$ rpki-client -vvf repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft File: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft (raw, json) Hash identifier: uYAwtHBobnRnHiYPPQmykHqQpOdJWSyV8RhRKc2OqwI= Subject key identifier: 94:4A:5E:1A:8A:6E:05:66:06:BD:12:73:67:FC:B1:D0:8C:70:7C:57 Authority key identifier: E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F Certificate issuer: /CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Certificate serial: 0AF5AAE88157CF89504AE90E49605F2FB9F1EAD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft Manifest number: C1 Signing time: Sat 14 Jun 2025 17:41:49 +0000 Manifest this update: Sat 14 Jun 2025 17:36:49 +0000 Manifest next update: Wed 18 Jun 2025 02:07:49 +0000 Files and hashes: 1: 3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa (hash: PEcDYL2YEDwvOwIh2isXFSsdo3mWol6RplkSJ7kPOGI=) 2: 323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa (hash: k742tyOIX18+4IlFbV4FgY2xaEXxztUec+tXVFs15vs=) 3: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl (hash: ao6CwjY0ZzsRaIUZm1D8Bb4m/vfss7m/+7X49j4b5ys=) 4: 3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (hash: 0+ulOJPEXxfRU9rDzPOyAhCIeStaBB8o7bfVtpS93+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 02:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:f5:aa:e8:81:57:cf:89:50:4a:e9:0e:49:60:5f:2f:b9:f1:ea:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Validity Not Before: Jun 14 17:36:49 2025 GMT Not After : Jun 18 02:07:49 2025 GMT Subject: CN=944A5E1A8A6E056606BD127367FCB1D08C707C57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a5:aa:48:6d:7f:44:18:fe:79:f6:b2:7d:2c: d9:be:e9:38:0a:4e:b2:3c:ca:be:06:90:d9:73:f9: 83:72:25:c3:4c:e6:aa:80:58:c6:f2:ef:95:85:d3: 6d:9d:74:7b:3e:e1:bd:07:0a:0c:0d:e0:9b:9d:e0: 69:04:26:c7:83:58:0a:7d:f0:28:8c:92:ba:2e:94: 43:fc:50:3e:f0:db:60:97:38:27:41:e7:5a:30:30: bf:e8:ce:0e:62:84:02:01:d6:42:d3:3e:9c:75:54: 49:05:73:61:42:9c:c3:7e:88:79:0e:7f:9c:2d:e7: 03:0f:6f:a0:c0:52:8f:4e:4d:bc:23:a8:54:7e:2a: 33:69:b2:b7:6c:07:96:6d:e8:c1:d5:20:58:7f:d3: 42:2f:75:0e:b1:d1:02:6e:bc:f4:90:94:10:19:93: dc:c1:44:7f:3a:bb:17:fe:3c:d8:ea:1b:85:93:25: 0c:8d:bd:29:62:05:37:9d:a7:ec:86:13:e3:57:e9: 35:f1:c2:17:7c:8b:49:c9:72:f3:11:95:dd:4f:45: 8c:ab:e4:f2:b4:3b:57:d1:53:53:ed:e3:20:2f:3e: 69:5b:99:b2:d0:ea:ec:9c:87:d4:b4:c3:82:23:12: dc:b8:7c:c8:2a:97:12:f7:9f:c8:d4:fd:62:cd:a7: 0d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4A:5E:1A:8A:6E:05:66:06:BD:12:73:67:FC:B1:D0:8C:70:7C:57 X509v3 Authority Key Identifier: keyid:E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:1e:57:9a:77:16:49:44:26:ec:56:28:ab:7e:fe:03:61:ff: ff:d7:2b:7f:50:c0:9b:93:29:c0:0b:de:bd:56:c7:70:e6:1d: fa:99:c6:48:95:4a:14:93:b1:3f:d0:68:74:87:04:e3:f6:5e: a3:07:f5:c9:fd:0c:c8:bc:0e:7b:5b:d2:80:43:b7:26:81:fa: 08:25:f8:dd:71:df:b6:6e:44:df:c2:c5:17:bf:29:96:a0:a2: 89:44:18:97:54:c3:e2:7e:09:a3:53:6b:72:d7:86:0a:19:2c: 4e:55:1f:89:fe:be:e6:dd:49:97:51:98:74:1e:b7:9a:12:16: d9:96:ad:ea:7b:13:91:c7:e7:36:bc:35:2b:ce:55:d2:64:02: 73:d0:65:24:7d:54:74:94:ca:27:90:2c:2d:3d:43:b0:14:8d: 1e:df:b5:9d:5c:93:39:12:56:45:c5:d6:9f:d7:ee:2c:57:97: 97:d3:35:4b:9b:08:22:2b:b3:86:22:82:27:b7:2b:ba:d4:78: d6:2e:82:ce:36:c5:ee:de:75:bc:5b:23:84:ae:3d:41:ae:79: 38:3a:7f:45:fb:31:ce:3c:dd:49:44:88:51:65:99:60:a7:d5: 01:7b:1c:c5:60:8a:00:cd:06:1c:73:2c:8b:e0:09:d4:24:97: c7:4f:7c:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCvWq6IFXz4lQSukOSWBfL7nx6tUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0Iy REJCRUQwRjAeFw0yNTA2MTQxNzM2NDlaFw0yNTA2MTgwMjA3NDlaMDMxMTAvBgNV BAMTKDk0NEE1RTFBOEE2RTA1NjYwNkJEMTI3MzY3RkNCMUQwOEM3MDdDNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnpapIbX9EGP559rJ9LNm+6TgK TrI8yr4GkNlz+YNyJcNM5qqAWMby75WF022ddHs+4b0HCgwN4Jud4GkEJseDWAp9 8CiMkroulEP8UD7w22CXOCdB51owML/ozg5ihAIB1kLTPpx1VEkFc2FCnMN+iHkO f5wt5wMPb6DAUo9OTbwjqFR+KjNpsrdsB5Zt6MHVIFh/00IvdQ6x0QJuvPSQlBAZ k9zBRH86uxf+PNjqG4WTJQyNvSliBTedp+yGE+NX6TXxwhd8i0nJcvMRld1PRYyr 5PK0O1fRU1Pt4yAvPmlbmbLQ6uych9S0w4IjEty4fMgqlxL3n8jU/WLNpw2RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlEpeGopuBWYGvRJzZ/yx0IxwfFcwHwYDVR0j BBgwFoAU5M7BHyRL8Nq+wTb4Of1Tey277Q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmYzZjVkOS1jZmI4LTQxMjMtYTJiMS1iMGI1Mjk5ZjljNmUvMC9FNENFQzExRjI0 NEJGMERBQkVDMTM2RjgzOUZENTM3QjJEQkJFRDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0IyREJC RUQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJmM2Y1ZDktY2ZiOC00MTIzLWEy YjEtYjBiNTI5OWY5YzZlLzAvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUz N0IyREJCRUQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYeV5p3FklEJuxWKKt+/gNh///XK39QwJuT KcAL3r1Wx3DmHfqZxkiVShSTsT/QaHSHBOP2XqMH9cn9DMi8Dntb0oBDtyaB+ggl +N1x37ZuRN/CxRe/KZagoolEGJdUw+J+CaNTa3LXhgoZLE5VH4n+vubdSZdRmHQe t5oSFtmWrep7E5HH5za8NSvOVdJkAnPQZSR9VHSUyieQLC09Q7AUjR7ftZ1ckzkS VkXF1p/X7ixXl5fTNUubCCIrs4Yigie3K7rUeNYugs42xe7edbxbI4SuPUGueTg6 f0X7Mc483UlEiFFlmWCn1QF7HMVgigDNBhxzLIvgCdQkl8dPfAk= -----END CERTIFICATE-----Generated at Mon Jun 16 04:23:24 2025 by rpki-client