$ rpki-client -vvf repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft File: E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft (raw, json) Hash identifier: kg/n64hDFdCBZBkMRlsFlC1LrkrqZyQIsWy9dMFAqcs= Subject key identifier: 8A:86:0D:5F:E3:EC:EA:7A:6A:79:9A:22:77:55:E1:E7:C0:60:E9:91 Authority key identifier: E0:AC:9F:73:54:2C:4F:A1:E5:2F:9E:56:5E:ED:95:2D:45:28:AB:D5 Certificate issuer: /CN=E0AC9F73542C4FA1E52F9E565EED952D4528ABD5 Certificate serial: 2C92DF395CF8E91B1DFE88E99269D2B0380658EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft Manifest number: 0182 Signing time: Fri 25 Jul 2025 08:11:52 +0000 Manifest this update: Fri 25 Jul 2025 08:06:52 +0000 Manifest next update: Mon 28 Jul 2025 10:00:52 +0000 Files and hashes: 1: E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl (hash: b6zzgyRdXMbRqhwzudrrhIB2KnInGKdnHiefTzatz54=) 2: 3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa (hash: bfGWWBYLFdBS0ipwVQx4h+wBe1EIqVM2TX2GM2uhPGQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 10:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:92:df:39:5c:f8:e9:1b:1d:fe:88:e9:92:69:d2:b0:38:06:58:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0AC9F73542C4FA1E52F9E565EED952D4528ABD5 Validity Not Before: Jul 25 08:06:52 2025 GMT Not After : Jul 28 10:00:52 2025 GMT Subject: CN=8A860D5FE3ECEA7A6A799A227755E1E7C060E991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:46:e0:d4:85:f6:1c:d6:aa:1b:2c:e4:4d:32: fe:d1:c1:a6:d4:78:70:37:3f:83:9b:4c:5e:be:9c: 52:0b:d9:7d:c8:84:ac:b5:12:2d:8c:d0:59:ff:ea: 60:9a:65:ee:3a:a0:d9:2e:cd:5d:03:86:a3:2d:db: cb:27:61:6c:03:2c:70:4b:5a:1b:fb:37:97:1b:19: ba:e0:cf:15:79:7f:e5:53:62:c8:be:48:2e:70:40: 11:d1:ca:c2:c1:7d:b2:0e:25:b1:b3:de:03:a0:d3: 9d:41:4d:db:ee:15:e3:96:26:50:d4:79:33:b4:76: c8:c0:ae:e4:14:3a:9c:57:6e:f6:a3:98:6b:12:37: 5b:a2:e3:01:38:5b:16:80:6f:69:a6:dc:be:7f:16: 82:80:a4:2b:6d:26:35:bf:a6:61:a1:01:83:fb:12: 28:6e:4c:04:a8:7c:e4:3f:8a:07:8c:4c:13:08:7c: 8b:75:30:62:5f:d6:52:c3:e3:eb:68:6d:a8:54:22: 84:2e:dc:02:f9:a3:38:d6:2a:87:a7:58:ac:e4:8f: aa:60:98:5a:cd:36:c7:29:4a:59:7e:62:dd:0b:52: 65:3f:bf:23:8f:a3:15:5a:cf:0f:e8:bd:45:87:0a: 24:de:62:51:e3:11:9f:02:ec:9a:2e:a1:59:46:78: fc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:86:0D:5F:E3:EC:EA:7A:6A:79:9A:22:77:55:E1:E7:C0:60:E9:91 X509v3 Authority Key Identifier: keyid:E0:AC:9F:73:54:2C:4F:A1:E5:2F:9E:56:5E:ED:95:2D:45:28:AB:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:63:ff:a2:30:f2:bc:99:46:90:c6:54:2c:4c:f2:12:75:da: fb:61:de:35:1d:32:cf:75:9e:c8:65:18:a0:41:00:3c:c4:3d: 37:f1:56:15:33:d4:ab:56:1e:26:69:a2:fa:cb:67:33:39:f3: a7:01:63:01:e6:93:8c:2d:43:87:06:1c:5d:89:13:81:7f:ff: 2d:04:69:4b:e8:f2:bc:d9:c2:a5:79:d6:e6:23:36:93:7d:6c: c2:68:94:cb:e1:e2:ed:6c:32:86:1b:db:87:39:ed:46:f3:75: ba:63:e6:cb:a1:17:c7:2c:ff:c7:0f:38:dd:41:f8:ac:6c:52: fe:9a:fe:5e:9f:13:b6:cf:59:51:d1:1e:44:9f:ff:55:3d:e2: c9:a6:00:24:65:6f:5f:ae:28:2c:c6:13:53:6f:2e:fd:90:d1: 71:72:55:c1:9d:fb:6e:d7:5d:fb:41:8a:aa:af:61:6a:ae:13: 5c:b8:47:1b:df:96:04:f3:6d:62:98:59:0a:2f:e0:32:0d:c7: 2b:79:bd:f6:68:29:43:6f:84:9a:4d:d5:06:e1:68:cb:72:3e: 81:06:99:b6:e6:09:36:ab:62:32:e2:ff:13:4a:15:c7:1a:8e: 41:ab:f5:30:de:e2:af:77:c0:af:7f:5a:2c:55:1b:f5:ec:f7: 63:6b:d8:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULJLfOVz46Rsd/ojpkmnSsDgGWOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBBQzlGNzM1NDJDNEZBMUU1MkY5RTU2NUVFRDk1MkQ0 NTI4QUJENTAeFw0yNTA3MjUwODA2NTJaFw0yNTA3MjgxMDAwNTJaMDMxMTAvBgNV BAMTKDhBODYwRDVGRTNFQ0VBN0E2QTc5OUEyMjc3NTVFMUU3QzA2MEU5OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJRuDUhfYc1qobLORNMv7RwabU eHA3P4ObTF6+nFIL2X3IhKy1Ei2M0Fn/6mCaZe46oNkuzV0DhqMt28snYWwDLHBL Whv7N5cbGbrgzxV5f+VTYsi+SC5wQBHRysLBfbIOJbGz3gOg051BTdvuFeOWJlDU eTO0dsjAruQUOpxXbvajmGsSN1ui4wE4WxaAb2mm3L5/FoKApCttJjW/pmGhAYP7 EihuTASofOQ/igeMTBMIfIt1MGJf1lLD4+tobahUIoQu3AL5ozjWKoenWKzkj6pg mFrNNscpSll+Yt0LUmU/vyOPoxVazw/ovUWHCiTeYlHjEZ8C7JouoVlGePzbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUioYNX+Ps6npqeZoid1Xh58Bg6ZEwHwYDVR0j BBgwFoAU4Kyfc1QsT6HlL55WXu2VLUUoq9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWYwMDEzYi01OWE2LTQ3MzMtODlmOC0yOGZhM2Q4ODU3OWYvMC9FMEFDOUY3MzU0 MkM0RkExRTUyRjlFNTY1RUVEOTUyRDQ1MjhBQkQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBBQzlGNzM1NDJDNEZBMUU1MkY5RTU2NUVFRDk1MkQ0NTI4 QUJENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmMDAxM2ItNTlhNi00NzMzLTg5 ZjgtMjhmYTNkODg1NzlmLzAvRTBBQzlGNzM1NDJDNEZBMUU1MkY5RTU2NUVFRDk1 MkQ0NTI4QUJENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItj/6Iw8ryZRpDGVCxM8hJ12vth3jUdMs91 nshlGKBBADzEPTfxVhUz1KtWHiZpovrLZzM586cBYwHmk4wtQ4cGHF2JE4F//y0E aUvo8rzZwqV51uYjNpN9bMJolMvh4u1sMoYb24c57Ubzdbpj5suhF8cs/8cPON1B +KxsUv6a/l6fE7bPWVHRHkSf/1U94smmACRlb1+uKCzGE1NvLv2Q0XFyVcGd+27X XftBiqqvYWquE1y4RxvflgTzbWKYWQov4DINxyt5vfZoKUNvhJpN1QbhaMtyPoEG mbbmCTarYjLi/xNKFccajkGr9TDe4q93wK9/WixVG/Xs92Nr2AI= -----END CERTIFICATE-----Generated at Fri Jul 25 17:23:38 2025 by rpki-client