$ rpki-client -vvf repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft File: E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft (raw, json) Hash identifier: GMOSrKmBgkah1kcoTsSh8fqUqac4IyY17xs5DY8nM8k= Subject key identifier: 7F:08:90:23:49:21:CF:51:D9:D6:56:33:16:46:A9:CF:2D:B7:45:03 Authority key identifier: E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 Certificate issuer: /CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Certificate serial: 3D7253C0ABAEE8D566BBAF46A4A8377B5AE71B64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft Manifest number: 04E8 Signing time: Fri 06 Jun 2025 11:12:17 +0000 Manifest this update: Fri 06 Jun 2025 11:07:17 +0000 Manifest next update: Mon 09 Jun 2025 11:48:17 +0000 Files and hashes: 1: 323430323a366163303a3a2f33332d3333203d3e20313337333036.roa (hash: +LtGD0I+CcS2FlJTjK9Ti6xX24NgEqNHjvhmLsu4MGU=) 2: E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl (hash: dSMYU+pNfhVKY9vRH87B0XqBWlR468Jf5x5oSqiTfGQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 11:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:72:53:c0:ab:ae:e8:d5:66:bb:af:46:a4:a8:37:7b:5a:e7:1b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014 Validity Not Before: Jun 6 11:07:17 2025 GMT Not After : Jun 9 11:48:17 2025 GMT Subject: CN=7F0890234921CF51D9D656331646A9CF2DB74503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:42:28:34:2b:8a:09:dc:dc:d4:96:6a:0c:d0: 84:71:d1:d6:ec:79:0f:2b:ae:b9:ae:85:3a:0e:cd: 05:4d:10:e6:02:c2:91:eb:af:a9:3f:86:3c:af:90: 96:30:60:b2:79:16:ab:f6:5e:ea:a9:bb:a3:79:c6: 8c:0b:cf:00:84:25:2e:77:8f:cc:21:04:37:5d:d9: dd:b9:6a:24:5f:af:0b:c9:0d:fa:5c:00:2c:22:7a: 76:2a:51:d9:f9:e9:f9:2d:0a:42:17:b5:62:82:52: 9f:97:6a:f9:4d:44:49:5a:a1:cc:a7:32:e2:b6:e8: 30:c8:28:a6:a5:3e:2f:c7:cb:50:28:fc:f2:5b:8b: ca:e9:80:b8:e9:1c:a7:9c:29:f7:1f:ed:8d:de:fb: 71:0e:28:ef:35:f8:1a:83:21:d5:ad:ea:d3:62:6f: d8:be:d0:91:12:9a:bf:bc:f8:05:53:6c:d1:ae:f1: 82:c9:3a:bd:19:73:8c:89:4c:19:22:64:23:6e:e6: 42:f0:5e:1a:e6:9e:9c:b4:fd:a6:75:46:82:bb:53: 03:90:79:bb:12:48:19:64:6f:01:87:ae:21:c4:e8: 1f:2f:12:74:12:25:11:0e:52:3e:06:51:d7:85:45: eb:07:59:af:9e:a5:8b:89:51:c1:82:5a:1f:b6:67: 6c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:08:90:23:49:21:CF:51:D9:D6:56:33:16:46:A9:CF:2D:B7:45:03 X509v3 Authority Key Identifier: keyid:E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:bf:d7:3d:7f:b9:0a:05:a0:e3:69:fe:b8:03:cf:d1:a5:69: d6:95:bb:b6:e1:7c:11:2f:c0:3c:65:b8:68:40:a3:21:78:bb: 5c:95:7b:f8:5a:fc:8a:3d:04:58:aa:a9:ac:d1:1f:cc:9e:6e: 0c:27:bb:26:b6:5a:4f:0d:0a:78:41:7b:52:f4:22:72:10:a4: e9:6f:80:79:d0:5f:98:0a:86:a4:75:f3:8f:48:fb:a9:7d:25: c7:99:a0:89:04:49:7d:e3:ed:18:8b:7b:c1:ff:63:97:51:6a: 28:68:cb:cf:34:ed:cc:06:22:d0:4d:4e:b8:a1:07:8d:67:0d: a7:02:b9:46:a4:ea:56:8a:79:b6:9e:dc:88:72:26:f7:90:87: 5f:c3:7a:a1:5f:02:a7:d2:c4:5a:d2:93:97:2a:db:08:7b:7e: 76:8b:5c:87:1e:a7:f0:ab:3e:e2:fd:f1:ca:e6:81:65:09:24: ce:be:82:2a:f4:f4:73:38:3c:4e:d5:ee:51:ff:d9:65:88:48: b3:20:ad:e5:e0:b4:ce:8c:52:8e:94:89:8e:06:c1:07:d1:93: d5:aa:a4:50:ce:7c:28:eb:b8:e7:69:29:bc:0c:e3:6b:ff:10: 4b:ec:f5:83:d8:d2:62:56:5f:cc:88:b0:24:99:a7:92:94:6a: be:e8:cf:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPXJTwKuu6NVmu69GpKg3e1rnG2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdE QzVFMTAxNDAeFw0yNTA2MDYxMTA3MTdaFw0yNTA2MDkxMTQ4MTdaMDMxMTAvBgNV BAMTKDdGMDg5MDIzNDkyMUNGNTFEOUQ2NTYzMzE2NDZBOUNGMkRCNzQ1MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClQig0K4oJ3NzUlmoM0IRx0dbs eQ8rrrmuhToOzQVNEOYCwpHrr6k/hjyvkJYwYLJ5Fqv2Xuqpu6N5xowLzwCEJS53 j8whBDdd2d25aiRfrwvJDfpcACwienYqUdn56fktCkIXtWKCUp+XavlNRElaocyn MuK26DDIKKalPi/Hy1Ao/PJbi8rpgLjpHKecKfcf7Y3e+3EOKO81+BqDIdWt6tNi b9i+0JESmr+8+AVTbNGu8YLJOr0Zc4yJTBkiZCNu5kLwXhrmnpy0/aZ1RoK7UwOQ ebsSSBlkbwGHriHE6B8vEnQSJREOUj4GUdeFResHWa+epYuJUcGCWh+2Z2wZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfwiQI0khz1HZ1lYzFkapzy23RQMwHwYDVR0j BBgwFoAU5yYirg9ptM2ryc0iOz4Gx9xeEBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1YmY3OS1lODRhLTQwZTAtOGZkNC1mMTY5YzE4NmJlOGYvMC9FNzI2MjJBRTBG NjlCNENEQUJDOUNEMjIzQjNFMDZDN0RDNUUxMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2QzdEQzVF MTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQzNWJmNzktZTg0YS00MGUwLThm ZDQtZjE2OWMxODZiZThmLzAvRTcyNjIyQUUwRjY5QjRDREFCQzlDRDIyM0IzRTA2 QzdEQzVFMTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHq/1z1/uQoFoONp/rgDz9GladaVu7bhfBEv wDxluGhAoyF4u1yVe/ha/Io9BFiqqazRH8yebgwnuya2Wk8NCnhBe1L0InIQpOlv gHnQX5gKhqR1849I+6l9JceZoIkESX3j7RiLe8H/Y5dRaihoy8807cwGItBNTrih B41nDacCuUak6laKebae3IhyJveQh1/DeqFfAqfSxFrSk5cq2wh7fnaLXIcep/Cr PuL98crmgWUJJM6+gir09HM4PE7V7lH/2WWISLMgreXgtM6MUo6UiY4GwQfRk9Wq pFDOfCjruOdpKbwM42v/EEvs9YPY0mJWX8yIsCSZp5KUar7ozx8= -----END CERTIFICATE-----Generated at Sun Jun 8 05:04:00 2025 by rpki-client