$ rpki-client -vvf repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft File: E7D91E7B841DB274E77E823084312F8B78A5C951.mft (raw, json) Hash identifier: CJjsaDdJHIAuFiqpIqHf46z0kj8Bgn+SLMIgroDl9wI= Subject key identifier: 3D:3D:CF:4D:F5:8D:1E:A1:CF:1C:F1:6D:72:7C:63:40:89:AD:2E:6D Authority key identifier: E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51 Certificate issuer: /CN=E7D91E7B841DB274E77E823084312F8B78A5C951 Certificate serial: 35DEFE9089DA4A75AC0AA5975ADCFF8BAB5E4FB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft Manifest number: 04A4 Signing time: Sun 15 Jun 2025 13:31:32 +0000 Manifest this update: Sun 15 Jun 2025 13:26:32 +0000 Manifest next update: Wed 18 Jun 2025 22:26:32 +0000 Files and hashes: 1: 3130332e3134312e3233382e302f32332d3234203d3e20313339333637.roa (hash: ptFcyErEiJ1JYS1a1G9a9k9pSg8MxBcsAnCveu1OYpY=) 2: E7D91E7B841DB274E77E823084312F8B78A5C951.crl (hash: luYMRXbMZpvONlMHEojivSNCnZemxpUlCwBkX58lv4g=) 3: 323030313a6466313a316338303a3a2f34382d3438203d3e20313339333637.roa (hash: FFu9qqO0bSps/kj6fyv5I//5Hd+4wId09goi1uFGoE8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.crl rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 22:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:de:fe:90:89:da:4a:75:ac:0a:a5:97:5a:dc:ff:8b:ab:5e:4f:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7D91E7B841DB274E77E823084312F8B78A5C951 Validity Not Before: Jun 15 13:26:32 2025 GMT Not After : Jun 18 22:26:32 2025 GMT Subject: CN=3D3DCF4DF58D1EA1CF1CF16D727C634089AD2E6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:80:ee:20:d5:0a:23:81:1c:05:c3:9e:7d:8b: 06:56:8e:a7:30:d2:49:8d:bf:35:59:85:ec:a9:3e: 20:a3:ab:2b:41:8b:65:18:97:e9:48:ae:15:5d:45: 5a:e2:4f:53:a1:13:22:ef:f1:ce:57:25:68:ce:f9: a8:47:85:23:78:ee:99:bf:b2:70:de:6a:26:ea:1b: e8:7d:60:ce:b4:0a:2d:29:cf:a4:8d:b5:f1:8e:9e: 42:16:d3:46:3a:92:81:e9:9b:4b:79:d5:38:0d:0c: 85:6c:3d:e7:aa:2e:87:31:90:e6:86:fc:93:05:d8: 36:2c:24:b6:74:2d:26:df:f7:42:df:8f:89:98:b0: d0:eb:86:14:2b:93:3c:0d:46:c9:14:ea:a6:2a:b5: b1:f7:6e:41:d8:29:aa:a9:02:a8:52:b8:17:20:19: 41:90:13:3c:0e:76:5e:17:2b:6c:89:62:73:89:f9: 86:37:d4:be:8c:ec:3b:47:9d:f3:7c:79:9d:8e:e0: d8:6d:bc:6a:10:fa:5b:d7:55:2b:5c:95:eb:4a:e5: e4:95:28:aa:78:5a:6e:46:6b:db:b4:17:4b:74:10: 3b:83:35:8e:44:34:d9:d8:c2:5d:66:35:47:a7:fc: 21:04:e6:6a:ce:4d:0d:f1:8f:ac:11:62:8c:7b:0b: 48:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3D:CF:4D:F5:8D:1E:A1:CF:1C:F1:6D:72:7C:63:40:89:AD:2E:6D X509v3 Authority Key Identifier: keyid:E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:69:9d:71:12:51:8a:ac:5f:fc:e6:44:0c:5a:62:23:ab:3c: ea:af:1b:3a:cb:28:53:8f:56:12:1b:8d:1b:4a:78:b5:9e:db: a1:e6:e5:4d:bb:2f:89:98:1b:d2:6c:16:83:4f:26:63:89:d3: b9:ff:cc:fa:a2:40:f8:5a:be:f1:71:10:31:4f:10:24:d7:55: ca:68:a9:cb:3a:3b:a3:b1:61:2d:bd:ab:0c:5f:31:1e:ff:f7: d0:12:f4:1c:20:60:d4:d3:ff:19:db:9f:18:92:58:96:ff:7d: 08:6b:88:9d:af:45:4f:29:db:7b:fb:d0:68:66:f8:4d:f6:3c: 9f:30:d8:1d:9b:0b:bc:ef:0e:b2:ae:bb:f9:66:64:e6:3f:99: 46:35:f3:ce:8d:9c:ab:c5:17:a8:9e:d6:f2:7a:7c:79:96:57: 36:c2:f0:75:59:7d:d3:f9:8f:24:1c:80:e0:a5:b5:06:a9:77: 3e:e4:08:ee:43:d2:dd:e0:8d:68:a4:a1:82:ef:77:0a:75:d3: 60:7c:85:4a:50:cd:a1:fc:77:69:15:28:9a:77:e1:3e:94:37: e4:50:76:92:16:f8:fe:20:ce:47:4c:f4:c7:81:73:aa:52:36: 8f:f5:23:fa:ac:81:52:13:39:bb:89:e5:4d:8f:b6:cc:75:94: 0d:c9:69:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNd7+kInaSnWsCqWXWtz/i6teT7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJGOEI3 OEE1Qzk1MTAeFw0yNTA2MTUxMzI2MzJaFw0yNTA2MTgyMjI2MzJaMDMxMTAvBgNV BAMTKDNEM0RDRjRERjU4RDFFQTFDRjFDRjE2RDcyN0M2MzQwODlBRDJFNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCygO4g1QojgRwFw559iwZWjqcw 0kmNvzVZheypPiCjqytBi2UYl+lIrhVdRVriT1OhEyLv8c5XJWjO+ahHhSN47pm/ snDeaibqG+h9YM60Ci0pz6SNtfGOnkIW00Y6koHpm0t51TgNDIVsPeeqLocxkOaG /JMF2DYsJLZ0LSbf90Lfj4mYsNDrhhQrkzwNRskU6qYqtbH3bkHYKaqpAqhSuBcg GUGQEzwOdl4XK2yJYnOJ+YY31L6M7DtHnfN8eZ2O4NhtvGoQ+lvXVStcletK5eSV KKp4Wm5Ga9u0F0t0EDuDNY5ENNnYwl1mNUen/CEE5mrOTQ3xj6wRYox7C0ijAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPT3PTfWNHqHPHPFtcnxjQImtLm0wHwYDVR0j BBgwFoAU59kee4QdsnTnfoIwhDEvi3ilyVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTcwODNhYi0yNzBhLTRiMGEtOGU1NS1hNDVlMWNmMWFmZDUvMC9FN0Q5MUU3Qjg0 MURCMjc0RTc3RTgyMzA4NDMxMkY4Qjc4QTVDOTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJGOEI3OEE1 Qzk1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3MDgzYWItMjcwYS00YjBhLThl NTUtYTQ1ZTFjZjFhZmQ1LzAvRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJG OEI3OEE1Qzk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFpnXESUYqsX/zmRAxaYiOrPOqvGzrLKFOP VhIbjRtKeLWe26Hm5U27L4mYG9JsFoNPJmOJ07n/zPqiQPhavvFxEDFPECTXVcpo qcs6O6OxYS29qwxfMR7/99AS9BwgYNTT/xnbnxiSWJb/fQhriJ2vRU8p23v70Ghm +E32PJ8w2B2bC7zvDrKuu/lmZOY/mUY1886NnKvFF6ie1vJ6fHmWVzbC8HVZfdP5 jyQcgOCltQapdz7kCO5D0t3gjWikoYLvdwp102B8hUpQzaH8d2kVKJp34T6UN+RQ dpIW+P4gzkdM9MeBc6pSNo/1I/qsgVITObuJ5U2Ptsx1lA3Jadc= -----END CERTIFICATE-----Generated at Tue Jun 17 02:55:36 2025 by rpki-client