$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft File: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft (raw, json) Hash identifier: yrpFd6bjKDqDzFq5Q11esVBUjQtSkdl04sAGiIByS+M= Subject key identifier: 6F:73:C2:9A:D2:AA:FD:8E:AA:8B:D6:83:F1:ED:BE:BA:E4:73:65:94 Authority key identifier: E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F Certificate issuer: /CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F Certificate serial: 48A9BFDB0D5FD8085CA7BC795FA6F700C0FB2196 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft Manifest number: 0195 Signing time: Tue 05 Aug 2025 08:40:51 +0000 Manifest this update: Tue 05 Aug 2025 08:35:51 +0000 Manifest next update: Fri 08 Aug 2025 13:11:51 +0000 Files and hashes: 1: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl (hash: ktpZIZWtgNkp50th16uYSPry4RURIfDGAoOA140hlvo=) 2: 3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa (hash: L7eyl2XZ6A1jGQ7W7TcXIFdLoB9CiiJsysljc4+PR9I=) 3: 3130332e3137322e3234322e302f32342d3234203d3e20313437303836.roa (hash: BUZVEiAJYJLqmtOMsKiwoKkvjDG5Aqhzz5fYoIUA7O8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 13:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:a9:bf:db:0d:5f:d8:08:5c:a7:bc:79:5f:a6:f7:00:c0:fb:21:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F Validity Not Before: Aug 5 08:35:51 2025 GMT Not After : Aug 8 13:11:51 2025 GMT Subject: CN=6F73C29AD2AAFD8EAA8BD683F1EDBEBAE4736594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:89:a7:f6:58:45:da:6d:ce:f3:b2:4b:ac:31: 19:d2:2a:af:02:a7:9d:65:26:34:f0:3e:0f:3d:6b: 92:3d:ee:fc:62:b0:8f:55:1c:98:f0:4d:19:7d:56: 22:8a:20:81:89:8f:ba:ca:25:52:5d:f8:a4:fd:83: 20:86:b4:51:ae:ca:3c:a6:18:8b:b1:68:f7:ac:94: 68:d4:a0:29:73:61:08:1e:00:df:6c:59:da:1e:34: 24:bc:f6:d7:32:13:67:70:18:dd:e1:f0:ee:3d:72: 02:66:94:9f:1b:b6:0b:df:3b:21:a0:3b:4d:d7:9f: 9e:12:e5:23:f2:e1:83:b8:cc:da:ad:33:60:c3:33: c9:05:7f:a3:d2:d8:df:f4:56:90:1d:ae:ab:b0:e7: 2d:0f:ba:08:01:96:cd:fd:72:fe:b1:de:6c:45:90: a2:60:7c:50:ae:1d:45:85:fc:9d:72:88:7b:64:6a: 11:ef:c2:86:0a:ae:1c:64:d3:22:4a:1b:5e:9d:65: fd:fa:76:ee:d0:3c:73:4a:42:61:68:43:16:82:da: 92:17:84:5b:aa:94:f8:ac:c6:96:a8:cd:8e:1b:07: cd:d6:1b:7d:47:13:11:67:cd:a3:f3:1d:b3:60:fd: b3:2a:a8:2c:0e:3f:09:b4:4b:ce:0b:40:17:22:2b: 61:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:73:C2:9A:D2:AA:FD:8E:AA:8B:D6:83:F1:ED:BE:BA:E4:73:65:94 X509v3 Authority Key Identifier: keyid:E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:fc:00:e7:5f:db:f0:a3:b9:b1:03:b3:ca:8f:6e:70:6c:24: 89:34:65:12:ed:a4:92:71:fd:1f:0b:a4:88:07:43:34:9d:c1: 4c:28:44:88:a0:07:33:cb:a4:d5:ac:ea:88:66:82:21:1f:8c: ff:e5:3a:3a:b4:6f:63:2a:02:ef:59:e0:67:c3:98:fa:26:77: 38:21:d6:40:05:b6:98:3c:7b:8c:dd:03:b5:c4:bd:8b:34:b7: 35:e8:55:da:07:15:0d:59:94:e9:38:62:35:00:9e:6e:c4:7b: ba:14:9e:d4:e2:d0:04:a6:ce:6d:2b:8a:22:eb:dd:ba:13:43: 73:a1:59:25:f1:5c:f3:99:f8:82:21:92:4b:89:ab:3b:d0:22: 67:0f:f7:23:e3:f7:4c:ec:b9:c4:40:93:c9:37:1a:93:ca:33: a1:15:35:b7:8d:fa:ae:da:d9:4c:7b:b9:69:1a:a6:df:f5:71: b4:22:07:86:aa:9f:e2:df:f6:87:b5:52:1e:6b:c3:24:de:7f: a0:3b:a1:cb:d7:cd:69:6a:57:8a:16:f5:07:5d:b8:20:e7:25: b4:70:a5:cb:4c:81:03:bf:14:a1:9d:9e:01:bb:a6:0d:12:1f: 14:da:d1:52:50:da:53:59:4d:a9:31:60:e5:63:aa:f2:a6:22: 57:4c:dc:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSKm/2w1f2Ahcp7x5X6b3AMD7IZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJBMDNG QUY1NzU2RjAeFw0yNTA4MDUwODM1NTFaFw0yNTA4MDgxMzExNTFaMDMxMTAvBgNV BAMTKDZGNzNDMjlBRDJBQUZEOEVBQThCRDY4M0YxRURCRUJBRTQ3MzY1OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQiaf2WEXabc7zskusMRnSKq8C p51lJjTwPg89a5I97vxisI9VHJjwTRl9ViKKIIGJj7rKJVJd+KT9gyCGtFGuyjym GIuxaPeslGjUoClzYQgeAN9sWdoeNCS89tcyE2dwGN3h8O49cgJmlJ8btgvfOyGg O03Xn54S5SPy4YO4zNqtM2DDM8kFf6PS2N/0VpAdrquw5y0PuggBls39cv6x3mxF kKJgfFCuHUWF/J1yiHtkahHvwoYKrhxk0yJKG16dZf36du7QPHNKQmFoQxaC2pIX hFuqlPisxpaozY4bB83WG31HExFnzaPzHbNg/bMqqCwOPwm0S84LQBciK2G3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb3PCmtKq/Y6qi9aD8e2+uuRzZZQwHwYDVR0j BBgwFoAU4q7sffiXqdbk8NHRxDEqA/r1dW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjZkOGY5Ny1jODA2LTQ3OTktODVlMC04Y2NmMThkYmJiMzEvMC9FMkFFRUM3REY4 OTdBOUQ2RTRGMEQxRDFDNDMxMkEwM0ZBRjU3NTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJBMDNGQUY1 NzU2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2ZDhmOTctYzgwNi00Nzk5LTg1 ZTAtOGNjZjE4ZGJiYjMxLzAvRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJB MDNGQUY1NzU2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAj8AOdf2/CjubEDs8qPbnBsJIk0ZRLtpJJx /R8LpIgHQzSdwUwoRIigBzPLpNWs6ohmgiEfjP/lOjq0b2MqAu9Z4GfDmPomdzgh 1kAFtpg8e4zdA7XEvYs0tzXoVdoHFQ1ZlOk4YjUAnm7Ee7oUntTi0ASmzm0riiLr 3boTQ3OhWSXxXPOZ+IIhkkuJqzvQImcP9yPj90zsucRAk8k3GpPKM6EVNbeN+q7a 2Ux7uWkapt/1cbQiB4aqn+Lf9oe1Uh5rwyTef6A7ocvXzWlqV4oW9QdduCDnJbRw pctMgQO/FKGdngG7pg0SHxTa0VJQ2lNZTakxYOVjqvKmIldM3DU= -----END CERTIFICATE-----Generated at Thu Aug 7 03:20:31 2025 by rpki-client