$ rpki-client -vvf repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft File: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft (raw, json) Hash identifier: LqomzA4NagrVumnEPpJw6Tn/p3eoUKTHueeI2MxRb+o= Subject key identifier: A3:82:4A:60:84:90:7B:86:40:CE:85:29:81:A3:17:F7:1F:12:72:F7 Authority key identifier: E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE Certificate issuer: /CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE Certificate serial: 0E3491D6F9A2647CD70483D5371B2FC25B9E433F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft Manifest number: 0212 Signing time: Sun 20 Jul 2025 15:20:51 +0000 Manifest this update: Sun 20 Jul 2025 15:15:51 +0000 Manifest next update: Thu 24 Jul 2025 00:09:51 +0000 Files and hashes: 1: 3130332e3137322e3139342e302f32332d3233203d3e20313437303735.roa (hash: xYxxyrQkuQeP1ZXr19Z8s6G5oCtciWVbaGSbTT9Dbxg=) 2: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl (hash: Qz3mwyDYRUg++/AtiaZ96gpuU7ncouki15gRY6ncZnk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:34:91:d6:f9:a2:64:7c:d7:04:83:d5:37:1b:2f:c2:5b:9e:43:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE Validity Not Before: Jul 20 15:15:51 2025 GMT Not After : Jul 24 00:09:51 2025 GMT Subject: CN=A3824A6084907B8640CE852981A317F71F1272F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a6:3e:43:bd:72:14:b8:a2:1d:c1:3d:ee:a1: e4:b0:81:e3:39:59:80:a9:e5:55:92:65:35:57:0e: 1f:db:7d:5f:66:20:88:7c:02:0a:e8:32:a9:3c:4d: 9b:fc:ca:c6:e0:aa:57:fe:01:3c:1e:fb:96:f8:78: 9a:0a:a5:43:1f:80:16:04:fa:68:4e:b1:db:10:22: f2:6d:c9:1e:e4:fe:94:9e:85:a1:5d:26:32:a7:64: de:3d:34:7d:52:9a:31:61:d5:71:5c:c0:6b:06:87: a0:51:c4:07:93:a3:3b:1f:9c:1b:19:87:4c:9d:bb: 83:f7:1c:9c:00:27:28:f5:40:20:cb:a1:fb:43:43: b1:05:96:00:8a:01:8f:dd:1d:76:79:cf:e3:6b:c0: c9:73:e6:38:e2:ba:1d:6e:fb:c9:9a:db:2e:29:bd: 3a:d1:ad:ce:77:e3:9c:cc:08:2d:60:f1:a7:b7:7c: eb:80:2f:a4:d6:9b:2e:6c:ca:98:28:75:b0:fb:23: 37:2d:d3:45:12:41:f9:3b:43:42:2d:d9:8b:a3:2b: a0:47:4f:52:26:6c:1e:e3:0a:70:fb:1b:bc:d5:f6: 27:05:26:f7:0d:06:5c:b9:3b:b5:65:df:43:35:8f: cd:5c:32:07:3c:0e:76:90:ad:68:43:bf:3d:33:ae: 9a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:82:4A:60:84:90:7B:86:40:CE:85:29:81:A3:17:F7:1F:12:72:F7 X509v3 Authority Key Identifier: keyid:E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:62:3f:08:1e:80:13:d8:8a:b8:87:10:a0:ba:86:62:c6:d3: 4b:fc:a6:f1:16:2d:d0:30:5a:4d:ee:bf:c4:e9:f7:1c:61:9c: e6:1d:1c:fa:35:82:1b:20:bf:1c:4e:bf:41:a5:17:42:7b:69: fa:c4:ba:a5:28:cf:5a:6d:07:d2:90:20:e7:1f:e7:a7:90:f9: 58:75:be:92:bd:e2:7c:aa:ea:03:c4:5d:5c:cb:12:46:6e:5a: 23:d0:50:72:cb:c8:83:06:b7:af:a7:78:3b:c5:c9:0e:21:89: 6e:60:e9:1f:02:1e:d8:34:21:42:a4:4e:4a:6a:52:7e:53:fa: 75:60:ec:6b:28:5f:53:b6:d0:ba:53:92:77:03:7e:cb:23:e9: b1:7a:b3:11:97:3c:a5:48:46:f8:df:7b:82:af:c3:80:31:8d: ad:3c:39:02:49:87:47:5a:f0:85:f5:67:56:06:9a:1c:cf:fa: ec:61:f3:a9:83:83:47:f8:2d:87:7f:0c:04:38:41:be:b6:a2: 96:43:ad:63:11:b4:9b:0d:07:63:fd:ff:92:26:f1:a5:f0:db: 89:b9:9f:d3:6c:9a:7e:de:ce:b8:8c:e9:5f:05:29:20:88:4e: 65:82:94:d6:27:a3:c5:e0:33:b1:b3:8d:e3:0f:e3:fd:30:bc: 67:53:f2:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDjSR1vmiZHzXBIPVNxsvwlueQz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3 QjJBRTRCRTAeFw0yNTA3MjAxNTE1NTFaFw0yNTA3MjQwMDA5NTFaMDMxMTAvBgNV BAMTKEEzODI0QTYwODQ5MDdCODY0MENFODUyOTgxQTMxN0Y3MUYxMjcyRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMpj5DvXIUuKIdwT3uoeSwgeM5 WYCp5VWSZTVXDh/bfV9mIIh8AgroMqk8TZv8ysbgqlf+ATwe+5b4eJoKpUMfgBYE +mhOsdsQIvJtyR7k/pSehaFdJjKnZN49NH1SmjFh1XFcwGsGh6BRxAeTozsfnBsZ h0ydu4P3HJwAJyj1QCDLoftDQ7EFlgCKAY/dHXZ5z+NrwMlz5jjiuh1u+8ma2y4p vTrRrc5345zMCC1g8ae3fOuAL6TWmy5sypgodbD7Izct00USQfk7Q0It2YujK6BH T1ImbB7jCnD7G7zV9icFJvcNBly5O7Vl30M1j81cMgc8DnaQrWhDvz0zrpq7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo4JKYISQe4ZAzoUpgaMX9x8ScvcwHwYDVR0j BBgwFoAU5IY04db7LooGpIgltNfuxHsq5L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2VjMmNiNi0zNWFkLTQxMDEtOTgyZS0yZTM0ZDU2NmVmZGEvMC9FNDg2MzRFMUQ2 RkIyRThBMDZBNDg4MjVCNEQ3RUVDNDdCMkFFNEJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3QjJB RTRCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNlYzJjYjYtMzVhZC00MTAxLTk4 MmUtMmUzNGQ1NjZlZmRhLzAvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VF QzQ3QjJBRTRCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9iPwgegBPYiriHEKC6hmLG00v8pvEWLdAw Wk3uv8Tp9xxhnOYdHPo1ghsgvxxOv0GlF0J7afrEuqUoz1ptB9KQIOcf56eQ+Vh1 vpK94nyq6gPEXVzLEkZuWiPQUHLLyIMGt6+neDvFyQ4hiW5g6R8CHtg0IUKkTkpq Un5T+nVg7GsoX1O20LpTkncDfssj6bF6sxGXPKVIRvjfe4Kvw4Axja08OQJJh0da 8IX1Z1YGmhzP+uxh86mDg0f4LYd/DAQ4Qb62opZDrWMRtJsNB2P9/5Im8aXw24m5 n9Nsmn7ezriM6V8FKSCITmWClNYno8XgM7GzjeMP4/0wvGdT8qk= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:43 2025 by rpki-client