$ rpki-client -vvf repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft File: E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft (raw, json) Hash identifier: tkUSIf28iqIBiXzXP2vvUZQN1mQmvlSNxz9sEYVn1MM= Subject key identifier: 77:03:67:91:5B:AD:F8:25:68:9B:65:36:47:84:00:55:3D:1B:4F:60 Authority key identifier: E4:C5:17:8B:DB:BD:EF:7B:7D:D4:1B:AF:58:EB:3D:25:B2:13:27:71 Certificate issuer: /CN=E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771 Certificate serial: 7C93FD62C43444D0E4BDD7A0EA65A65971362FBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft Manifest number: 01CE Signing time: Mon 04 Aug 2025 09:11:17 +0000 Manifest this update: Mon 04 Aug 2025 09:06:17 +0000 Manifest next update: Thu 07 Aug 2025 18:23:17 +0000 Files and hashes: 1: 3130332e36362e33362e302f32342d3234203d3e20313530323233.roa (hash: 92CiTC3Van4+3+BldVCHuJ3vdr0S/LlPDMeB7hF5ajE=) 2: E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.crl (hash: j3mrBgUkqkuNb7Bfs6JX2005p3PXqFG30GfKENx5SNU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.crl rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 18:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:93:fd:62:c4:34:44:d0:e4:bd:d7:a0:ea:65:a6:59:71:36:2f:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771 Validity Not Before: Aug 4 09:06:17 2025 GMT Not After : Aug 7 18:23:17 2025 GMT Subject: CN=770367915BADF825689B6536478400553D1B4F60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6c:12:97:d6:a8:21:ef:45:d8:14:01:7d:a0: 9b:04:af:16:9c:07:2c:71:69:76:8c:6e:67:a2:1b: 32:0a:cc:db:5f:61:9e:92:7c:7b:72:00:ff:d0:5d: f6:a8:23:57:3f:80:67:4e:48:e3:f5:ea:2f:13:8e: 82:9c:f3:db:33:77:3b:ee:97:59:6d:b0:8f:3f:f5: 26:c5:82:63:8a:a1:0a:e6:25:80:e0:a9:83:8e:32: 76:0d:fb:78:81:ba:61:16:18:92:cf:60:41:d9:73: ea:f5:39:05:26:1e:f4:65:90:47:67:54:9a:59:32: 80:63:4c:2a:dd:7b:d1:81:39:06:95:32:7a:fa:7b: d9:db:bd:af:ee:ca:3c:9f:12:1e:36:ea:69:89:87: 7e:fa:d9:2e:57:03:35:3f:82:5b:c5:68:61:c1:5c: db:97:7e:39:da:89:e3:8c:95:c2:1a:3f:0d:f9:f7: 33:61:a1:a5:13:d3:87:45:87:df:6b:91:ef:23:2a: c9:0a:f2:ea:9e:49:8c:2d:fc:38:fe:ad:aa:b7:5d: 0f:b2:d9:8d:36:f9:0f:f8:3b:4b:39:0a:f5:9f:b9: 56:ec:d8:88:39:1e:83:b2:c1:ef:e1:75:33:cc:2c: 83:ea:fa:52:f3:fe:01:1d:a3:87:45:7e:0b:38:dd: f4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:03:67:91:5B:AD:F8:25:68:9B:65:36:47:84:00:55:3D:1B:4F:60 X509v3 Authority Key Identifier: keyid:E4:C5:17:8B:DB:BD:EF:7B:7D:D4:1B:AF:58:EB:3D:25:B2:13:27:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:8d:fa:41:46:dd:4c:1e:41:2d:8e:a9:92:bd:ce:c8:6c:43: ae:47:73:c8:3f:94:c7:43:0d:fa:11:07:41:99:2f:f4:d1:f5: 34:45:cd:25:7c:94:bd:44:7f:15:fb:07:49:5d:90:7a:7c:75: 9f:04:f5:a0:6c:d0:51:10:63:bc:57:55:b7:84:39:58:f3:cf: f2:ff:e3:f4:7e:d5:b0:e7:ac:68:3f:59:e3:7f:fe:07:67:88: 72:ca:c2:f5:c5:c2:6e:85:2a:b8:e1:98:90:84:f1:2b:16:1c: 1f:bd:67:e8:56:38:70:e6:87:7e:5f:e9:5c:2c:df:d5:73:4f: 70:5e:c6:9d:cd:51:c1:24:24:d6:d6:08:b1:19:a0:e1:71:fd: c5:e4:3c:88:c2:87:59:51:ff:6c:83:61:65:ce:8b:be:f3:18: 8d:9c:c8:61:e6:96:10:dd:34:47:1f:0a:58:4c:57:ae:00:23: 23:83:c8:3a:ba:8e:31:af:86:f4:04:aa:3c:28:ad:51:25:32: 75:e0:f6:0b:bc:b5:ce:04:62:26:ca:c2:9a:d2:e3:f2:ad:e3: d1:2d:9a:0f:cf:c8:b2:9b:6c:e8:77:77:bc:f0:4b:12:04:a8: 07:a5:00:2d:b8:e4:60:71:52:3c:d0:05:72:7f:83:94:37:c0: a3:95:7f:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfJP9YsQ0RNDkvdeg6mWmWXE2L70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDNTE3OEJEQkJERUY3QjdERDQxQkFGNThFQjNEMjVC MjEzMjc3MTAeFw0yNTA4MDQwOTA2MTdaFw0yNTA4MDcxODIzMTdaMDMxMTAvBgNV BAMTKDc3MDM2NzkxNUJBREY4MjU2ODlCNjUzNjQ3ODQwMDU1M0QxQjRGNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbbBKX1qgh70XYFAF9oJsErxac ByxxaXaMbmeiGzIKzNtfYZ6SfHtyAP/QXfaoI1c/gGdOSOP16i8TjoKc89szdzvu l1ltsI8/9SbFgmOKoQrmJYDgqYOOMnYN+3iBumEWGJLPYEHZc+r1OQUmHvRlkEdn VJpZMoBjTCrde9GBOQaVMnr6e9nbva/uyjyfEh426mmJh3762S5XAzU/glvFaGHB XNuXfjnaieOMlcIaPw359zNhoaUT04dFh99rke8jKskK8uqeSYwt/Dj+raq3XQ+y 2Y02+Q/4O0s5CvWfuVbs2Ig5HoOywe/hdTPMLIPq+lLz/gEdo4dFfgs43fQpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdwNnkVut+CVom2U2R4QAVT0bT2AwHwYDVR0j BBgwFoAU5MUXi9u973t91BuvWOs9JbITJ3EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmRiZDc4NS02YmNhLTQ5M2ItOGE2NS0zYjUyNzcwMDdmZWQvMC9FNEM1MTc4QkRC QkRFRjdCN0RENDFCQUY1OEVCM0QyNUIyMTMyNzcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDNTE3OEJEQkJERUY3QjdERDQxQkFGNThFQjNEMjVCMjEz Mjc3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJkYmQ3ODUtNmJjYS00OTNiLThh NjUtM2I1Mjc3MDA3ZmVkLzAvRTRDNTE3OEJEQkJERUY3QjdERDQxQkFGNThFQjNE MjVCMjEzMjc3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuN+kFG3UweQS2OqZK9zshsQ65Hc8g/lMdD DfoRB0GZL/TR9TRFzSV8lL1EfxX7B0ldkHp8dZ8E9aBs0FEQY7xXVbeEOVjzz/L/ 4/R+1bDnrGg/WeN//gdniHLKwvXFwm6FKrjhmJCE8SsWHB+9Z+hWOHDmh35f6Vws 39VzT3Bexp3NUcEkJNbWCLEZoOFx/cXkPIjCh1lR/2yDYWXOi77zGI2cyGHmlhDd NEcfClhMV64AIyODyDq6jjGvhvQEqjworVElMnXg9gu8tc4EYibKwprS4/Kt49Et mg/PyLKbbOh3d7zwSxIEqAelAC245GBxUjzQBXJ/g5Q3wKOVf3g= -----END CERTIFICATE-----Generated at Wed Aug 6 18:42:15 2025 by rpki-client