$ rpki-client -vvf repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft File: E420F134FA1A6BA70588424BD4E862EE6C50C188.mft (raw, json) Hash identifier: s+/cPGzykk/TxD7VPk90BDbSazAb1R3zO2K1Vgro/0s= Subject key identifier: 63:C9:76:A1:77:FD:3E:4D:40:8D:98:DB:48:81:CE:BE:83:23:94:F9 Authority key identifier: E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88 Certificate issuer: /CN=E420F134FA1A6BA70588424BD4E862EE6C50C188 Certificate serial: 32CC6967BFC583FAD83D00A6960313000F70B509 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft Manifest number: 04F5 Signing time: Tue 05 Aug 2025 20:31:22 +0000 Manifest this update: Tue 05 Aug 2025 20:26:22 +0000 Manifest next update: Fri 08 Aug 2025 23:22:22 +0000 Files and hashes: 1: 3130332e3139342e3137322e302f32322d3234203d3e203633383835.roa (hash: nIcaXDvKx2+XVxNFuL8CckiCEV48hFgqOSdn9qzzkF4=) 2: 323430323a636438303a3a2f33322d3438203d3e203633383835.roa (hash: MDl2DN2os7/fU39oaMG8yA+MKomCGHMu/9vzlZ9xU2U=) 3: E420F134FA1A6BA70588424BD4E862EE6C50C188.crl (hash: shdZ9A9hPHfkv78FCQxY+LXJaLqB6MIXOk60b6zRYFM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 23:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:cc:69:67:bf:c5:83:fa:d8:3d:00:a6:96:03:13:00:0f:70:b5:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E420F134FA1A6BA70588424BD4E862EE6C50C188 Validity Not Before: Aug 5 20:26:22 2025 GMT Not After : Aug 8 23:22:22 2025 GMT Subject: CN=63C976A177FD3E4D408D98DB4881CEBE832394F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c7:15:f6:95:e0:0a:36:9a:d0:e6:ce:f0:4f: 3b:a3:8f:33:ac:38:d5:54:aa:57:0a:96:ae:6f:4a: 61:4f:fd:a8:d4:74:27:5c:6d:0a:56:e3:ce:d8:d2: 24:9d:6c:1c:78:8b:30:c3:7c:97:04:2f:55:19:f3: 45:5b:a3:44:74:c1:da:37:11:19:14:d2:df:69:70: 33:35:3f:87:32:e5:f2:64:2e:32:a8:2f:5a:6c:e6: 7a:42:03:ee:64:da:1d:2d:c3:cb:43:0a:05:77:4a: bd:1f:23:9a:a5:1c:e4:70:46:58:e4:16:6c:5b:b9: 91:21:4d:ca:f1:72:31:0e:30:1b:8f:51:5a:87:b5: dd:be:72:d3:e6:76:f1:94:be:eb:8e:52:9f:e4:2b: e6:76:85:2f:15:b7:be:0e:e0:32:9e:cc:c9:10:26: f9:aa:0d:35:e1:e6:92:2b:ee:f6:72:16:54:3a:e7: 9c:6e:21:a9:f9:28:9a:89:9a:18:99:61:5a:5e:f7: 91:de:75:57:a8:c6:bc:0f:a0:d1:97:af:b6:b1:84: 02:c3:02:14:2e:3f:0e:08:18:62:e4:bd:95:54:1b: a0:4b:ae:4b:49:c6:08:dd:73:e1:9c:af:2b:6d:60: d2:f2:e2:4e:0c:e8:e5:02:2c:7e:49:95:e6:20:8d: c9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C9:76:A1:77:FD:3E:4D:40:8D:98:DB:48:81:CE:BE:83:23:94:F9 X509v3 Authority Key Identifier: keyid:E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b0:bc:4c:b8:54:ba:b8:0f:25:b6:60:29:f0:95:88:06:fe: 3e:53:72:08:1c:a6:ee:15:d5:0c:21:07:c4:ef:81:f7:a3:ae: 5f:e1:20:0f:c3:db:af:27:06:27:33:12:0c:9c:1a:3b:40:1e: f3:cd:cc:36:34:7c:d8:39:9f:1b:8f:38:4a:81:15:8f:63:1f: 29:6f:11:67:9d:d3:36:02:9d:2d:ad:5b:d1:f3:1a:de:d8:83: 71:cb:d9:09:31:cb:91:04:42:e2:9c:ef:1f:17:f1:78:2b:ad: 29:32:73:18:31:f6:c2:9c:6b:99:36:11:06:7a:6c:8d:52:ee: 52:36:62:79:c4:59:de:22:35:29:4f:3f:07:6b:1c:ca:0a:8b: d8:23:6f:e8:dc:23:89:a3:84:28:dd:e5:94:49:7b:3c:d2:73: 71:9a:59:53:e2:dd:98:b4:e9:35:c1:93:3d:45:6d:71:9c:b3: e4:e7:b0:b9:87:e2:f0:ff:e5:f3:e9:30:8e:97:56:ed:67:b4: 3b:f5:0e:f7:54:09:10:1c:4d:ea:9f:ae:75:7a:94:25:66:a3: 0c:53:26:98:25:ab:ef:37:7d:6f:20:a9:d8:0f:09:84:6c:6f: f6:66:68:b7:d2:b9:f7:5c:b4:fe:ab:fe:e1:44:95:64:39:cd: d1:40:bc:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMsxpZ7/Fg/rYPQCmlgMTAA9wtQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYyRUU2 QzUwQzE4ODAeFw0yNTA4MDUyMDI2MjJaFw0yNTA4MDgyMzIyMjJaMDMxMTAvBgNV BAMTKDYzQzk3NkExNzdGRDNFNEQ0MDhEOThEQjQ4ODFDRUJFODMyMzk0RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCexxX2leAKNprQ5s7wTzujjzOs ONVUqlcKlq5vSmFP/ajUdCdcbQpW487Y0iSdbBx4izDDfJcEL1UZ80Vbo0R0wdo3 ERkU0t9pcDM1P4cy5fJkLjKoL1ps5npCA+5k2h0tw8tDCgV3Sr0fI5qlHORwRljk FmxbuZEhTcrxcjEOMBuPUVqHtd2+ctPmdvGUvuuOUp/kK+Z2hS8Vt74O4DKezMkQ JvmqDTXh5pIr7vZyFlQ655xuIan5KJqJmhiZYVpe95HedVeoxrwPoNGXr7axhALD AhQuPw4IGGLkvZVUG6BLrktJxgjdc+GcryttYNLy4k4M6OUCLH5JleYgjcnhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY8l2oXf9Pk1AjZjbSIHOvoMjlPkwHwYDVR0j BBgwFoAU5CDxNPoaa6cFiEJL1Ohi7mxQwYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZmUzNWZhYS1lZDJiLTQyNzEtYjQ4Yy00ZWEyMWMzMDkzNTIvMC9FNDIwRjEzNEZB MUE2QkE3MDU4ODQyNEJENEU4NjJFRTZDNTBDMTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYyRUU2QzUw QzE4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZlMzVmYWEtZWQyYi00MjcxLWI0 OGMtNGVhMjFjMzA5MzUyLzAvRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYy RUU2QzUwQzE4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+wvEy4VLq4DyW2YCnwlYgG/j5Tcggcpu4V 1QwhB8Tvgfejrl/hIA/D268nBiczEgycGjtAHvPNzDY0fNg5nxuPOEqBFY9jHylv EWed0zYCnS2tW9HzGt7Yg3HL2Qkxy5EEQuKc7x8X8XgrrSkycxgx9sKca5k2EQZ6 bI1S7lI2YnnEWd4iNSlPPwdrHMoKi9gjb+jcI4mjhCjd5ZRJezzSc3GaWVPi3Zi0 6TXBkz1FbXGcs+TnsLmH4vD/5fPpMI6XVu1ntDv1DvdUCRAcTeqfrnV6lCVmowxT Jpglq+83fW8gqdgPCYRsb/ZmaLfSufdctP6r/uFElWQ5zdFAvMI= -----END CERTIFICATE-----Generated at Thu Aug 7 11:09:01 2025 by rpki-client