$ rpki-client -vvf repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft File: E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft (raw, json) Hash identifier: 0bHQRkdbgYis9xM/gCgE4XtoOCjxNRkhozygmk2Hq4w= Subject key identifier: 74:21:10:10:3C:31:4C:8C:C4:8F:85:D9:23:B5:17:9F:63:B8:3D:10 Authority key identifier: E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F Certificate issuer: /CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F Certificate serial: 18CE4DFC9B1596202D088BA6AD14677DF0355074 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft Manifest number: AE Signing time: Fri 06 Jun 2025 03:11:08 +0000 Manifest this update: Fri 06 Jun 2025 03:06:08 +0000 Manifest next update: Mon 09 Jun 2025 12:16:08 +0000 Files and hashes: 1: E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl (hash: ZfUIqXy1bOLRAqagra2lLLCWci1RBYmmevPibSyPfIM=) 2: 3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa (hash: fkNU7FdVjKHsjFj1YpiV+gYURzvDFsZYzfTu/zHhcfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 12:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ce:4d:fc:9b:15:96:20:2d:08:8b:a6:ad:14:67:7d:f0:35:50:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F Validity Not Before: Jun 6 03:06:08 2025 GMT Not After : Jun 9 12:16:08 2025 GMT Subject: CN=742110103C314C8CC48F85D923B5179F63B83D10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3c:ae:e1:35:2b:4b:ea:05:63:92:4f:a5:2e: 97:ed:ab:ec:90:28:37:b4:c6:20:c9:4a:c1:e2:c8: 3e:37:9b:4b:e6:ab:65:39:d3:e8:88:81:8b:0d:6b: 81:58:34:df:95:49:46:ad:ce:42:24:9e:1a:0d:8d: fa:c6:0b:6d:2a:99:8a:43:5f:7d:4c:aa:dc:8a:06: 4d:40:b2:61:cb:42:f4:b7:35:a4:a9:51:c4:21:d5: be:ea:52:2e:fc:58:a8:91:87:65:cf:be:01:2c:2f: 4c:0a:e8:36:77:b8:86:fb:0a:8b:e2:6c:5c:76:6e: 3b:4d:46:88:1f:43:a6:46:45:b9:ef:a0:b0:b3:fd: 3c:9c:b5:ee:8f:03:48:27:7d:aa:ad:45:c4:8d:8d: ba:38:ec:e7:62:9c:63:00:2b:71:76:b6:f7:58:b7: a0:12:5f:39:0c:2d:94:5e:8b:23:8d:17:03:87:58: de:d8:8b:c0:1e:da:25:14:70:cc:8c:67:b9:e5:5b: 75:f0:c1:cb:e5:cd:0e:82:da:74:75:5a:72:a9:f1: c5:f4:18:e8:d1:a1:54:68:ab:ee:00:20:94:c1:80: 7e:a1:e2:38:08:36:c4:08:6f:7b:2f:3a:ef:75:4b: 07:2d:22:6b:74:db:e1:f9:3a:55:a7:e4:a9:b6:b6: 3c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:21:10:10:3C:31:4C:8C:C4:8F:85:D9:23:B5:17:9F:63:B8:3D:10 X509v3 Authority Key Identifier: keyid:E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:98:a6:bd:1b:07:62:cf:68:2c:26:95:1e:8f:d9:6e:9c:c9: c9:03:88:87:0b:02:ae:79:aa:f0:30:76:16:b0:7e:47:f0:c3: 38:c9:88:c9:3d:a4:f5:ba:a1:55:7e:13:3a:31:ea:2e:c7:85: 69:8a:64:af:2e:fd:c9:53:3b:3f:d8:5e:71:0f:da:91:4c:84: e4:2e:be:c8:35:b9:22:23:79:8b:7c:94:c8:f9:be:7b:20:38: 9c:8d:d4:da:76:e0:fc:7d:4d:99:5b:63:90:27:6b:a1:b8:db: 03:65:55:75:9e:fd:c8:b4:1e:be:68:50:5e:32:16:90:c5:99: 36:4a:b8:67:ae:6d:39:dc:09:c4:17:8f:03:14:de:d7:bd:38: ca:ec:fe:96:a1:c5:a7:6b:06:d8:1a:92:22:04:58:09:eb:5c: 75:34:10:17:ef:8c:13:e7:da:56:5b:2d:17:ef:fb:0d:72:07: 22:31:31:c8:49:0f:aa:2f:26:26:7e:93:7e:bb:9b:7d:68:d4: d2:43:68:4d:8e:fd:6c:ad:76:bf:97:fd:32:a1:f5:28:b8:08: ff:04:4a:75:0e:2f:0a:79:d5:de:b9:2a:25:52:e6:f9:d9:66: d8:83:58:3c:ef:1e:2f:57:51:6e:d7:94:20:fd:f5:48:27:68: 23:1a:20:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGM5N/JsVliAtCIumrRRnffA1UHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJFMDhD QzJGNUM3RjAeFw0yNTA2MDYwMzA2MDhaFw0yNTA2MDkxMjE2MDhaMDMxMTAvBgNV BAMTKDc0MjExMDEwM0MzMTRDOENDNDhGODVEOTIzQjUxNzlGNjNCODNEMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyPK7hNStL6gVjkk+lLpftq+yQ KDe0xiDJSsHiyD43m0vmq2U50+iIgYsNa4FYNN+VSUatzkIknhoNjfrGC20qmYpD X31MqtyKBk1AsmHLQvS3NaSpUcQh1b7qUi78WKiRh2XPvgEsL0wK6DZ3uIb7Covi bFx2bjtNRogfQ6ZGRbnvoLCz/Tycte6PA0gnfaqtRcSNjbo47OdinGMAK3F2tvdY t6ASXzkMLZReiyONFwOHWN7Yi8Ae2iUUcMyMZ7nlW3XwwcvlzQ6C2nR1WnKp8cX0 GOjRoVRoq+4AIJTBgH6h4jgINsQIb3svOu91SwctImt02+H5OlWn5Km2tjwJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdCEQEDwxTIzEj4XZI7UXn2O4PRAwHwYDVR0j BBgwFoAU6QK/TPydmX42qeGjL6ouCMwvXH8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmI0NjZjNi0zNzQzLTQ5NWYtYjFhOC0yNjA3Y2M5OTU3M2YvMC9FOTAyQkY0Q0ZD OUQ5OTdFMzZBOUUxQTMyRkFBMkUwOENDMkY1QzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJFMDhDQzJG NUM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZiNDY2YzYtMzc0My00OTVmLWIx YTgtMjYwN2NjOTk1NzNmLzAvRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJF MDhDQzJGNUM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKYpr0bB2LPaCwmlR6P2W6cyckDiIcLAq55 qvAwdhawfkfwwzjJiMk9pPW6oVV+Ezox6i7HhWmKZK8u/clTOz/YXnEP2pFMhOQu vsg1uSIjeYt8lMj5vnsgOJyN1Np24Px9TZlbY5Ana6G42wNlVXWe/ci0Hr5oUF4y FpDFmTZKuGeubTncCcQXjwMU3te9OMrs/pahxadrBtgakiIEWAnrXHU0EBfvjBPn 2lZbLRfv+w1yByIxMchJD6ovJiZ+k367m31o1NJDaE2O/Wytdr+X/TKh9Si4CP8E SnUOLwp51d65KiVS5vnZZtiDWDzvHi9XUW7XlCD99UgnaCMaIFE= -----END CERTIFICATE-----Generated at Sat Jun 7 05:02:13 2025 by rpki-client