$ rpki-client -vvf repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft File: E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft (raw, json) Hash identifier: F0zqoUYVakJ6H0vKQK9kitPlFIkEYrbR5fr+aDd9p/A= Subject key identifier: 4A:30:74:5A:6D:86:7D:5B:90:E7:0B:DF:65:D1:35:5F:B1:FA:DB:D7 Authority key identifier: E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33 Certificate issuer: /CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433 Certificate serial: 6B4018D0D6E9AEE8841CD44759A822B03583069A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft Manifest number: 0313 Signing time: Fri 06 Jun 2025 12:50:54 +0000 Manifest this update: Fri 06 Jun 2025 12:45:54 +0000 Manifest next update: Mon 09 Jun 2025 18:08:54 +0000 Files and hashes: 1: E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl (hash: 5+nJkVtgKLNiQzgf5hmVn/lg5Dso1pPNP4X8nONaDlU=) 2: 3130332e3137332e3134312e302f32342d3234203d3e203538343835.roa (hash: 4Lx8wRUe0EBL5Vg6TnxJN2re2vfRXqdGwu0ff5l9s8U=) 3: 3130332e3137332e3134302e302f32342d3234203d3e203538343835.roa (hash: kn1u3H+Ll2agnCreRcaCuxh7oJFk4p9Ar3zFl2iudbk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 18:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:40:18:d0:d6:e9:ae:e8:84:1c:d4:47:59:a8:22:b0:35:83:06:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E35DA07B114BD42901F7C1DB8E684E995E2E4433 Validity Not Before: Jun 6 12:45:54 2025 GMT Not After : Jun 9 18:08:54 2025 GMT Subject: CN=4A30745A6D867D5B90E70BDF65D1355FB1FADBD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:b9:1d:eb:4b:ae:88:53:ba:68:33:be:3b: 4b:ca:1a:4e:de:5e:cf:39:77:05:ba:40:93:8f:96: b6:cc:55:46:69:4f:37:0e:40:ca:48:b7:25:cb:6b: d7:25:04:d3:6e:5c:c5:4b:33:d5:89:7a:b2:69:30: a8:b3:21:bc:11:48:93:02:96:28:f6:40:22:cf:76: 66:b0:ee:7a:fa:2f:c8:a5:ec:0e:1b:df:77:7a:16: 75:5d:53:9f:63:05:71:a9:5e:36:d7:d9:34:a0:7a: 73:a9:ae:e5:f2:70:6f:ec:43:c6:3b:0e:05:36:82: 3b:da:d5:97:5e:0f:be:2e:42:df:10:57:c3:ba:aa: e8:ae:bd:4c:44:a3:5c:a5:d9:15:60:b5:65:4f:cf: 1b:dc:5e:ee:93:b0:0f:bc:d9:c9:d7:39:18:71:7c: 56:6e:f5:16:58:a3:e3:44:59:e3:48:1e:b1:ec:be: d0:2f:18:b5:41:97:83:dd:f6:93:ac:09:9a:55:93: ae:4b:bc:57:51:fd:c8:7f:c5:72:7f:3c:f3:92:31: 7a:35:ab:39:d0:9d:7e:c3:b9:b7:76:cc:6f:69:a9: c2:3c:14:33:e2:74:25:51:c9:d0:ed:54:5c:53:f6: 4a:22:b0:bb:0a:2b:ea:84:64:3d:c7:5a:b0:3d:ed: 50:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:30:74:5A:6D:86:7D:5B:90:E7:0B:DF:65:D1:35:5F:B1:FA:DB:D7 X509v3 Authority Key Identifier: keyid:E3:5D:A0:7B:11:4B:D4:29:01:F7:C1:DB:8E:68:4E:99:5E:2E:44:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35DA07B114BD42901F7C1DB8E684E995E2E4433.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaabb578-b9db-4a47-8d7e-11a634289018/0/E35DA07B114BD42901F7C1DB8E684E995E2E4433.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a3:65:eb:8a:66:fb:0a:43:92:9f:13:1a:28:7b:ef:de:19: 24:ec:48:54:66:5a:2c:25:24:15:72:b5:3c:c5:73:00:ab:f6: 6f:17:1f:5b:12:61:ed:56:5e:f4:b8:4b:52:fb:54:a9:db:56: 7b:6f:37:0c:f5:64:69:e4:58:04:9d:40:27:04:25:b6:70:7e: d6:b9:33:ac:cb:2e:2f:89:ed:fc:4d:ab:27:9b:fe:a1:f8:8c: 72:76:46:59:da:60:c8:7c:ee:9b:6b:09:94:87:a5:00:40:91: 4f:0f:35:8e:3a:f7:52:09:32:34:4e:22:6f:08:98:21:49:a0: 09:3f:55:04:d0:d2:70:62:bc:1e:13:48:23:b3:11:95:f3:00: 26:e5:4f:fd:33:1f:30:ff:06:1e:5b:5c:65:7e:26:b0:ec:83: e4:2c:99:da:ba:d9:38:4f:e4:cc:3a:4e:63:87:67:73:5e:4f: 25:8d:6e:5e:10:dc:97:2e:8e:93:d2:e4:9c:e4:cb:cf:7d:de: a3:ae:34:f2:8b:d3:01:83:b8:2f:ad:ef:38:a3:4f:29:3a:0f: 73:82:75:b2:08:f4:b8:fc:7a:cd:5f:7e:e8:28:7a:2f:1e:e7: 58:20:6e:61:c9:74:e2:b2:a4:ab:6f:b1:0a:15:0d:86:18:72: 50:66:a1:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa0AY0NbpruiEHNRHWagisDWDBpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRFOTk1 RTJFNDQzMzAeFw0yNTA2MDYxMjQ1NTRaFw0yNTA2MDkxODA4NTRaMDMxMTAvBgNV BAMTKDRBMzA3NDVBNkQ4NjdENUI5MEU3MEJERjY1RDEzNTVGQjFGQURCRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC17rkd60uuiFO6aDO+O0vKGk7e Xs85dwW6QJOPlrbMVUZpTzcOQMpItyXLa9clBNNuXMVLM9WJerJpMKizIbwRSJMC lij2QCLPdmaw7nr6L8il7A4b33d6FnVdU59jBXGpXjbX2TSgenOpruXycG/sQ8Y7 DgU2gjva1ZdeD74uQt8QV8O6quiuvUxEo1yl2RVgtWVPzxvcXu6TsA+82cnXORhx fFZu9RZYo+NEWeNIHrHsvtAvGLVBl4Pd9pOsCZpVk65LvFdR/ch/xXJ/PPOSMXo1 qznQnX7Dubd2zG9pqcI8FDPidCVRydDtVFxT9koisLsKK+qEZD3HWrA97VCVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSjB0Wm2GfVuQ5wvfZdE1X7H629cwHwYDVR0j BBgwFoAU412gexFL1CkB98HbjmhOmV4uRDMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWFiYjU3OC1iOWRiLTRhNDctOGQ3ZS0xMWE2MzQyODkwMTgvMC9FMzVEQTA3QjEx NEJENDI5MDFGN0MxREI4RTY4NEU5OTVFMkU0NDMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRFOTk1RTJF NDQzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhYmI1NzgtYjlkYi00YTQ3LThk N2UtMTFhNjM0Mjg5MDE4LzAvRTM1REEwN0IxMTRCRDQyOTAxRjdDMURCOEU2ODRF OTk1RTJFNDQzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOjZeuKZvsKQ5KfExooe+/eGSTsSFRmWiwl JBVytTzFcwCr9m8XH1sSYe1WXvS4S1L7VKnbVntvNwz1ZGnkWASdQCcEJbZwfta5 M6zLLi+J7fxNqyeb/qH4jHJ2RlnaYMh87ptrCZSHpQBAkU8PNY4691IJMjROIm8I mCFJoAk/VQTQ0nBivB4TSCOzEZXzACblT/0zHzD/Bh5bXGV+JrDsg+Qsmdq62ThP 5Mw6TmOHZ3NeTyWNbl4Q3JcujpPS5Jzky8993qOuNPKL0wGDuC+t7zijTyk6D3OC dbII9Lj8es1ffugoei8e51ggbmHJdOKypKtvsQoVDYYYclBmod4= -----END CERTIFICATE-----Generated at Fri Jun 6 16:46:35 2025 by rpki-client