$ rpki-client -vvf repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft File: E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft (raw, json) Hash identifier: cHSxCqg2sk4//qWGxYWqKtIOuBi1vgqZKJsjAVKlbCk= Subject key identifier: B3:FB:14:23:06:5B:10:D5:C9:7E:EB:6B:37:67:6C:47:05:7F:BE:86 Authority key identifier: E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81 Certificate issuer: /CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81 Certificate serial: 68E173D88D4BB0AC57586ED5E408103D0F382140 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft Manifest number: 01FA Signing time: Mon 02 Jun 2025 16:51:38 +0000 Manifest this update: Mon 02 Jun 2025 16:46:38 +0000 Manifest next update: Thu 05 Jun 2025 18:24:38 +0000 Files and hashes: 1: E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl (hash: Kzq8J87JHcUE3U7wSO7PpdTKW5ByIXkOvarA9HDA1uQ=) 2: 3130332e3135362e37342e302f32332d3234203d3e20313431303832.roa (hash: +uanKrOlJ1inyxGrMVmi+UClp9vCCzs4JkeBJaqGWYc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 18:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e1:73:d8:8d:4b:b0:ac:57:58:6e:d5:e4:08:10:3d:0f:38:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81 Validity Not Before: Jun 2 16:46:38 2025 GMT Not After : Jun 5 18:24:38 2025 GMT Subject: CN=B3FB1423065B10D5C97EEB6B37676C47057FBE86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:69:2d:03:0b:eb:1c:27:1c:08:2c:94:64:f8: 28:d3:33:1a:e2:2f:7f:39:bf:e0:cb:e1:a6:30:8c: fb:50:05:39:9c:5c:db:27:de:e9:b4:2c:a5:f9:11: 08:b0:32:3f:e7:43:cf:98:85:08:6f:e1:54:d6:ee: f9:88:2c:f9:e1:cd:c6:55:f9:e1:57:7d:88:4e:10: 6c:06:41:f9:4f:00:17:80:33:e1:ff:0b:87:cb:09: 86:ae:9d:b1:11:24:68:b2:2f:07:e1:af:59:62:e4: b6:24:7e:e9:d0:24:71:a9:34:67:05:9e:60:77:cb: 37:dd:f1:d5:7c:10:59:9f:06:be:c3:06:f2:c7:3c: d2:ed:35:1d:b4:2a:d7:2c:df:78:76:7d:49:23:89: c3:11:2b:9b:e0:69:97:8f:c3:fb:86:18:5c:b2:5b: 93:c7:0f:4b:ef:5e:29:79:91:d6:c3:8e:52:41:10: 09:4f:e1:01:0b:56:94:fc:05:fe:89:c2:06:68:b7: 37:ec:ff:95:93:6c:17:3b:f4:79:b6:08:c0:4d:79: fd:3d:2a:76:f0:1b:95:ef:5a:b4:d1:aa:89:8c:8a: e3:6d:ca:88:b1:a9:b4:41:4b:e2:8f:06:69:00:f5: ce:a2:59:b2:ef:e8:38:35:5d:b4:0b:ca:4f:bd:b2: dc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FB:14:23:06:5B:10:D5:C9:7E:EB:6B:37:67:6C:47:05:7F:BE:86 X509v3 Authority Key Identifier: keyid:E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b0:49:45:71:8a:1e:6f:47:e0:25:6d:80:a8:59:ce:89:da: 9e:79:86:48:4c:e4:49:77:00:b5:e7:28:cf:43:47:65:8c:93: 46:aa:40:fb:fc:37:7f:d6:cf:99:e8:ad:28:e6:ea:15:1a:57: 43:63:a1:77:65:52:66:c6:24:cd:7b:ae:a0:45:03:94:af:2d: 98:e7:74:62:7f:d0:69:6a:af:be:1c:0f:63:a4:d7:44:08:a2: 0f:df:9f:84:b2:0e:40:f4:13:7d:0d:7c:51:85:74:a4:12:44: 43:61:08:e7:c8:92:59:76:fe:50:43:2b:34:4d:f6:d0:8f:1f: 6c:c4:87:af:a9:0a:7a:2e:21:6f:f9:44:56:13:6f:29:13:c2: 69:e2:6b:31:99:0f:21:4d:51:83:d2:95:4e:84:44:f2:a5:31: 66:e1:57:db:ec:3c:4e:0d:59:fa:c1:97:55:94:41:ec:ae:a4: 92:7f:2a:6d:15:dd:b9:ac:a6:67:8e:da:50:8d:24:08:b2:90: 71:48:12:b7:3e:18:90:7b:69:97:2b:4f:97:f6:ec:ae:d0:72: ff:77:53:88:e6:74:78:44:9e:dc:27:82:a6:ee:76:89:03:20: 47:15:2c:81:b9:61:ed:b4:9c:a4:70:bf:fe:02:0b:d6:8d:48: 29:bd:f5:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaOFz2I1LsKxXWG7V5AgQPQ84IUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4NzY3 QjQxMUE4MTAeFw0yNTA2MDIxNjQ2MzhaFw0yNTA2MDUxODI0MzhaMDMxMTAvBgNV BAMTKEIzRkIxNDIzMDY1QjEwRDVDOTdFRUI2QjM3Njc2QzQ3MDU3RkJFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMaS0DC+scJxwILJRk+CjTMxri L385v+DL4aYwjPtQBTmcXNsn3um0LKX5EQiwMj/nQ8+YhQhv4VTW7vmILPnhzcZV +eFXfYhOEGwGQflPABeAM+H/C4fLCYaunbERJGiyLwfhr1li5LYkfunQJHGpNGcF nmB3yzfd8dV8EFmfBr7DBvLHPNLtNR20Ktcs33h2fUkjicMRK5vgaZePw/uGGFyy W5PHD0vvXil5kdbDjlJBEAlP4QELVpT8Bf6JwgZotzfs/5WTbBc79Hm2CMBNef09 KnbwG5XvWrTRqomMiuNtyoixqbRBS+KPBmkA9c6iWbLv6Dg1XbQLyk+9styJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs/sUIwZbENXJfutrN2dsRwV/voYwHwYDVR0j BBgwFoAU4APoULd8dvDgJPHabvvYdntBGoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDAxMDJkMC03MTRmLTRiNTItOWJlNS1kZWQxNmVkZmU0YTIvMC9FMDAzRTg1MEI3 N0M3NkYwRTAyNEYxREE2RUZCRDg3NjdCNDExQTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4NzY3QjQx MUE4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjAwMTAyZDAtNzE0Zi00YjUyLTli ZTUtZGVkMTZlZGZlNGEyLzAvRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4 NzY3QjQxMUE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqwSUVxih5vR+AlbYCoWc6J2p55hkhM5El3 ALXnKM9DR2WMk0aqQPv8N3/Wz5norSjm6hUaV0NjoXdlUmbGJM17rqBFA5SvLZjn dGJ/0Glqr74cD2Ok10QIog/fn4SyDkD0E30NfFGFdKQSRENhCOfIkll2/lBDKzRN 9tCPH2zEh6+pCnouIW/5RFYTbykTwmniazGZDyFNUYPSlU6ERPKlMWbhV9vsPE4N WfrBl1WUQeyupJJ/Km0V3bmspmeO2lCNJAiykHFIErc+GJB7aZcrT5f27K7Qcv93 U4jmdHhEntwngqbudokDIEcVLIG5Ye20nKRwv/4CC9aNSCm99Vc= -----END CERTIFICATE-----Generated at Tue Jun 3 23:34:25 2025 by rpki-client