$ rpki-client -vvf repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft File: E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft (raw, json) Hash identifier: /sjCIYhV7iKpPIqtUF69IbUWIOe2AnnsHW2Iz9FZ/0E= Subject key identifier: 67:08:F7:FC:59:DC:F0:B2:7B:89:6B:59:F6:EB:6F:03:98:03:51:3B Authority key identifier: E3:1C:BD:E5:C6:F3:3D:AE:3C:A9:7A:01:1E:A4:F4:E6:39:FB:4F:F6 Certificate issuer: /CN=E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6 Certificate serial: 0631C3B060CB3F30B83D098582E526605BD770F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft Manifest number: 01EF Signing time: Mon 21 Jul 2025 16:02:09 +0000 Manifest this update: Mon 21 Jul 2025 15:57:09 +0000 Manifest next update: Fri 25 Jul 2025 01:15:09 +0000 Files and hashes: 1: E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.crl (hash: 6VNKc9EzVdlh5haLM4lwPiDaC4b8Fklx7Y1fvnBcJyE=) 2: 323030313a6466303a323363303a3a2f34382d3438203d3e20313437313235.roa (hash: cdNwI4+yNgJqJT5/jVDzUTVdyDgbKctLin9GOuO6hd8=) 3: 3130332e3137352e3230352e302f32342d3234203d3e20313437313235.roa (hash: gA20Kw8fUFXrS9IHBKhI6TIYPne1muz2nraM3qEZjXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.crl rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 01:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:31:c3:b0:60:cb:3f:30:b8:3d:09:85:82:e5:26:60:5b:d7:70:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6 Validity Not Before: Jul 21 15:57:09 2025 GMT Not After : Jul 25 01:15:09 2025 GMT Subject: CN=6708F7FC59DCF0B27B896B59F6EB6F039803513B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d4:a3:78:f1:e9:6a:d9:cc:ba:bf:bd:73:5b: 69:00:67:1b:d6:db:59:96:3b:97:87:57:4b:d7:4c: 3f:50:67:d9:ad:69:a8:43:b8:36:8e:b0:b0:b2:0e: a0:38:30:13:be:71:c6:bd:c3:57:18:47:fb:6f:d9: fd:50:e9:bd:0c:0d:6a:f6:3e:82:f0:78:5d:c9:a2: d5:49:71:e0:7b:76:ba:35:6c:6e:70:1f:ee:70:ac: bf:bf:a0:2f:ab:9f:2c:f1:ce:5e:05:82:c5:a2:d5: 29:df:f9:93:54:d3:af:ca:13:f7:cf:3c:2d:d4:92: 1e:ca:81:13:f6:27:b3:22:98:ba:24:1d:92:32:74: 8c:17:06:78:04:13:17:86:1a:1f:ce:22:d7:f1:ef: cf:e7:31:49:3e:45:25:1d:e9:8e:f8:01:fe:df:26: 4d:a8:2f:17:f0:2f:f4:a6:53:1c:95:2a:5a:0b:dd: 19:15:34:de:7d:ce:8e:15:41:fa:a4:6b:85:6e:5f: 7e:49:9e:70:c4:10:d7:34:45:ce:46:73:e8:5c:7c: 40:51:2c:f4:6d:ae:4d:88:b2:1b:01:b1:01:62:cb: 58:ba:46:62:e2:b7:54:68:08:42:b0:4e:b0:a9:fb: e9:03:b7:08:01:05:21:21:ac:8b:94:84:49:75:5b: 84:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:08:F7:FC:59:DC:F0:B2:7B:89:6B:59:F6:EB:6F:03:98:03:51:3B X509v3 Authority Key Identifier: keyid:E3:1C:BD:E5:C6:F3:3D:AE:3C:A9:7A:01:1E:A4:F4:E6:39:FB:4F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:d4:df:45:e9:35:9f:cd:13:fc:d9:10:47:8c:80:ec:26:02: 5a:98:10:7b:21:14:5c:88:f9:71:0b:2d:7b:a2:fe:24:cc:6e: 2c:87:fc:a2:e3:8e:7a:96:ce:eb:32:33:66:60:f8:c1:22:31: 56:9c:59:30:5c:52:30:b2:1d:e8:e0:ff:9e:cc:8a:e0:1c:1e: 2a:74:51:3a:c5:88:f8:45:3a:2d:68:db:84:20:62:66:2c:e6: c1:69:85:79:66:dc:a2:a1:be:20:77:49:24:17:f4:c2:b3:b0: 06:c4:2f:d0:5d:ec:61:02:a7:8b:c6:5c:00:78:04:36:18:91: 39:38:a4:22:ca:1e:0f:17:a5:fe:f7:3e:7e:73:f6:c6:4a:9d: a7:4a:eb:94:1b:9b:14:7a:91:38:22:bc:9f:46:1e:a0:7c:bc: 02:22:16:50:ad:81:19:fa:27:06:27:54:23:a1:90:25:4b:6a: 8e:1a:61:d5:ea:62:17:29:72:9c:50:75:2e:fd:af:56:08:95: c5:35:c3:90:b6:45:43:46:8d:35:ed:01:0b:57:57:47:f9:54: b0:21:72:50:fc:0f:f3:08:22:3a:03:6b:e3:da:0e:05:85:c0: b0:92:20:8b:16:8c:13:61:b9:02:d1:b4:57:b0:0c:2c:5d:da: 15:43:9f:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBjHDsGDLPzC4PQmFguUmYFvXcPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMxQ0JERTVDNkYzM0RBRTNDQTk3QTAxMUVBNEY0RTYz OUZCNEZGNjAeFw0yNTA3MjExNTU3MDlaFw0yNTA3MjUwMTE1MDlaMDMxMTAvBgNV BAMTKDY3MDhGN0ZDNTlEQ0YwQjI3Qjg5NkI1OUY2RUI2RjAzOTgwMzUxM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE1KN48elq2cy6v71zW2kAZxvW 21mWO5eHV0vXTD9QZ9mtaahDuDaOsLCyDqA4MBO+cca9w1cYR/tv2f1Q6b0MDWr2 PoLweF3JotVJceB7dro1bG5wH+5wrL+/oC+rnyzxzl4FgsWi1Snf+ZNU06/KE/fP PC3Ukh7KgRP2J7MimLokHZIydIwXBngEExeGGh/OItfx78/nMUk+RSUd6Y74Af7f Jk2oLxfwL/SmUxyVKloL3RkVNN59zo4VQfqka4VuX35JnnDEENc0Rc5Gc+hcfEBR LPRtrk2IshsBsQFiy1i6RmLit1RoCEKwTrCp++kDtwgBBSEhrIuUhEl1W4RzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZwj3/Fnc8LJ7iWtZ9utvA5gDUTswHwYDVR0j BBgwFoAU4xy95cbzPa48qXoBHqT05jn7T/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzAyMDFlMy04NzVkLTQ5YzQtOGUxNC05OTk5NDkzNmQ0OTEvMC9FMzFDQkRFNUM2 RjMzREFFM0NBOTdBMDExRUE0RjRFNjM5RkI0RkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTMxQ0JERTVDNkYzM0RBRTNDQTk3QTAxMUVBNEY0RTYzOUZC NEZGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGMwMjAxZTMtODc1ZC00OWM0LThl MTQtOTk5OTQ5MzZkNDkxLzAvRTMxQ0JERTVDNkYzM0RBRTNDQTk3QTAxMUVBNEY0 RTYzOUZCNEZGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMDU30XpNZ/NE/zZEEeMgOwmAlqYEHshFFyI +XELLXui/iTMbiyH/KLjjnqWzusyM2Zg+MEiMVacWTBcUjCyHejg/57MiuAcHip0 UTrFiPhFOi1o24QgYmYs5sFphXlm3KKhviB3SSQX9MKzsAbEL9Bd7GECp4vGXAB4 BDYYkTk4pCLKHg8Xpf73Pn5z9sZKnadK65QbmxR6kTgivJ9GHqB8vAIiFlCtgRn6 JwYnVCOhkCVLao4aYdXqYhcpcpxQdS79r1YIlcU1w5C2RUNGjTXtAQtXV0f5VLAh clD8D/MIIjoDa+PaDgWFwLCSIIsWjBNhuQLRtFewDCxd2hVDn/g= -----END CERTIFICATE-----Generated at Wed Jul 23 02:41:42 2025 by rpki-client