$ rpki-client -vvf repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft File: EC973BE13EF324E7D59046CF7690A12F9DF12932.mft (raw, json) Hash identifier: J+51agvgslGTe73xBG4FLyJzX7NcQSiwXVV2+hFD2d8= Subject key identifier: 5F:F1:16:38:A5:F2:10:DD:D0:A4:76:03:37:EA:5E:27:7C:6D:09:45 Authority key identifier: EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 Certificate issuer: /CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Certificate serial: 341A9EC531BD5F901820ED2BB0F125997E6D4C4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft Manifest number: 0246 Signing time: Sat 06 Sep 2025 08:51:19 +0000 Manifest this update: Sat 06 Sep 2025 08:46:19 +0000 Manifest next update: Tue 09 Sep 2025 10:23:19 +0000 Files and hashes: 1: 3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (hash: Fd7yVNtVPCM6piUfSXh9X3JKHqUDZdjbopzWmm3ObMk=) 2: EC973BE13EF324E7D59046CF7690A12F9DF12932.crl (hash: J7qM6rZwYnHo84+zGK9F9DK0bBfcLkDoa45otCbFw5k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 10:23:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:1a:9e:c5:31:bd:5f:90:18:20:ed:2b:b0:f1:25:99:7e:6d:4c:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Validity Not Before: Sep 6 08:46:19 2025 GMT Not After : Sep 9 10:23:19 2025 GMT Subject: CN=5FF11638A5F210DDD0A4760337EA5E277C6D0945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c9:a6:81:7e:91:c5:f6:d6:31:76:d5:a4:31: c2:f6:20:c6:93:f1:3f:5f:fb:c0:ca:c1:e2:2f:c5: 6c:53:c7:b5:dc:32:f8:74:2e:9e:ce:a9:12:bc:98: a4:2c:e6:24:5c:6f:6f:c3:c7:06:db:1e:91:20:66: 6e:5d:10:b4:e4:3e:04:8b:99:9e:4d:e9:4d:de:71: ae:c1:82:79:f3:6f:d5:8c:dd:ef:27:e9:96:39:c0: 4f:26:78:d3:a0:04:41:a2:5c:72:1d:99:53:c4:bc: 61:c7:e4:ec:7d:63:a4:af:ca:dd:3d:17:d6:03:80: fa:f5:ab:8e:bc:3f:8c:ff:5c:41:e1:02:21:5f:54: 41:68:72:85:11:54:d0:6f:25:d3:1f:eb:ea:71:fa: 2d:a5:df:9d:ae:35:17:a5:0c:94:2b:81:08:7b:93: 7d:cb:1d:6e:cd:39:b6:d7:c7:53:9b:8e:bd:68:ef: 1b:15:2b:2f:1a:20:cd:33:a8:94:fa:5c:2b:64:c4: 4d:48:41:4b:e4:ab:28:16:b6:20:50:c9:11:88:3c: 87:4c:d5:d5:32:d3:fe:a4:46:fa:ab:1d:61:95:67: 0a:4c:66:2d:0e:29:45:d8:0d:02:17:ae:01:18:4e: f1:02:be:40:0a:4f:39:9e:ab:eb:7b:ac:fc:b7:35: 6c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F1:16:38:A5:F2:10:DD:D0:A4:76:03:37:EA:5E:27:7C:6D:09:45 X509v3 Authority Key Identifier: keyid:EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:97:04:c9:f1:96:48:1a:0b:b6:99:3e:92:1e:7b:1a:2c:17: bf:55:76:4b:a9:97:2c:22:8e:cd:01:be:9a:90:27:d3:1f:e9: cd:33:e2:fb:6e:0b:2e:0b:f1:96:65:93:68:e0:ef:c3:56:2b: 0e:0f:4c:85:b8:a0:53:ba:5e:e7:fa:85:b6:3f:fd:d1:43:3d: 28:47:26:2b:b7:1b:1b:e0:4f:c8:b7:9e:99:43:be:bb:b1:af: ba:14:90:c3:00:96:97:a7:83:3b:cb:2a:d3:08:80:03:a9:aa: a1:1b:69:ac:32:a3:1d:61:6a:6d:6f:52:f3:97:c9:fa:8d:aa: 6f:00:76:fe:fe:e4:62:16:57:bc:c0:3d:86:cc:c3:9f:15:96: 6f:36:43:3f:85:b3:7c:20:cd:24:88:97:bd:12:ae:7a:43:31: 01:b0:2c:9a:27:57:4d:9c:10:df:34:1e:c4:62:e4:c0:0b:d0: 6e:b7:b3:1e:5a:cd:99:48:e3:cd:62:e0:85:be:19:7a:b4:c3: 20:f4:6d:2e:79:bd:87:e1:d6:53:cf:8d:8e:67:78:df:57:f1: 7a:af:d4:b2:d3:2c:2b:81:ff:0d:1f:e8:c9:8b:85:d8:a3:f7: 19:3a:44:a3:cc:1f:d7:f4:06:79:b2:32:00:0f:5a:a2:42:e2: 87:d7:54:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNBqexTG9X5AYIO0rsPElmX5tTEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5 REYxMjkzMjAeFw0yNTA5MDYwODQ2MTlaFw0yNTA5MDkxMDIzMTlaMDMxMTAvBgNV BAMTKDVGRjExNjM4QTVGMjEwREREMEE0NzYwMzM3RUE1RTI3N0M2RDA5NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGyaaBfpHF9tYxdtWkMcL2IMaT 8T9f+8DKweIvxWxTx7XcMvh0Lp7OqRK8mKQs5iRcb2/DxwbbHpEgZm5dELTkPgSL mZ5N6U3eca7Bgnnzb9WM3e8n6ZY5wE8meNOgBEGiXHIdmVPEvGHH5Ox9Y6Svyt09 F9YDgPr1q468P4z/XEHhAiFfVEFocoURVNBvJdMf6+px+i2l352uNRelDJQrgQh7 k33LHW7NObbXx1Objr1o7xsVKy8aIM0zqJT6XCtkxE1IQUvkqygWtiBQyRGIPIdM 1dUy0/6kRvqrHWGVZwpMZi0OKUXYDQIXrgEYTvECvkAKTzmeq+t7rPy3NWy5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX/EWOKXyEN3QpHYDN+peJ3xtCUUwHwYDVR0j BBgwFoAU7Jc74T7zJOfVkEbPdpChL53xKTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTFjYmQ3OS04ZjI2LTRiMGUtOGIzYi1hYjllOTkzOGZjYWUvMC9FQzk3M0JFMTNF RjMyNEU3RDU5MDQ2Q0Y3NjkwQTEyRjlERjEyOTMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5REYx MjkzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmUxY2JkNzktOGYyNi00YjBlLThi M2ItYWI5ZTk5MzhmY2FlLzAvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEEx MkY5REYxMjkzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGXBMnxlkgaC7aZPpIeexosF79Vdkuplywi js0BvpqQJ9Mf6c0z4vtuCy4L8ZZlk2jg78NWKw4PTIW4oFO6Xuf6hbY//dFDPShH Jiu3GxvgT8i3nplDvruxr7oUkMMAlpengzvLKtMIgAOpqqEbaawyox1ham1vUvOX yfqNqm8Adv7+5GIWV7zAPYbMw58Vlm82Qz+Fs3wgzSSIl70SrnpDMQGwLJonV02c EN80HsRi5MAL0G63sx5azZlI481i4IW+GXq0wyD0bS55vYfh1lPPjY5neN9X8Xqv 1LLTLCuB/w0f6MmLhdij9xk6RKPMH9f0BnmyMgAPWqJC4ofXVN0= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:53 2025 by rpki-client