$ rpki-client -vvf repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft File: E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft (raw, json) Hash identifier: 0JFVKuKRS/FtFTu9dfeby4ECMgBjk3nn8L7mlzQ6RtQ= Subject key identifier: 68:F4:23:F5:1B:24:CC:98:0B:90:9A:C7:6B:BE:48:C8:C2:42:15:13 Authority key identifier: E9:FC:7A:F3:FF:BA:00:98:63:D1:04:ED:E1:B4:5D:A0:59:25:35:E6 Certificate issuer: /CN=E9FC7AF3FFBA009863D104EDE1B45DA0592535E6 Certificate serial: 4649A1E68D64FF5B44CF933729E2137013FF0A42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft Manifest number: 0202 Signing time: Fri 06 Jun 2025 00:22:19 +0000 Manifest this update: Fri 06 Jun 2025 00:17:19 +0000 Manifest next update: Mon 09 Jun 2025 09:44:19 +0000 Files and hashes: 1: 3130332e3137352e3233362e302f32332d3234203d3e20313437313231.roa (hash: LFOqzDAyDWWdrBcQS4m60ydnXXk+fQv19GMLbDiq/ow=) 2: E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl (hash: tnBskSX7AC3Dm4vEolNQlTkqext2/oDo/VM+ZNgT8pM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 09:44:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:49:a1:e6:8d:64:ff:5b:44:cf:93:37:29:e2:13:70:13:ff:0a:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9FC7AF3FFBA009863D104EDE1B45DA0592535E6 Validity Not Before: Jun 6 00:17:19 2025 GMT Not After : Jun 9 09:44:19 2025 GMT Subject: CN=68F423F51B24CC980B909AC76BBE48C8C2421513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:da:d2:4e:74:26:e7:47:b9:0f:e0:61:63:95: 4a:0b:d6:2a:4b:b9:24:33:9e:b5:13:b6:3a:e4:18: be:23:48:7a:43:a4:1b:cc:87:4f:1e:2c:74:ef:65: ad:33:37:7b:43:73:40:0c:65:c0:b5:c9:45:fd:16: a0:cb:03:40:b6:5a:57:2b:ff:ea:db:f8:2e:ad:88: 2f:50:03:89:0b:12:f6:a2:98:28:e5:38:d9:34:81: c9:2d:58:27:43:6b:b4:5c:9f:94:83:53:9e:bb:33: 5f:1b:99:01:63:e2:74:a7:65:1f:c2:2a:06:f0:a6: 5b:b1:6d:1e:4e:d0:40:a2:4b:95:71:49:e8:a6:2b: e3:f2:c1:67:c3:bb:eb:bc:89:d6:1d:f8:06:1f:d4: 87:54:00:82:14:c5:a8:34:bd:3a:c6:c0:12:48:e7: 58:50:6c:fd:8a:1b:c0:05:1c:f0:fb:5d:c9:15:93: 44:c9:b6:60:74:dc:10:dd:85:91:10:6d:0b:09:68: 4c:a1:a4:4a:08:9f:84:6b:10:7c:6d:fb:ab:96:59: f2:4c:3c:41:ad:18:d2:c6:67:d5:cd:59:63:69:44: 85:14:14:e8:85:d9:6a:80:2a:3d:dc:b5:59:84:91: e5:a4:9c:bf:8f:b8:99:c1:95:b5:a3:ae:dc:06:00: 73:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F4:23:F5:1B:24:CC:98:0B:90:9A:C7:6B:BE:48:C8:C2:42:15:13 X509v3 Authority Key Identifier: keyid:E9:FC:7A:F3:FF:BA:00:98:63:D1:04:ED:E1:B4:5D:A0:59:25:35:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:38:65:60:58:0b:c6:5a:eb:5c:90:96:ce:f5:c1:67:45:23: e8:09:40:ab:45:ef:d1:4f:42:7c:3f:32:e9:bc:a8:3c:0a:21: ee:3f:51:54:b9:08:c1:51:1e:5f:0c:94:37:08:a1:2f:e0:a6: c3:9e:dc:4b:e1:52:57:9c:a1:14:1e:d9:7b:a7:48:f9:3e:56: 2b:60:46:1b:c9:64:e4:2e:33:a4:dd:13:2a:87:19:7d:72:2e: 3e:75:a8:4b:b1:d0:d1:a5:1b:cb:4b:ec:a3:17:f7:24:dc:ad: d3:89:cf:68:14:04:c8:7f:90:be:aa:b4:b1:38:7d:2a:28:35: 0c:f3:1d:5d:85:42:99:de:26:8d:73:0f:be:ac:6a:be:72:94: 12:1d:0f:af:bf:7e:f8:99:80:4c:17:cd:ff:c3:e4:cd:1b:7e: a7:1a:9c:70:ad:02:15:bf:0f:63:0c:cd:65:e6:b6:7b:f7:52: b8:93:40:96:60:91:70:e3:51:f4:cc:f2:e0:52:d2:3f:df:01: 67:fe:5a:b1:ab:c4:41:cf:b3:80:71:df:88:b0:97:06:cd:74: b1:33:5a:04:ce:71:37:8e:62:5d:41:50:8f:14:0e:70:65:b9: 72:1f:74:eb:28:a8:b4:e9:ce:0e:42:5c:86:bb:9c:86:06:02: ec:d8:fd:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURkmh5o1k/1tEz5M3KeITcBP/CkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVEQTA1 OTI1MzVFNjAeFw0yNTA2MDYwMDE3MTlaFw0yNTA2MDkwOTQ0MTlaMDMxMTAvBgNV BAMTKDY4RjQyM0Y1MUIyNENDOTgwQjkwOUFDNzZCQkU0OEM4QzI0MjE1MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq2tJOdCbnR7kP4GFjlUoL1ipL uSQznrUTtjrkGL4jSHpDpBvMh08eLHTvZa0zN3tDc0AMZcC1yUX9FqDLA0C2Wlcr /+rb+C6tiC9QA4kLEvaimCjlONk0gcktWCdDa7Rcn5SDU567M18bmQFj4nSnZR/C KgbwpluxbR5O0ECiS5VxSeimK+PywWfDu+u8idYd+AYf1IdUAIIUxag0vTrGwBJI 51hQbP2KG8AFHPD7XckVk0TJtmB03BDdhZEQbQsJaEyhpEoIn4RrEHxt+6uWWfJM PEGtGNLGZ9XNWWNpRIUUFOiF2WqAKj3ctVmEkeWknL+PuJnBlbWjrtwGAHMXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaPQj9RskzJgLkJrHa75IyMJCFRMwHwYDVR0j BBgwFoAU6fx68/+6AJhj0QTt4bRdoFklNeYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YjRjNzBhMS01MDM2LTQ1MGItYjkzNi01MDg0Zjc4ZjgxZWYvMC9FOUZDN0FGM0ZG QkEwMDk4NjNEMTA0RURFMUI0NURBMDU5MjUzNUU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVEQTA1OTI1 MzVFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmI0YzcwYTEtNTAzNi00NTBiLWI5 MzYtNTA4NGY3OGY4MWVmLzAvRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVE QTA1OTI1MzVFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABY4ZWBYC8Za61yQls71wWdFI+gJQKtF79FP Qnw/Mum8qDwKIe4/UVS5CMFRHl8MlDcIoS/gpsOe3EvhUlecoRQe2XunSPk+Vitg RhvJZOQuM6TdEyqHGX1yLj51qEux0NGlG8tL7KMX9yTcrdOJz2gUBMh/kL6qtLE4 fSooNQzzHV2FQpneJo1zD76sar5ylBIdD6+/fviZgEwXzf/D5M0bfqcanHCtAhW/ D2MMzWXmtnv3UriTQJZgkXDjUfTM8uBS0j/fAWf+WrGrxEHPs4Bx34iwlwbNdLEz WgTOcTeOYl1BUI8UDnBluXIfdOsoqLTpzg5CXIa7nIYGAuzY/SU= -----END CERTIFICATE-----Generated at Sat Jun 7 04:20:57 2025 by rpki-client