$ rpki-client -vvf repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft File: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft (raw, json) Hash identifier: 5f7cAMrkgvQ+UrnpmYBtF8QKqc5w5gf3/vl70vHVv5c= Subject key identifier: 57:21:B1:5B:28:80:DC:F4:A5:4E:F7:D7:CB:37:F5:19:E9:B5:AC:61 Authority key identifier: EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE Certificate issuer: /CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Certificate serial: 7F80FFBE86A54349190699D74AE3C3F405AD8160 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft Manifest number: 011B Signing time: Tue 05 Aug 2025 16:01:36 +0000 Manifest this update: Tue 05 Aug 2025 15:56:36 +0000 Manifest next update: Fri 08 Aug 2025 20:24:36 +0000 Files and hashes: 1: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl (hash: MEDvrqa7FMLrHUmeNMEarGY8cXQi+oEXluQw+YUChhw=) 2: 3130332e35332e32382e302f32332d3234203d3e20313339393535.roa (hash: XmUhlDLdTlUEJxqMyV5d8izbXv0SLIMUNSTUR2SbfXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 20:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:80:ff:be:86:a5:43:49:19:06:99:d7:4a:e3:c3:f4:05:ad:81:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Validity Not Before: Aug 5 15:56:36 2025 GMT Not After : Aug 8 20:24:36 2025 GMT Subject: CN=5721B15B2880DCF4A54EF7D7CB37F519E9B5AC61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:74:1f:b2:46:43:e5:b3:67:e3:0f:e1:13:45: f9:ff:e9:6f:3f:6f:d3:a8:5a:69:29:44:ad:de:34: 53:45:39:57:ba:c3:56:e7:10:f3:bb:24:df:de:31: 1f:6d:da:46:cd:48:00:84:32:b0:77:97:31:5e:67: 24:a5:54:23:81:67:35:e6:ea:8c:95:8b:98:43:cb: fc:ca:c2:6c:e3:4f:7e:28:21:6a:7e:2b:38:c8:c9: 9f:63:3f:42:b7:5a:17:5d:40:38:db:37:ff:f6:9b: e6:c5:3e:0a:52:8c:5a:1b:9f:45:38:91:7e:c7:d9: 9f:5d:42:36:fe:0b:59:ed:a4:3c:e8:ff:5e:10:1e: 0a:4b:e3:c7:80:ac:94:28:ea:be:73:4b:ee:86:2a: eb:d2:3e:8f:f7:ff:8b:22:5a:03:db:5a:a5:ff:6b: 2b:f8:9a:35:9c:a2:96:74:88:fb:c1:b9:cb:68:0a: d2:3b:b2:be:1c:c5:d7:74:be:de:ab:44:24:bc:ef: 01:8c:b5:6c:43:f2:d9:db:79:02:ca:87:64:39:d0: 46:83:ed:c9:2b:83:69:69:ad:da:ec:2c:39:86:cc: 0b:31:88:6f:8c:2f:d4:11:57:5e:36:87:76:9e:8e: 17:ec:d5:fb:45:22:06:94:83:7a:4f:f9:06:17:3a: cd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:21:B1:5B:28:80:DC:F4:A5:4E:F7:D7:CB:37:F5:19:E9:B5:AC:61 X509v3 Authority Key Identifier: keyid:EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:b7:ce:73:a1:02:9e:fe:52:15:17:11:92:a8:3d:e8:4b:74: 8a:2f:ed:06:a4:c8:b0:f7:a8:c8:24:fa:fe:4a:9c:0c:49:8d: 79:ed:9d:de:bd:db:ee:5f:40:29:9a:96:a3:16:f5:c8:41:1b: fe:01:a8:4f:4d:92:ba:0e:3d:8b:a3:04:4e:b4:e3:9f:1d:67: 41:8c:74:13:de:3d:9a:0a:ef:9d:52:92:37:04:93:9f:83:26: 5c:a3:d8:c5:28:ba:09:d6:ed:43:8a:0a:f6:25:b4:71:70:b8: c4:01:92:38:ac:47:57:2e:42:07:85:e4:bd:f7:5d:f7:45:31: 51:e8:a0:58:8c:67:ae:d0:7b:61:6a:08:77:61:f1:b8:d7:b6: 55:41:2d:5c:b9:2e:fb:c1:4d:d4:60:d6:e2:61:19:c5:05:6f: b5:74:e4:99:d2:6f:4c:a8:c0:78:69:f8:38:ae:ef:c3:74:bf: f4:33:91:68:23:6f:14:a9:10:e2:5d:79:33:95:a7:1a:65:a3: 6f:c3:dd:f3:ce:ac:8d:cb:47:4a:f6:86:9a:50:c4:70:89:b9: 1d:98:27:25:de:c0:d4:a5:0d:b1:d6:0f:cc:c4:81:ed:2f:38: 21:19:a3:2f:8b:2d:36:cc:77:f6:f2:38:38:6f:ee:44:63:ef: 87:6f:9c:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf4D/voalQ0kZBpnXSuPD9AWtgWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0 NUYyOUVERTAeFw0yNTA4MDUxNTU2MzZaFw0yNTA4MDgyMDI0MzZaMDMxMTAvBgNV BAMTKDU3MjFCMTVCMjg4MERDRjRBNTRFRjdEN0NCMzdGNTE5RTlCNUFDNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDldB+yRkPls2fjD+ETRfn/6W8/ b9OoWmkpRK3eNFNFOVe6w1bnEPO7JN/eMR9t2kbNSACEMrB3lzFeZySlVCOBZzXm 6oyVi5hDy/zKwmzjT34oIWp+KzjIyZ9jP0K3WhddQDjbN//2m+bFPgpSjFobn0U4 kX7H2Z9dQjb+C1ntpDzo/14QHgpL48eArJQo6r5zS+6GKuvSPo/3/4siWgPbWqX/ ayv4mjWcopZ0iPvBuctoCtI7sr4cxdd0vt6rRCS87wGMtWxD8tnbeQLKh2Q50EaD 7ckrg2lprdrsLDmGzAsxiG+ML9QRV142h3aejhfs1ftFIgaUg3pP+QYXOs2dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVyGxWyiA3PSlTvfXyzf1Gem1rGEwHwYDVR0j BBgwFoAU7JqrkQBwU+Y84X+Y10/9iUXynt4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmI0M2VjOC1mNTgyLTQwMjUtOGYzNi0zY2VhNTM5ZDBiMDkvMC9FQzlBQUI5MTAw NzA1M0U2M0NFMTdGOThENzRGRkQ4OTQ1RjI5RURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0NUYy OUVERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJiNDNlYzgtZjU4Mi00MDI1LThm MzYtM2NlYTUzOWQwYjA5LzAvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZE ODk0NUYyOUVERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMC3znOhAp7+UhUXEZKoPehLdIov7QakyLD3 qMgk+v5KnAxJjXntnd692+5fQCmalqMW9chBG/4BqE9NkroOPYujBE60458dZ0GM dBPePZoK751SkjcEk5+DJlyj2MUougnW7UOKCvYltHFwuMQBkjisR1cuQgeF5L33 XfdFMVHooFiMZ67Qe2FqCHdh8bjXtlVBLVy5LvvBTdRg1uJhGcUFb7V05JnSb0yo wHhp+Diu78N0v/QzkWgjbxSpEOJdeTOVpxplo2/D3fPOrI3LR0r2hppQxHCJuR2Y JyXewNSlDbHWD8zEge0vOCEZoy+LLTbMd/byODhv7kRj74dvnLk= -----END CERTIFICATE-----Generated at Thu Aug 7 03:29:18 2025 by rpki-client