$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft File: E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft (raw, json) Hash identifier: uVeix5aw927FK5rmv1JtbovWpG2PvowYA8wMrNCscyc= Subject key identifier: DF:7B:6E:6E:A8:04:AD:F4:07:8A:DD:83:EE:F9:42:EC:99:A9:AB:0D Authority key identifier: E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 Certificate issuer: /CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Certificate serial: 7DFBB312D7CF5E8FCFDC768BDA978E6D25DC531F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft Manifest number: C5 Signing time: Sun 07 Sep 2025 05:02:03 +0000 Manifest this update: Sun 07 Sep 2025 04:57:03 +0000 Manifest next update: Wed 10 Sep 2025 06:47:03 +0000 Files and hashes: 1: E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl (hash: 8tuNQLeBxCbVjLSUJKtsnilVNCZcaRAz7bQ9pIs97cc=) 2: 323030313a6466333a653563303a3a2f34382d3438203d3e20313532383231.roa (hash: qxwzYie9RBuV/7W0nohtPX4U19ZjLN0Jy/HLrDrkfAc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 06:47:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:fb:b3:12:d7:cf:5e:8f:cf:dc:76:8b:da:97:8e:6d:25:dc:53:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Validity Not Before: Sep 7 04:57:03 2025 GMT Not After : Sep 10 06:47:03 2025 GMT Subject: CN=DF7B6E6EA804ADF4078ADD83EEF942EC99A9AB0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5b:fe:07:b0:b7:6f:5c:0a:45:fb:a3:f1:24: 3d:53:fb:14:36:fb:dd:0c:3b:43:b0:df:55:d3:29: 14:ae:fb:e5:88:4e:75:33:bd:2b:2b:22:32:f9:ec: 6d:69:37:5b:fb:6f:01:51:ac:ce:4b:e1:26:7d:a2: 9b:b8:52:51:83:7c:17:20:3c:6a:19:8b:8d:97:01: c4:d3:65:be:09:db:f5:5f:a5:a0:d6:6c:2a:12:e1: 13:e9:32:f5:ca:0a:18:88:02:90:a8:4b:5b:f9:73: 89:93:b4:5b:f4:b0:4a:63:01:2f:30:d1:79:e3:67: 9d:fc:1a:88:3f:48:af:9e:cf:65:04:fe:ff:df:a3: 5f:44:67:9a:09:f2:cf:d0:dc:2e:0e:3e:e2:5d:8b: ba:98:51:36:7c:44:ae:a1:ea:5c:53:e3:51:05:b2: 27:12:48:e3:2e:c6:65:5c:da:cf:dd:8a:29:f4:3c: b9:9f:58:9e:6d:d6:32:b7:2a:4c:cc:8d:10:40:bb: 70:8e:13:13:86:85:9f:df:91:cc:f2:91:07:67:c3: 42:8d:b8:89:9e:c9:90:10:fd:14:f5:49:48:cb:c6: ec:71:5e:6e:5c:84:4c:ad:75:bc:1c:1e:0a:04:fb: 2b:a9:3a:29:cf:6d:95:5e:1d:85:96:5d:52:c2:b8: 54:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:7B:6E:6E:A8:04:AD:F4:07:8A:DD:83:EE:F9:42:EC:99:A9:AB:0D X509v3 Authority Key Identifier: keyid:E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:43:ca:78:32:a3:e6:da:ce:9b:16:14:1a:4c:83:8f:0d:26: 29:d1:66:99:14:43:b6:9b:d4:78:84:fd:5e:1d:15:50:91:a8: 62:36:6d:14:50:e4:9c:dd:e1:42:32:0f:b5:fa:02:3a:17:3f: c8:8c:c0:52:47:d7:9f:64:c0:3f:bd:c9:87:ba:69:6f:e2:93: cb:bb:33:9d:00:8a:52:b8:c3:22:41:ec:e0:3d:52:e2:26:22: 93:bb:42:75:ca:20:7d:34:dc:34:d4:60:df:44:e6:ae:98:90: 26:88:df:20:81:ce:0f:67:42:c0:b9:54:1c:af:d4:f1:05:75: 0f:95:12:ae:59:90:6f:6a:5b:5e:e5:f6:76:0c:90:ba:54:fc: 1a:ee:b5:7e:9a:d9:11:a7:b0:ff:b6:9d:ce:54:1b:ad:bd:bc: 03:93:86:81:f3:8d:b5:97:39:fe:c9:b4:89:ec:6a:c2:94:11: de:2e:93:db:40:f1:ca:e2:81:42:9e:dc:e1:5e:bd:b9:42:6b: c0:fd:34:e7:7d:8f:8d:31:51:d6:e4:dd:af:27:0d:66:88:ef: 67:dd:33:00:8d:57:3e:cc:f8:3c:70:d9:d0:d6:b8:fd:c3:b8: 4b:7a:67:fa:6f:fb:2e:41:32:46:82:cb:43:5b:a6:80:37:a1: 0e:25:79:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUffuzEtfPXo/P3HaL2peObSXcUx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1 MTM2QzAwMjAeFw0yNTA5MDcwNDU3MDNaFw0yNTA5MTAwNjQ3MDNaMDMxMTAvBgNV BAMTKERGN0I2RTZFQTgwNEFERjQwNzhBREQ4M0VFRjk0MkVDOTlBOUFCMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWW/4HsLdvXApF+6PxJD1T+xQ2 +90MO0Ow31XTKRSu++WITnUzvSsrIjL57G1pN1v7bwFRrM5L4SZ9opu4UlGDfBcg PGoZi42XAcTTZb4J2/VfpaDWbCoS4RPpMvXKChiIApCoS1v5c4mTtFv0sEpjAS8w 0XnjZ538Gog/SK+ez2UE/v/fo19EZ5oJ8s/Q3C4OPuJdi7qYUTZ8RK6h6lxT41EF sicSSOMuxmVc2s/diin0PLmfWJ5t1jK3KkzMjRBAu3COExOGhZ/fkczykQdnw0KN uImeyZAQ/RT1SUjLxuxxXm5chEytdbwcHgoE+yupOinPbZVeHYWWXVLCuFTZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU33tubqgErfQHit2D7vlC7Jmpqw0wHwYDVR0j BBgwFoAU5wjJd7Bqz66Lr8ayGeWkWFE2wAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMS9FNzA4Qzk3N0Iw NkFDRkFFOEJBRkM2QjIxOUU1QTQ1ODUxMzZDMDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1MTM2 QzAwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzEvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0 NTg1MTM2QzAwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFDyngyo+bazpsWFBpMg48NJinRZpkUQ7ab 1HiE/V4dFVCRqGI2bRRQ5Jzd4UIyD7X6AjoXP8iMwFJH159kwD+9yYe6aW/ik8u7 M50AilK4wyJB7OA9UuImIpO7QnXKIH003DTUYN9E5q6YkCaI3yCBzg9nQsC5VByv 1PEFdQ+VEq5ZkG9qW17l9nYMkLpU/BrutX6a2RGnsP+2nc5UG629vAOThoHzjbWX Of7JtInsasKUEd4uk9tA8crigUKe3OFevblCa8D9NOd9j40xUdbk3a8nDWaI72fd MwCNVz7M+Dxw2dDWuP3DuEt6Z/pv+y5BMkaCy0NbpoA3oQ4leeY= -----END CERTIFICATE-----Generated at Sun Sep 7 13:45:27 2025 by rpki-client