$ rpki-client -vvf repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft File: E07D333345CD7D30F1DC10D98F6E73457739DF18.mft (raw, json) Hash identifier: s4EbxC5cGLN3QDikx1vRBz/FIb3uy+1Ggw0Tg+B7DGU= Subject key identifier: 3F:2D:53:1A:0C:7E:83:B0:8B:77:C2:F1:19:1B:41:C8:B8:D8:0A:E9 Authority key identifier: E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18 Certificate issuer: /CN=E07D333345CD7D30F1DC10D98F6E73457739DF18 Certificate serial: 7DAFFB2A45576BA7024ADBD0291FE4933A842088 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft Manifest number: 02B7 Signing time: Sun 07 Sep 2025 13:42:06 +0000 Manifest this update: Sun 07 Sep 2025 13:37:06 +0000 Manifest next update: Wed 10 Sep 2025 22:29:06 +0000 Files and hashes: 1: E07D333345CD7D30F1DC10D98F6E73457739DF18.crl (hash: cjm5Dq5dcjb73xUmoZIRgre1+XqJHgQYAJoolqbU2ao=) 2: 3130332e3137352e32342e302f32342d3234203d3e20313339393532.roa (hash: Vl/OOphd8TYP/hah6fsBqUcpI92+W6WBwIY9PUcjWfo=) 3: 3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa (hash: S9fTdkfTps/6Q59nCYC/yJ1+TjRvCvo04elHUxM7Yz8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:af:fb:2a:45:57:6b:a7:02:4a:db:d0:29:1f:e4:93:3a:84:20:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E07D333345CD7D30F1DC10D98F6E73457739DF18 Validity Not Before: Sep 7 13:37:06 2025 GMT Not After : Sep 10 22:29:06 2025 GMT Subject: CN=3F2D531A0C7E83B08B77C2F1191B41C8B8D80AE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:51:f0:65:9a:45:ab:5b:25:2a:8d:6c:1f:28: 55:b6:d1:42:ba:dc:6d:2d:50:a3:a5:89:de:16:84: fb:5f:31:25:b7:22:75:60:f9:b0:31:75:be:b5:7d: b0:64:6b:df:11:f1:8d:75:68:d8:97:5a:55:15:a6: 69:0c:f0:41:9e:ce:0d:80:56:f7:99:33:9e:9f:29: 00:dc:49:84:40:56:62:09:aa:18:04:2d:74:fc:e1: cb:e3:7b:d3:4c:4b:7d:73:29:5f:8a:d5:d9:9f:95: 06:6a:27:7a:df:af:fc:ca:3b:ff:6e:14:01:a8:32: 4e:a8:b3:7c:b7:ce:61:36:54:01:93:fe:fd:33:27: 36:2d:29:7c:1e:36:62:b6:9a:e5:01:2f:bf:e2:ba: b4:97:e2:3c:ac:4a:07:1e:e4:79:9b:c2:5a:e7:56: cd:0a:02:40:31:28:7c:d2:bb:17:2a:34:a3:53:b3: 95:59:b5:1f:8b:67:30:d2:61:76:0e:a4:e9:a4:59: b5:4f:78:f0:6b:78:13:94:b0:62:7e:c2:e5:f9:ad: 1f:78:bb:65:52:f2:3a:45:de:b3:7a:10:ab:ba:9f: 1e:10:ab:75:b3:67:51:1b:40:18:c5:c2:be:d4:db: 5e:bb:a4:1c:c0:65:1a:a3:c2:05:16:d6:30:50:d2: 43:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2D:53:1A:0C:7E:83:B0:8B:77:C2:F1:19:1B:41:C8:B8:D8:0A:E9 X509v3 Authority Key Identifier: keyid:E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:a5:1a:25:15:4e:51:10:e0:be:f3:80:79:38:77:f4:ec:45: 86:ac:62:32:f5:73:ef:52:9b:5e:dd:c0:46:b7:77:b5:a0:c9: 3c:ac:a1:58:b6:74:56:ef:e0:89:bd:4c:5b:e1:ac:f9:09:38: 16:d7:02:1c:83:69:4b:04:b0:2f:18:be:3d:db:4c:08:e7:25: ba:a1:23:22:76:b5:47:53:f2:c2:a0:24:d5:ee:6e:14:f7:0e: d7:c9:a2:cf:78:69:a3:4e:e5:f8:c0:b6:05:1e:05:99:af:1d: 2a:b9:16:f8:20:47:d1:c8:2f:2b:4a:36:02:e8:c4:cb:11:36: 75:ce:bc:05:6b:e9:c8:fa:e2:2a:0a:b8:ff:72:11:c2:a0:e0: 1a:58:7a:37:d9:99:a1:1b:49:13:e1:f9:a3:71:80:4f:20:2a: 87:36:6a:32:d4:44:92:0c:0f:5a:ac:85:91:89:da:d0:23:72: f8:a9:5c:11:8d:d0:0a:fe:72:19:e1:3b:48:19:4c:39:bf:7e: 75:27:31:28:0e:a1:9f:99:f4:dc:c4:c6:5f:e5:b1:3e:91:9e: 4d:18:30:43:86:dd:c9:b7:17:c6:89:42:e7:c6:66:29:53:a0: 33:cf:bf:43:40:14:c5:89:1a:e5:87:20:0d:34:36:b4:48:74: c0:a4:8c:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfa/7KkVXa6cCStvQKR/kkzqEIIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTczNDU3 NzM5REYxODAeFw0yNTA5MDcxMzM3MDZaFw0yNTA5MTAyMjI5MDZaMDMxMTAvBgNV BAMTKDNGMkQ1MzFBMEM3RTgzQjA4Qjc3QzJGMTE5MUI0MUM4QjhEODBBRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRUfBlmkWrWyUqjWwfKFW20UK6 3G0tUKOlid4WhPtfMSW3InVg+bAxdb61fbBka98R8Y11aNiXWlUVpmkM8EGezg2A VveZM56fKQDcSYRAVmIJqhgELXT84cvje9NMS31zKV+K1dmflQZqJ3rfr/zKO/9u FAGoMk6os3y3zmE2VAGT/v0zJzYtKXweNmK2muUBL7/iurSX4jysSgce5Hmbwlrn Vs0KAkAxKHzSuxcqNKNTs5VZtR+LZzDSYXYOpOmkWbVPePBreBOUsGJ+wuX5rR94 u2VS8jpF3rN6EKu6nx4Qq3WzZ1EbQBjFwr7U2167pBzAZRqjwgUW1jBQ0kMXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPy1TGgx+g7CLd8LxGRtByLjYCukwHwYDVR0j BBgwFoAU4H0zM0XNfTDx3BDZj25zRXc53xgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTYyODgwZS1kNWYyLTQwNjktODhmZi0xMjY3YjdjYzAxYzUvMC9FMDdEMzMzMzQ1 Q0Q3RDMwRjFEQzEwRDk4RjZFNzM0NTc3MzlERjE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTczNDU3NzM5 REYxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU2Mjg4MGUtZDVmMi00MDY5LTg4 ZmYtMTI2N2I3Y2MwMWM1LzAvRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTcz NDU3NzM5REYxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMilGiUVTlEQ4L7zgHk4d/TsRYasYjL1c+9S m17dwEa3d7WgyTysoVi2dFbv4Im9TFvhrPkJOBbXAhyDaUsEsC8Yvj3bTAjnJbqh IyJ2tUdT8sKgJNXubhT3DtfJos94aaNO5fjAtgUeBZmvHSq5FvggR9HILytKNgLo xMsRNnXOvAVr6cj64ioKuP9yEcKg4BpYejfZmaEbSRPh+aNxgE8gKoc2ajLURJIM D1qshZGJ2tAjcvipXBGN0Ar+chnhO0gZTDm/fnUnMSgOoZ+Z9NzExl/lsT6Rnk0Y MEOG3cm3F8aJQufGZilToDPPv0NAFMWJGuWHIA00NrRIdMCkjHs= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:36 2025 by rpki-client