$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft File: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft (raw, json) Hash identifier: 1bSx1j7lQGrKLJ7B4GDqn0IQKw0VVMW1DLH+BfW28mA= Subject key identifier: 7A:22:6D:62:6E:69:98:8B:17:CC:92:D7:9F:32:F3:86:08:F5:13:6A Authority key identifier: E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F Certificate issuer: /CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F Certificate serial: 2D1423E2F38082A15F24FF6075377678E277FFC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft Manifest number: 017F Signing time: Mon 16 Jun 2025 12:40:49 +0000 Manifest this update: Mon 16 Jun 2025 12:35:49 +0000 Manifest next update: Thu 19 Jun 2025 15:52:49 +0000 Files and hashes: 1: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl (hash: ElCCNDOLYs2qYxRjQyZvn07ZRmVDeKKH+xiGJeNlKE4=) 2: 3130332e3137322e3234322e302f32342d3234203d3e20313437303836.roa (hash: BUZVEiAJYJLqmtOMsKiwoKkvjDG5Aqhzz5fYoIUA7O8=) 3: 3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa (hash: L7eyl2XZ6A1jGQ7W7TcXIFdLoB9CiiJsysljc4+PR9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 15:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:14:23:e2:f3:80:82:a1:5f:24:ff:60:75:37:76:78:e2:77:ff:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F Validity Not Before: Jun 16 12:35:49 2025 GMT Not After : Jun 19 15:52:49 2025 GMT Subject: CN=7A226D626E69988B17CC92D79F32F38608F5136A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:33:58:fc:df:ee:e8:08:a6:24:5a:4b:82:93: 3d:9a:8c:02:6e:86:33:3f:57:19:29:1d:ff:a7:93: 2f:3b:d2:d0:7d:11:9b:91:74:85:85:d9:84:95:8a: fb:ad:05:72:63:f5:46:92:75:17:03:76:bf:03:13: b9:16:2e:f2:d7:62:9a:b0:50:6c:45:d9:cd:96:85: 6f:ce:ce:80:28:af:a2:b7:5a:56:73:ff:9c:a3:54: 60:6a:07:1b:45:1c:49:5d:da:9d:b7:ee:db:64:09: c6:47:be:ca:ef:7a:a9:3f:66:31:1e:81:f6:4a:86: ec:9f:40:c8:01:6c:f6:ab:f1:77:06:e8:73:94:b7: db:a6:c4:44:26:48:a6:2d:62:c7:d4:3c:bf:9c:b2: 53:ff:99:8c:13:96:b0:45:d8:bf:01:81:66:ca:40: 2f:21:02:42:2d:2c:8e:5a:a4:51:c6:41:b0:9f:34: b4:c2:4a:3e:83:ca:f1:f0:16:5a:c7:d1:cf:6f:27: 03:ec:a7:d7:b9:2f:b4:02:82:b9:77:28:80:ea:f4: 89:59:3e:e3:97:da:5b:f5:fa:7b:fe:53:17:8a:b3: c0:22:f8:29:80:4c:4d:fd:5d:83:81:66:f7:fe:21: ef:71:d0:ff:35:ea:e2:b2:e0:a7:fc:f8:d7:ac:95: 40:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:22:6D:62:6E:69:98:8B:17:CC:92:D7:9F:32:F3:86:08:F5:13:6A X509v3 Authority Key Identifier: keyid:E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:96:a6:a4:4f:43:0e:e8:87:a1:29:c7:d0:d6:b3:eb:28:e0: 64:1c:62:54:79:48:f4:c5:55:ff:f7:0f:ea:ab:73:2f:a3:a7: 7c:39:cb:5f:10:00:25:6d:e6:97:ad:a8:47:7a:1b:c7:3e:99: 0a:43:a8:94:ca:aa:a6:f6:65:a0:e7:e7:db:b5:be:a4:0d:b0: f4:7d:7c:15:0e:31:62:cc:1b:07:68:23:c5:95:cb:26:4f:e1: 1a:8c:9a:22:f9:6d:80:ee:ec:cd:b8:41:20:8e:41:77:b3:79: 8d:45:05:40:73:d5:22:ca:87:4e:45:08:5a:09:92:51:f4:4e: b6:e8:b9:c0:b5:e3:38:06:75:54:9c:5c:04:e4:26:71:6c:43: 90:8c:bb:a8:cf:c5:6b:9d:1f:20:56:5b:d8:9d:60:a5:f8:0a: 72:d5:2b:3f:8d:50:34:ba:cb:a1:e5:4e:27:7e:4d:48:a9:52: 66:25:32:3b:b0:3d:9f:da:0e:bd:85:77:f4:70:3d:f0:39:c7: d7:23:7a:e7:bc:df:0b:9c:9a:a3:d0:34:b4:b8:d3:9c:ac:23: 05:fc:8d:2a:d7:c2:38:f2:d5:c4:e1:f9:cf:6e:fd:5b:08:36: e0:a4:63:5f:8f:0d:48:6a:c0:5d:6c:91:34:75:64:8c:28:3c: 63:e4:e9:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULRQj4vOAgqFfJP9gdTd2eOJ3/8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJBMDNG QUY1NzU2RjAeFw0yNTA2MTYxMjM1NDlaFw0yNTA2MTkxNTUyNDlaMDMxMTAvBgNV BAMTKDdBMjI2RDYyNkU2OTk4OEIxN0NDOTJENzlGMzJGMzg2MDhGNTEzNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpM1j83+7oCKYkWkuCkz2ajAJu hjM/VxkpHf+nky870tB9EZuRdIWF2YSVivutBXJj9UaSdRcDdr8DE7kWLvLXYpqw UGxF2c2WhW/OzoAor6K3WlZz/5yjVGBqBxtFHEld2p237ttkCcZHvsrveqk/ZjEe gfZKhuyfQMgBbPar8XcG6HOUt9umxEQmSKYtYsfUPL+cslP/mYwTlrBF2L8BgWbK QC8hAkItLI5apFHGQbCfNLTCSj6DyvHwFlrH0c9vJwPsp9e5L7QCgrl3KIDq9IlZ PuOX2lv1+nv+UxeKs8Ai+CmATE39XYOBZvf+Ie9x0P816uKy4Kf8+NeslUDHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeiJtYm5pmIsXzJLXnzLzhgj1E2owHwYDVR0j BBgwFoAU4q7sffiXqdbk8NHRxDEqA/r1dW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjZkOGY5Ny1jODA2LTQ3OTktODVlMC04Y2NmMThkYmJiMzEvMC9FMkFFRUM3REY4 OTdBOUQ2RTRGMEQxRDFDNDMxMkEwM0ZBRjU3NTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJBMDNGQUY1 NzU2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2ZDhmOTctYzgwNi00Nzk5LTg1 ZTAtOGNjZjE4ZGJiYjMxLzAvRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJB MDNGQUY1NzU2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACOWpqRPQw7oh6Epx9DWs+so4GQcYlR5SPTF Vf/3D+qrcy+jp3w5y18QACVt5petqEd6G8c+mQpDqJTKqqb2ZaDn59u1vqQNsPR9 fBUOMWLMGwdoI8WVyyZP4RqMmiL5bYDu7M24QSCOQXezeY1FBUBz1SLKh05FCFoJ klH0TrboucC14zgGdVScXATkJnFsQ5CMu6jPxWudHyBWW9idYKX4CnLVKz+NUDS6 y6HlTid+TUipUmYlMjuwPZ/aDr2Fd/RwPfA5x9cjeue83wucmqPQNLS405ysIwX8 jSrXwjjy1cTh+c9u/VsINuCkY1+PDUhqwF1skTR1ZIwoPGPk6eE= -----END CERTIFICATE-----Generated at Wed Jun 18 05:30:02 2025 by rpki-client