$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft File: E94D4099064713F1C3A5E211E817CFC2A40E6370.mft (raw, json) Hash identifier: aNWAWdI9cnQUcWZ2HGkgf2HrTJBA7zLGKo3c0ndDBGg= Subject key identifier: 0B:DB:FB:68:0B:6F:94:52:CB:16:3E:66:0C:AA:67:C7:63:E7:B4:53 Authority key identifier: E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 Certificate issuer: /CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Certificate serial: 5DD25B0B61ADB5C2D10B4D505E6790CCECBA4D16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft Manifest number: 01A7 Signing time: Mon 21 Jul 2025 00:01:26 +0000 Manifest this update: Sun 20 Jul 2025 23:56:26 +0000 Manifest next update: Thu 24 Jul 2025 10:16:26 +0000 Files and hashes: 1: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: Qa9xNMpYcP+9pVUvEHAtgK4Z1jgnm3adWlqql9bkWPc=) 2: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: Qay85z2tBE2gSsJ1As2R1DyRPFo67yuecJZbDwWzf5g=) 3: E94D4099064713F1C3A5E211E817CFC2A40E6370.crl (hash: Ui6iJJfoZxbWx8qjg2P2V2bkW4N0YE5zflqGGH6KpJI=) 4: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: 3oRl4FLRpqbW8xFTv+6cj6QVd2OEB0Ox6NTFkqNqehI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 10:16:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d2:5b:0b:61:ad:b5:c2:d1:0b:4d:50:5e:67:90:cc:ec:ba:4d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Validity Not Before: Jul 20 23:56:26 2025 GMT Not After : Jul 24 10:16:26 2025 GMT Subject: CN=0BDBFB680B6F9452CB163E660CAA67C763E7B453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:83:be:66:64:15:2f:2f:ab:7d:b2:7d:d2:aa: 5d:36:b8:06:5f:47:99:6c:b5:7e:9d:18:4d:af:9a: f6:4c:f0:a6:1b:ef:1d:6f:30:1a:77:41:cb:30:c4: 5d:69:9a:6b:60:84:ab:bb:5c:c7:f8:f8:f4:b2:95: d7:93:45:40:7b:51:43:99:8f:e5:06:12:e5:8c:55: 39:f9:9e:58:c2:25:d2:80:88:94:e7:3f:15:1b:e9: 9f:fd:48:45:49:70:64:19:5e:c3:1b:b5:14:04:97: 59:c7:12:b2:41:6c:47:61:90:26:70:b4:df:3d:84: 47:7e:ac:46:1f:53:a5:95:5f:53:0b:7a:12:79:67: 8e:62:70:5a:f0:50:1a:24:84:4d:b4:44:9d:64:31: 01:5e:77:10:b6:2d:24:b4:4a:f3:13:f5:f4:33:e2: cd:80:9a:4e:7d:24:b1:3e:d5:ae:47:6f:33:24:ee: a0:8d:98:38:19:33:77:7c:d1:56:b3:46:93:ac:fe: 13:e5:55:75:6a:a2:00:32:4e:34:ac:39:67:49:0b: 72:90:4e:ad:00:e5:81:a9:dd:32:ef:26:cc:a1:8a: 21:1d:cd:68:37:c1:76:a0:15:b6:72:98:96:a2:a3: 58:6b:ac:fe:b7:7d:7c:71:17:3f:08:ef:58:a0:14: e8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:DB:FB:68:0B:6F:94:52:CB:16:3E:66:0C:AA:67:C7:63:E7:B4:53 X509v3 Authority Key Identifier: keyid:E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:b9:e0:4b:63:0f:ca:a0:9f:49:2f:22:e4:d0:66:39:28:39: a7:54:c6:04:52:e8:0c:96:e0:e3:00:76:8f:79:17:e6:07:f0: 0d:c9:87:6a:15:dc:c9:83:9e:7c:4d:d5:af:4c:51:72:c7:6d: 04:8e:1b:49:68:e1:10:fd:58:27:d5:2e:3f:6b:a5:b3:42:b5: e8:02:fc:03:c8:aa:fa:a9:a2:e1:2e:b7:77:39:62:47:e9:e3: 63:ed:f2:d8:69:41:b7:23:2b:a9:f8:79:00:39:36:bd:b9:0b: e1:fe:56:42:0e:3a:7e:3b:c5:4d:ef:db:5c:30:4f:ed:c5:82: 33:4f:ed:b8:b9:8a:ac:ab:57:38:a3:53:8d:82:13:d4:b3:a0: d8:e6:5d:72:10:23:eb:41:2a:18:eb:f7:c3:5c:4e:11:cf:74: e5:c0:87:0a:28:21:db:0a:8e:4f:8d:60:57:ef:c9:3a:11:c3: a5:41:63:de:a0:85:b6:99:25:09:04:db:b7:f0:4b:22:13:63: 98:04:09:99:b8:b3:6c:b4:a9:75:cb:b0:18:3b:a8:f1:48:0f: 61:fc:a0:9d:69:cf:9f:40:13:28:b9:9b:27:5e:b7:c2:ee:ea: e8:e0:46:92:da:cf:59:8e:08:a1:e7:3d:64:6e:62:15:04:2c: ff:55:58:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXdJbC2GttcLRC01QXmeQzOy6TRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJB NDBFNjM3MDAeFw0yNTA3MjAyMzU2MjZaFw0yNTA3MjQxMDE2MjZaMDMxMTAvBgNV BAMTKDBCREJGQjY4MEI2Rjk0NTJDQjE2M0U2NjBDQUE2N0M3NjNFN0I0NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBg75mZBUvL6t9sn3Sql02uAZf R5lstX6dGE2vmvZM8KYb7x1vMBp3QcswxF1pmmtghKu7XMf4+PSyldeTRUB7UUOZ j+UGEuWMVTn5nljCJdKAiJTnPxUb6Z/9SEVJcGQZXsMbtRQEl1nHErJBbEdhkCZw tN89hEd+rEYfU6WVX1MLehJ5Z45icFrwUBokhE20RJ1kMQFedxC2LSS0SvMT9fQz 4s2Amk59JLE+1a5HbzMk7qCNmDgZM3d80VazRpOs/hPlVXVqogAyTjSsOWdJC3KQ Tq0A5YGp3TLvJsyhiiEdzWg3wXagFbZymJaio1hrrP63fXxxFz8I71igFOgjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC9v7aAtvlFLLFj5mDKpnx2PntFMwHwYDVR0j BBgwFoAU6U1AmQZHE/HDpeIR6BfPwqQOY3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhZTgyZi01MzdlLTQ2MjYtYmU5ZS0zMzM5NGEyZGM5NjkvMC9FOTRENDA5OTA2 NDcxM0YxQzNBNUUyMTFFODE3Q0ZDMkE0MEU2MzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJBNDBF NjM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YWU4MmYtNTM3ZS00NjI2LWJl OWUtMzMzOTRhMmRjOTY5LzAvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NG QzJBNDBFNjM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANq54EtjD8qgn0kvIuTQZjkoOadUxgRS6AyW 4OMAdo95F+YH8A3Jh2oV3MmDnnxN1a9MUXLHbQSOG0lo4RD9WCfVLj9rpbNCtegC /APIqvqpouEut3c5Ykfp42Pt8thpQbcjK6n4eQA5Nr25C+H+VkIOOn47xU3v21ww T+3FgjNP7bi5iqyrVzijU42CE9SzoNjmXXIQI+tBKhjr98NcThHPdOXAhwooIdsK jk+NYFfvyToRw6VBY96ghbaZJQkE27fwSyITY5gECZm4s2y0qXXLsBg7qPFID2H8 oJ1pz59AEyi5mydet8Lu6ujgRpLaz1mOCKHnPWRuYhUELP9VWKc= -----END CERTIFICATE-----Generated at Wed Jul 23 02:20:25 2025 by rpki-client