$ rpki-client -vvf repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft File: E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft (raw, json) Hash identifier: /6vUc7Kzjq/KitKISjH3ugbvktlMjC/fTeYcuacn11M= Subject key identifier: 10:88:18:61:47:EA:EA:BD:A2:00:03:4C:CC:40:3C:1F:54:8C:CC:F3 Authority key identifier: E5:11:E1:48:06:15:E7:AF:C9:15:B8:E0:43:0D:70:CA:0B:31:D0:F0 Certificate issuer: /CN=E511E1480615E7AFC915B8E0430D70CA0B31D0F0 Certificate serial: 6DA774C8287E96FC7BA534C8EDBD8EB1FFD95E14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft Manifest number: 04EE Signing time: Sun 20 Jul 2025 09:30:37 +0000 Manifest this update: Sun 20 Jul 2025 09:25:37 +0000 Manifest next update: Wed 23 Jul 2025 14:43:37 +0000 Files and hashes: 1: 3130332e35312e34342e302f32322d3234203d3e20313333383139.roa (hash: SXrkhdImUQOOYfFjSDTXHsQonvkd7MTnrISJrdKtg94=) 2: E511E1480615E7AFC915B8E0430D70CA0B31D0F0.crl (hash: iBzT9JlFryJG/u+jzRnT9S6yDua1UBhuOv/xtAEuZRw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.crl rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 14:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:a7:74:c8:28:7e:96:fc:7b:a5:34:c8:ed:bd:8e:b1:ff:d9:5e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E511E1480615E7AFC915B8E0430D70CA0B31D0F0 Validity Not Before: Jul 20 09:25:37 2025 GMT Not After : Jul 23 14:43:37 2025 GMT Subject: CN=1088186147EAEABDA200034CCC403C1F548CCCF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cf:cd:1b:e1:fd:94:54:40:95:b0:72:c6:c8: 38:41:d6:3a:02:47:3c:67:aa:16:d9:95:cc:4a:d0: 36:c3:d4:c5:e0:2c:22:63:8d:0a:20:c9:f4:e7:2d: c3:9d:e1:6c:08:08:93:af:a6:35:f4:9f:48:69:dd: f8:e4:b4:54:9d:13:b9:8b:a3:15:75:6c:5e:2f:1d: 17:18:da:4d:65:85:a1:24:9d:57:f9:e0:2c:21:55: db:3d:ff:1b:68:64:04:60:d0:d7:de:96:f3:a8:01: 75:56:23:c0:cb:b8:b7:5b:2e:12:04:4c:60:90:78: f3:f3:fc:a0:13:aa:cb:a7:ff:55:11:0e:94:b0:c7: 25:9d:a0:2c:30:ee:3f:b8:f0:03:b2:3e:3c:16:13: 4c:4f:de:38:96:d5:2c:3b:49:da:ce:c9:e9:5d:12: 90:db:37:d4:da:c1:e1:98:ac:42:da:d5:36:ed:71: 1c:9f:a0:77:19:50:d2:07:bc:ae:a9:d1:f4:60:bf: 8f:24:2f:5b:20:9c:14:b2:7c:20:c2:2e:b2:d4:ca: f9:76:a9:61:fe:76:c7:fa:bb:be:f4:ce:f7:3e:4f: 31:fc:b4:28:e0:a2:4e:c4:90:00:f8:03:b9:60:e5: 96:eb:eb:a7:b1:24:a6:20:bf:1f:58:88:01:38:24: 7e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:88:18:61:47:EA:EA:BD:A2:00:03:4C:CC:40:3C:1F:54:8C:CC:F3 X509v3 Authority Key Identifier: keyid:E5:11:E1:48:06:15:E7:AF:C9:15:B8:E0:43:0D:70:CA:0B:31:D0:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:75:1b:21:a2:91:74:52:4b:23:f9:80:84:da:52:f0:af:19: c3:63:8e:01:83:57:68:df:b7:cb:49:46:a7:4f:ce:2e:58:7a: 24:41:be:50:18:7d:43:e0:d2:ea:29:2c:bc:7e:cd:37:f1:fd: 52:07:44:59:ee:83:66:48:10:b7:b7:c0:23:46:c9:41:e3:df: 6d:1b:a5:28:e7:19:3a:b0:c7:ba:af:ec:85:2c:67:a7:eb:a7: 4c:f4:51:eb:45:06:5c:cb:18:bc:4d:45:25:00:1e:6a:f7:5b: a7:3e:9b:b8:62:b5:cd:8d:df:6c:9b:a6:cc:96:40:0d:e4:7c: 79:1b:91:08:8d:bb:14:b3:96:47:3d:b8:84:e4:22:fd:b1:04: e1:8f:c8:bd:95:dd:e5:8b:39:ff:4c:be:a2:80:c0:aa:be:ad: f5:51:ee:85:54:3b:d5:5b:e7:ac:d5:5c:d3:d4:48:1f:86:af: 3e:5f:28:25:58:71:8b:3b:3f:f1:8e:41:d4:cd:75:09:0f:43: 6f:83:7d:15:24:c5:c9:06:f7:0c:cd:75:98:a7:f9:c9:e7:f9: 4d:88:0e:eb:c1:34:5d:29:bb:0e:48:a5:01:70:1a:e2:ba:74: 60:12:95:c8:31:eb:9b:c4:05:15:1a:c1:a6:bf:68:63:1f:4b: 49:c4:22:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbad0yCh+lvx7pTTI7b2Osf/ZXhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUxMUUxNDgwNjE1RTdBRkM5MTVCOEUwNDMwRDcwQ0Ew QjMxRDBGMDAeFw0yNTA3MjAwOTI1MzdaFw0yNTA3MjMxNDQzMzdaMDMxMTAvBgNV BAMTKDEwODgxODYxNDdFQUVBQkRBMjAwMDM0Q0NDNDAzQzFGNTQ4Q0NDRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4z80b4f2UVECVsHLGyDhB1joC RzxnqhbZlcxK0DbD1MXgLCJjjQogyfTnLcOd4WwICJOvpjX0n0hp3fjktFSdE7mL oxV1bF4vHRcY2k1lhaEknVf54CwhVds9/xtoZARg0NfelvOoAXVWI8DLuLdbLhIE TGCQePPz/KATqsun/1URDpSwxyWdoCww7j+48AOyPjwWE0xP3jiW1Sw7SdrOyeld EpDbN9TaweGYrELa1TbtcRyfoHcZUNIHvK6p0fRgv48kL1sgnBSyfCDCLrLUyvl2 qWH+dsf6u770zvc+TzH8tCjgok7EkAD4A7lg5Zbr66exJKYgvx9YiAE4JH5dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEIgYYUfq6r2iAANMzEA8H1SMzPMwHwYDVR0j BBgwFoAU5RHhSAYV56/JFbjgQw1wygsx0PAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2NjNWZmYS01ZjYyLTQ0ZTUtOGZlMi1lZTg3NTBmMjIyMWQvMC9FNTExRTE0ODA2 MTVFN0FGQzkxNUI4RTA0MzBENzBDQTBCMzFEMEYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTUxMUUxNDgwNjE1RTdBRkM5MTVCOEUwNDMwRDcwQ0EwQjMx RDBGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdjYzVmZmEtNWY2Mi00NGU1LThm ZTItZWU4NzUwZjIyMjFkLzAvRTUxMUUxNDgwNjE1RTdBRkM5MTVCOEUwNDMwRDcw Q0EwQjMxRDBGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIl1GyGikXRSSyP5gITaUvCvGcNjjgGDV2jf t8tJRqdPzi5YeiRBvlAYfUPg0uopLLx+zTfx/VIHRFnug2ZIELe3wCNGyUHj320b pSjnGTqwx7qv7IUsZ6frp0z0UetFBlzLGLxNRSUAHmr3W6c+m7hitc2N32ybpsyW QA3kfHkbkQiNuxSzlkc9uITkIv2xBOGPyL2V3eWLOf9MvqKAwKq+rfVR7oVUO9Vb 56zVXNPUSB+Grz5fKCVYcYs7P/GOQdTNdQkPQ2+DfRUkxckG9wzNdZin+cnn+U2I DuvBNF0puw5IpQFwGuK6dGASlcgx65vEBRUawaa/aGMfS0nEIvE= -----END CERTIFICATE-----Generated at Tue Jul 22 04:31:22 2025 by rpki-client