$ rpki-client -vvf repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft File: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft (raw, json) Hash identifier: jWvMgFx0Dvotl3Osh3EcH0ES/ofMDhhMrjPTIyNLCww= Subject key identifier: 69:36:FB:33:2C:57:D0:B3:A5:5B:39:DA:D5:13:87:62:35:B1:5B:E5 Authority key identifier: E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE Certificate issuer: /CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Certificate serial: 0768940223BCF212D1AE761CA27A86A7C280A1F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft Manifest number: BC Signing time: Sun 15 Jun 2025 22:02:07 +0000 Manifest this update: Sun 15 Jun 2025 21:57:07 +0000 Manifest next update: Thu 19 Jun 2025 04:45:07 +0000 Files and hashes: 1: 3130332e36302e38382e302f32332d3233203d3e20313531353732.roa (hash: sj/Mmz0IkuIImkgMrX5NfmBzqbmlEbbflvN0FkIxBO4=) 2: 3130332e36302e38392e302f32342d3234203d3e20313531353732.roa (hash: Enf4GZpiw8yRCRJ559txgbwn9cUloBn5l+xZd4CiSI4=) 3: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl (hash: 33N0NpX1x+xdQt0pbRADbbAo67amMwIHQkzMOSru2hc=) 4: 3130332e36302e38382e302f32342d3234203d3e20313531353732.roa (hash: k2+2S8JNGrIJgA3B1fWsPdcHVnZQhwJAO8DfE0j/qJE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 04:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:68:94:02:23:bc:f2:12:d1:ae:76:1c:a2:7a:86:a7:c2:80:a1:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Validity Not Before: Jun 15 21:57:07 2025 GMT Not After : Jun 19 04:45:07 2025 GMT Subject: CN=6936FB332C57D0B3A55B39DAD513876235B15BE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:79:69:ff:ba:c7:2c:fe:d8:6e:6c:4c:29:ca: 9c:03:51:e7:20:de:53:c0:97:7d:f3:26:44:9c:ff: 96:ce:b2:4f:c2:78:65:fa:f8:76:70:5e:01:ef:08: d9:9c:34:99:55:bd:fd:66:2a:f4:c1:4e:08:08:be: ee:1e:d5:35:8f:03:51:a7:9f:3d:da:68:1e:03:e3: 70:7d:98:0b:0b:48:de:2b:88:5b:16:94:ef:ad:c8: 8d:41:c6:61:af:a0:a9:1c:6f:f2:b2:30:b1:53:b4: b5:8a:17:7f:2e:9e:09:cf:17:79:53:a8:f0:f6:b9: e4:b6:e0:f3:93:05:16:fc:77:71:86:11:aa:f7:b7: d2:76:16:85:eb:97:c6:04:62:11:05:65:8b:cb:ac: 40:f1:1f:17:3f:02:a0:12:ec:9e:5b:68:bf:a6:b1: 78:8c:7f:7c:49:6b:b9:56:5e:8b:b0:0a:0f:48:d6: 31:be:8f:bc:de:d0:75:ff:86:bb:e3:33:c1:86:4d: 6d:a7:f3:15:83:f0:9a:6b:13:2b:aa:ab:44:60:97: 3d:4d:e1:7c:73:0b:6b:05:5e:1e:de:3a:c4:74:8c: 3a:55:25:bb:4f:6a:33:1e:c2:07:6e:a5:44:a0:3d: 79:b4:11:02:8d:52:22:af:da:73:97:92:a0:7d:06: 31:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:36:FB:33:2C:57:D0:B3:A5:5B:39:DA:D5:13:87:62:35:B1:5B:E5 X509v3 Authority Key Identifier: keyid:E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:9f:f7:69:54:23:e1:8f:20:49:d8:be:c1:d3:b4:b6:79:e0: 96:a6:24:2f:93:13:6d:cd:78:38:a8:f7:01:10:22:b8:7b:5b: 01:74:49:11:d1:e4:eb:b0:e6:9a:c8:e9:8c:21:ec:84:52:e8: c6:4b:07:de:6e:dd:e8:87:61:33:c8:68:b0:24:7c:6d:71:3d: da:51:82:5e:d0:d9:13:67:1b:a4:b6:ef:da:0d:67:c7:bb:75: 5e:67:44:d8:e6:92:31:2d:40:3d:7a:22:bf:8c:94:07:5f:38: 71:81:3c:af:dc:f8:ea:66:c1:a2:47:23:f8:44:68:a2:e0:a8: e2:87:21:86:28:a7:15:58:b8:3d:2d:23:33:78:d4:52:00:eb: e9:30:a2:79:d2:d1:4d:3d:a8:db:77:42:8b:52:d2:96:7d:28: a5:72:25:0d:6d:a5:00:0a:25:0f:58:4e:b6:5e:48:45:ab:3a: 70:25:28:c8:8a:3a:7a:97:0c:78:84:7b:53:ee:92:d4:90:89: a5:1b:86:c5:3c:b3:d4:d7:2e:1c:bc:e9:d1:6f:70:be:68:5a: 10:4f:f4:20:27:4b:39:b6:cb:4c:90:c6:95:63:95:99:38:a6: 98:32:c1:ac:3c:30:0c:0f:f6:62:8e:0d:5c:5a:37:14:95:13: 60:25:27:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB2iUAiO88hLRrnYconqGp8KAofkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZF ODIxMkRERTAeFw0yNTA2MTUyMTU3MDdaFw0yNTA2MTkwNDQ1MDdaMDMxMTAvBgNV BAMTKDY5MzZGQjMzMkM1N0QwQjNBNTVCMzlEQUQ1MTM4NzYyMzVCMTVCRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCueWn/uscs/thubEwpypwDUecg 3lPAl33zJkSc/5bOsk/CeGX6+HZwXgHvCNmcNJlVvf1mKvTBTggIvu4e1TWPA1Gn nz3aaB4D43B9mAsLSN4riFsWlO+tyI1BxmGvoKkcb/KyMLFTtLWKF38ungnPF3lT qPD2ueS24POTBRb8d3GGEar3t9J2FoXrl8YEYhEFZYvLrEDxHxc/AqAS7J5baL+m sXiMf3xJa7lWXouwCg9I1jG+j7ze0HX/hrvjM8GGTW2n8xWD8JprEyuqq0Rglz1N 4XxzC2sFXh7eOsR0jDpVJbtPajMewgdupUSgPXm0EQKNUiKv2nOXkqB9BjGpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaTb7MyxX0LOlWzna1ROHYjWxW+UwHwYDVR0j BBgwFoAU58nk5cjqmJ8P99b+bb1qT+ghLd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzExYWE0Ni1mMjhlLTRjNTUtYjliYS03ZDViZGM5NWI0ZjYvMC9FN0M5RTRFNUM4 RUE5ODlGMEZGN0Q2RkU2REJENkE0RkU4MjEyRERFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZFODIx MkRERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxMWFhNDYtZjI4ZS00YzU1LWI5 YmEtN2Q1YmRjOTViNGY2LzAvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZB NEZFODIxMkRERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSf92lUI+GPIEnYvsHTtLZ54JamJC+TE23N eDio9wEQIrh7WwF0SRHR5Ouw5prI6Ywh7IRS6MZLB95u3eiHYTPIaLAkfG1xPdpR gl7Q2RNnG6S279oNZ8e7dV5nRNjmkjEtQD16Ir+MlAdfOHGBPK/c+OpmwaJHI/hE aKLgqOKHIYYopxVYuD0tIzN41FIA6+kwonnS0U09qNt3QotS0pZ9KKVyJQ1tpQAK JQ9YTrZeSEWrOnAlKMiKOnqXDHiEe1PuktSQiaUbhsU8s9TXLhy86dFvcL5oWhBP 9CAnSzm2y0yQxpVjlZk4ppgywaw8MAwP9mKODVxaNxSVE2AlJ9Q= -----END CERTIFICATE-----Generated at Mon Jun 16 15:32:57 2025 by rpki-client