$ rpki-client -vvf repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft File: E89C93F089A07D03B5794B0C02239EF67E1D721C.mft (raw, json) Hash identifier: t5YyRIbjr9eYoUE+7qNbWgFuz/2zI382cSjiLjZkFTc= Subject key identifier: 51:DA:43:18:06:FA:38:62:96:E0:6A:71:06:56:C2:8E:C9:16:69:CD Authority key identifier: E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C Certificate issuer: /CN=E89C93F089A07D03B5794B0C02239EF67E1D721C Certificate serial: 33CD0072CE7F855345E828F18C14ECE6F09CC134 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft Manifest number: 64 Signing time: Wed 04 Jun 2025 18:11:54 +0000 Manifest this update: Wed 04 Jun 2025 18:06:54 +0000 Manifest next update: Sat 07 Jun 2025 22:26:54 +0000 Files and hashes: 1: E89C93F089A07D03B5794B0C02239EF67E1D721C.crl (hash: 8uQvMWGQs+BCjUUGUhV8PjsPzpvjNOPek3WEjrv6rP4=) 2: 3230322e37302e3133362e302f32342d3234203d3e203436303334.roa (hash: 4RAp4F/7XGUDJWluz8ukd4JUDTUiL5R6CUgISPZWwHM=) 3: 3130332e37342e3136342e302f32342d3234203d3e203436303334.roa (hash: QbAeIT3Ks6znT3hg7T+AnddPc66+/tThEc2QldGCSpw=) 4: 3130332e35332e32302e302f32342d3234203d3e203436303334.roa (hash: YHAiLGhk7A6ZE4X7obU+oz12qWeh7X0M2hlk6hYX8jU=) 5: 3130332e37342e3134332e302f32342d3234203d3e203436303334.roa (hash: JENEpsaygQnZfGVyo5B3YcYBAcWsk2wulHjqbKHp5Ko=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 22:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:cd:00:72:ce:7f:85:53:45:e8:28:f1:8c:14:ec:e6:f0:9c:c1:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E89C93F089A07D03B5794B0C02239EF67E1D721C Validity Not Before: Jun 4 18:06:54 2025 GMT Not After : Jun 7 22:26:54 2025 GMT Subject: CN=51DA431806FA386296E06A710656C28EC91669CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:dc:f2:08:cb:92:02:05:2a:ad:cb:06:52:20: 9a:a0:9c:79:1c:7a:29:e2:59:29:2d:ad:df:16:b8: 49:11:c1:6d:da:b3:d1:5d:74:36:65:ab:36:32:a1: 16:de:29:ae:3b:05:75:db:ed:e1:09:55:e1:19:d8: 28:19:b2:fe:fa:43:35:25:c7:3b:0f:81:fb:b7:ca: 83:df:2a:ef:11:b4:51:87:f7:0f:40:64:4a:66:f0: fc:8c:ff:ff:b1:70:1f:c5:c1:50:f0:70:e8:0c:cd: 28:df:6c:04:ba:51:36:86:90:2c:7a:12:a2:bb:00: 1c:72:bd:ae:da:65:c2:22:ce:b4:f5:c3:e6:c9:25: c2:46:d1:dd:77:6b:d6:cb:59:df:0c:55:55:f3:0c: 0a:b3:15:f7:e7:c7:33:9c:ec:04:14:e1:09:66:89: d7:a7:b8:4f:62:ee:fe:b7:6e:72:00:84:00:42:44: 13:b7:de:18:fc:31:87:55:55:cb:07:5b:38:3e:cd: 53:f7:19:63:98:2c:0d:c3:a3:0a:c3:c7:04:0a:d7: 03:d2:dc:83:e1:a6:40:99:35:5c:78:6a:b6:5b:7a: 66:b1:88:de:f5:48:a0:47:fd:d4:00:3e:15:00:2c: 02:8e:66:a3:f7:59:ca:a5:d8:db:ee:61:9a:4a:3d: d0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DA:43:18:06:FA:38:62:96:E0:6A:71:06:56:C2:8E:C9:16:69:CD X509v3 Authority Key Identifier: keyid:E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:62:ec:5b:0c:06:5a:d5:b0:89:44:72:f0:3a:39:07:d9:19: 6e:d7:7d:79:8c:63:80:e9:10:60:bc:eb:c5:5a:51:5a:6e:83: f4:68:26:91:b7:f8:af:64:47:d6:ed:bf:f9:17:a5:64:ff:60: e2:a5:6a:76:d9:0d:b6:83:68:ab:3d:61:9e:52:e6:5a:a9:b9: 3a:23:25:83:71:ba:43:48:1b:99:e6:ab:6b:25:02:74:54:92: 0e:e3:22:a2:7a:c9:ca:ef:e6:1f:f7:35:75:2e:09:c6:3e:c6: e0:92:25:c3:d4:95:47:f1:22:10:a7:56:f3:fa:bf:95:49:74: bd:dc:88:89:d0:88:b4:ba:c0:97:89:d6:d0:1d:23:53:65:b6: b8:6d:69:9d:29:bc:e2:2b:61:66:6e:3d:9e:4c:78:a6:d2:b9: 54:ac:e4:b6:48:11:ed:79:01:21:fa:59:d7:94:15:bd:1d:43: bf:50:e5:dc:d9:45:07:6b:f5:e2:a5:08:ea:de:94:cf:0f:d5: 1f:e5:8a:7c:9e:16:aa:0b:71:34:f3:27:c4:af:7f:e0:18:ed: 73:da:16:24:23:5c:d1:51:d7:62:20:24:47:6f:f9:e2:1e:de: cf:c5:62:e2:0d:92:6b:3b:e3:b5:ff:56:97:54:cc:4a:34:e4: c3:ec:65:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM80Acs5/hVNF6CjxjBTs5vCcwTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3 RTFENzIxQzAeFw0yNTA2MDQxODA2NTRaFw0yNTA2MDcyMjI2NTRaMDMxMTAvBgNV BAMTKDUxREE0MzE4MDZGQTM4NjI5NkUwNkE3MTA2NTZDMjhFQzkxNjY5Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd3PIIy5ICBSqtywZSIJqgnHkc einiWSktrd8WuEkRwW3as9FddDZlqzYyoRbeKa47BXXb7eEJVeEZ2CgZsv76QzUl xzsPgfu3yoPfKu8RtFGH9w9AZEpm8PyM//+xcB/FwVDwcOgMzSjfbAS6UTaGkCx6 EqK7ABxyva7aZcIizrT1w+bJJcJG0d13a9bLWd8MVVXzDAqzFffnxzOc7AQU4Qlm idenuE9i7v63bnIAhABCRBO33hj8MYdVVcsHWzg+zVP3GWOYLA3DowrDxwQK1wPS 3IPhpkCZNVx4arZbemaxiN71SKBH/dQAPhUALAKOZqP3Wcql2NvuYZpKPdAdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUdpDGAb6OGKW4GpxBlbCjskWac0wHwYDVR0j BBgwFoAU6JyT8ImgfQO1eUsMAiOe9n4dchwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Zjg4NTFlNS1lZTViLTQxZTEtOWFiYy00NDI2NTFkMjcyOTQvMC9FODlDOTNGMDg5 QTA3RDAzQjU3OTRCMEMwMjIzOUVGNjdFMUQ3MjFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3RTFE NzIxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY4ODUxZTUtZWU1Yi00MWUxLTlh YmMtNDQyNjUxZDI3Mjk0LzAvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlF RjY3RTFENzIxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZi7FsMBlrVsIlEcvA6OQfZGW7XfXmMY4Dp EGC868VaUVpug/RoJpG3+K9kR9btv/kXpWT/YOKlanbZDbaDaKs9YZ5S5lqpuToj JYNxukNIG5nmq2slAnRUkg7jIqJ6ycrv5h/3NXUuCcY+xuCSJcPUlUfxIhCnVvP6 v5VJdL3ciInQiLS6wJeJ1tAdI1NltrhtaZ0pvOIrYWZuPZ5MeKbSuVSs5LZIEe15 ASH6WdeUFb0dQ79Q5dzZRQdr9eKlCOrelM8P1R/linyeFqoLcTTzJ8Svf+AY7XPa FiQjXNFR12IgJEdv+eIe3s/FYuINkms747X/VpdUzEo05MPsZTY= -----END CERTIFICATE-----Generated at Thu Jun 5 19:03:28 2025 by rpki-client