$ rpki-client -vvf repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft File: E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft (raw, json) Hash identifier: qXn9WPWyDyED8HCxtlvz3UUTi0A0wWW40HPd/72PHzE= Subject key identifier: 4C:B3:56:BE:18:2D:00:19:05:7A:61:77:78:95:9D:CE:3F:8E:79:8E Authority key identifier: E9:8B:5C:8D:E6:CD:8A:83:09:2F:B5:55:78:38:8B:B5:5D:80:21:A5 Certificate issuer: /CN=E98B5C8DE6CD8A83092FB55578388BB55D8021A5 Certificate serial: 35BA8A97A4DB982D5DDA21E9599E768978D86E6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft Manifest number: 0166 Signing time: Tue 22 Jul 2025 21:31:20 +0000 Manifest this update: Tue 22 Jul 2025 21:26:20 +0000 Manifest next update: Fri 25 Jul 2025 22:31:20 +0000 Files and hashes: 1: 3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa (hash: RVW6NTEFxtaBVN2tG8HTXDlbU79ZyUomhDvpDJYoqdQ=) 2: E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl (hash: 6NZY3zuTGpTCXKCfVYuRQcmDEl6UIhtjH7OieZjEr2E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ba:8a:97:a4:db:98:2d:5d:da:21:e9:59:9e:76:89:78:d8:6e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E98B5C8DE6CD8A83092FB55578388BB55D8021A5 Validity Not Before: Jul 22 21:26:20 2025 GMT Not After : Jul 25 22:31:20 2025 GMT Subject: CN=4CB356BE182D0019057A617778959DCE3F8E798E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:24:96:4e:7b:d2:45:0e:ac:6a:88:69:19:77: 93:d6:c7:70:96:f7:b2:b5:54:f6:a6:70:35:de:d9: 70:ec:af:78:98:8a:fa:4c:40:94:59:b4:ae:8f:40: 35:ae:b7:6a:36:2d:5c:c1:e5:74:30:6b:0a:9f:53: 72:22:cf:94:8d:3c:a3:ad:2a:63:7d:8a:cc:72:0b: 57:05:ba:71:9e:c9:87:79:ae:99:a7:9d:13:09:42: 08:3f:ff:03:97:2d:5e:23:34:1e:1c:5e:8a:3d:04: 05:22:91:37:39:2d:17:e9:8a:8f:2e:83:b7:56:39: d4:16:46:a2:3a:15:da:17:57:23:45:08:00:9c:71: 35:7f:33:fa:e4:85:47:74:a3:64:07:70:53:46:2d: 72:4b:1c:b9:61:70:e3:06:4d:08:7f:1e:d4:56:6b: 8d:07:97:12:d9:38:4a:38:fe:05:f9:2d:94:04:7b: 8e:be:dc:0a:32:78:ed:80:3c:72:37:d7:10:98:2a: 54:41:d7:01:57:cd:47:a7:c3:2c:49:27:c0:d0:2a: 9d:3a:c9:f2:c0:ff:34:25:66:3a:32:b9:95:1b:7d: ad:67:ea:70:60:a1:ce:d3:a4:ae:a8:f5:8f:83:fe: e5:a2:81:90:8f:02:e1:4f:d6:27:95:79:f1:d8:7c: b4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B3:56:BE:18:2D:00:19:05:7A:61:77:78:95:9D:CE:3F:8E:79:8E X509v3 Authority Key Identifier: keyid:E9:8B:5C:8D:E6:CD:8A:83:09:2F:B5:55:78:38:8B:B5:5D:80:21:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:60:1c:24:28:12:e7:aa:4f:44:0b:7c:81:56:89:d5:a3:8a: 54:ab:ce:31:35:fe:05:b8:fe:05:06:fd:aa:c8:19:65:14:5b: 3d:4f:c7:52:71:4a:36:63:64:e6:10:7c:79:54:d0:ef:2c:50: 0f:77:17:d0:c6:e4:e7:b7:d5:26:89:43:d3:54:df:a7:42:4a: c5:5b:fe:aa:40:5f:3d:a7:df:18:3b:6a:68:21:3d:38:3e:fc: d5:87:c4:d7:b1:b1:b5:a0:57:65:b0:4c:ef:1f:9a:7e:8a:e9: 1d:5a:6a:e9:93:67:c0:a9:6f:ba:e4:b8:a1:aa:8b:87:da:f6: c0:11:86:a3:cc:7f:23:11:89:d1:b4:78:d1:27:53:53:1e:17: f4:9e:14:fd:a8:bc:cd:51:fb:f6:e8:27:6e:3a:63:df:4a:a4: 3d:8f:05:40:e8:1b:cc:df:c7:cd:91:55:52:74:64:37:16:d6: d5:8f:57:51:7f:01:7a:c6:30:e8:84:19:83:cb:4b:3d:29:87: 7d:dc:e5:c3:19:17:35:8c:ae:c6:af:7d:3b:10:71:61:fe:42: 5f:1c:ca:e8:fa:9a:e1:a6:a4:ba:20:3f:38:c6:ea:10:ac:ff: 9e:c6:80:56:30:f1:b2:65:39:09:25:32:20:ab:60:02:f7:45: 30:dd:56:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNbqKl6TbmC1d2iHpWZ52iXjYbmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhCQjU1 RDgwMjFBNTAeFw0yNTA3MjIyMTI2MjBaFw0yNTA3MjUyMjMxMjBaMDMxMTAvBgNV BAMTKDRDQjM1NkJFMTgyRDAwMTkwNTdBNjE3Nzc4OTU5RENFM0Y4RTc5OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQJJZOe9JFDqxqiGkZd5PWx3CW 97K1VPamcDXe2XDsr3iYivpMQJRZtK6PQDWut2o2LVzB5XQwawqfU3Iiz5SNPKOt KmN9isxyC1cFunGeyYd5rpmnnRMJQgg//wOXLV4jNB4cXoo9BAUikTc5LRfpio8u g7dWOdQWRqI6FdoXVyNFCACccTV/M/rkhUd0o2QHcFNGLXJLHLlhcOMGTQh/HtRW a40HlxLZOEo4/gX5LZQEe46+3AoyeO2APHI31xCYKlRB1wFXzUenwyxJJ8DQKp06 yfLA/zQlZjoyuZUbfa1n6nBgoc7TpK6o9Y+D/uWigZCPAuFP1ieVefHYfLSFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTLNWvhgtABkFemF3eJWdzj+OeY4wHwYDVR0j BBgwFoAU6YtcjebNioMJL7VVeDiLtV2AIaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmRhZmU1Ni04NDM0LTRiYmEtYjE3Ni0zNWU4NzJjMWFjMTgvMC9FOThCNUM4REU2 Q0Q4QTgzMDkyRkI1NTU3ODM4OEJCNTVEODAyMUE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhCQjU1RDgw MjFBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZkYWZlNTYtODQzNC00YmJhLWIx NzYtMzVlODcyYzFhYzE4LzAvRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhC QjU1RDgwMjFBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALVgHCQoEueqT0QLfIFWidWjilSrzjE1/gW4 /gUG/arIGWUUWz1Px1JxSjZjZOYQfHlU0O8sUA93F9DG5Oe31SaJQ9NU36dCSsVb /qpAXz2n3xg7amghPTg+/NWHxNexsbWgV2WwTO8fmn6K6R1aaumTZ8Cpb7rkuKGq i4fa9sARhqPMfyMRidG0eNEnU1MeF/SeFP2ovM1R+/boJ246Y99KpD2PBUDoG8zf x82RVVJ0ZDcW1tWPV1F/AXrGMOiEGYPLSz0ph33c5cMZFzWMrsavfTsQcWH+Ql8c yuj6muGmpLogPzjG6hCs/57GgFYw8bJlOQklMiCrYAL3RTDdVnM= -----END CERTIFICATE-----Generated at Thu Jul 24 12:00:26 2025 by rpki-client