$ rpki-client -vvf repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft File: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft (raw, json) Hash identifier: 52ZO4x7FupIfdfeIeO6Sb6KmaoaWDaKGur84iB/+4hQ= Subject key identifier: 88:A5:4A:8F:1E:14:CD:64:7C:C0:C5:8E:6A:28:AE:7B:D7:29:05:0B Authority key identifier: E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 Certificate issuer: /CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Certificate serial: 47C292762B15D229E3FE3D47FDCC473E1A5A5785 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft Manifest number: 032F Signing time: Tue 10 Jun 2025 16:01:47 +0000 Manifest this update: Tue 10 Jun 2025 15:56:47 +0000 Manifest next update: Fri 13 Jun 2025 17:18:47 +0000 Files and hashes: 1: 3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa (hash: zTY/Xpdv3MSQoDsOl/9obTqa4WAjpeiNnIpy7In5lOI=) 2: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl (hash: THN6PBfTUpp+2yd6ZIvxTSzMgtQY1KwqHQjfESrnHzo=) 3: 3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa (hash: Wwvtox4pnVKWLsRl/E/cxu7UuLzmLQJxzxgchSEOlMg=) 4: 3130332e3136342e3233312e302f32342d3234203d3e20313431393133.roa (hash: NK0HZEK3BAxoXUs/T9BsQ+3NHYIYmmtIH82zUm/fzDk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 17:18:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:c2:92:76:2b:15:d2:29:e3:fe:3d:47:fd:cc:47:3e:1a:5a:57:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Validity Not Before: Jun 10 15:56:47 2025 GMT Not After : Jun 13 17:18:47 2025 GMT Subject: CN=88A54A8F1E14CD647CC0C58E6A28AE7BD729050B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:da:dc:99:af:30:20:1f:5c:e7:23:d2:25:e9: 37:d6:71:ef:eb:53:b8:e5:f9:77:cf:22:97:af:31: e6:13:41:22:d1:f2:b4:e2:7f:0a:b6:fc:03:dc:da: b7:93:63:bd:ab:c7:d8:08:84:c3:56:15:77:03:0c: f0:45:b7:87:72:c5:ff:e5:cf:6b:06:a5:8a:43:80: d5:eb:96:4e:b8:63:e1:43:0c:c8:7c:14:b1:6b:4b: 5f:47:60:9b:15:49:a4:2a:4d:fb:1c:84:25:f0:06: de:59:68:a3:89:98:ec:7d:00:bc:5b:78:40:b8:85: d6:c7:e2:16:f5:05:13:c6:5f:45:59:0e:4f:1c:f8: cd:e8:32:4e:d1:ec:9a:de:fd:02:7e:20:a1:a3:af: 9c:96:3d:cf:90:0d:a4:43:14:89:c6:2a:79:7d:7b: df:50:83:94:d1:53:06:1a:ac:ef:6c:ad:18:2f:e2: 7c:96:aa:54:85:d5:8f:05:24:a8:aa:49:7a:f0:d3: 0a:e8:48:5e:3c:0d:35:00:ba:f3:d0:b1:64:c6:98: 0b:63:2e:ec:aa:44:6d:f1:bd:51:78:bb:94:ff:7f: a2:73:a8:0e:03:a0:07:9b:60:70:3b:db:8e:22:1d: a0:b0:63:cb:7f:d5:a2:dd:64:b8:f7:4b:7c:77:53: a8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A5:4A:8F:1E:14:CD:64:7C:C0:C5:8E:6A:28:AE:7B:D7:29:05:0B X509v3 Authority Key Identifier: keyid:E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3f:69:2f:16:c1:b2:fc:b1:2d:e7:b3:ec:a0:9b:f4:28:88: 63:0a:88:4b:73:cb:c0:73:3d:9c:9c:c7:d0:b6:e1:a7:cb:ff: b8:86:30:3d:f3:14:80:3a:2b:09:d2:31:6a:81:b1:7d:4d:03: 44:4d:73:34:0a:c7:2c:25:1d:8d:dc:0b:1b:f5:e2:3d:79:3f: be:39:6d:6b:bc:b2:d6:85:c1:97:20:49:66:b3:3c:fd:35:e9: 63:6e:02:9f:f3:1d:4e:cd:ea:e2:5d:33:1f:3f:f8:a4:e6:53: 58:39:39:83:af:b3:72:3c:b3:eb:71:4b:cf:d3:b0:26:54:87: 48:a2:5c:a0:11:1e:ec:0a:d9:bb:a3:64:04:25:da:79:a9:17: ad:77:04:d8:40:ef:09:68:85:c8:7f:2b:31:d8:a3:a1:bd:cb: 21:b2:80:18:5b:72:af:35:90:2b:ba:9c:c8:ec:9d:7d:81:f7: 76:d6:40:9f:d7:56:b8:0e:5f:8d:0a:7e:a5:08:16:3d:ba:8a: 0e:5e:0b:5c:86:03:b8:65:c2:7c:bd:17:b2:cc:de:bb:f0:72: 8c:a8:ec:fe:68:30:66:b9:32:80:d0:0e:04:14:d6:29:d6:8a: d9:c4:ea:c5:6c:58:e1:1c:52:71:b2:3d:03:f2:a2:08:99:0b: 0d:41:df:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR8KSdisV0inj/j1H/cxHPhpaV4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIz MzNFQkI1ODAeFw0yNTA2MTAxNTU2NDdaFw0yNTA2MTMxNzE4NDdaMDMxMTAvBgNV BAMTKDg4QTU0QThGMUUxNENENjQ3Q0MwQzU4RTZBMjhBRTdCRDcyOTA1MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ2tyZrzAgH1znI9Il6TfWce/r U7jl+XfPIpevMeYTQSLR8rTifwq2/APc2reTY72rx9gIhMNWFXcDDPBFt4dyxf/l z2sGpYpDgNXrlk64Y+FDDMh8FLFrS19HYJsVSaQqTfschCXwBt5ZaKOJmOx9ALxb eEC4hdbH4hb1BRPGX0VZDk8c+M3oMk7R7Jre/QJ+IKGjr5yWPc+QDaRDFInGKnl9 e99Qg5TRUwYarO9srRgv4nyWqlSF1Y8FJKiqSXrw0wroSF48DTUAuvPQsWTGmAtj LuyqRG3xvVF4u5T/f6JzqA4DoAebYHA7244iHaCwY8t/1aLdZLj3S3x3U6gRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiKVKjx4UzWR8wMWOaiiue9cpBQswHwYDVR0j BBgwFoAU5yMdGj4FG9kD24bX3gB3wjM+u1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTE3OTRhYS0zMjkxLTQ4M2ItYWMwYi03YmM3YjFhNjdjYzYvMC9FNzIzMUQxQTNF MDUxQkQ5MDNEQjg2RDdERTAwNzdDMjMzM0VCQjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIzMzNF QkI1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWExNzk0YWEtMzI5MS00ODNiLWFj MGItN2JjN2IxYTY3Y2M2LzAvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3 QzIzMzNFQkI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABs/aS8WwbL8sS3ns+ygm/QoiGMKiEtzy8Bz PZycx9C24afL/7iGMD3zFIA6KwnSMWqBsX1NA0RNczQKxywlHY3cCxv14j15P745 bWu8staFwZcgSWazPP016WNuAp/zHU7N6uJdMx8/+KTmU1g5OYOvs3I8s+txS8/T sCZUh0iiXKARHuwK2bujZAQl2nmpF613BNhA7wlohch/KzHYo6G9yyGygBhbcq81 kCu6nMjsnX2B93bWQJ/XVrgOX40KfqUIFj26ig5eC1yGA7hlwny9F7LM3rvwcoyo 7P5oMGa5MoDQDgQU1inWitnE6sVsWOEcUnGyPQPyogiZCw1B38U= -----END CERTIFICATE-----Generated at Wed Jun 11 20:27:49 2025 by rpki-client