$ rpki-client -vvf repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft File: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft (raw, json) Hash identifier: 33Q0aIcfDyAZtOiWLK7UrDC4nU38lf6Mgy4O0tIXpu8= Subject key identifier: DD:48:06:67:55:9C:65:BA:31:C1:FA:34:18:86:E9:B7:F8:EB:50:9B Authority key identifier: ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A Certificate issuer: /CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Certificate serial: 131D5F0CE1C23C22F8A3770557ABE529FAB41A5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft Manifest number: 01D5 Signing time: Thu 05 Jun 2025 05:41:10 +0000 Manifest this update: Thu 05 Jun 2025 05:36:10 +0000 Manifest next update: Sun 08 Jun 2025 10:24:10 +0000 Files and hashes: 1: 3130332e3133352e34382e302f32322d3234203d3e203338333230.roa (hash: /cF+CKjnrx0BGZ8wL/sfXfp5hgNUQBZIeeM9AfAYFsU=) 2: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl (hash: OcpKBh5PfgBHHaH/bqwq2hIxI570cU7CCuBv8snx9qU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 10:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:1d:5f:0c:e1:c2:3c:22:f8:a3:77:05:57:ab:e5:29:fa:b4:1a:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Validity Not Before: Jun 5 05:36:10 2025 GMT Not After : Jun 8 10:24:10 2025 GMT Subject: CN=DD480667559C65BA31C1FA341886E9B7F8EB509B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:31:41:ad:12:54:6f:97:4d:0f:09:8c:d8:1f: be:66:10:de:ea:9c:33:e9:e8:b7:02:a0:e9:32:72: 36:d5:b3:da:d3:65:12:30:89:7b:27:52:37:1b:64: ed:8c:15:6b:d6:56:4d:08:03:77:64:96:b4:cc:a7: 0e:76:eb:a3:ec:ac:e5:f6:a3:c4:2b:c1:11:4f:62: fb:f6:82:d0:82:f7:43:11:04:31:81:a3:40:c2:14: 5c:59:6b:1f:0a:a3:20:2f:f1:4d:dd:13:18:a6:3b: bf:20:a2:72:c8:a7:b8:3a:66:e9:b1:d3:4e:19:b0: 55:d6:fc:74:e3:39:c1:13:9b:7e:9b:8b:27:19:3f: ca:ac:bb:88:86:53:32:87:54:e3:2a:51:53:85:5e: 32:68:23:16:0a:87:a2:18:0b:2d:d5:41:30:62:da: 04:cf:65:cb:40:fe:a2:db:47:cd:d0:bf:71:2f:6e: 03:51:9d:a4:36:fd:d0:84:5e:b2:99:cc:2d:a7:2d: 6e:63:6a:af:4b:00:93:c2:6e:8b:72:0e:e9:8d:f1: be:db:06:ef:36:21:9e:45:0e:08:44:df:91:a9:0e: 01:4e:89:3f:ec:53:37:85:ba:74:e4:ce:bb:ac:fa: c1:49:d1:98:ce:45:0b:57:41:bc:de:a5:bc:d7:46: 02:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:48:06:67:55:9C:65:BA:31:C1:FA:34:18:86:E9:B7:F8:EB:50:9B X509v3 Authority Key Identifier: keyid:ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:c2:c8:31:84:25:c3:8b:3d:4c:f9:3e:c5:97:64:09:40:f5: f7:b6:a7:9a:e2:0b:cf:43:8b:e6:e8:c3:b4:80:fa:2d:30:5f: ad:7b:81:33:8c:d4:72:8e:bf:08:68:15:9b:60:dd:a1:82:a5: af:33:2c:64:e3:e5:19:ea:6b:b7:fb:45:49:22:92:81:c4:1a: 14:67:0e:3d:c6:20:33:6e:8b:b3:a1:20:03:ea:e9:d1:c1:fd: 30:cd:b4:29:ae:4a:7b:c2:3c:ac:13:69:19:d5:d4:21:56:02: 57:26:96:4f:94:3e:e9:72:27:d9:b9:b3:22:f7:96:ca:fd:f9: d8:57:7e:66:a9:2f:77:6b:0a:f4:54:6d:97:f2:40:63:40:a5: 31:6d:cb:e1:c1:b5:eb:ab:f5:97:28:12:91:c0:8a:71:26:dc: 54:79:c9:44:bf:81:ae:55:4e:d5:ea:65:34:6f:02:c5:ab:1a: 8c:df:f0:93:70:79:bf:39:24:fb:71:1e:99:2a:1c:34:75:48: 59:f4:45:e7:90:77:70:82:a4:38:a4:52:10:c4:ed:3c:2b:22: be:2a:44:5d:be:d7:21:c7:49:71:79:15:18:99:68:b4:a6:95: 20:82:a5:80:ec:79:a3:24:70:ea:e2:1c:f0:22:30:e5:78:b8: d5:ab:2e:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEx1fDOHCPCL4o3cFV6vlKfq0Gl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RB OTFDQTE1QTAeFw0yNTA2MDUwNTM2MTBaFw0yNTA2MDgxMDI0MTBaMDMxMTAvBgNV BAMTKERENDgwNjY3NTU5QzY1QkEzMUMxRkEzNDE4ODZFOUI3RjhFQjUwOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChMUGtElRvl00PCYzYH75mEN7q nDPp6LcCoOkycjbVs9rTZRIwiXsnUjcbZO2MFWvWVk0IA3dklrTMpw5266PsrOX2 o8QrwRFPYvv2gtCC90MRBDGBo0DCFFxZax8KoyAv8U3dEximO78gonLIp7g6Zumx 004ZsFXW/HTjOcETm36biycZP8qsu4iGUzKHVOMqUVOFXjJoIxYKh6IYCy3VQTBi 2gTPZctA/qLbR83Qv3EvbgNRnaQ2/dCEXrKZzC2nLW5jaq9LAJPCbotyDumN8b7b Bu82IZ5FDghE35GpDgFOiT/sUzeFunTkzrus+sFJ0ZjORQtXQbzepbzXRgLDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3UgGZ1WcZboxwfo0GIbpt/jrUJswHwYDVR0j BBgwFoAU7TznJkVjrblA6vr0vYfNzakcoVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Y2NjMmFmNC1hNjJkLTQ3MDgtYjY4OC0xODkyNTk0YmE5ODkvMC9FRDNDRTcyNjQ1 NjNBREI5NDBFQUZBRjRCRDg3Q0RDREE5MUNBMTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RBOTFD QTE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGNjYzJhZjQtYTYyZC00NzA4LWI2 ODgtMTg5MjU5NGJhOTg5LzAvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NE Q0RBOTFDQTE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALCyDGEJcOLPUz5PsWXZAlA9fe2p5riC89D i+bow7SA+i0wX617gTOM1HKOvwhoFZtg3aGCpa8zLGTj5Rnqa7f7RUkikoHEGhRn Dj3GIDNui7OhIAPq6dHB/TDNtCmuSnvCPKwTaRnV1CFWAlcmlk+UPulyJ9m5syL3 lsr9+dhXfmapL3drCvRUbZfyQGNApTFty+HBteur9ZcoEpHAinEm3FR5yUS/ga5V TtXqZTRvAsWrGozf8JNweb85JPtxHpkqHDR1SFn0ReeQd3CCpDikUhDE7TwrIr4q RF2+1yHHSXF5FRiZaLSmlSCCpYDseaMkcOriHPAiMOV4uNWrLlk= -----END CERTIFICATE-----Generated at Fri Jun 6 16:55:39 2025 by rpki-client