$ rpki-client -vvf repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft File: E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft (raw, json) Hash identifier: 8MM8yqaykbcKXTGIuOynEJJ1QTEBa+t+iVXLa2gHxB0= Subject key identifier: 5D:8D:BA:42:43:E8:F5:9D:2C:7A:3C:2A:1F:9E:5E:3D:BD:8B:25:5A Authority key identifier: E9:8B:5C:8D:E6:CD:8A:83:09:2F:B5:55:78:38:8B:B5:5D:80:21:A5 Certificate issuer: /CN=E98B5C8DE6CD8A83092FB55578388BB55D8021A5 Certificate serial: 5B93CC9F6FF9305296B5B314254668D1EDFD3E65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft Manifest number: 0167 Signing time: Thu 24 Jul 2025 22:41:20 +0000 Manifest this update: Thu 24 Jul 2025 22:36:20 +0000 Manifest next update: Mon 28 Jul 2025 03:40:20 +0000 Files and hashes: 1: E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl (hash: mn6ZVwH9ibXPFeYNk2LTpca0jUF/4etqdd8/P5HVNPk=) 2: 3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa (hash: RVW6NTEFxtaBVN2tG8HTXDlbU79ZyUomhDvpDJYoqdQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:93:cc:9f:6f:f9:30:52:96:b5:b3:14:25:46:68:d1:ed:fd:3e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E98B5C8DE6CD8A83092FB55578388BB55D8021A5 Validity Not Before: Jul 24 22:36:20 2025 GMT Not After : Jul 28 03:40:20 2025 GMT Subject: CN=5D8DBA4243E8F59D2C7A3C2A1F9E5E3DBD8B255A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ba:48:05:60:28:80:ef:86:95:e1:84:52:95: ed:67:77:98:cf:ae:c8:0c:e0:94:0c:b5:61:33:99: 35:3f:dc:72:ab:b0:19:71:75:d6:12:b5:91:73:5d: ca:ba:7b:94:8d:d0:c6:b0:21:24:bb:87:ac:64:c6: 3c:90:f9:40:9a:4a:1d:02:0c:d9:da:12:4d:54:ad: ac:eb:bc:e9:f0:0c:8e:ae:09:5f:6e:7d:90:74:02: a1:01:20:a6:06:5f:f8:e0:b1:6f:04:a0:80:13:74: 85:28:97:38:fa:bb:b2:68:2f:b7:f3:ac:7c:67:3f: a3:44:b5:be:9f:7f:0a:2e:b1:ef:de:2a:0c:37:7e: 48:9b:20:b2:e0:52:b9:84:6c:5e:9e:df:8f:92:2f: a4:86:07:8b:5e:36:79:6d:8e:07:ce:28:07:0c:90: e8:75:bf:72:f4:de:6d:2a:8d:bf:65:e8:b2:a4:f4: 8b:01:19:0b:4f:a7:46:5d:f4:9c:ad:96:b5:2e:4b: f5:e4:d7:4c:79:6c:1f:d5:bc:49:18:40:da:d6:db: b2:51:c0:73:e5:87:e5:96:ef:d5:b9:e0:ec:7d:37: d6:43:b7:c8:5e:01:2a:15:58:1e:6e:2a:f7:fb:9a: a5:3c:24:ed:82:1e:75:79:47:65:4b:a9:94:89:31: 6a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:8D:BA:42:43:E8:F5:9D:2C:7A:3C:2A:1F:9E:5E:3D:BD:8B:25:5A X509v3 Authority Key Identifier: keyid:E9:8B:5C:8D:E6:CD:8A:83:09:2F:B5:55:78:38:8B:B5:5D:80:21:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:17:40:b9:19:ce:24:67:ba:fb:da:2e:73:f1:59:6b:2b:bc: ad:4c:e6:50:f2:23:a6:11:1b:f8:aa:f2:5d:65:ad:89:74:5b: de:1e:20:bd:d7:69:f6:b0:f5:6f:f3:d4:6e:e7:92:36:b6:f6: 09:37:61:d1:b0:10:14:d1:cc:89:5f:8c:a6:50:6e:52:2e:4e: 5e:b0:47:1c:4f:9b:3c:d7:75:eb:2b:11:a0:97:d7:eb:d3:53: d4:75:c5:9f:2c:87:1b:74:ff:12:c9:87:55:d0:57:d3:c4:ef: 0a:9b:28:05:55:dd:5c:4d:c8:11:22:ea:be:6c:ee:c4:ed:5a: b5:03:b9:80:82:47:78:a9:dd:56:db:52:f7:32:c1:d1:9e:a4: 97:01:bd:e6:e0:2d:d5:fc:5b:1c:e8:51:ee:29:d8:6d:4d:e1: 5a:d8:34:35:f4:09:65:4b:ed:76:ea:6c:7c:d2:54:68:f4:a7: b4:d2:88:fd:68:61:04:3f:11:ef:60:d1:06:a7:96:64:3d:3c: 66:b5:80:9d:60:f5:68:c3:0c:f6:69:59:f3:b8:99:7c:23:6e: 58:b7:db:25:9f:7e:9c:34:6d:d7:c9:15:5d:9a:ac:38:1f:ac: 73:5d:73:21:37:7a:48:bb:f0:44:8e:82:5d:ff:f2:a0:a4:64: 65:3b:01:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW5PMn2/5MFKWtbMUJUZo0e39PmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhCQjU1 RDgwMjFBNTAeFw0yNTA3MjQyMjM2MjBaFw0yNTA3MjgwMzQwMjBaMDMxMTAvBgNV BAMTKDVEOERCQTQyNDNFOEY1OUQyQzdBM0MyQTFGOUU1RTNEQkQ4QjI1NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBukgFYCiA74aV4YRSle1nd5jP rsgM4JQMtWEzmTU/3HKrsBlxddYStZFzXcq6e5SN0MawISS7h6xkxjyQ+UCaSh0C DNnaEk1UrazrvOnwDI6uCV9ufZB0AqEBIKYGX/jgsW8EoIATdIUolzj6u7JoL7fz rHxnP6NEtb6ffwouse/eKgw3fkibILLgUrmEbF6e34+SL6SGB4teNnltjgfOKAcM kOh1v3L03m0qjb9l6LKk9IsBGQtPp0Zd9JytlrUuS/Xk10x5bB/VvEkYQNrW27JR wHPlh+WW79W54Ox9N9ZDt8heASoVWB5uKvf7mqU8JO2CHnV5R2VLqZSJMWonAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXY26QkPo9Z0sejwqH55ePb2LJVowHwYDVR0j BBgwFoAU6YtcjebNioMJL7VVeDiLtV2AIaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmRhZmU1Ni04NDM0LTRiYmEtYjE3Ni0zNWU4NzJjMWFjMTgvMC9FOThCNUM4REU2 Q0Q4QTgzMDkyRkI1NTU3ODM4OEJCNTVEODAyMUE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhCQjU1RDgw MjFBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZkYWZlNTYtODQzNC00YmJhLWIx NzYtMzVlODcyYzFhYzE4LzAvRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhC QjU1RDgwMjFBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYXQLkZziRnuvvaLnPxWWsrvK1M5lDyI6YR G/iq8l1lrYl0W94eIL3Xafaw9W/z1G7nkja29gk3YdGwEBTRzIlfjKZQblIuTl6w RxxPmzzXdesrEaCX1+vTU9R1xZ8shxt0/xLJh1XQV9PE7wqbKAVV3VxNyBEi6r5s 7sTtWrUDuYCCR3ip3VbbUvcywdGepJcBvebgLdX8WxzoUe4p2G1N4VrYNDX0CWVL 7XbqbHzSVGj0p7TSiP1oYQQ/Ee9g0QanlmQ9PGa1gJ1g9WjDDPZpWfO4mXwjbli3 2yWffpw0bdfJFV2arDgfrHNdcyE3eki78ESOgl3/8qCkZGU7AW8= -----END CERTIFICATE-----Generated at Fri Jul 25 06:23:22 2025 by rpki-client