$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft File: E3FB5E3343EC63D705FF51B645113F74C7965236.mft (raw, json) Hash identifier: AhdXywf/RvJG0bdRdDlXGw+U5+ezms+LHunTLs+TEuE= Subject key identifier: A3:15:1A:98:5B:02:B8:23:7C:92:CA:36:5E:F2:AB:31:A5:06:1A:B5 Authority key identifier: E3:FB:5E:33:43:EC:63:D7:05:FF:51:B6:45:11:3F:74:C7:96:52:36 Certificate issuer: /CN=E3FB5E3343EC63D705FF51B645113F74C7965236 Certificate serial: 78A4567439FBCF37E7FF310DE39EF116F63F750E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft Manifest number: A5 Signing time: Tue 05 Aug 2025 03:01:25 +0000 Manifest this update: Tue 05 Aug 2025 02:56:25 +0000 Manifest next update: Fri 08 Aug 2025 03:15:25 +0000 Files and hashes: 1: 3136302e32352e3232322e302f32332d3233203d3e20313533303837.roa (hash: KzwY0iiHcJ5O0UVPUHPKtH6yEpVlgjbtPe1xq08+n3c=) 2: 3136302e32352e3232332e302f32342d3234203d3e20313533303837.roa (hash: 4O9lmpHneuudT9xjvw5LwULxiETAfGvFoNCP2XYgoOQ=) 3: E3FB5E3343EC63D705FF51B645113F74C7965236.crl (hash: ov6FB3c90aETQRbinneqlz2mTy64WSdizkfhu7XibtM=) 4: 3136302e32352e3232322e302f32342d3234203d3e20313533303837.roa (hash: pcP51KVAYXagtYkUaOdwTyhCZXZM5gMNbSSkIN9xwSo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 03:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:a4:56:74:39:fb:cf:37:e7:ff:31:0d:e3:9e:f1:16:f6:3f:75:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3FB5E3343EC63D705FF51B645113F74C7965236 Validity Not Before: Aug 5 02:56:25 2025 GMT Not After : Aug 8 03:15:25 2025 GMT Subject: CN=A3151A985B02B8237C92CA365EF2AB31A5061AB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ef:83:55:75:da:c7:68:87:22:ae:3b:69:eb: 85:7b:2d:9c:d1:49:11:14:25:8f:66:1c:d3:4c:94: 96:2e:cb:e8:01:0c:b8:80:f5:a1:00:06:e4:ec:31: 2a:b7:10:53:9c:9a:15:42:5c:d5:cb:e4:9a:46:c4: 3c:3b:96:5c:20:9b:91:b7:85:68:9c:8a:b6:f7:01: d5:20:2c:45:d3:18:ba:34:6a:b8:b6:c0:14:ba:27: 80:ee:a1:78:0d:fd:31:dd:41:a4:ec:30:4b:9a:27: 02:db:2e:94:ae:ad:14:f1:10:64:63:68:1b:69:c0: 89:bf:0c:fa:a6:a2:ec:93:80:59:72:e5:91:aa:69: 37:61:a4:9e:36:37:70:c0:0c:b8:8e:f9:66:67:ea: bc:0f:a2:68:dd:29:6b:c1:20:f9:c3:7b:eb:4d:29: 2b:5f:36:85:b3:2c:a6:ab:77:64:51:a5:9f:20:ef: 5c:10:0c:21:6b:0e:2f:1b:af:35:c9:75:50:ef:54: c0:d1:77:99:8e:ff:20:cc:a7:b4:e3:93:06:cb:44: 26:38:58:ed:8e:a2:84:e1:0d:2e:6e:6a:79:5d:a0: 4f:de:69:59:6b:12:07:2f:9c:54:a5:e2:60:8b:76: 1c:71:d6:9b:ed:d6:06:ae:f9:88:9a:67:c6:4f:21: d5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:15:1A:98:5B:02:B8:23:7C:92:CA:36:5E:F2:AB:31:A5:06:1A:B5 X509v3 Authority Key Identifier: keyid:E3:FB:5E:33:43:EC:63:D7:05:FF:51:B6:45:11:3F:74:C7:96:52:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E3FB5E3343EC63D705FF51B645113F74C7965236.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/E3FB5E3343EC63D705FF51B645113F74C7965236.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a0:39:02:f3:53:c5:6b:67:b7:ab:cc:30:53:31:a0:90:ed: 47:b5:c2:bb:9b:ab:ab:ea:81:42:3a:94:79:59:fb:f6:a1:d0: 90:f9:96:1f:b8:ad:76:93:6b:f7:45:c0:73:76:5c:f5:67:ca: bd:28:db:17:9d:57:fa:57:4d:96:37:2f:62:b7:b0:a7:c4:4a: c7:e2:d9:64:4a:09:e2:07:84:9b:d7:e4:5b:97:2e:22:c8:ce: 91:ae:e4:78:9f:5e:f6:f9:58:f3:84:5c:8c:f4:65:94:2b:1b: 43:78:63:15:ef:23:d8:a2:51:c6:76:e7:e8:ef:df:ed:72:1c: b2:e5:82:7d:8d:a7:8d:28:74:80:8d:4a:92:98:1c:06:71:b0: 15:bc:e3:44:8b:77:0a:01:d2:b4:d5:6d:cd:69:1d:ad:8e:0b: ae:55:8b:6e:ef:f7:a9:48:80:f4:cd:fb:a9:5a:fe:be:22:cd: ee:41:1d:18:ea:e4:03:8f:89:77:4d:18:d6:5d:ee:3e:50:3f: ea:cc:98:39:3b:7a:75:94:db:b1:49:cc:d0:83:53:14:2b:21: 6b:89:01:f1:46:71:c6:d7:01:56:4c:f9:98:c9:49:da:79:f8: a5:e7:43:5b:08:ec:3c:d3:e5:1a:df:b9:41:35:b9:e1:86:5a: e7:bd:b1:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeKRWdDn7zzfn/zEN457xFvY/dQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNGNzRD Nzk2NTIzNjAeFw0yNTA4MDUwMjU2MjVaFw0yNTA4MDgwMzE1MjVaMDMxMTAvBgNV BAMTKEEzMTUxQTk4NUIwMkI4MjM3QzkyQ0EzNjVFRjJBQjMxQTUwNjFBQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH74NVddrHaIcirjtp64V7LZzR SREUJY9mHNNMlJYuy+gBDLiA9aEABuTsMSq3EFOcmhVCXNXL5JpGxDw7llwgm5G3 hWicirb3AdUgLEXTGLo0ari2wBS6J4DuoXgN/THdQaTsMEuaJwLbLpSurRTxEGRj aBtpwIm/DPqmouyTgFly5ZGqaTdhpJ42N3DADLiO+WZn6rwPomjdKWvBIPnDe+tN KStfNoWzLKard2RRpZ8g71wQDCFrDi8brzXJdVDvVMDRd5mO/yDMp7TjkwbLRCY4 WO2OooThDS5uanldoE/eaVlrEgcvnFSl4mCLdhxx1pvt1gau+YiaZ8ZPIdVpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoxUamFsCuCN8kso2XvKrMaUGGrUwHwYDVR0j BBgwFoAU4/teM0PsY9cF/1G2RRE/dMeWUjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMC9FM0ZCNUUzMzQz RUM2M0Q3MDVGRjUxQjY0NTExM0Y3NEM3OTY1MjM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNGNzRDNzk2 NTIzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRlZDU4MTEtYmU1MC00Y2FhLTlm OTYtNjNkMzcyMDMxMWRlLzAvRTNGQjVFMzM0M0VDNjNENzA1RkY1MUI2NDUxMTNG NzRDNzk2NTIzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOgOQLzU8VrZ7erzDBTMaCQ7Ue1wrubq6vq gUI6lHlZ+/ah0JD5lh+4rXaTa/dFwHN2XPVnyr0o2xedV/pXTZY3L2K3sKfESsfi 2WRKCeIHhJvX5FuXLiLIzpGu5HifXvb5WPOEXIz0ZZQrG0N4YxXvI9iiUcZ25+jv 3+1yHLLlgn2Np40odICNSpKYHAZxsBW840SLdwoB0rTVbc1pHa2OC65Vi27v96lI gPTN+6la/r4ize5BHRjq5AOPiXdNGNZd7j5QP+rMmDk7enWU27FJzNCDUxQrIWuJ AfFGccbXAVZM+ZjJSdp5+KXnQ1sI7DzT5RrfuUE1ueGGWue9sWg= -----END CERTIFICATE-----Generated at Wed Aug 6 12:41:13 2025 by rpki-client