$ rpki-client -vvf repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft File: E89C93F089A07D03B5794B0C02239EF67E1D721C.mft (raw, json) Hash identifier: SK4JdMU8PJQHACZKMg9ZSwMDwgPxxqpHUCTXVSGoM7E= Subject key identifier: CF:AD:E2:21:8E:42:FD:54:0D:92:F1:00:C9:05:5A:C6:BB:B8:79:98 Authority key identifier: E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C Certificate issuer: /CN=E89C93F089A07D03B5794B0C02239EF67E1D721C Certificate serial: 7C5212F3E1CAC298F60E0CE1F39E8310029CAF87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft Manifest number: 6A Signing time: Wed 18 Jun 2025 07:41:56 +0000 Manifest this update: Wed 18 Jun 2025 07:36:56 +0000 Manifest next update: Sat 21 Jun 2025 18:06:56 +0000 Files and hashes: 1: 3130332e37342e3134332e302f32342d3234203d3e203436303334.roa (hash: JENEpsaygQnZfGVyo5B3YcYBAcWsk2wulHjqbKHp5Ko=) 2: 3230322e37302e3133362e302f32342d3234203d3e203436303334.roa (hash: 4RAp4F/7XGUDJWluz8ukd4JUDTUiL5R6CUgISPZWwHM=) 3: E89C93F089A07D03B5794B0C02239EF67E1D721C.crl (hash: FGj+jptDu6RA0Ksy26tmO4z0hI+hhH3KMmagAfRCDrA=) 4: 3130332e37342e3136342e302f32342d3234203d3e203436303334.roa (hash: QbAeIT3Ks6znT3hg7T+AnddPc66+/tThEc2QldGCSpw=) 5: 3130332e35332e32302e302f32342d3234203d3e203436303334.roa (hash: YHAiLGhk7A6ZE4X7obU+oz12qWeh7X0M2hlk6hYX8jU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 12:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:52:12:f3:e1:ca:c2:98:f6:0e:0c:e1:f3:9e:83:10:02:9c:af:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E89C93F089A07D03B5794B0C02239EF67E1D721C Validity Not Before: Jun 18 07:36:56 2025 GMT Not After : Jun 21 18:06:56 2025 GMT Subject: CN=CFADE2218E42FD540D92F100C9055AC6BBB87998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:91:8d:60:2c:d8:71:d8:f8:c5:e9:25:2e:34: 1c:2a:28:6a:6f:54:b5:b9:0c:f8:40:d0:71:0a:04: 0f:40:c3:51:7b:de:02:df:5e:2d:66:41:00:d8:e8: f3:e7:5e:03:4a:e8:58:71:80:97:3e:eb:d0:ee:1c: b7:43:97:7d:8c:47:20:e2:fe:2f:26:68:5f:d0:12: 62:bc:57:e6:fe:f6:df:53:bc:e0:a9:88:ed:9d:70: 5d:d1:7c:65:7a:c4:23:1e:af:cd:85:d4:c7:7e:da: a2:6a:9c:f6:ce:cd:39:4a:dc:5b:81:53:54:28:40: 58:f1:20:9a:c1:95:59:e4:40:31:7e:8b:64:58:78: 68:ad:a4:95:07:84:a1:64:35:96:d6:dc:36:04:8b: 43:0b:2c:dd:f8:1a:7f:b0:df:1e:f7:f3:74:01:08: 5f:cc:2c:55:8d:19:c6:32:ba:77:dc:f5:2d:e8:71: 81:bc:b3:0b:55:67:67:08:2a:b0:06:c9:14:5b:ab: 02:99:ea:fe:59:67:fc:5c:d6:3d:1e:9d:bc:d8:1a: 1e:f9:6d:ff:2d:21:de:db:4a:f4:94:4a:f4:6f:6c: ff:5b:e2:2e:fc:bf:94:03:9a:40:a1:11:ea:6c:40: 02:c9:ee:d7:70:4c:f6:be:29:64:95:c2:8d:14:12: d9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:AD:E2:21:8E:42:FD:54:0D:92:F1:00:C9:05:5A:C6:BB:B8:79:98 X509v3 Authority Key Identifier: keyid:E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:bf:b9:28:92:4e:4a:e3:b6:f9:03:47:3f:5e:ca:34:fc:a2: 81:0b:a7:20:60:9e:a7:f4:30:e9:48:74:ee:ae:13:51:d5:66: 76:64:8d:6a:48:a0:cc:88:5e:d3:d3:c2:49:14:b2:c2:1a:2b: f7:17:f2:78:b6:3f:15:0b:08:96:37:77:fa:14:59:ed:57:61: 31:b5:77:4c:d2:23:70:6b:ec:03:81:76:1b:9d:34:47:3d:72: f9:46:41:b8:7f:d9:e5:c6:59:81:07:6c:44:af:9e:95:31:e8: 53:73:ce:ea:61:ca:08:fc:94:14:8a:9c:72:48:6b:eb:53:e3: 2a:24:74:38:e5:fa:ef:fe:c4:8c:b6:5c:d9:b2:eb:e7:27:f8: 59:2f:e2:4f:52:cc:11:34:26:2f:d2:fa:2d:0f:55:50:43:89: 60:30:78:73:99:87:49:fe:33:4e:6f:5d:e6:ac:87:1c:5f:84: ca:2c:5c:a9:69:d2:24:5a:40:4c:d7:bc:29:f7:ee:70:bc:18: b3:b1:ba:56:e2:6a:10:af:dc:32:47:bf:d3:72:0a:44:68:92: d7:e7:d5:27:24:7c:a8:92:da:9b:9c:9c:2f:dd:dc:0f:c6:0f: 40:4c:f0:58:e0:c4:37:f5:62:65:e3:8a:f4:96:b9:5a:d1:64: a0:53:c1:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfFIS8+HKwpj2Dgzh856DEAKcr4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3 RTFENzIxQzAeFw0yNTA2MTgwNzM2NTZaFw0yNTA2MjExODA2NTZaMDMxMTAvBgNV BAMTKENGQURFMjIxOEU0MkZENTQwRDkyRjEwMEM5MDU1QUM2QkJCODc5OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbkY1gLNhx2PjF6SUuNBwqKGpv VLW5DPhA0HEKBA9Aw1F73gLfXi1mQQDY6PPnXgNK6FhxgJc+69DuHLdDl32MRyDi /i8maF/QEmK8V+b+9t9TvOCpiO2dcF3RfGV6xCMer82F1Md+2qJqnPbOzTlK3FuB U1QoQFjxIJrBlVnkQDF+i2RYeGitpJUHhKFkNZbW3DYEi0MLLN34Gn+w3x7383QB CF/MLFWNGcYyunfc9S3ocYG8swtVZ2cIKrAGyRRbqwKZ6v5ZZ/xc1j0enbzYGh75 bf8tId7bSvSUSvRvbP9b4i78v5QDmkChEepsQALJ7tdwTPa+KWSVwo0UEtkjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz63iIY5C/VQNkvEAyQVaxru4eZgwHwYDVR0j BBgwFoAU6JyT8ImgfQO1eUsMAiOe9n4dchwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Zjg4NTFlNS1lZTViLTQxZTEtOWFiYy00NDI2NTFkMjcyOTQvMC9FODlDOTNGMDg5 QTA3RDAzQjU3OTRCMEMwMjIzOUVGNjdFMUQ3MjFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3RTFE NzIxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY4ODUxZTUtZWU1Yi00MWUxLTlh YmMtNDQyNjUxZDI3Mjk0LzAvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlF RjY3RTFENzIxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFe/uSiSTkrjtvkDRz9eyjT8ooELpyBgnqf0 MOlIdO6uE1HVZnZkjWpIoMyIXtPTwkkUssIaK/cX8ni2PxULCJY3d/oUWe1XYTG1 d0zSI3Br7AOBdhudNEc9cvlGQbh/2eXGWYEHbESvnpUx6FNzzuphygj8lBSKnHJI a+tT4yokdDjl+u/+xIy2XNmy6+cn+Fkv4k9SzBE0Ji/S+i0PVVBDiWAweHOZh0n+ M05vXeashxxfhMosXKlp0iRaQEzXvCn37nC8GLOxulbiahCv3DJHv9NyCkRoktfn 1SckfKiS2pucnC/d3A/GD0BM8FjgxDf1YmXjivSWuVrRZKBTwUc= -----END CERTIFICATE-----Generated at Wed Jun 18 23:08:15 2025 by rpki-client