$ rpki-client -vvf repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft File: E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft (raw, json) Hash identifier: SH7QPjdNnWITYlNXWBi3TjuiAxu8W9RU4dncixa2sE4= Subject key identifier: 93:9A:AB:7C:24:4C:78:51:B0:F7:C4:1B:04:F4:BF:24:E1:8A:5E:D6 Authority key identifier: E9:C6:90:C5:1E:9B:F1:B5:97:83:32:FD:5B:A9:4A:85:01:92:F5:4C Certificate issuer: /CN=E9C690C51E9BF1B5978332FD5BA94A850192F54C Certificate serial: 2C074BE97A1BA1A1307C64D432A2012DCD176B19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft Manifest number: A2 Signing time: Mon 21 Jul 2025 01:30:42 +0000 Manifest this update: Mon 21 Jul 2025 01:25:42 +0000 Manifest next update: Thu 24 Jul 2025 01:32:42 +0000 Files and hashes: 1: 3136302e32352e3234322e302f32332d3234203d3e20313432333437.roa (hash: qYeddWCUDVszc7mZTW90CbBoRIOyBoY1LaUrZanAxXQ=) 2: E9C690C51E9BF1B5978332FD5BA94A850192F54C.crl (hash: +CgEMsFD9swN4p9REhopuzvKPSdQXj37tE80k0ifYH0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.crl rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 01:32:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:07:4b:e9:7a:1b:a1:a1:30:7c:64:d4:32:a2:01:2d:cd:17:6b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9C690C51E9BF1B5978332FD5BA94A850192F54C Validity Not Before: Jul 21 01:25:42 2025 GMT Not After : Jul 24 01:32:42 2025 GMT Subject: CN=939AAB7C244C7851B0F7C41B04F4BF24E18A5ED6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5d:5c:40:e1:43:38:75:1c:77:e6:89:ca:b4: 1b:d5:ca:75:0a:48:ed:c7:d5:2b:54:ef:a1:42:49: 1c:bc:7e:c8:0c:e5:fd:5b:42:69:50:cd:04:a4:06: 38:66:a2:4f:81:aa:2a:0a:0c:ba:fc:fa:87:b7:76: ed:6e:9a:07:a0:9f:ff:af:74:3a:56:4e:28:da:19: 0c:6e:34:45:a4:01:b0:a9:35:3d:38:3e:f4:ce:83: bc:8e:1f:13:62:26:bc:fe:2a:df:d8:02:9e:f8:86: c9:02:e6:5c:5c:16:6f:7b:4a:63:5d:f2:fc:cd:2c: 39:20:ec:b0:e3:f4:ee:60:03:c7:9e:08:61:04:9f: c0:3a:3d:04:72:bc:ba:6f:84:4f:f6:f1:24:23:29: 6e:79:c2:c5:08:43:c9:43:cd:31:97:ac:47:38:e8: 0f:57:9c:f2:03:7c:45:a1:72:87:6a:43:4a:e7:1b: c0:bb:0e:87:26:3c:86:06:64:f3:e3:d5:1f:e9:b6: 23:fa:92:c0:0a:ab:24:a8:4a:52:41:f6:a1:c1:15: 7e:80:0f:0f:be:f6:21:a8:be:99:6c:7e:55:b0:a3: 75:37:90:c4:38:66:54:b9:a2:58:0f:bb:d1:a3:6a: 1b:23:a8:8f:6b:91:a7:4c:c5:41:b9:e7:5c:5b:ac: 38:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:9A:AB:7C:24:4C:78:51:B0:F7:C4:1B:04:F4:BF:24:E1:8A:5E:D6 X509v3 Authority Key Identifier: keyid:E9:C6:90:C5:1E:9B:F1:B5:97:83:32:FD:5B:A9:4A:85:01:92:F5:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:3d:e3:86:c6:35:53:cf:c8:bf:34:48:5e:a6:dc:ff:fc:5a: 54:ab:9b:c1:66:39:7d:42:33:a1:34:9c:33:a6:fa:86:d8:a8: ae:42:81:a5:b0:03:13:a7:1f:72:d2:69:04:a0:ac:59:03:7d: 16:3f:4c:17:41:9e:e6:3a:e8:2b:7a:85:98:fb:8a:84:b8:06: 0a:9b:89:cd:be:f6:79:b6:88:22:b6:75:31:c9:43:0d:9d:7f: 2d:fb:e8:08:03:45:61:75:8c:85:e5:d6:69:8d:15:95:16:df: c2:c0:c6:20:9d:7a:a4:8a:3c:ac:c2:3f:31:ca:a2:03:48:15: 8e:d9:f8:d0:42:26:e9:1d:35:e6:31:0e:1f:85:c0:63:08:4e: bb:40:1f:eb:06:54:6d:23:75:9a:0e:bb:6f:2c:27:98:47:85: af:ff:14:1b:06:d7:e1:82:2f:d8:56:01:f3:6d:d0:b0:a2:2c: a9:15:d1:ef:3d:d5:1d:f5:00:5b:6a:56:0f:3a:9d:92:51:54: 82:13:a6:71:49:bf:88:a8:28:32:7e:b9:b5:50:2e:4f:93:43: 87:50:ef:13:3f:df:0c:ff:a6:bc:6e:da:a9:1c:9b:82:85:f2: 84:71:97:cd:54:1b:a8:54:83:2a:c3:25:d1:df:cd:80:a5:0c: d4:63:8b:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULAdL6XoboaEwfGTUMqIBLc0XaxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlDNjkwQzUxRTlCRjFCNTk3ODMzMkZENUJBOTRBODUw MTkyRjU0QzAeFw0yNTA3MjEwMTI1NDJaFw0yNTA3MjQwMTMyNDJaMDMxMTAvBgNV BAMTKDkzOUFBQjdDMjQ0Qzc4NTFCMEY3QzQxQjA0RjRCRjI0RTE4QTVFRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClXVxA4UM4dRx35onKtBvVynUK SO3H1StU76FCSRy8fsgM5f1bQmlQzQSkBjhmok+BqioKDLr8+oe3du1umgegn/+v dDpWTijaGQxuNEWkAbCpNT04PvTOg7yOHxNiJrz+Kt/YAp74hskC5lxcFm97SmNd 8vzNLDkg7LDj9O5gA8eeCGEEn8A6PQRyvLpvhE/28SQjKW55wsUIQ8lDzTGXrEc4 6A9XnPIDfEWhcodqQ0rnG8C7DocmPIYGZPPj1R/ptiP6ksAKqySoSlJB9qHBFX6A Dw++9iGovplsflWwo3U3kMQ4ZlS5olgPu9GjahsjqI9rkadMxUG551xbrDiTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk5qrfCRMeFGw98QbBPS/JOGKXtYwHwYDVR0j BBgwFoAU6caQxR6b8bWXgzL9W6lKhQGS9UwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDUzODhmNC0xMDdiLTQ0YTktOWQ4Zi0xNjAzZmVjZmRlZTkvMC9FOUM2OTBDNTFF OUJGMUI1OTc4MzMyRkQ1QkE5NEE4NTAxOTJGNTRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTlDNjkwQzUxRTlCRjFCNTk3ODMzMkZENUJBOTRBODUwMTky RjU0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA1Mzg4ZjQtMTA3Yi00NGE5LTlk OGYtMTYwM2ZlY2ZkZWU5LzAvRTlDNjkwQzUxRTlCRjFCNTk3ODMzMkZENUJBOTRB ODUwMTkyRjU0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGM944bGNVPPyL80SF6m3P/8WlSrm8FmOX1C M6E0nDOm+obYqK5CgaWwAxOnH3LSaQSgrFkDfRY/TBdBnuY66Ct6hZj7ioS4Bgqb ic2+9nm2iCK2dTHJQw2dfy376AgDRWF1jIXl1mmNFZUW38LAxiCdeqSKPKzCPzHK ogNIFY7Z+NBCJukdNeYxDh+FwGMITrtAH+sGVG0jdZoOu28sJ5hHha//FBsG1+GC L9hWAfNt0LCiLKkV0e891R31AFtqVg86nZJRVIITpnFJv4ioKDJ+ubVQLk+TQ4dQ 7xM/3wz/prxu2qkcm4KF8oRxl81UG6hUgyrDJdHfzYClDNRji9I= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:42 2025 by rpki-client