$ rpki-client -vvf repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft File: E07D333345CD7D30F1DC10D98F6E73457739DF18.mft (raw, json) Hash identifier: JSOVU7lVHfYAxdg49mIiDPjfzijkaMWMwwjawr6y/aE= Subject key identifier: 84:CF:3F:07:89:7A:EE:91:19:E4:9F:BD:09:D4:C6:89:50:1B:D4:4B Authority key identifier: E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18 Certificate issuer: /CN=E07D333345CD7D30F1DC10D98F6E73457739DF18 Certificate serial: 6C4725216420CF4768218C1DE916D7E1940F690C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft Manifest number: 028B Signing time: Sun 01 Jun 2025 14:32:04 +0000 Manifest this update: Sun 01 Jun 2025 14:27:04 +0000 Manifest next update: Thu 05 Jun 2025 01:21:04 +0000 Files and hashes: 1: E07D333345CD7D30F1DC10D98F6E73457739DF18.crl (hash: VdRbXNxPeAgpRKCPrvAier9B0y+icN29dHzaw/i6IXE=) 2: 3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa (hash: Ss59sjtuzZzHxU4wVgffc5lRWrpUhdlYbl1sQ1q9oHY=) 3: 3130332e3137352e32342e302f32342d3234203d3e20313339393532.roa (hash: 6N2zZq51uiKWHkHr8bnvsHH+UdIZQrumHmhwLr8jJiM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 01:21:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:47:25:21:64:20:cf:47:68:21:8c:1d:e9:16:d7:e1:94:0f:69:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E07D333345CD7D30F1DC10D98F6E73457739DF18 Validity Not Before: Jun 1 14:27:04 2025 GMT Not After : Jun 5 01:21:04 2025 GMT Subject: CN=84CF3F07897AEE9119E49FBD09D4C689501BD44B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c3:6b:98:b6:48:63:82:bf:ca:c8:1f:ae:25: c9:f9:a5:2b:c0:fc:39:c2:ce:d4:c2:a7:08:0b:30: 15:45:a5:14:cf:62:fd:05:0c:ee:ae:8b:f5:3c:b5: 2b:24:d3:24:c5:d2:0d:03:1d:56:56:5f:9a:10:e5: 31:2d:f1:3a:62:fa:d4:ba:27:04:5c:62:15:f2:5f: 27:ea:b8:91:8e:b4:6d:e8:e8:a5:fe:2a:e4:35:dd: 71:e2:8f:80:90:21:cb:cc:ff:77:51:84:e2:1d:ec: f1:a8:ea:84:c4:8a:51:50:1b:1e:50:e3:e2:ed:ed: a7:ad:c3:b4:9c:13:38:66:dc:87:2e:d6:26:8d:70: 54:77:b7:46:bc:12:d5:70:cf:5e:16:cc:38:66:b2: 91:bc:4a:0b:a9:a7:5c:61:24:43:fe:b6:4f:c1:8f: d7:35:0f:ce:72:38:fd:c2:0e:b3:58:83:75:75:eb: 87:c9:17:50:bf:2c:64:68:4e:12:33:73:7f:7c:b4: 4a:34:81:1f:e1:ef:56:7a:53:e4:90:f4:43:b5:65: 26:14:10:5b:18:54:18:eb:69:bd:fd:08:28:e6:b6: 7f:71:8a:d1:19:2b:a7:eb:25:79:04:13:c0:ff:ed: bc:eb:fa:46:3f:41:da:15:e4:f6:24:d9:c2:48:16: fb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CF:3F:07:89:7A:EE:91:19:E4:9F:BD:09:D4:C6:89:50:1B:D4:4B X509v3 Authority Key Identifier: keyid:E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:67:be:3d:97:79:40:bb:4a:98:36:0f:b6:dc:cc:df:ce:1a: 86:90:4d:6f:96:bf:ca:67:69:98:f8:6b:8e:27:be:bf:c0:77: 56:c7:f3:4d:e5:af:6e:a8:77:8a:bc:1f:fb:cd:2b:b8:78:71: f5:a0:9a:b4:78:0a:cb:6d:54:13:6a:46:dd:fb:ab:e2:0e:3b: 89:53:79:a5:c4:e6:c4:a3:ac:70:f8:46:97:a1:36:2a:e4:18: a0:76:7b:af:1a:18:3c:23:59:6d:e5:fc:c6:2f:95:28:00:bf: ef:fa:e6:62:82:64:09:4b:a5:1c:8d:55:2a:6f:34:95:44:1f: 10:fa:5c:f0:10:df:2e:83:d2:e5:79:8f:c9:1f:3d:d9:26:51: 10:8b:03:72:2c:f2:02:7b:83:8a:01:e7:6d:8a:9b:f8:9e:5e: a2:aa:a2:59:3a:08:0a:19:c9:db:f5:1b:70:f3:05:5c:3a:9c: 08:3d:1e:47:ff:c0:c6:a6:02:f4:4c:44:05:05:52:39:7b:aa: 24:26:a6:52:ae:40:3a:6c:28:9f:25:c7:f3:4e:40:5d:0e:bb: e4:aa:d9:a1:ed:7e:e4:36:dc:aa:7a:87:d5:b5:2f:55:b9:21: 51:ee:b3:94:0f:2b:de:6e:8e:32:7f:36:8f:93:a0:ad:27:ad: 95:19:f5:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbEclIWQgz0doIYwd6RbX4ZQPaQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTczNDU3 NzM5REYxODAeFw0yNTA2MDExNDI3MDRaFw0yNTA2MDUwMTIxMDRaMDMxMTAvBgNV BAMTKDg0Q0YzRjA3ODk3QUVFOTExOUU0OUZCRDA5RDRDNjg5NTAxQkQ0NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGw2uYtkhjgr/KyB+uJcn5pSvA /DnCztTCpwgLMBVFpRTPYv0FDO6ui/U8tSsk0yTF0g0DHVZWX5oQ5TEt8Tpi+tS6 JwRcYhXyXyfquJGOtG3o6KX+KuQ13XHij4CQIcvM/3dRhOId7PGo6oTEilFQGx5Q 4+Lt7aetw7ScEzhm3Icu1iaNcFR3t0a8EtVwz14WzDhmspG8Sgupp1xhJEP+tk/B j9c1D85yOP3CDrNYg3V164fJF1C/LGRoThIzc398tEo0gR/h71Z6U+SQ9EO1ZSYU EFsYVBjrab39CCjmtn9xitEZK6frJXkEE8D/7bzr+kY/QdoV5PYk2cJIFvu5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhM8/B4l67pEZ5J+9CdTGiVAb1EswHwYDVR0j BBgwFoAU4H0zM0XNfTDx3BDZj25zRXc53xgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTYyODgwZS1kNWYyLTQwNjktODhmZi0xMjY3YjdjYzAxYzUvMC9FMDdEMzMzMzQ1 Q0Q3RDMwRjFEQzEwRDk4RjZFNzM0NTc3MzlERjE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTczNDU3NzM5 REYxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU2Mjg4MGUtZDVmMi00MDY5LTg4 ZmYtMTI2N2I3Y2MwMWM1LzAvRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTcz NDU3NzM5REYxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpnvj2XeUC7Spg2D7bczN/OGoaQTW+Wv8pn aZj4a44nvr/Ad1bH803lr26od4q8H/vNK7h4cfWgmrR4CsttVBNqRt37q+IOO4lT eaXE5sSjrHD4RpehNirkGKB2e68aGDwjWW3l/MYvlSgAv+/65mKCZAlLpRyNVSpv NJVEHxD6XPAQ3y6D0uV5j8kfPdkmURCLA3Is8gJ7g4oB522Km/ieXqKqolk6CAoZ ydv1G3DzBVw6nAg9Hkf/wMamAvRMRAUFUjl7qiQmplKuQDpsKJ8lx/NOQF0Ou+Sq 2aHtfuQ23Kp6h9W1L1W5IVHus5QPK95ujjJ/No+ToK0nrZUZ9fQ= -----END CERTIFICATE-----Generated at Tue Jun 3 23:14:09 2025 by rpki-client