$ rpki-client -vvf repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft File: E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft (raw, json) Hash identifier: H4xZhPWtTqwZozbf+/239HpoElsWRBX7JYci1dNCD3g= Subject key identifier: 92:F2:6D:A6:CF:B8:2F:A0:9A:70:05:62:1F:C3:72:A5:4D:F5:65:07 Authority key identifier: E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81 Certificate issuer: /CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81 Certificate serial: 0A6BF59B6BE1E9C65962540F0F6C7ADDC065E6D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft Manifest number: 020F Signing time: Sat 19 Jul 2025 16:51:38 +0000 Manifest this update: Sat 19 Jul 2025 16:46:38 +0000 Manifest next update: Wed 23 Jul 2025 02:41:38 +0000 Files and hashes: 1: E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl (hash: vmN4T9CvVv+OkgelbfHcs4ZVAKdutxha4o/uPIPvpJ8=) 2: 3130332e3135362e37342e302f32332d3234203d3e20313431303832.roa (hash: +uanKrOlJ1inyxGrMVmi+UClp9vCCzs4JkeBJaqGWYc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 02:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:6b:f5:9b:6b:e1:e9:c6:59:62:54:0f:0f:6c:7a:dd:c0:65:e6:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81 Validity Not Before: Jul 19 16:46:38 2025 GMT Not After : Jul 23 02:41:38 2025 GMT Subject: CN=92F26DA6CFB82FA09A7005621FC372A54DF56507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ac:e6:01:2a:6a:42:d6:2e:d5:30:33:27:fc: 81:6a:6a:80:2c:98:4e:31:2c:22:74:c7:10:7d:22: a3:0a:77:1a:2c:09:4f:bc:17:58:4a:b5:33:b0:0f: 5f:ef:74:84:0b:18:ab:5a:c2:a6:86:70:09:05:c0: 22:54:40:b6:3f:b0:cf:c0:d0:ff:40:57:35:a6:cc: 38:05:75:a2:72:fb:17:14:f9:cb:8d:02:04:6e:f9: 72:11:1b:9f:6e:ca:72:81:31:32:db:7d:63:47:50: 21:86:fd:ab:e3:79:fe:02:0a:79:9f:b2:68:d2:a9: 97:ec:2a:f3:42:3e:e2:6a:f5:b1:5d:95:da:1b:15: 31:9f:7b:2d:e9:85:f2:8c:71:fd:6f:b2:cb:3f:5e: 89:d1:76:4d:ce:ab:dc:29:4f:43:5a:4e:84:99:e7: 1b:b2:2f:2b:78:68:75:8e:96:4b:3a:18:c2:95:43: 3f:e0:d3:0a:c0:bb:b4:fd:47:48:9a:94:c8:9e:83: 3b:ba:15:35:fa:49:c2:ce:d5:ac:5c:fb:f8:f6:9f: 75:c2:e0:82:0c:93:f4:80:48:62:d4:85:20:ff:a9: 5e:72:c8:21:b3:24:51:93:42:77:52:f6:c1:ae:b5: de:27:7a:e5:17:f5:b6:87:b6:88:41:dc:48:e9:6b: 02:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F2:6D:A6:CF:B8:2F:A0:9A:70:05:62:1F:C3:72:A5:4D:F5:65:07 X509v3 Authority Key Identifier: keyid:E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:a0:6c:fb:40:cb:d8:89:c6:94:ff:ff:11:42:14:97:04:0d: 1e:64:0e:2f:da:5c:1c:0b:11:d4:fb:0c:3b:57:3f:0c:57:02: c3:49:51:b4:4b:01:a8:7e:6c:45:ba:5d:26:66:86:12:ba:85: 8c:6c:67:9e:40:8c:80:c2:c4:a1:f0:cf:e7:91:6f:2a:0a:b7: 3a:7a:9a:4b:21:c2:ff:71:8b:8b:4a:02:12:89:a9:3a:96:b9: bf:cc:d4:7d:69:00:02:a7:80:34:5b:2a:da:b7:7b:3e:cd:01: ce:54:24:44:89:d4:51:1d:bd:e2:d7:ac:8e:7f:60:b1:2a:5f: db:2b:64:d7:69:3c:6e:74:27:d1:93:13:15:ad:9c:22:1a:9e: 98:05:95:b5:28:a7:62:08:70:20:52:ab:56:3f:5a:c8:35:92: 83:9c:35:e8:f9:6f:3b:f3:c5:09:48:b2:73:23:e3:fd:f3:7a: 63:9c:0c:10:1e:f8:12:66:07:90:33:cc:5d:b1:c2:a5:0f:2f: e8:cf:7b:5a:40:d7:3f:83:ec:e8:b0:ba:11:cb:9e:e1:e5:60: b6:85:18:ae:d1:0e:22:43:8d:0d:19:56:dd:ae:b7:a5:39:a0: 72:ab:77:04:8e:d0:02:f8:da:a6:70:e6:3f:7c:fa:4f:38:d9: ba:ec:7d:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCmv1m2vh6cZZYlQPD2x63cBl5tMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4NzY3 QjQxMUE4MTAeFw0yNTA3MTkxNjQ2MzhaFw0yNTA3MjMwMjQxMzhaMDMxMTAvBgNV BAMTKDkyRjI2REE2Q0ZCODJGQTA5QTcwMDU2MjFGQzM3MkE1NERGNTY1MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDprOYBKmpC1i7VMDMn/IFqaoAs mE4xLCJ0xxB9IqMKdxosCU+8F1hKtTOwD1/vdIQLGKtawqaGcAkFwCJUQLY/sM/A 0P9AVzWmzDgFdaJy+xcU+cuNAgRu+XIRG59uynKBMTLbfWNHUCGG/avjef4CCnmf smjSqZfsKvNCPuJq9bFdldobFTGfey3phfKMcf1vsss/XonRdk3Oq9wpT0NaToSZ 5xuyLyt4aHWOlks6GMKVQz/g0wrAu7T9R0ialMiegzu6FTX6ScLO1axc+/j2n3XC 4IIMk/SASGLUhSD/qV5yyCGzJFGTQndS9sGutd4neuUX9baHtohB3EjpawJ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkvJtps+4L6CacAViH8NypU31ZQcwHwYDVR0j BBgwFoAU4APoULd8dvDgJPHabvvYdntBGoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDAxMDJkMC03MTRmLTRiNTItOWJlNS1kZWQxNmVkZmU0YTIvMC9FMDAzRTg1MEI3 N0M3NkYwRTAyNEYxREE2RUZCRDg3NjdCNDExQTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4NzY3QjQx MUE4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjAwMTAyZDAtNzE0Zi00YjUyLTli ZTUtZGVkMTZlZGZlNGEyLzAvRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4 NzY3QjQxMUE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmgbPtAy9iJxpT//xFCFJcEDR5kDi/aXBwL EdT7DDtXPwxXAsNJUbRLAah+bEW6XSZmhhK6hYxsZ55AjIDCxKHwz+eRbyoKtzp6 mkshwv9xi4tKAhKJqTqWub/M1H1pAAKngDRbKtq3ez7NAc5UJESJ1FEdveLXrI5/ YLEqX9srZNdpPG50J9GTExWtnCIanpgFlbUop2IIcCBSq1Y/Wsg1koOcNej5bzvz xQlIsnMj4/3zemOcDBAe+BJmB5AzzF2xwqUPL+jPe1pA1z+D7OiwuhHLnuHlYLaF GK7RDiJDjQ0ZVt2ut6U5oHKrdwSO0AL42qZw5j98+k842brsfWM= -----END CERTIFICATE-----Generated at Mon Jul 21 02:06:45 2025 by rpki-client