$ rpki-client -vvf repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft File: EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft (raw, json) Hash identifier: 0EvJUK6m6tUZp8FLtvSTr5cv3OBT9xzMtUZBnba6AFM= Subject key identifier: 31:2C:F3:AB:25:E3:19:7A:49:13:93:77:60:C4:C1:28:9A:2E:0C:E1 Authority key identifier: EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5 Certificate issuer: /CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5 Certificate serial: 183AE82D26F456376076817D92342114EF2CEA09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft Manifest number: 0507 Signing time: Sun 07 Sep 2025 10:41:37 +0000 Manifest this update: Sun 07 Sep 2025 10:36:37 +0000 Manifest next update: Wed 10 Sep 2025 22:33:37 +0000 Files and hashes: 1: 3130332e362e3231342e302f32342d3234203d3e20313331313132.roa (hash: F0a3JFzr6TEGFg4XROWEIEBL9cNyd2bfiVU6lzFtCLY=) 2: EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl (hash: dUJEq63kxMMo2d0i9sjOe1xj6H/CQ6+Koaodk7ucMUA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:3a:e8:2d:26:f4:56:37:60:76:81:7d:92:34:21:14:ef:2c:ea:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5 Validity Not Before: Sep 7 10:36:37 2025 GMT Not After : Sep 10 22:33:37 2025 GMT Subject: CN=312CF3AB25E3197A4913937760C4C1289A2E0CE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:21:27:7a:f1:fc:85:e8:44:ec:a7:ef:be:e8: 47:ed:b1:f0:9c:f3:db:e7:ec:e3:54:11:bb:19:8b: e4:0e:e5:6b:24:c4:bf:5a:6c:d7:3e:ad:f3:79:21: 38:9e:ad:8f:91:ac:5b:59:9e:e7:5a:9d:31:01:83: 33:6f:6f:93:ac:d0:d4:1b:51:89:c0:59:5c:34:71: db:c6:da:4b:1a:e6:77:e9:cf:c7:0a:14:4a:44:c7: b4:29:96:e0:0f:44:4b:0f:bd:02:23:43:9a:9d:a9: 59:9a:ea:a6:f3:df:fb:aa:2f:bd:18:fd:ed:0b:77: 56:59:cd:ec:35:4d:3c:7f:ca:c9:95:cb:cd:20:30: 03:ad:5d:0b:b4:34:f3:fc:70:d1:7f:ba:bc:cc:da: 51:01:1d:d2:0b:5c:60:9f:fc:5a:52:57:21:e3:45: 1a:b6:a7:51:d7:bf:80:2f:ba:fa:1c:dd:35:27:5c: 81:11:56:7f:0a:46:22:36:fd:45:14:38:6c:99:26: a3:6e:84:5e:6c:91:59:da:94:01:80:1a:50:3a:86: 79:15:dd:0f:6f:83:cd:20:be:12:12:9a:ba:11:f1: e8:5c:9d:10:9a:25:37:fb:2d:1a:d0:8b:d6:f3:bb: 5f:9f:eb:f1:e0:2c:0f:bf:3b:84:4c:ea:ed:ee:c3: e1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2C:F3:AB:25:E3:19:7A:49:13:93:77:60:C4:C1:28:9A:2E:0C:E1 X509v3 Authority Key Identifier: keyid:EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:85:f7:cc:8c:a0:ae:f0:47:50:9a:0a:dd:52:fd:af:12:d9: 2d:a7:8e:40:b2:a7:bb:5e:b5:65:6e:06:f2:37:fe:36:8c:3d: bc:dd:d8:ed:d6:a5:a0:4b:de:2b:70:45:eb:e4:cd:3f:c1:f4: ab:aa:15:dd:03:f6:5a:37:61:24:28:ec:26:25:ff:42:f2:82: c0:00:50:36:2f:72:7f:28:ad:c3:af:8a:c2:25:1b:89:99:fe: a3:00:03:ec:9a:00:fe:16:8e:ff:e9:68:5f:41:49:c0:9d:70: 3c:92:02:50:4a:c1:7b:ca:56:79:a5:0b:a9:5f:cd:41:84:d0: aa:06:97:d2:82:af:bb:cb:0b:27:b7:b7:9d:f5:87:f5:2a:48: 47:ed:c7:11:af:a5:fb:72:1d:2e:36:2f:db:71:58:f8:0b:19: c0:e7:c8:57:09:5d:23:9b:ac:d6:07:2d:e5:c0:a5:7c:77:ef: 76:3d:07:65:64:05:62:38:0a:71:74:1a:ff:a7:aa:ea:ae:92: ff:a8:f4:a8:af:a7:31:4c:5a:e4:eb:9c:c0:85:dc:10:55:b0: 80:f2:f8:24:39:49:26:25:d4:d2:d4:19:b8:ef:4b:49:22:47: c5:70:db:e5:21:ba:83:37:61:4f:4f:bb:a2:30:ff:a1:db:36: 4c:ab:3a:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGDroLSb0VjdgdoF9kjQhFO8s6gkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdFREJB M0QxMTZENTAeFw0yNTA5MDcxMDM2MzdaFw0yNTA5MTAyMjMzMzdaMDMxMTAvBgNV BAMTKDMxMkNGM0FCMjVFMzE5N0E0OTEzOTM3NzYwQzRDMTI4OUEyRTBDRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAISd68fyF6ETsp+++6EftsfCc 89vn7ONUEbsZi+QO5WskxL9abNc+rfN5ITierY+RrFtZnudanTEBgzNvb5Os0NQb UYnAWVw0cdvG2ksa5nfpz8cKFEpEx7QpluAPREsPvQIjQ5qdqVma6qbz3/uqL70Y /e0Ld1ZZzew1TTx/ysmVy80gMAOtXQu0NPP8cNF/urzM2lEBHdILXGCf/FpSVyHj RRq2p1HXv4Avuvoc3TUnXIERVn8KRiI2/UUUOGyZJqNuhF5skVnalAGAGlA6hnkV 3Q9vg80gvhISmroR8ehcnRCaJTf7LRrQi9bzu1+f6/HgLA+/O4RM6u3uw+HdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMSzzqyXjGXpJE5N3YMTBKJouDOEwHwYDVR0j BBgwFoAU7GKpSXDlasn+i4KKVCt+26PRFtUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODdmOGY4Mi0zN2JiLTQ5ODMtOTNjYS01ZTA2NzBhYjAyZTMvMC9FQzYyQTk0OTcw RTU2QUM5RkU4QjgyOEE1NDJCN0VEQkEzRDExNkQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdFREJBM0Qx MTZENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg3ZjhmODItMzdiYi00OTgzLTkz Y2EtNWUwNjcwYWIwMmUzLzAvRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdF REJBM0QxMTZENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOF98yMoK7wR1CaCt1S/a8S2S2njkCyp7te tWVuBvI3/jaMPbzd2O3WpaBL3itwRevkzT/B9KuqFd0D9lo3YSQo7CYl/0LygsAA UDYvcn8orcOvisIlG4mZ/qMAA+yaAP4Wjv/paF9BScCdcDySAlBKwXvKVnmlC6lf zUGE0KoGl9KCr7vLCye3t531h/UqSEftxxGvpftyHS42L9txWPgLGcDnyFcJXSOb rNYHLeXApXx373Y9B2VkBWI4CnF0Gv+nququkv+o9KivpzFMWuTrnMCF3BBVsIDy +CQ5SSYl1NLUGbjvS0kiR8Vw2+UhuoM3YU9Pu6Iw/6HbNkyrOko= -----END CERTIFICATE-----Generated at Sun Sep 7 15:32:17 2025 by rpki-client