$ rpki-client -vvf repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft File: E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft (raw, json) Hash identifier: EmHCPjabaDdcCNBc69BA6CoYlzQl/Nim9INXW0mCp0E= Subject key identifier: 96:2C:DB:A4:6A:28:2D:F9:F2:C6:E6:50:7C:36:9C:B0:16:52:79:6E Authority key identifier: E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1 Certificate issuer: /CN=E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1 Certificate serial: 52611653EBFE677CD8951FF4E37CB3BAC5BE852A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft Manifest number: 0279 Signing time: Wed 06 Aug 2025 07:22:12 +0000 Manifest this update: Wed 06 Aug 2025 07:17:12 +0000 Manifest next update: Sat 09 Aug 2025 11:09:12 +0000 Files and hashes: 1: 3130332e3137382e3137302e302f32342d3234203d3e20313339393532.roa (hash: s7ZRS2Zcu3hJueMyatfY5+9nMoD7nFYIofv5YO21v9A=) 2: E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl (hash: 5Gt8CSDB+F1KooCIcFFkbca/5sdswip11YsKE/XybKI=) 3: 3130332e3137382e3137312e302f32342d3234203d3e20313339393532.roa (hash: qWtnu+D2OJjgUIAZhBWqF4N8kzQJfxmKrFVqp2H/d+E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 11:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:61:16:53:eb:fe:67:7c:d8:95:1f:f4:e3:7c:b3:ba:c5:be:85:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1 Validity Not Before: Aug 6 07:17:12 2025 GMT Not After : Aug 9 11:09:12 2025 GMT Subject: CN=962CDBA46A282DF9F2C6E6507C369CB01652796E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2f:f4:66:a6:fc:1a:fe:8c:b2:e7:e3:5f:e1: 8d:14:50:67:0d:fc:18:ab:44:e6:2c:bc:69:4f:8f: f7:48:e2:b1:48:f1:4b:2c:37:c6:ad:02:94:09:ae: d2:7f:f8:32:b9:96:39:29:bd:31:59:5f:bf:86:af: c7:c9:7e:19:c3:2f:7f:f8:5e:66:a5:6b:92:d4:bd: 8f:82:8e:51:d4:a6:62:81:cf:9d:f4:e3:04:07:ce: 24:4f:0e:ee:20:34:36:2c:12:06:00:dd:e5:d6:0b: a1:98:01:52:0d:f5:11:ac:9b:97:c6:20:cf:bf:6d: 65:93:1d:fb:e8:88:d4:d0:c2:6a:2c:76:ff:55:19: b3:8a:be:d4:27:74:9c:c6:0c:52:2f:84:38:48:2b: c3:26:20:ea:f5:0d:6e:83:21:17:86:5c:56:52:69: 55:5c:32:2d:55:3f:54:ed:d7:a1:87:c7:42:c7:98: 58:50:bf:ee:aa:bf:21:10:10:78:a7:71:26:ee:1c: d8:1f:59:93:29:b0:3b:76:62:cd:c5:8f:e0:70:8a: 15:06:33:5a:43:ab:27:63:3a:fb:d9:4b:a7:e6:c5: 2f:3c:7d:ea:35:6a:26:ad:c1:2d:50:40:cf:5e:c1: dd:a5:26:a2:5b:c4:4f:08:a7:e0:9f:66:ba:f7:0d: b4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2C:DB:A4:6A:28:2D:F9:F2:C6:E6:50:7C:36:9C:B0:16:52:79:6E X509v3 Authority Key Identifier: keyid:E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:58:f7:c4:db:2f:f9:9e:4a:e4:4e:bd:7d:19:14:81:ef:75: 03:f9:e3:ea:49:bc:8d:bf:c8:55:e3:a9:ef:ec:50:b9:8b:56: f7:ab:f9:84:07:79:82:bf:bd:fd:53:9f:69:f2:8f:8f:ff:39: 5c:8b:75:85:c0:9b:ee:1e:e0:17:c8:e2:c4:1f:98:1f:6e:a1: f3:bc:50:cd:81:a4:03:b2:63:f4:73:a8:6b:cc:f7:1b:41:c8: 81:d2:ba:80:6e:f2:56:02:4d:5b:8f:88:02:cc:bd:28:68:da: d2:dd:b5:3a:90:f2:f1:69:4a:c2:18:f0:bd:a8:39:f2:c9:ba: f4:3f:3a:3c:20:01:a9:da:b9:2c:0b:89:9a:f3:ea:01:59:31: 2a:2a:8c:3e:1f:5c:c1:51:d8:cc:f8:83:d9:7f:c0:47:40:be: 25:e1:fa:51:96:77:c0:c5:49:59:3c:b0:ce:89:aa:65:78:8f: f7:f1:b0:26:30:59:fc:ac:63:03:a1:51:4d:1b:b2:c8:c7:03: 89:b3:04:a2:31:9d:6d:d9:1a:98:33:c8:e5:14:ff:0c:55:df: a5:2b:a4:09:ed:5b:21:02:d1:64:e4:82:ce:6a:f2:3d:a9:0e: 06:fc:b3:bb:38:53:fd:ff:c7:6a:0a:20:82:17:8b:6e:c3:3c: 0f:36:8c:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUmEWU+v+Z3zYlR/043yzusW+hSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA5RDBFMUQyNjNEQkQ5MTREMEM0RTBDQUE3RTVFNTBE MDIyNDZGMTAeFw0yNTA4MDYwNzE3MTJaFw0yNTA4MDkxMTA5MTJaMDMxMTAvBgNV BAMTKDk2MkNEQkE0NkEyODJERjlGMkM2RTY1MDdDMzY5Q0IwMTY1Mjc5NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLL/Rmpvwa/oyy5+Nf4Y0UUGcN /BirROYsvGlPj/dI4rFI8UssN8atApQJrtJ/+DK5ljkpvTFZX7+Gr8fJfhnDL3/4 Xmala5LUvY+CjlHUpmKBz5304wQHziRPDu4gNDYsEgYA3eXWC6GYAVIN9RGsm5fG IM+/bWWTHfvoiNTQwmosdv9VGbOKvtQndJzGDFIvhDhIK8MmIOr1DW6DIReGXFZS aVVcMi1VP1Tt16GHx0LHmFhQv+6qvyEQEHincSbuHNgfWZMpsDt2Ys3Fj+BwihUG M1pDqydjOvvZS6fmxS88feo1aiatwS1QQM9ewd2lJqJbxE8Ip+CfZrr3DbTBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlizbpGooLfnyxuZQfDacsBZSeW4wHwYDVR0j BBgwFoAU4J0OHSY9vZFNDE4Mqn5eUNAiRvEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzAxZmQ0NC04Y2Q2LTRkOWYtOWJkMS04MzY3YWQ5Y2Q5ZWEvMC9FMDlEMEUxRDI2 M0RCRDkxNEQwQzRFMENBQTdFNUU1MEQwMjI0NkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA5RDBFMUQyNjNEQkQ5MTREMEM0RTBDQUE3RTVFNTBEMDIy NDZGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMwMWZkNDQtOGNkNi00ZDlmLTli ZDEtODM2N2FkOWNkOWVhLzAvRTA5RDBFMUQyNjNEQkQ5MTREMEM0RTBDQUE3RTVF NTBEMDIyNDZGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5Y98TbL/meSuROvX0ZFIHvdQP54+pJvI2/ yFXjqe/sULmLVver+YQHeYK/vf1Tn2nyj4//OVyLdYXAm+4e4BfI4sQfmB9uofO8 UM2BpAOyY/RzqGvM9xtByIHSuoBu8lYCTVuPiALMvSho2tLdtTqQ8vFpSsIY8L2o OfLJuvQ/OjwgAanauSwLiZrz6gFZMSoqjD4fXMFR2Mz4g9l/wEdAviXh+lGWd8DF SVk8sM6JqmV4j/fxsCYwWfysYwOhUU0bssjHA4mzBKIxnW3ZGpgzyOUU/wxV36Ur pAntWyEC0WTkgs5q8j2pDgb8s7s4U/3/x2oKIIIXi27DPA82jCY= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:33 2025 by rpki-client