$ rpki-client -vvf repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft File: E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft (raw, json) Hash identifier: 2bAa7ozzIoqs47KgaD7178rcQP2Fqgfc6SG4vrATghY= Subject key identifier: 60:E7:1F:12:6B:7D:6A:6C:67:E0:90:F7:4E:38:AC:8E:DD:DE:34:A3 Authority key identifier: E8:2A:E8:B6:91:C7:C5:3E:1C:E0:B3:96:D8:97:57:47:F1:56:04:D5 Certificate issuer: /CN=E82AE8B691C7C53E1CE0B396D8975747F15604D5 Certificate serial: 72DE112766AE1CBC030844A7767610AB77F66B5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft Manifest number: 01E9 Signing time: Tue 22 Jul 2025 12:30:57 +0000 Manifest this update: Tue 22 Jul 2025 12:25:57 +0000 Manifest next update: Sat 26 Jul 2025 00:29:57 +0000 Files and hashes: 1: 3130332e3137362e3235322e302f32332d3234203d3e20313437313433.roa (hash: 0eR/sossty6R9CW6sl77Vt0ZhuUxrN0f/0JSjyj94i0=) 2: E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl (hash: x/zcehUj9jCicNqjh7/cyG7H0lhLtcid9ZY1DIrONa0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:de:11:27:66:ae:1c:bc:03:08:44:a7:76:76:10:ab:77:f6:6b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E82AE8B691C7C53E1CE0B396D8975747F15604D5 Validity Not Before: Jul 22 12:25:57 2025 GMT Not After : Jul 26 00:29:57 2025 GMT Subject: CN=60E71F126B7D6A6C67E090F74E38AC8EDDDE34A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ae:c5:f1:5d:7f:77:e6:52:8d:2c:0c:d3:93: d5:70:f8:3f:13:84:01:84:f5:18:c3:f3:ae:4a:e1: 6f:72:ef:fe:2c:be:96:b8:0b:84:7c:b8:65:b0:44: be:74:ca:4c:c3:f3:a6:30:51:99:90:1a:7f:6b:e0: e8:e2:5e:1f:2c:20:f0:f3:f4:90:6f:f9:ba:7c:f5: dc:a8:f5:1f:36:10:5f:ec:c3:56:62:84:d2:c0:a0: f8:18:c2:76:50:f5:46:0c:46:d1:5e:c9:44:f1:28: 98:69:d2:72:06:6c:f0:c6:34:26:9e:54:aa:c3:36: 98:35:fe:1d:ed:f1:44:85:1b:67:af:b3:f7:ec:5a: fa:aa:1b:09:b5:7b:85:6c:bb:db:62:3d:a5:78:6c: 6f:e0:dd:f1:82:2f:57:c5:8c:4a:64:be:b2:60:e7: 32:cd:a4:a8:c8:d9:c6:71:3c:bb:f4:34:55:51:b4: 5e:57:c3:f6:da:8e:79:dd:3f:eb:f1:01:d9:84:8c: ed:a2:bd:b5:c4:2a:de:12:b2:53:56:4a:24:03:cd: 98:f9:22:cf:50:19:ad:41:54:12:78:3b:c7:2c:bd: cf:8f:51:0c:b0:f1:1b:b0:58:02:21:27:56:78:e6: 87:d6:e9:94:e4:53:ab:ef:88:50:a5:44:88:5b:ea: 2c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E7:1F:12:6B:7D:6A:6C:67:E0:90:F7:4E:38:AC:8E:DD:DE:34:A3 X509v3 Authority Key Identifier: keyid:E8:2A:E8:B6:91:C7:C5:3E:1C:E0:B3:96:D8:97:57:47:F1:56:04:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:84:40:8a:5e:c1:4e:3e:21:bc:c0:be:b9:eb:59:63:de:b3: 69:92:01:cf:53:8c:39:8f:6f:bb:55:f8:c9:92:e3:b4:9b:82: 0e:2a:cb:74:d4:3a:9d:c5:bd:0f:32:96:5d:9d:83:9c:98:de: 20:f9:38:f7:78:23:a5:b9:f9:43:07:63:8d:25:02:fd:9f:ee: 62:18:80:0e:37:b3:a2:26:ed:07:3c:4a:e7:23:94:9b:8b:67: 05:f0:af:e3:04:20:62:ca:66:9f:8c:3d:6e:ee:b1:fd:ca:2e: 2f:70:36:43:14:25:42:2d:98:5e:ee:c2:7c:f3:89:56:75:6f: 29:50:bb:3c:cc:ef:f8:c3:95:a5:07:37:99:1e:fd:6b:0c:1d: f8:24:1c:84:92:4f:7f:6d:08:51:c6:e2:0c:91:bf:76:6d:b5: 20:fc:62:c1:10:63:0c:0a:2c:66:c8:ae:3c:58:18:e1:76:d6: 00:52:64:b6:9b:86:f6:ca:91:89:fa:b4:33:ba:f8:9d:f8:6a: c1:84:0f:66:23:d6:b8:d6:f6:b6:47:9c:9f:38:2c:29:0a:a0: 3d:6e:fa:9e:c9:1f:06:7e:03:5e:12:03:1e:de:a3:e1:cf:e5: b3:aa:d6:d7:1c:03:be:05:9b:4b:ab:0e:69:b6:a7:07:69:61: 82:e9:fb:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUct4RJ2auHLwDCESndnYQq3f2a1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3NDdG MTU2MDRENTAeFw0yNTA3MjIxMjI1NTdaFw0yNTA3MjYwMDI5NTdaMDMxMTAvBgNV BAMTKDYwRTcxRjEyNkI3RDZBNkM2N0UwOTBGNzRFMzhBQzhFRERERTM0QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdrsXxXX935lKNLAzTk9Vw+D8T hAGE9RjD865K4W9y7/4svpa4C4R8uGWwRL50ykzD86YwUZmQGn9r4OjiXh8sIPDz 9JBv+bp89dyo9R82EF/sw1ZihNLAoPgYwnZQ9UYMRtFeyUTxKJhp0nIGbPDGNCae VKrDNpg1/h3t8USFG2evs/fsWvqqGwm1e4Vsu9tiPaV4bG/g3fGCL1fFjEpkvrJg 5zLNpKjI2cZxPLv0NFVRtF5Xw/bajnndP+vxAdmEjO2ivbXEKt4SslNWSiQDzZj5 Is9QGa1BVBJ4O8csvc+PUQyw8RuwWAIhJ1Z45ofW6ZTkU6vviFClRIhb6iyjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYOcfEmt9amxn4JD3Tjisjt3eNKMwHwYDVR0j BBgwFoAU6CrotpHHxT4c4LOW2JdXR/FWBNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWZmYjQzYi1mOGI1LTRmMWYtOWI4Zi01YjAyZGRiYjZmY2YvMC9FODJBRThCNjkx QzdDNTNFMUNFMEIzOTZEODk3NTc0N0YxNTYwNEQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3NDdGMTU2 MDRENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTlmZmI0M2ItZjhiNS00ZjFmLTli OGYtNWIwMmRkYmI2ZmNmLzAvRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3 NDdGMTU2MDRENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALeEQIpewU4+IbzAvrnrWWPes2mSAc9TjDmP b7tV+MmS47Sbgg4qy3TUOp3FvQ8yll2dg5yY3iD5OPd4I6W5+UMHY40lAv2f7mIY gA43s6Im7Qc8SucjlJuLZwXwr+MEIGLKZp+MPW7usf3KLi9wNkMUJUItmF7uwnzz iVZ1bylQuzzM7/jDlaUHN5ke/WsMHfgkHISST39tCFHG4gyRv3ZttSD8YsEQYwwK LGbIrjxYGOF21gBSZLabhvbKkYn6tDO6+J34asGED2Yj1rjW9rZHnJ84LCkKoD1u +p7JHwZ+A14SAx7eo+HP5bOq1tccA74Fm0urDmm2pwdpYYLp+xo= -----END CERTIFICATE-----Generated at Wed Jul 23 12:45:44 2025 by rpki-client