$ rpki-client -vvf repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft File: EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft (raw, json) Hash identifier: qtoF3TqdWnsAZVjFHEnwmPwtJr8GXEfCAo2EKYCcYeM= Subject key identifier: D7:68:39:D2:8E:69:81:39:CC:F6:A4:E5:C0:6B:B4:ED:1E:E9:42:47 Authority key identifier: EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5 Certificate issuer: /CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5 Certificate serial: 2320270D0971B7037B884AD46A704D67C06A79D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft Manifest number: 04F9 Signing time: Wed 06 Aug 2025 02:11:40 +0000 Manifest this update: Wed 06 Aug 2025 02:06:40 +0000 Manifest next update: Sat 09 Aug 2025 12:28:40 +0000 Files and hashes: 1: EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl (hash: lhcwHrrO4SoLffITbd8vTdPd9U7zr8acn8HiMB/vyfI=) 2: 3130332e362e3231342e302f32342d3234203d3e20313331313132.roa (hash: F0a3JFzr6TEGFg4XROWEIEBL9cNyd2bfiVU6lzFtCLY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 12:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:20:27:0d:09:71:b7:03:7b:88:4a:d4:6a:70:4d:67:c0:6a:79:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5 Validity Not Before: Aug 6 02:06:40 2025 GMT Not After : Aug 9 12:28:40 2025 GMT Subject: CN=D76839D28E698139CCF6A4E5C06BB4ED1EE94247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:61:21:c8:b9:85:67:9a:de:f6:fd:f2:61:5e: c4:a9:60:2d:9c:d2:e3:dd:fe:e5:d6:f8:4e:69:db: f0:c1:0a:dc:31:89:1b:47:4f:5d:b8:ad:b9:45:dc: 56:40:b6:24:50:f7:bd:fd:bc:70:6f:47:8b:ec:20: d2:2b:7c:59:8a:56:a8:ee:85:31:20:0f:7a:c1:c9: c7:ad:ad:ee:3c:dc:12:35:ee:c5:30:ce:8b:03:e2: c3:60:d6:b2:6c:84:df:5c:4e:06:4f:6b:40:09:0d: aa:60:e9:cd:87:56:ab:a3:a3:62:3f:70:4f:15:d4: e1:b5:9d:9e:51:a8:34:1d:9a:65:26:21:6d:ce:2c: 3b:19:45:c9:e4:b3:b6:a2:1d:f7:57:34:fe:8d:52: 5f:4f:04:c3:cb:71:cd:14:5d:1d:6f:28:3e:77:a1: af:57:bf:3f:9d:c7:1c:b2:73:4b:66:73:ae:e8:54: 6a:0d:21:fd:4b:cc:75:69:f9:58:42:50:fb:94:47: 2d:d9:d8:63:f0:c9:20:41:ed:df:5b:0a:dc:04:3f: 9a:8a:4f:7d:99:49:fc:4c:23:56:2e:d3:54:15:da: 5a:15:b0:48:7c:0c:64:d0:03:ce:a7:75:c5:4b:9d: 99:f5:c8:07:21:a9:bb:aa:e8:cb:7f:a7:40:d9:fd: 90:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:68:39:D2:8E:69:81:39:CC:F6:A4:E5:C0:6B:B4:ED:1E:E9:42:47 X509v3 Authority Key Identifier: keyid:EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:7e:35:ae:43:d1:8d:de:6f:c9:f2:66:92:ff:cb:b6:ac:4b: 3d:53:b0:02:13:f0:31:ef:c8:dc:7f:6a:33:09:ca:1a:d7:28: 1c:1f:1e:94:43:cd:15:f5:17:ff:99:b1:bb:71:3d:d5:13:25: 4c:39:fa:26:3c:5e:cf:7c:58:51:71:75:13:7e:28:76:5f:9e: 7f:79:b5:36:ef:52:c9:5e:1e:a4:d1:8f:2e:9a:42:95:9e:6e: 1b:eb:e4:a1:ef:15:64:b5:aa:8d:88:25:86:b7:26:9a:ba:90: 66:18:7c:d5:b2:b7:b7:34:2c:28:2c:bd:01:e6:e4:b4:d6:0c: 78:61:67:59:5e:33:ca:10:60:26:f8:59:00:76:3b:5b:fa:d0: 02:83:ce:70:5a:33:47:50:9d:69:2a:73:33:cb:ff:27:14:76: f8:b2:a9:3c:21:51:8b:92:5d:18:98:9c:d0:ed:e7:6c:e3:4c: 08:f3:29:67:fd:53:4e:4e:02:60:52:7e:91:31:26:90:9f:2a: 2b:b3:33:41:2d:2f:2a:26:34:70:89:34:3e:fe:e4:a0:68:ca: cf:ed:fe:69:93:ec:bd:a4:85:89:4d:b7:99:f5:e0:f5:39:1b: d7:59:70:99:4d:da:83:16:4f:6b:5f:ef:a7:6e:5c:63:4f:3b: 4a:0c:5a:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIyAnDQlxtwN7iErUanBNZ8BqedkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdFREJB M0QxMTZENTAeFw0yNTA4MDYwMjA2NDBaFw0yNTA4MDkxMjI4NDBaMDMxMTAvBgNV BAMTKEQ3NjgzOUQyOEU2OTgxMzlDQ0Y2QTRFNUMwNkJCNEVEMUVFOTQyNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmYSHIuYVnmt72/fJhXsSpYC2c 0uPd/uXW+E5p2/DBCtwxiRtHT124rblF3FZAtiRQ9739vHBvR4vsINIrfFmKVqju hTEgD3rBycetre483BI17sUwzosD4sNg1rJshN9cTgZPa0AJDapg6c2HVqujo2I/ cE8V1OG1nZ5RqDQdmmUmIW3OLDsZRcnks7aiHfdXNP6NUl9PBMPLcc0UXR1vKD53 oa9Xvz+dxxyyc0tmc67oVGoNIf1LzHVp+VhCUPuURy3Z2GPwySBB7d9bCtwEP5qK T32ZSfxMI1Yu01QV2loVsEh8DGTQA86ndcVLnZn1yAchqbuq6Mt/p0DZ/ZALAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU12g50o5pgTnM9qTlwGu07R7pQkcwHwYDVR0j BBgwFoAU7GKpSXDlasn+i4KKVCt+26PRFtUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODdmOGY4Mi0zN2JiLTQ5ODMtOTNjYS01ZTA2NzBhYjAyZTMvMC9FQzYyQTk0OTcw RTU2QUM5RkU4QjgyOEE1NDJCN0VEQkEzRDExNkQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdFREJBM0Qx MTZENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg3ZjhmODItMzdiYi00OTgzLTkz Y2EtNWUwNjcwYWIwMmUzLzAvRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdF REJBM0QxMTZENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACd+Na5D0Y3eb8nyZpL/y7asSz1TsAIT8DHv yNx/ajMJyhrXKBwfHpRDzRX1F/+ZsbtxPdUTJUw5+iY8Xs98WFFxdRN+KHZfnn95 tTbvUsleHqTRjy6aQpWebhvr5KHvFWS1qo2IJYa3Jpq6kGYYfNWyt7c0LCgsvQHm 5LTWDHhhZ1leM8oQYCb4WQB2O1v60AKDznBaM0dQnWkqczPL/ycUdviyqTwhUYuS XRiYnNDt52zjTAjzKWf9U05OAmBSfpExJpCfKiuzM0EtLyomNHCJND7+5KBoys/t /mmT7L2khYlNt5n14PU5G9dZcJlN2oMWT2tf76duXGNPO0oMWl4= -----END CERTIFICATE-----Generated at Thu Aug 7 03:48:37 2025 by rpki-client