$ rpki-client -vvf repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft File: E3928623409C1C10E292F838F8308E11636E6C03.mft (raw, json) Hash identifier: DvqQSbhVRiEDfwLcnUJpD0Gjts8HIxiEDgg0tbySAKw= Subject key identifier: 2E:A2:39:D3:60:94:45:37:14:FB:9B:7D:00:DC:79:EF:10:86:8F:74 Authority key identifier: E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03 Certificate issuer: /CN=E3928623409C1C10E292F838F8308E11636E6C03 Certificate serial: 7A2795BC5EBDD6AF8EBD2E46DBE37B24E7EE62F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft Manifest number: A7 Signing time: Thu 24 Jul 2025 16:12:08 +0000 Manifest this update: Thu 24 Jul 2025 16:07:08 +0000 Manifest next update: Sun 27 Jul 2025 22:08:08 +0000 Files and hashes: 1: 323030313a6466343a6334303a3a2f34382d3438203d3e20313533303639.roa (hash: yKi1/CgLy/vSnVRFpQJ8qbRC3Gfhckznl3idTXbJhUE=) 2: E3928623409C1C10E292F838F8308E11636E6C03.crl (hash: gvGKDinf5dLpa3k3QJ6rVKNa1q+GacY77fXLSku29Uw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.crl rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:27:95:bc:5e:bd:d6:af:8e:bd:2e:46:db:e3:7b:24:e7:ee:62:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3928623409C1C10E292F838F8308E11636E6C03 Validity Not Before: Jul 24 16:07:08 2025 GMT Not After : Jul 27 22:08:08 2025 GMT Subject: CN=2EA239D36094453714FB9B7D00DC79EF10868F74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d1:14:d1:d7:57:b3:a7:8c:60:e7:63:64:11: db:65:3f:1d:ba:e5:ac:5d:a3:29:32:c8:e9:0a:a2: bd:9f:7b:e2:9f:9b:a2:55:27:2d:9c:74:25:4c:ce: ad:f6:9d:95:ff:36:98:7b:a2:17:3d:27:ad:48:79: c5:4c:db:99:48:46:c4:49:48:f4:44:7f:58:c3:3c: 4f:7f:86:16:a8:bc:c0:21:ae:c7:d9:48:e6:06:f7: 91:92:e4:c1:e4:05:2b:30:11:91:cb:0a:70:73:e9: 87:27:ac:e5:83:fd:03:0c:81:7c:d4:de:5d:a8:ec: 89:71:1a:18:c1:f9:d5:24:4d:04:e6:75:90:f2:cf: 6c:7b:ae:ef:01:38:82:c5:ce:d6:86:e8:9e:44:b9: 8d:1e:15:be:fe:d5:0a:0f:ab:5b:c8:48:9e:4c:4e: b8:35:72:46:f8:dc:ab:f8:4f:16:a0:5c:eb:01:d8: d0:dc:88:da:04:14:f3:f8:be:1d:16:65:a2:48:5c: fc:23:19:8c:04:ce:ff:cb:9c:8a:86:6f:5b:c5:a5: ff:ff:00:f7:98:d4:b2:4a:00:d7:bd:e4:62:f9:4f: 41:ff:37:f8:e4:c9:24:fc:09:22:d4:8b:23:dc:45: 80:b7:de:06:ce:ed:59:4f:55:d1:70:56:44:c7:06: ad:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A2:39:D3:60:94:45:37:14:FB:9B:7D:00:DC:79:EF:10:86:8F:74 X509v3 Authority Key Identifier: keyid:E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:59:7f:d1:f8:87:7f:74:a1:55:43:ba:1a:07:59:40:7b:6c: c5:34:9f:e2:b6:0e:fa:56:c8:da:b7:ca:d2:10:88:b0:9b:29: f1:14:93:a0:8f:6d:32:ae:60:da:eb:05:4a:6c:90:fe:c1:8e: af:6e:4f:d3:51:a0:b8:e5:53:ad:25:de:7d:a3:43:e4:d3:d3: 42:89:87:11:40:c0:02:23:2c:d4:17:0c:20:35:08:41:5d:e6: 73:1e:3e:83:df:61:f0:e7:16:32:6e:12:24:0b:52:54:33:f0: f1:4a:86:aa:1a:72:88:44:27:e1:88:62:4b:d3:ff:4b:cb:71: a3:42:15:e0:48:ab:d0:56:47:13:34:c5:f3:9b:25:c9:2b:d0: 94:26:9b:39:91:25:b4:01:d9:cd:24:af:24:f9:65:94:9d:7a: 0e:6f:72:dc:fd:b2:b8:74:91:cb:ef:c2:c1:76:47:f8:bc:70: 26:f3:d9:7a:44:f6:6a:a7:83:d0:2b:38:b8:42:10:1b:29:f9: 36:7c:e8:03:f8:c3:a9:44:85:2e:6c:a6:e8:0f:74:53:8f:c4: a1:78:da:84:a1:52:1e:e3:fa:d1:32:08:12:7c:d8:bb:5a:ff: 34:5a:9a:a2:8e:21:9c:42:3b:09:cd:bc:45:e2:7a:21:04:17: f7:a8:b1:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeieVvF691q+OvS5G2+N7JOfuYvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM5Mjg2MjM0MDlDMUMxMEUyOTJGODM4RjgzMDhFMTE2 MzZFNkMwMzAeFw0yNTA3MjQxNjA3MDhaFw0yNTA3MjcyMjA4MDhaMDMxMTAvBgNV BAMTKDJFQTIzOUQzNjA5NDQ1MzcxNEZCOUI3RDAwREM3OUVGMTA4NjhGNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH0RTR11ezp4xg52NkEdtlPx26 5axdoykyyOkKor2fe+Kfm6JVJy2cdCVMzq32nZX/Nph7ohc9J61IecVM25lIRsRJ SPREf1jDPE9/hhaovMAhrsfZSOYG95GS5MHkBSswEZHLCnBz6YcnrOWD/QMMgXzU 3l2o7IlxGhjB+dUkTQTmdZDyz2x7ru8BOILFztaG6J5EuY0eFb7+1QoPq1vISJ5M Trg1ckb43Kv4TxagXOsB2NDciNoEFPP4vh0WZaJIXPwjGYwEzv/LnIqGb1vFpf// APeY1LJKANe95GL5T0H/N/jkyST8CSLUiyPcRYC33gbO7VlPVdFwVkTHBq0ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULqI502CURTcU+5t9ANx57xCGj3QwHwYDVR0j BBgwFoAU45KGI0CcHBDikvg4+DCOEWNubAMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzY1NjFkNC0yM2M4LTRjOWItODkwZS00ZjI2MzJlNTJjOTcvMS9FMzkyODYyMzQw OUMxQzEwRTI5MkY4MzhGODMwOEUxMTYzNkU2QzAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM5Mjg2MjM0MDlDMUMxMEUyOTJGODM4RjgzMDhFMTE2MzZF NkMwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzEvRTM5Mjg2MjM0MDlDMUMxMEUyOTJGODM4RjgzMDhF MTE2MzZFNkMwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhZf9H4h390oVVDuhoHWUB7bMU0n+K2DvpW yNq3ytIQiLCbKfEUk6CPbTKuYNrrBUpskP7Bjq9uT9NRoLjlU60l3n2jQ+TT00KJ hxFAwAIjLNQXDCA1CEFd5nMePoPfYfDnFjJuEiQLUlQz8PFKhqoacohEJ+GIYkvT /0vLcaNCFeBIq9BWRxM0xfObJckr0JQmmzmRJbQB2c0kryT5ZZSdeg5vctz9srh0 kcvvwsF2R/i8cCbz2XpE9mqng9ArOLhCEBsp+TZ86AP4w6lEhS5spugPdFOPxKF4 2oShUh7j+tEyCBJ82Lta/zRamqKOIZxCOwnNvEXieiEEF/eosbM= -----END CERTIFICATE-----Generated at Sat Jul 26 10:51:33 2025 by rpki-client