$ rpki-client -vvf repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft File: EC973BE13EF324E7D59046CF7690A12F9DF12932.mft (raw, json) Hash identifier: SzUqXTav28KvvCTngO4p5h2YRma45P0Rog9ITx6ToOw= Subject key identifier: 5F:95:4D:26:25:99:CA:F5:28:BB:38:EB:57:01:BE:0C:38:8F:79:F2 Authority key identifier: EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 Certificate issuer: /CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Certificate serial: 41DDE7B94F47868BA7A9F06A5842D215AFB2E7E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft Manifest number: 0231 Signing time: Sun 20 Jul 2025 07:11:17 +0000 Manifest this update: Sun 20 Jul 2025 07:06:17 +0000 Manifest next update: Wed 23 Jul 2025 13:23:17 +0000 Files and hashes: 1: EC973BE13EF324E7D59046CF7690A12F9DF12932.crl (hash: 3U1r+VehptHyo4iPDYrx/HaXA87blHnHVa9b/Z3q7dI=) 2: 3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (hash: Fd7yVNtVPCM6piUfSXh9X3JKHqUDZdjbopzWmm3ObMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 13:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:dd:e7:b9:4f:47:86:8b:a7:a9:f0:6a:58:42:d2:15:af:b2:e7:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Validity Not Before: Jul 20 07:06:17 2025 GMT Not After : Jul 23 13:23:17 2025 GMT Subject: CN=5F954D262599CAF528BB38EB5701BE0C388F79F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f1:68:c6:19:37:86:53:de:ee:fe:07:4a:ae: db:32:3f:c6:ba:23:4c:5d:7e:5e:d9:fd:a9:87:86: 97:3a:18:e8:fd:9f:05:17:e9:94:89:45:4a:b3:de: 02:c9:67:f1:fe:0b:69:a6:09:21:e3:c2:f5:9b:94: 7b:84:7e:25:81:87:94:80:06:9d:68:13:77:05:61: 53:92:87:de:be:aa:74:f4:0e:e7:eb:78:e2:a4:72: 0f:6e:f3:cc:c1:97:b2:48:50:33:0b:67:d9:98:c1: b2:45:93:9a:49:ef:12:ff:c4:ef:98:8c:0d:af:75: 7b:b2:26:e4:c9:28:fb:a7:89:76:ef:fc:35:bd:3e: e0:1d:4a:b3:a9:9d:d5:2b:9d:48:71:83:ba:c9:30: 43:6b:43:ad:2c:17:18:9b:bd:61:8b:14:25:4c:a8: f0:7e:a9:43:77:47:f6:ff:70:5d:c4:e1:89:da:ce: b5:85:92:64:e9:fe:72:47:92:5d:8b:b9:1f:d4:97: f4:08:f7:8f:b6:5f:d1:b8:1b:43:58:7a:93:94:cc: 08:6c:fc:81:cc:c0:ad:52:ab:20:10:f3:ef:93:eb: f9:e4:f0:37:10:03:0a:3f:28:0f:c4:39:fb:6c:76: 79:bd:cf:c9:6b:79:36:e2:0a:6f:74:f2:34:10:7d: 0d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:95:4D:26:25:99:CA:F5:28:BB:38:EB:57:01:BE:0C:38:8F:79:F2 X509v3 Authority Key Identifier: keyid:EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:e9:0f:41:ca:73:3e:3f:9d:99:e2:86:8e:e6:29:01:2d:7c: d4:6c:97:18:1b:2a:1f:d5:6a:84:be:60:de:e9:c2:dc:a0:4f: 64:92:38:d6:29:3b:64:c9:25:37:26:9e:65:28:c6:01:2b:86: d0:03:ff:14:ed:1d:6a:38:cb:30:3d:f5:7a:01:e3:44:45:e3: a8:cc:dd:bb:53:8e:95:e7:a4:5d:ad:8f:e0:51:83:34:ac:6c: 2a:b3:06:0b:1e:0d:0d:a8:42:6d:b4:87:e7:02:56:bd:51:22: e0:87:8f:83:fb:b0:d7:93:c4:4f:b9:16:44:07:6d:3c:16:bc: ee:21:3f:f1:a2:bb:c2:7c:03:4e:0b:9e:f7:6d:4b:53:db:c2: 0f:8b:ea:75:93:98:b0:93:39:ab:ec:73:e0:d6:c2:0a:de:04: c4:e8:31:38:0d:8e:e5:8d:70:f0:35:12:9c:77:c1:f9:e9:84: 61:0d:2d:f4:fe:8a:b2:1f:19:31:e1:0c:d1:12:b3:bd:b3:22: ad:1a:9f:71:3c:d2:56:b7:d1:f3:4d:8d:17:d4:c6:d5:41:ed: 55:8a:b0:b6:89:af:a9:ad:d3:07:ae:8d:bf:9b:3e:d9:ee:f8: 24:ee:ff:36:87:04:5d:bc:11:a7:f2:95:c4:da:d3:13:fd:8b: 45:20:3a:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQd3nuU9HhounqfBqWELSFa+y5+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5 REYxMjkzMjAeFw0yNTA3MjAwNzA2MTdaFw0yNTA3MjMxMzIzMTdaMDMxMTAvBgNV BAMTKDVGOTU0RDI2MjU5OUNBRjUyOEJCMzhFQjU3MDFCRTBDMzg4Rjc5RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG8WjGGTeGU97u/gdKrtsyP8a6 I0xdfl7Z/amHhpc6GOj9nwUX6ZSJRUqz3gLJZ/H+C2mmCSHjwvWblHuEfiWBh5SA Bp1oE3cFYVOSh96+qnT0DufreOKkcg9u88zBl7JIUDMLZ9mYwbJFk5pJ7xL/xO+Y jA2vdXuyJuTJKPuniXbv/DW9PuAdSrOpndUrnUhxg7rJMENrQ60sFxibvWGLFCVM qPB+qUN3R/b/cF3E4YnazrWFkmTp/nJHkl2LuR/Ul/QI94+2X9G4G0NYepOUzAhs /IHMwK1SqyAQ8++T6/nk8DcQAwo/KA/EOftsdnm9z8lreTbiCm908jQQfQ3xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX5VNJiWZyvUouzjrVwG+DDiPefIwHwYDVR0j BBgwFoAU7Jc74T7zJOfVkEbPdpChL53xKTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTFjYmQ3OS04ZjI2LTRiMGUtOGIzYi1hYjllOTkzOGZjYWUvMC9FQzk3M0JFMTNF RjMyNEU3RDU5MDQ2Q0Y3NjkwQTEyRjlERjEyOTMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5REYx MjkzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmUxY2JkNzktOGYyNi00YjBlLThi M2ItYWI5ZTk5MzhmY2FlLzAvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEEx MkY5REYxMjkzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPpD0HKcz4/nZniho7mKQEtfNRslxgbKh/V aoS+YN7pwtygT2SSONYpO2TJJTcmnmUoxgErhtAD/xTtHWo4yzA99XoB40RF46jM 3btTjpXnpF2tj+BRgzSsbCqzBgseDQ2oQm20h+cCVr1RIuCHj4P7sNeTxE+5FkQH bTwWvO4hP/Giu8J8A04LnvdtS1Pbwg+L6nWTmLCTOavsc+DWwgreBMToMTgNjuWN cPA1Epx3wfnphGENLfT+irIfGTHhDNESs72zIq0an3E80la30fNNjRfUxtVB7VWK sLaJr6mt0weujb+bPtnu+CTu/zaHBF28EafylcTa0xP9i0UgOiY= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:54 2025 by rpki-client