$ rpki-client -vvf repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft File: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft (raw, json) Hash identifier: 784MnQx8Qwh0BlUdhMXmXGJKvUOxGRWVniddonTs56E= Subject key identifier: D4:5F:10:39:16:C9:AD:45:53:8D:82:B3:6D:19:27:7B:C6:D1:C1:A6 Authority key identifier: EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE Certificate issuer: /CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Certificate serial: 6D5FD2EFB65164AACB35B5AB821A4AB68FF2322B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft Manifest number: 0100 Signing time: Thu 05 Jun 2025 12:31:35 +0000 Manifest this update: Thu 05 Jun 2025 12:26:35 +0000 Manifest next update: Sun 08 Jun 2025 12:59:35 +0000 Files and hashes: 1: 3130332e35332e32382e302f32332d3234203d3e20313339393535.roa (hash: XmUhlDLdTlUEJxqMyV5d8izbXv0SLIMUNSTUR2SbfXQ=) 2: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl (hash: wYbS5jMVNzHMSb/9uQAwrmB8m1C1SKiSCRj7YyO6Lsg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 12:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:5f:d2:ef:b6:51:64:aa:cb:35:b5:ab:82:1a:4a:b6:8f:f2:32:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Validity Not Before: Jun 5 12:26:35 2025 GMT Not After : Jun 8 12:59:35 2025 GMT Subject: CN=D45F103916C9AD45538D82B36D19277BC6D1C1A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f5:63:61:b3:b7:4b:95:86:11:72:b0:6d:9c: c2:35:40:90:d1:8f:e6:94:65:18:ba:5f:04:6e:3e: 77:41:79:de:00:d8:a3:86:b5:9f:af:0f:fa:78:9f: c5:d0:b5:51:10:18:5e:7e:92:29:e8:f7:96:e7:69: a1:0f:de:7d:e7:c0:df:6f:b0:e2:3f:ac:90:73:6d: 43:70:56:b2:02:99:cd:72:b3:ca:d3:7f:63:33:67: fe:4c:c9:09:40:d8:b9:c5:0b:2d:4e:0b:07:ed:24: d3:ea:ca:aa:01:35:fd:0d:ca:cc:09:92:d5:54:b2: c4:c3:0c:a3:88:b8:a5:5e:a3:d7:1f:36:e8:54:8e: 53:af:5a:60:50:61:a0:fe:82:66:a2:1b:25:79:75: 48:e1:ed:3d:ae:91:27:f4:0b:11:21:33:52:a1:80: 38:e2:6d:be:60:6b:a0:31:5a:d1:a4:45:b4:b8:72: 1d:e9:92:94:c6:10:9a:cf:60:60:2a:ae:00:f2:e1: 23:b3:9b:13:4e:d3:12:ac:43:ff:0e:b1:53:4a:95: c3:d9:21:ea:26:b4:7c:86:df:11:65:fd:ef:1b:26: 33:98:52:14:dc:e9:da:2e:41:f7:3b:08:e2:1f:07: a3:06:b3:bb:71:ae:c7:df:65:c2:08:4b:5b:6b:2e: ec:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:5F:10:39:16:C9:AD:45:53:8D:82:B3:6D:19:27:7B:C6:D1:C1:A6 X509v3 Authority Key Identifier: keyid:EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:a6:fb:2d:25:bf:83:60:5a:7a:d8:20:04:67:df:78:37:26: 5d:07:8f:9e:bc:35:5e:0d:e5:5a:b9:26:67:29:c1:f5:64:c1: 00:f6:9d:c4:20:42:fd:2f:0c:34:e1:d3:bf:4d:93:db:33:70: e3:80:83:46:ec:d0:c4:53:bb:7a:a7:fa:3a:08:c9:25:18:3d: 7d:25:93:6f:dc:bb:6f:a8:97:89:13:93:7f:b6:c1:fd:69:df: b0:04:e9:af:bc:6b:30:7f:05:c2:89:f0:b8:86:47:02:fe:16: 79:c0:7b:bb:a9:53:cf:7f:97:dd:c8:29:6d:17:fd:9a:ae:8d: 0a:6b:7f:1b:0c:34:18:6d:26:e7:0f:23:a6:77:2d:f0:ec:27: e5:e1:df:1c:f0:48:b1:ee:ed:1a:83:68:2f:21:db:7c:eb:9f: d4:92:f8:70:2f:87:29:1b:e1:67:ca:4d:e9:3e:60:98:4a:5d: 2d:c9:25:c8:12:e9:21:fb:a9:72:b8:61:75:23:b7:23:13:88: f3:3b:7a:7b:38:d7:1e:05:c2:2f:15:f0:7f:d8:41:2a:9f:d5: 76:6d:aa:e1:8e:86:ab:20:78:d3:08:70:bc:06:a4:3f:a1:9a: a0:49:f6:93:35:2b:68:bd:09:dc:d7:c2:5e:69:d2:d5:da:f0: e1:db:b1:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbV/S77ZRZKrLNbWrghpKto/yMiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0 NUYyOUVERTAeFw0yNTA2MDUxMjI2MzVaFw0yNTA2MDgxMjU5MzVaMDMxMTAvBgNV BAMTKEQ0NUYxMDM5MTZDOUFENDU1MzhEODJCMzZEMTkyNzdCQzZEMUMxQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE9WNhs7dLlYYRcrBtnMI1QJDR j+aUZRi6XwRuPndBed4A2KOGtZ+vD/p4n8XQtVEQGF5+kino95bnaaEP3n3nwN9v sOI/rJBzbUNwVrICmc1ys8rTf2MzZ/5MyQlA2LnFCy1OCwftJNPqyqoBNf0NyswJ ktVUssTDDKOIuKVeo9cfNuhUjlOvWmBQYaD+gmaiGyV5dUjh7T2ukSf0CxEhM1Kh gDjibb5ga6AxWtGkRbS4ch3pkpTGEJrPYGAqrgDy4SOzmxNO0xKsQ/8OsVNKlcPZ IeomtHyG3xFl/e8bJjOYUhTc6douQfc7COIfB6MGs7txrsffZcIIS1trLuzdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1F8QORbJrUVTjYKzbRkne8bRwaYwHwYDVR0j BBgwFoAU7JqrkQBwU+Y84X+Y10/9iUXynt4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmI0M2VjOC1mNTgyLTQwMjUtOGYzNi0zY2VhNTM5ZDBiMDkvMC9FQzlBQUI5MTAw NzA1M0U2M0NFMTdGOThENzRGRkQ4OTQ1RjI5RURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0NUYy OUVERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJiNDNlYzgtZjU4Mi00MDI1LThm MzYtM2NlYTUzOWQwYjA5LzAvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZE ODk0NUYyOUVERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmm+y0lv4NgWnrYIARn33g3Jl0Hj568NV4N 5Vq5JmcpwfVkwQD2ncQgQv0vDDTh079Nk9szcOOAg0bs0MRTu3qn+joIySUYPX0l k2/cu2+ol4kTk3+2wf1p37AE6a+8azB/BcKJ8LiGRwL+FnnAe7upU89/l93IKW0X /ZqujQprfxsMNBhtJucPI6Z3LfDsJ+Xh3xzwSLHu7RqDaC8h23zrn9SS+HAvhykb 4WfKTek+YJhKXS3JJcgS6SH7qXK4YXUjtyMTiPM7ens41x4Fwi8V8H/YQSqf1XZt quGOhqsgeNMIcLwGpD+hmqBJ9pM1K2i9CdzXwl5p0tXa8OHbsXo= -----END CERTIFICATE-----Generated at Sat Jun 7 04:09:46 2025 by rpki-client