$ rpki-client -vvf repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft File: E420F134FA1A6BA70588424BD4E862EE6C50C188.mft (raw, json) Hash identifier: /PEa74od8tUSvvhoVR/v8dEyTqGR60RP+0TkmelZay8= Subject key identifier: ED:70:FB:FD:D5:B8:31:62:CA:D1:96:8A:EA:44:F6:55:7B:51:B5:75 Authority key identifier: E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88 Certificate issuer: /CN=E420F134FA1A6BA70588424BD4E862EE6C50C188 Certificate serial: 7F82575033E2DC99B85E6439E918EF5D6BFAA384 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft Manifest number: 04DE Signing time: Sun 15 Jun 2025 16:31:15 +0000 Manifest this update: Sun 15 Jun 2025 16:26:15 +0000 Manifest next update: Wed 18 Jun 2025 17:23:15 +0000 Files and hashes: 1: 3130332e3139342e3137322e302f32322d3234203d3e203633383835.roa (hash: nIcaXDvKx2+XVxNFuL8CckiCEV48hFgqOSdn9qzzkF4=) 2: E420F134FA1A6BA70588424BD4E862EE6C50C188.crl (hash: iiUy5/hrDIZEnLYKy1uuPnE/BasttNBdYX/xP0s6+D0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 17:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:82:57:50:33:e2:dc:99:b8:5e:64:39:e9:18:ef:5d:6b:fa:a3:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E420F134FA1A6BA70588424BD4E862EE6C50C188 Validity Not Before: Jun 15 16:26:15 2025 GMT Not After : Jun 18 17:23:15 2025 GMT Subject: CN=ED70FBFDD5B83162CAD1968AEA44F6557B51B575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7e:03:8a:07:84:45:51:98:c2:9e:4c:31:e2: 92:52:1d:89:c8:7a:bd:52:13:71:50:a3:b7:43:a6: d3:c9:6b:8a:cd:8a:9e:ca:c1:b6:8e:b3:d6:8c:53: 2a:3e:ea:20:66:9d:eb:4f:b6:ee:c6:1a:e8:6e:99: be:4a:a5:5d:97:f6:09:b6:59:60:41:4e:69:94:9f: d8:72:7d:73:6d:af:3a:eb:31:e8:a6:2d:cc:aa:1e: 2c:8f:8a:41:8b:69:ad:3a:7e:59:e4:d5:c8:80:cc: 54:1e:47:7d:8a:4a:1d:5a:48:40:ec:87:b3:57:65: fc:98:27:af:1f:86:e9:b2:20:e5:c2:88:04:1c:54: 80:ec:2b:75:e6:82:95:16:cf:59:0e:c0:aa:2e:ad: 5d:ee:79:1f:59:0f:e6:11:d7:4d:b0:ba:ef:99:8c: f3:3b:97:73:39:91:e2:d9:69:15:4a:14:8c:e4:0b: db:9d:9b:59:d8:19:93:41:58:a4:55:e1:21:c3:a1: e9:37:2c:0a:47:49:ab:ea:2a:98:dc:20:ba:6c:78: 0b:05:ef:b9:94:f3:d1:72:73:56:ea:c0:41:73:eb: 1d:28:a2:87:f1:e7:c3:dc:ff:38:d8:4f:f2:27:2b: c9:c2:2f:35:68:ba:85:a9:44:11:a0:31:85:21:93: ff:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:70:FB:FD:D5:B8:31:62:CA:D1:96:8A:EA:44:F6:55:7B:51:B5:75 X509v3 Authority Key Identifier: keyid:E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f6:17:5a:7d:8b:20:67:f4:be:96:e2:19:3b:ef:9d:56:2a: d0:6c:39:7d:fd:e1:2b:76:27:b8:f4:d8:4f:3d:16:e1:08:96: 8a:b9:cb:c9:07:26:82:e3:d4:05:dc:ae:aa:78:18:15:1f:a0: c2:32:cf:9f:6a:2a:ca:e9:be:5d:08:66:bd:81:db:5e:90:c0: f5:09:45:c4:2c:05:b5:76:50:5f:0b:b0:86:92:84:a7:ac:96: d2:d9:6f:a6:33:e8:80:74:e9:8d:16:80:ec:a9:2a:d5:e4:f4: b9:91:0f:54:b4:fc:8d:8c:fb:fc:c0:cd:cf:41:20:76:25:3c: 64:bc:ef:e4:af:89:13:5a:3c:03:1f:1e:62:ba:50:9a:af:34: cd:22:0b:a2:4a:f2:8e:1c:54:7d:9f:cc:76:de:5c:f8:da:af: 00:16:d7:11:65:2e:3d:f3:d2:f2:98:b7:fd:08:6d:22:27:4d: 52:bf:52:8c:f0:23:08:4b:e5:30:52:8f:aa:4a:91:18:d7:4c: f3:97:41:fb:b8:14:aa:9b:fb:5f:30:ff:74:ad:e3:de:66:6a: b5:78:14:a8:25:ad:2d:76:26:22:db:91:9c:db:49:91:9f:b9: 3f:30:99:9b:fa:4d:67:84:08:05:df:55:fb:7b:99:49:82:63: 49:e5:79:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf4JXUDPi3Jm4XmQ56RjvXWv6o4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYyRUU2 QzUwQzE4ODAeFw0yNTA2MTUxNjI2MTVaFw0yNTA2MTgxNzIzMTVaMDMxMTAvBgNV BAMTKEVENzBGQkZERDVCODMxNjJDQUQxOTY4QUVBNDRGNjU1N0I1MUI1NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrfgOKB4RFUZjCnkwx4pJSHYnI er1SE3FQo7dDptPJa4rNip7KwbaOs9aMUyo+6iBmnetPtu7GGuhumb5KpV2X9gm2 WWBBTmmUn9hyfXNtrzrrMeimLcyqHiyPikGLaa06flnk1ciAzFQeR32KSh1aSEDs h7NXZfyYJ68fhumyIOXCiAQcVIDsK3XmgpUWz1kOwKourV3ueR9ZD+YR102wuu+Z jPM7l3M5keLZaRVKFIzkC9udm1nYGZNBWKRV4SHDoek3LApHSavqKpjcILpseAsF 77mU89Fyc1bqwEFz6x0ooofx58Pc/zjYT/InK8nCLzVouoWpRBGgMYUhk/9FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7XD7/dW4MWLK0ZaK6kT2VXtRtXUwHwYDVR0j BBgwFoAU5CDxNPoaa6cFiEJL1Ohi7mxQwYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZmUzNWZhYS1lZDJiLTQyNzEtYjQ4Yy00ZWEyMWMzMDkzNTIvMC9FNDIwRjEzNEZB MUE2QkE3MDU4ODQyNEJENEU4NjJFRTZDNTBDMTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYyRUU2QzUw QzE4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZlMzVmYWEtZWQyYi00MjcxLWI0 OGMtNGVhMjFjMzA5MzUyLzAvRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYy RUU2QzUwQzE4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA32F1p9iyBn9L6W4hk7751WKtBsOX394St2 J7j02E89FuEIloq5y8kHJoLj1AXcrqp4GBUfoMIyz59qKsrpvl0IZr2B216QwPUJ RcQsBbV2UF8LsIaShKesltLZb6Yz6IB06Y0WgOypKtXk9LmRD1S0/I2M+/zAzc9B IHYlPGS87+SviRNaPAMfHmK6UJqvNM0iC6JK8o4cVH2fzHbeXPjarwAW1xFlLj3z 0vKYt/0IbSInTVK/UozwIwhL5TBSj6pKkRjXTPOXQfu4FKqb+18w/3St495marV4 FKglrS12JiLbkZzbSZGfuT8wmZv6TWeECAXfVft7mUmCY0nleYQ= -----END CERTIFICATE-----Generated at Tue Jun 17 00:16:56 2025 by rpki-client