$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft File: E3FB5E3343EC63D705FF51B645113F74C7965236.mft (raw, json) Hash identifier: cW2BAmA3HnXOUUINElXaoK4KYT2ClgvFjaIbJOmuBEg= Subject key identifier: 91:58:DC:EB:7A:ED:5A:D3:87:8D:97:F2:61:97:9B:33:40:66:C7:FE Authority key identifier: E3:FB:5E:33:43:EC:63:D7:05:FF:51:B6:45:11:3F:74:C7:96:52:36 Certificate issuer: /CN=E3FB5E3343EC63D705FF51B645113F74C7965236 Certificate serial: 6BF4EA54D311556BC18EC88396D9F243958D81A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft Manifest number: 9F Signing time: Tue 22 Jul 2025 00:11:22 +0000 Manifest this update: Tue 22 Jul 2025 00:06:22 +0000 Manifest next update: Fri 25 Jul 2025 01:23:22 +0000 Files and hashes: 1: 3136302e32352e3232322e302f32342d3234203d3e20313533303837.roa (hash: pcP51KVAYXagtYkUaOdwTyhCZXZM5gMNbSSkIN9xwSo=) 2: 3136302e32352e3232322e302f32332d3233203d3e20313533303837.roa (hash: KzwY0iiHcJ5O0UVPUHPKtH6yEpVlgjbtPe1xq08+n3c=) 3: 3136302e32352e3232332e302f32342d3234203d3e20313533303837.roa (hash: 4O9lmpHneuudT9xjvw5LwULxiETAfGvFoNCP2XYgoOQ=) 4: E3FB5E3343EC63D705FF51B645113F74C7965236.crl (hash: GRffXURkulX9HvUVXMuJfGooLu3R6evvbfkcb4pfWxQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 01:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:f4:ea:54:d3:11:55:6b:c1:8e:c8:83:96:d9:f2:43:95:8d:81:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3FB5E3343EC63D705FF51B645113F74C7965236 Validity Not Before: Jul 22 00:06:22 2025 GMT Not After : Jul 25 01:23:22 2025 GMT Subject: CN=9158DCEB7AED5AD3878D97F261979B334066C7FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c9:ec:fd:27:68:f7:6e:28:11:75:6d:90:af: 70:85:47:b9:c4:64:e9:c3:0f:97:22:95:da:c4:48: 96:16:3a:d3:ec:d9:b4:0e:e3:fd:36:4d:47:06:bb: b8:39:a5:4c:9c:ba:58:14:5a:14:f7:ac:4c:45:87: a0:16:7a:06:9f:59:a9:9c:8b:aa:93:2c:a7:a6:a0: fd:51:70:7c:0b:b0:75:dc:5a:75:e8:a3:6f:0a:19: ff:af:36:20:37:a2:f6:60:f2:cb:b9:29:9e:e0:e5: 2a:ed:b4:ae:d3:24:46:d7:78:18:4b:49:71:e4:49: 1d:1c:af:d9:e3:a5:12:21:db:5b:d2:a2:35:bd:e8: 68:16:2a:96:be:c0:56:92:20:8f:21:a3:74:16:c1: 9a:ce:c0:a9:11:90:92:0e:1c:28:b2:70:f6:d2:06: 5d:7a:0a:cf:33:cd:dc:21:a4:71:ff:27:0f:f4:95: 8e:ff:a2:c4:34:6e:a0:02:25:f8:24:3d:5f:bc:76: ea:90:31:3a:fc:56:d5:0f:ae:4e:26:f4:4c:f5:ae: 2f:cf:2b:91:dc:0e:f9:c3:c2:00:f8:4d:eb:43:32: a4:b0:48:39:fa:2f:a1:ec:8a:7b:f5:62:cb:28:44: 07:ad:37:4f:73:47:9c:7b:53:50:b4:82:7e:74:90: 63:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:58:DC:EB:7A:ED:5A:D3:87:8D:97:F2:61:97:9B:33:40:66:C7:FE X509v3 Authority Key Identifier: keyid:E3:FB:5E:33:43:EC:63:D7:05:FF:51:B6:45:11:3F:74:C7:96:52:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:6e:35:c7:f3:65:a6:b8:26:1e:ce:9f:06:cd:ad:dc:9f:75: 4a:e5:21:40:50:c8:90:1e:d4:a0:48:a7:8a:65:1e:68:2f:dc: 5c:95:f1:e5:45:7f:d7:18:55:48:b0:50:6c:d4:06:0e:01:b7: a9:e6:a4:e6:e9:d1:16:f4:10:7b:d0:6f:88:64:72:06:da:cc: 4e:3d:95:6d:ee:d8:eb:b7:a2:b6:f5:12:cf:2c:91:ea:dd:63: 31:0f:6f:f7:1d:b0:ce:62:d1:35:ff:78:d0:25:e1:d0:ca:25: 72:5b:12:29:cf:b5:57:fc:f5:21:89:e1:e5:cc:79:a9:29:ed: 43:64:69:b9:34:e1:0d:52:aa:03:33:6a:9b:77:b0:c9:63:96: 4c:a2:f7:6f:3e:01:50:fb:8c:fa:03:56:05:87:80:4d:57:42: 20:67:a2:d1:56:a6:dc:31:7d:d7:71:46:1c:6c:cf:26:2c:06: 77:9d:4f:6d:bd:a6:4e:2a:10:ae:23:47:7b:16:c4:77:16:9a: 2c:53:5a:fa:a5:4c:f1:77:f2:87:9c:e0:d6:f1:ae:45:b9:08: 31:63:da:8e:49:00:b0:3d:cb:48:c0:16:e5:c0:97:0c:18:47: 2f:ba:8a:34:19:df:87:47:63:a4:d8:6e:b3:f4:25:3f:24:a5: 20:b7:fd:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa/TqVNMRVWvBjsiDltnyQ5WNgacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNGNzRD Nzk2NTIzNjAeFw0yNTA3MjIwMDA2MjJaFw0yNTA3MjUwMTIzMjJaMDMxMTAvBgNV BAMTKDkxNThEQ0VCN0FFRDVBRDM4NzhEOTdGMjYxOTc5QjMzNDA2NkM3RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMyez9J2j3bigRdW2Qr3CFR7nE ZOnDD5cildrESJYWOtPs2bQO4/02TUcGu7g5pUyculgUWhT3rExFh6AWegafWamc i6qTLKemoP1RcHwLsHXcWnXoo28KGf+vNiA3ovZg8su5KZ7g5SrttK7TJEbXeBhL SXHkSR0cr9njpRIh21vSojW96GgWKpa+wFaSII8ho3QWwZrOwKkRkJIOHCiycPbS Bl16Cs8zzdwhpHH/Jw/0lY7/osQ0bqACJfgkPV+8duqQMTr8VtUPrk4m9Ez1ri/P K5HcDvnDwgD4TetDMqSwSDn6L6Hsinv1YssoRAetN09zR5x7U1C0gn50kGMpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkVjc63rtWtOHjZfyYZebM0Bmx/4wHwYDVR0j BBgwFoAU4/teM0PsY9cF/1G2RRE/dMeWUjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMC9FM0ZCNUUzMzQz RUM2M0Q3MDVGRjUxQjY0NTExM0Y3NEM3OTY1MjM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNGNzRDNzk2 NTIzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZDU4MTEtYmU1MC00Y2FhLTlm OTYtNjNkMzcyMDMxMWRlLzAvRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNG NzRDNzk2NTIzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIluNcfzZaa4Jh7OnwbNrdyfdUrlIUBQyJAe 1KBIp4plHmgv3FyV8eVFf9cYVUiwUGzUBg4Bt6nmpObp0Rb0EHvQb4hkcgbazE49 lW3u2Ou3orb1Es8skerdYzEPb/cdsM5i0TX/eNAl4dDKJXJbEinPtVf89SGJ4eXM eakp7UNkabk04Q1SqgMzapt3sMljlkyi928+AVD7jPoDVgWHgE1XQiBnotFWptwx fddxRhxszyYsBnedT229pk4qEK4jR3sWxHcWmixTWvqlTPF38oec4NbxrkW5CDFj 2o5JALA9y0jAFuXAlwwYRy+6ijQZ34dHY6TYbrP0JT8kpSC3/Vo= -----END CERTIFICATE-----Generated at Wed Jul 23 12:12:30 2025 by rpki-client