$ rpki-client -vvf repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft File: EC39D766063B56E5EA4DBFB2A502298FB995956A.mft (raw, json) Hash identifier: 2YGvMoPmS4ymDLR2zc1fz2J6eMgtlidgenxcXoHct1s= Subject key identifier: 63:FC:23:FE:9A:BB:EB:E6:11:07:B4:81:AA:F9:A5:22:A0:8B:37:85 Authority key identifier: EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A Certificate issuer: /CN=EC39D766063B56E5EA4DBFB2A502298FB995956A Certificate serial: 7BF50D6A1FD549A1AA7D3F5F3D55B720436503F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft Manifest number: 0503 Signing time: Thu 04 Sep 2025 00:00:37 +0000 Manifest this update: Wed 03 Sep 2025 23:55:37 +0000 Manifest next update: Sun 07 Sep 2025 11:36:37 +0000 Files and hashes: 1: 3130332e3133392e32352e302f32342d3234203d3e20313338383738.roa (hash: fXYsqxCjsvIrOq+7nStBZ2/w2ahyZCjmKRe5J8m8wVg=) 2: EC39D766063B56E5EA4DBFB2A502298FB995956A.crl (hash: GfpzL4+pAoOOe3sWSS9ihTe/BEzTKT7ggbx17n8LcbE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 11:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f5:0d:6a:1f:d5:49:a1:aa:7d:3f:5f:3d:55:b7:20:43:65:03:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC39D766063B56E5EA4DBFB2A502298FB995956A Validity Not Before: Sep 3 23:55:37 2025 GMT Not After : Sep 7 11:36:37 2025 GMT Subject: CN=63FC23FE9ABBEBE61107B481AAF9A522A08B3785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b0:9e:2a:49:11:58:94:34:ef:55:6b:23:79: bb:5c:ca:15:8d:81:8a:e8:b9:3a:aa:dc:90:e4:87: 6e:58:48:a0:7c:21:83:9b:ae:4e:34:a0:25:7a:43: d5:db:2a:41:24:8a:2d:43:67:01:3b:78:63:1b:e8: 48:2b:73:4c:4b:fc:df:fa:56:0a:fa:3d:58:fe:b5: 1e:80:7d:4f:27:9b:59:ca:ba:18:41:35:9f:26:f7: 31:15:81:a3:16:7b:60:17:c7:c9:07:b3:14:f9:85: 2d:1d:54:08:f4:f1:a5:89:ca:7b:f5:62:82:37:a6: d8:5b:f6:03:d8:c5:d7:e9:f1:51:44:6d:6e:2d:bf: 76:d8:ae:44:96:60:44:dc:1a:92:64:8d:5c:44:59: 48:59:84:41:91:2e:5d:11:36:03:7b:95:55:5a:58: ef:c0:b2:d0:67:5b:63:73:a3:de:36:77:72:e0:52: 8c:75:a1:33:7e:bb:25:f7:2d:ae:e3:91:37:f3:4d: 6b:b9:ea:28:42:82:68:cb:d1:53:d7:68:d8:e9:2b: 33:ac:dc:24:d7:4e:40:6d:65:84:55:a0:f4:80:b4: 35:9e:dd:13:d8:c6:8f:f7:9b:0d:2f:d8:07:92:05: 49:ae:0b:46:5b:bc:2d:d4:aa:18:28:d4:29:af:e6: db:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FC:23:FE:9A:BB:EB:E6:11:07:B4:81:AA:F9:A5:22:A0:8B:37:85 X509v3 Authority Key Identifier: keyid:EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:42:ec:bf:50:ea:c9:c0:2c:64:2f:21:7e:c6:74:cd:75:89: 40:c6:db:0b:55:8e:43:83:5e:11:79:25:d7:6f:1a:d4:f9:8e: 2d:27:62:f6:8a:d9:f3:dc:dc:51:96:05:32:c3:85:33:3d:5b: 80:60:19:7e:24:da:76:01:1f:d7:59:b9:bf:68:ec:c3:06:ea: 29:34:76:58:26:eb:e8:29:fb:e0:88:23:96:f6:2d:77:6d:52: 53:69:8c:d4:29:2e:d9:66:9f:f1:ac:55:0b:92:78:96:e0:aa: ac:5b:e8:1f:1d:5b:a5:05:a7:13:ac:cd:f9:a4:a1:c8:55:51: 8e:d2:5e:9a:5e:cd:5c:2f:5f:5b:2f:7d:25:30:2a:a7:ff:f6: 9d:fe:be:ad:f7:c9:4c:c3:c9:af:a1:0d:77:36:58:13:98:33: e1:4a:7c:33:c9:f1:cc:84:47:e1:03:4a:9b:a1:43:56:62:3b: e3:61:52:62:3b:dd:7d:bb:25:62:6c:70:50:1d:87:f9:38:0a: 13:a2:66:f3:3f:d3:c8:53:33:d9:2c:93:4f:66:33:ab:49:2f: 0a:a9:62:fa:9f:5e:76:11:ab:da:4a:a2:24:73:e0:ce:2e:29: a9:6b:01:28:3a:81:9e:da:61:16:9c:11:7d:b4:77:be:a4:ea: 42:f0:65:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe/UNah/VSaGqfT9fPVW3IENlA/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5OEZC OTk1OTU2QTAeFw0yNTA5MDMyMzU1MzdaFw0yNTA5MDcxMTM2MzdaMDMxMTAvBgNV BAMTKDYzRkMyM0ZFOUFCQkVCRTYxMTA3QjQ4MUFBRjlBNTIyQTA4QjM3ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXsJ4qSRFYlDTvVWsjebtcyhWN gYrouTqq3JDkh25YSKB8IYObrk40oCV6Q9XbKkEkii1DZwE7eGMb6Egrc0xL/N/6 Vgr6PVj+tR6AfU8nm1nKuhhBNZ8m9zEVgaMWe2AXx8kHsxT5hS0dVAj08aWJynv1 YoI3pthb9gPYxdfp8VFEbW4tv3bYrkSWYETcGpJkjVxEWUhZhEGRLl0RNgN7lVVa WO/AstBnW2Nzo942d3LgUox1oTN+uyX3La7jkTfzTWu56ihCgmjL0VPXaNjpKzOs 3CTXTkBtZYRVoPSAtDWe3RPYxo/3mw0v2AeSBUmuC0ZbvC3Uqhgo1Cmv5ttjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY/wj/pq76+YRB7SBqvmlIqCLN4UwHwYDVR0j BBgwFoAU7DnXZgY7VuXqTb+ypQIpj7mVlWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2ZlNDI1NS0xZDkxLTRmY2MtYmNlNC04YTQyYWRmZTNjMjkvMC9FQzM5RDc2NjA2 M0I1NkU1RUE0REJGQjJBNTAyMjk4RkI5OTU5NTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5OEZCOTk1 OTU2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNmZTQyNTUtMWQ5MS00ZmNjLWJj ZTQtOGE0MmFkZmUzYzI5LzAvRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5 OEZCOTk1OTU2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVC7L9Q6snALGQvIX7GdM11iUDG2wtVjkOD XhF5JddvGtT5ji0nYvaK2fPc3FGWBTLDhTM9W4BgGX4k2nYBH9dZub9o7MMG6ik0 dlgm6+gp++CII5b2LXdtUlNpjNQpLtlmn/GsVQuSeJbgqqxb6B8dW6UFpxOszfmk ochVUY7SXppezVwvX1svfSUwKqf/9p3+vq33yUzDya+hDXc2WBOYM+FKfDPJ8cyE R+EDSpuhQ1ZiO+NhUmI73X27JWJscFAdh/k4ChOiZvM/08hTM9ksk09mM6tJLwqp YvqfXnYRq9pKoiRz4M4uKalrASg6gZ7aYRacEX20d76k6kLwZe4= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:56 2025 by rpki-client