$ rpki-client -vvf repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft File: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft (raw, json) Hash identifier: uyvSQjFxjua7ZPfAafYBoQ1MxRVxjpEhghbBaySdoew= Subject key identifier: 1C:14:4D:AD:9E:2F:24:BA:07:C6:A0:8B:5A:48:E4:E4:BB:37:9A:5E Authority key identifier: E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42 Certificate issuer: /CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42 Certificate serial: 144C911CAA7AEC470FB1B1B140E30DC105070600 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft Manifest number: 04F8 Signing time: Sun 20 Jul 2025 19:10:05 +0000 Manifest this update: Sun 20 Jul 2025 19:05:05 +0000 Manifest next update: Wed 23 Jul 2025 23:39:05 +0000 Files and hashes: 1: 35392e3135332e32342e302f32332d3233203d3e203539323835.roa (hash: 1SizngiTVzIbRBWH1t3CjVmzzkPKhWLCfAxINTFYNoo=) 2: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl (hash: XZMzkVsIKFTCbvItYV57KTivhcovrYMuUYQthlV4pOY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 23:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:4c:91:1c:aa:7a:ec:47:0f:b1:b1:b1:40:e3:0d:c1:05:07:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42 Validity Not Before: Jul 20 19:05:05 2025 GMT Not After : Jul 23 23:39:05 2025 GMT Subject: CN=1C144DAD9E2F24BA07C6A08B5A48E4E4BB379A5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:25:2e:11:6f:b0:94:41:4e:81:be:92:08:b3: 0b:ba:29:8a:ba:2f:e4:c6:ea:a6:ef:e9:57:5b:03: c2:16:1f:2a:dc:89:fa:ac:3d:8a:24:fd:eb:cb:7c: 2c:3e:25:79:9e:ec:6c:01:9f:8d:d9:bb:29:d2:3c: 91:de:18:cd:7b:52:b0:f3:19:43:22:70:48:c4:7d: e9:95:06:dc:6c:d6:17:4c:04:d2:a1:d4:97:8a:66: 27:7a:b6:5f:cf:9b:d5:27:32:ff:07:7d:d7:4a:c9: ca:80:4f:80:68:aa:ad:ed:d0:57:a3:bf:e2:35:11: 6f:b7:e1:49:04:42:53:e2:76:73:d9:90:2a:93:0b: 05:20:f7:f4:91:fd:ae:87:75:bd:76:ca:d1:81:00: 56:c8:a4:d2:72:99:06:fc:06:3b:05:eb:80:65:e9: 76:0d:59:1b:cf:d2:66:39:d0:ac:9f:f9:5f:a5:52: c8:59:25:e5:21:b6:bc:3a:f2:72:eb:69:f7:1d:03: d6:bd:fe:f2:5b:d5:a3:82:54:5e:6f:bd:4d:fd:f3: 92:a2:db:50:26:23:b1:b5:d3:d4:84:19:82:4a:60: 22:f7:9f:4a:cb:90:68:3f:c0:8f:34:ec:3c:a9:0a: 8f:30:ed:e5:30:b6:98:8a:26:b5:b0:f4:90:d9:e2: 32:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:14:4D:AD:9E:2F:24:BA:07:C6:A0:8B:5A:48:E4:E4:BB:37:9A:5E X509v3 Authority Key Identifier: keyid:E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a9:61:29:f6:b8:6b:9e:7e:e9:15:01:e0:02:4b:61:4e:48: 61:5c:18:25:d3:5f:fb:80:38:17:7d:69:9e:4c:9e:0a:02:2d: 6d:cd:19:11:b4:f1:9b:f1:ce:71:8a:10:b2:6c:0b:6c:bc:8d: 9c:1a:a2:86:22:ae:68:ad:f1:f6:47:d5:81:ea:c7:92:e6:db: 5b:ec:eb:cc:a9:d2:92:af:b4:6e:6b:20:c3:11:00:4d:84:66: 51:e9:d8:83:89:96:6b:68:48:fa:30:47:2c:eb:96:46:b4:cc: 01:40:01:61:58:f5:61:dd:c7:e4:ed:6f:fc:0c:65:4c:26:f8: 59:af:10:3d:07:c4:fa:c6:91:34:8e:37:59:21:cb:1c:dd:7a: e8:03:99:bd:81:83:17:ff:e7:ab:ab:61:64:0c:b0:0c:48:2b: 7c:b0:24:66:ac:6b:23:f5:8f:ce:fe:13:c5:d0:6f:29:a8:94: cb:dc:2f:5e:56:fc:4e:e7:63:11:fb:a8:bd:a1:5a:df:41:84: d1:95:a2:ae:85:06:9a:54:30:0d:6d:fa:00:b6:51:e6:8b:17: 3a:6c:cd:92:0c:a4:e7:d9:b2:c2:ff:5f:b2:7e:b4:90:25:19: 1a:84:07:b0:28:83:bc:18:28:be:ce:c6:22:80:77:f6:f9:eb: d6:80:39:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFEyRHKp67EcPsbGxQOMNwQUHBgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRDNTYw MUJERUE0MjAeFw0yNTA3MjAxOTA1MDVaFw0yNTA3MjMyMzM5MDVaMDMxMTAvBgNV BAMTKDFDMTQ0REFEOUUyRjI0QkEwN0M2QTA4QjVBNDhFNEU0QkIzNzlBNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFJS4Rb7CUQU6BvpIIswu6KYq6 L+TG6qbv6VdbA8IWHyrcifqsPYok/evLfCw+JXme7GwBn43ZuynSPJHeGM17UrDz GUMicEjEfemVBtxs1hdMBNKh1JeKZid6tl/Pm9UnMv8HfddKycqAT4Boqq3t0Fej v+I1EW+34UkEQlPidnPZkCqTCwUg9/SR/a6Hdb12ytGBAFbIpNJymQb8BjsF64Bl 6XYNWRvP0mY50Kyf+V+lUshZJeUhtrw68nLrafcdA9a9/vJb1aOCVF5vvU3985Ki 21AmI7G109SEGYJKYCL3n0rLkGg/wI807DypCo8w7eUwtpiKJrWw9JDZ4jIzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHBRNrZ4vJLoHxqCLWkjk5Ls3ml4wHwYDVR0j BBgwFoAU4PugPWtolc61NyLO/blMVgG96kIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTFmM2IzNy1iZDU0LTQ5MTEtOTA1Yi0zNjU0OTY2ODdjOGQvMC9FMEZCQTAzRDZC Njg5NUNFQjUzNzIyQ0VGREI5NEM1NjAxQkRFQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRDNTYwMUJE RUE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExZjNiMzctYmQ1NC00OTExLTkw NWItMzY1NDk2Njg3YzhkLzAvRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRD NTYwMUJERUE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+pYSn2uGuefukVAeACS2FOSGFcGCXTX/uA OBd9aZ5MngoCLW3NGRG08ZvxznGKELJsC2y8jZwaooYirmit8fZH1YHqx5Lm21vs 68yp0pKvtG5rIMMRAE2EZlHp2IOJlmtoSPowRyzrlka0zAFAAWFY9WHdx+Ttb/wM ZUwm+FmvED0HxPrGkTSON1khyxzdeugDmb2Bgxf/56urYWQMsAxIK3ywJGasayP1 j87+E8XQbymolMvcL15W/E7nYxH7qL2hWt9BhNGVoq6FBppUMA1t+gC2UeaLFzps zZIMpOfZssL/X7J+tJAlGRqEB7Aog7wYKL7OxiKAd/b569aAOeQ= -----END CERTIFICATE-----Generated at Mon Jul 21 18:12:30 2025 by rpki-client