05:5e:3e:f5:82:09:e5:db:9e:c9:cd:6c: b5:e8:6c:6f:a8:8a:cf:b5:bd:01:67:48:7a:b4:84:88:10:c4: 73:a3:87:1f:76:6d:e8:a8:d4:68:c8:53:40:b9:ee:db:a8:90: 89:e7:81:22:3d:29:42:ff:ec:55:a8:a0:7e:8f:d8:2b:6d:b0: 28:72:f9:d5:cf:f1:aa:8a:ad:9f:5d:f7:a9:26:c6:a4:b6:39: 88:ed:0b:30:7b:79:cb:ec:4d:58:5f:4a:b0:c0:fb:94:0a:97: bf:67:af:8a:eb:8a:9a:09:37:11:bf:44:29:02:9d:ab:49:b5: 4f:2a:f8:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM0Y17apBeyEQfpv8oEDFQkVQQSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3QUVB NDc4RkQxQzAeFw0yNTA3MTkwNjM1MDBaFw0yNTA3MjIxNTM3MDBaMDMxMTAvBgNV BAMTKEFGMzhBQzcxNDY2MTEyQzNGRDI3NDczOUY1QzI0QzJBQjQ3M0E2N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmhIf6HkbuK57ZMPOdsNQKnkFy X2jCw8J16Pjhfy5VOAc+UpO1Onb3H3qTitc036q7IAOvMe5Q875lI5DBcvhiiaTW EIblk8Sr5LMtnkoRXbER1xisim7f7KUCqMrVEtRpWdYPmkJPEMwAUUQ0ZuznTQol Q1zi8ZJ+yZx5ONXzuaT1v8qwWIjdQFqaUZvO3Dg5hM90tkY6usaranUTf/h1fvNs ZnAIJQLO1cNO7zkmO+kGGDRLArcPZdXqkX1b8TD8xeQJOf16iTc9L4ZBdVae7J6/ OoWFoLW+ocSrCdbQgbM7HA8k7H+1VX8qrqBObS1BcgIp2Tvxgx1CjqLZLx1xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrziscUZhEsP9J0c59cJMKrRzpn8wHwYDVR0j BBgwFoAU5TCntDwMef2HBwBwgOL3rqR4/RwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2QyZjJmOC0zNTEyLTQzZTUtYmUxNy1iMTFiNThmOTYwODMvMC9FNTMwQTdCNDND MEM3OUZEODcwNzAwNzA4MEUyRjdBRUE0NzhGRDFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3QUVBNDc4 RkQxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNkMmYyZjgtMzUxMi00M2U1LWJl MTctYjExYjU4Zjk2MDgzLzAvRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3 QUVBNDc4RkQxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALT8hR4Xzx8IRFiAJb5+C+Prgo0no7XJU+s+ FpcOXIT9B4WuPYp+d1Xpig6PJe4p1J2rr+lU8riU4ghLMSY7L/D/Qw8FFoEnk0XZ UWujzuc/cPnlo7hG+Kr52DeJ5JBFInOa8sij+yLVYV9TUYwtnq+wGzTmNECkKZjo VkxDgp5rBw+YfgVePvWCCeXbnsnNbLXobG+ois+1vQFnSHq0hIgQxHOjhx92beio 1GjIU0C57tuokInngSI9KUL/7FWooH6P2CttsChy+dXP8aqKrZ9d96kmxqS2OYjt CzB7ecvsTVhfSrDA+5QKl79nr4rripoJNxG/RCkCnatJtU8q+Ac= -----END CERTIFICATE-----Generated at Sun Jul 20 21:24:18 2025 by rpki-client