$ rpki-client -vvf repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft File: E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft (raw, json) Hash identifier: KHYHX2b3jDdd9nF4ztTgQvkrOB92z4yiFdX8ab5ZQnI= Subject key identifier: 9F:EF:83:34:69:B7:74:FC:37:57:E2:16:50:DD:45:44:D9:0E:A2:99 Authority key identifier: E7:DC:BB:5E:91:2C:56:AB:C8:9C:BB:C8:FA:42:B5:E6:3D:15:2A:F4 Certificate issuer: /CN=E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4 Certificate serial: 158D0E161C2FBBF449F585CC89F45B2FF6C24A80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft Manifest number: 04FC Signing time: Wed 06 Aug 2025 17:02:21 +0000 Manifest this update: Wed 06 Aug 2025 16:57:21 +0000 Manifest next update: Sat 09 Aug 2025 20:48:21 +0000 Files and hashes: 1: E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl (hash: YlQTBCkv3iEaLA7EXqR9d8lRRCe3xlNbnV3TOz4rWck=) 2: 3130332e3133392e3138362e302f32342d3234203d3e20313338383634.roa (hash: hCqKQAmBft8A8taUBcT8sOYve7SjkWXpgzjj9NA6B/s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 20:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:8d:0e:16:1c:2f:bb:f4:49:f5:85:cc:89:f4:5b:2f:f6:c2:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4 Validity Not Before: Aug 6 16:57:21 2025 GMT Not After : Aug 9 20:48:21 2025 GMT Subject: CN=9FEF833469B774FC3757E21650DD4544D90EA299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4c:69:ed:16:14:61:cc:3b:09:1c:77:39:bf: c6:cc:46:9e:e1:11:89:31:db:a2:d4:47:13:d0:38: 36:0e:3d:03:49:5e:c4:01:24:6e:41:22:d0:17:f8: 26:a1:de:b1:da:6a:8f:6a:8a:38:8f:ac:31:77:88: 27:1d:1a:a4:d3:80:b4:02:be:c3:9c:c9:a1:a1:f7: e5:df:ce:2f:b3:87:02:3a:66:9e:ac:5e:66:3a:9a: 35:05:2a:fe:7f:ab:10:22:ee:0e:84:fb:ed:4c:0b: 75:d4:22:5b:3a:ea:22:36:d9:8c:96:78:f3:4c:60: ae:0c:2d:92:8b:d3:d0:6a:b8:df:0c:a2:e2:13:43: ae:c9:27:36:dd:c4:f1:2a:92:8d:2c:7f:e3:bd:0b: 68:68:e6:dc:f7:d4:ce:ea:3a:02:be:66:da:25:38: 66:e2:b9:6a:1e:cd:5b:e7:d7:e5:65:ac:d9:56:22: 93:43:67:b7:bb:88:9d:e2:8e:28:b2:e1:c5:d7:b1: 30:3d:d6:d6:c1:5f:2a:a1:84:12:86:6c:33:a6:8d: ae:3d:0c:77:82:41:62:ef:e3:ac:6f:1c:6e:4c:ad: 51:2f:46:35:2b:64:0f:fb:de:46:86:39:bd:eb:9b: 74:53:0e:25:4c:b0:f9:36:28:32:0a:f4:8a:7c:ae: 12:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:EF:83:34:69:B7:74:FC:37:57:E2:16:50:DD:45:44:D9:0E:A2:99 X509v3 Authority Key Identifier: keyid:E7:DC:BB:5E:91:2C:56:AB:C8:9C:BB:C8:FA:42:B5:E6:3D:15:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:06:20:0b:68:46:04:b8:31:f8:ec:eb:04:4e:4e:c8:35:0c: 02:fa:a3:e5:41:c5:f5:08:fe:70:48:82:90:00:d5:43:65:5b: d4:86:6f:38:9f:ac:65:5b:88:a1:a2:30:17:c1:84:88:85:66: 4a:84:4d:ec:24:ea:8d:02:c5:42:82:88:d7:53:01:1e:7f:21: a8:6e:49:c3:d3:c6:80:aa:69:0a:cf:bd:de:ca:ca:27:21:9f: 24:f0:b9:a5:ae:cc:df:b2:5e:fa:c2:dc:1d:9a:4d:28:0e:36: fe:c7:14:43:53:d1:6a:fa:a7:a4:9c:0e:b0:63:4a:e2:3e:22: ae:fb:fd:80:0c:5b:f1:20:05:4e:c8:d7:ad:1c:eb:da:8d:bf: 2b:5b:6a:7f:2d:10:d3:9d:53:ab:67:bf:f5:c9:b6:12:e4:ec: 3c:35:16:c9:14:6d:59:51:4c:f4:14:18:80:bd:77:44:26:fe: a3:76:61:c6:71:b0:6a:2e:e2:cf:89:de:fd:6b:39:72:55:e2: 08:8f:04:d1:5f:5a:58:e7:57:29:6d:2c:fb:09:ee:74:42:49: 3f:7b:09:a0:3c:84:87:51:84:84:3e:f3:14:01:79:d0:dd:49: 35:8f:94:e4:d7:ed:4d:30:da:26:9e:4f:4e:8b:87:0a:f6:09: 06:37:e9:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFY0OFhwvu/RJ9YXMifRbL/bCSoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdEQ0JCNUU5MTJDNTZBQkM4OUNCQkM4RkE0MkI1RTYz RDE1MkFGNDAeFw0yNTA4MDYxNjU3MjFaFw0yNTA4MDkyMDQ4MjFaMDMxMTAvBgNV BAMTKDlGRUY4MzM0NjlCNzc0RkMzNzU3RTIxNjUwREQ0NTQ0RDkwRUEyOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSTGntFhRhzDsJHHc5v8bMRp7h EYkx26LURxPQODYOPQNJXsQBJG5BItAX+Cah3rHaao9qijiPrDF3iCcdGqTTgLQC vsOcyaGh9+Xfzi+zhwI6Zp6sXmY6mjUFKv5/qxAi7g6E++1MC3XUIls66iI22YyW ePNMYK4MLZKL09BquN8MouITQ67JJzbdxPEqko0sf+O9C2ho5tz31M7qOgK+Ztol OGbiuWoezVvn1+VlrNlWIpNDZ7e7iJ3ijiiy4cXXsTA91tbBXyqhhBKGbDOmja49 DHeCQWLv46xvHG5MrVEvRjUrZA/73kaGOb3rm3RTDiVMsPk2KDIK9Ip8rhLLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn++DNGm3dPw3V+IWUN1FRNkOopkwHwYDVR0j BBgwFoAU59y7XpEsVqvInLvI+kK15j0VKvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDM1OGIwMC0zMWNkLTQxYTMtOTUzNi1kYmIxOTNlN2Y0ZDAvMC9FN0RDQkI1RTkx MkM1NkFCQzg5Q0JCQzhGQTQyQjVFNjNEMTUyQUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdEQ0JCNUU5MTJDNTZBQkM4OUNCQkM4RkE0MkI1RTYzRDE1 MkFGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQzNThiMDAtMzFjZC00MWEzLTk1 MzYtZGJiMTkzZTdmNGQwLzAvRTdEQ0JCNUU5MTJDNTZBQkM4OUNCQkM4RkE0MkI1 RTYzRDE1MkFGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALUGIAtoRgS4Mfjs6wROTsg1DAL6o+VBxfUI /nBIgpAA1UNlW9SGbzifrGVbiKGiMBfBhIiFZkqETewk6o0CxUKCiNdTAR5/Iahu ScPTxoCqaQrPvd7KyichnyTwuaWuzN+yXvrC3B2aTSgONv7HFENT0Wr6p6ScDrBj SuI+Iq77/YAMW/EgBU7I160c69qNvytban8tENOdU6tnv/XJthLk7Dw1FskUbVlR TPQUGIC9d0Qm/qN2YcZxsGou4s+J3v1rOXJV4giPBNFfWljnVyltLPsJ7nRCST97 CaA8hIdRhIQ+8xQBedDdSTWPlOTX7U0w2iaeT06Lhwr2CQY36bo= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:19 2025 by rpki-client