$ rpki-client -vvf repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft File: E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft (raw, json) Hash identifier: JwSlQilK1mYsHFerp2vV225uFXbI6ENnjMEgzioEEBE= Subject key identifier: BD:17:99:07:02:A4:11:11:E0:6E:89:A5:15:60:8F:E4:0A:49:E0:CD Authority key identifier: E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61 Certificate issuer: /CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61 Certificate serial: 0797C29A146349D480271A69441B8E49C40A0684 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft Manifest number: 04F5 Signing time: Wed 06 Aug 2025 22:41:41 +0000 Manifest this update: Wed 06 Aug 2025 22:36:41 +0000 Manifest next update: Sun 10 Aug 2025 04:55:41 +0000 Files and hashes: 1: 3130332e3134382e34362e302f32332d3234203d3e203234353237.roa (hash: eQEzsyxVfpTHgHfaMJEWpEAU8ae5FhvdVXRN2kONR8w=) 2: E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl (hash: fLLZBXkWgIOoyd5e5cL6l+Yt7mL2RsTtGgAbRSSrVXM=) 3: 323430353a366334303a3a2f33322d3438203d3e203234353237.roa (hash: sdUNTLR9jp0dwpPELDIKx4SufivRxg0Tg+/QbjfBOQs=) 4: 3230332e3136302e35362e302f32312d3234203d3e203234353237.roa (hash: P99HVIzqHVCWDBqJ4r8v17rUky9V8VmAdjN3/2RrLPI=) 5: 3138332e38312e3135322e302f32312d3234203d3e203234353237.roa (hash: HrGCjeL9LpaajCgOCMCFmtzXiHgvf2onAjSq9sq+a5M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 04:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:97:c2:9a:14:63:49:d4:80:27:1a:69:44:1b:8e:49:c4:0a:06:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61 Validity Not Before: Aug 6 22:36:41 2025 GMT Not After : Aug 10 04:55:41 2025 GMT Subject: CN=BD17990702A41111E06E89A515608FE40A49E0CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:85:95:06:38:a4:fc:be:e4:55:77:e0:7a:33: 54:0e:c8:de:6e:d5:d2:ba:99:80:2b:a5:2b:5b:e7: 5c:fe:cf:83:98:26:4a:76:74:07:2a:1e:fb:d8:60: 0b:52:4a:39:d9:a9:ad:21:e1:9b:c7:84:c1:8e:b5: 9b:db:8f:01:5f:15:fb:82:14:e2:61:0e:94:14:5b: 8d:80:7b:e0:b5:78:ff:9f:b1:c9:d9:54:7a:10:4c: 11:af:4b:65:78:ba:85:fc:6d:e3:19:67:9a:dc:50: 15:f2:64:2a:23:02:3e:ea:0d:e7:c7:4f:fa:44:72: 87:53:f7:c6:99:98:90:86:77:1a:ad:41:47:6f:9a: 48:ab:db:73:74:aa:11:f8:6f:b1:e2:82:dd:24:55: 40:11:bb:f7:38:67:d8:5c:86:1e:da:29:46:49:92: 99:63:c5:9b:aa:c6:28:57:cc:36:aa:05:6f:a7:13: 1e:20:6b:0c:04:41:cd:b4:29:3a:0b:84:6e:67:b4: 9e:5c:a9:00:2d:0e:73:45:fc:eb:e4:d8:d7:47:55: 99:32:fd:3c:70:b0:55:42:34:c1:6e:d2:97:4c:46: f5:dd:15:dc:9e:d7:dd:5a:67:cd:ff:a3:4f:0c:a7: e9:34:da:db:b5:bb:c1:a0:cb:db:35:66:16:43:db: 44:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:17:99:07:02:A4:11:11:E0:6E:89:A5:15:60:8F:E4:0A:49:E0:CD X509v3 Authority Key Identifier: keyid:E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:83:93:ee:0e:0d:41:c2:dd:36:8c:2e:59:66:c4:b5:5a:66: bc:7a:14:fa:57:fb:6e:b5:86:bd:1a:a0:72:4f:e2:47:2c:84: e0:9d:13:3b:52:a9:48:b9:fb:b1:85:75:32:6a:4a:d1:a9:18: 9b:d3:1f:5b:b3:e9:d6:ff:19:3f:a6:7f:63:16:c8:71:2d:d5: 04:34:05:13:1b:1a:2d:32:a3:00:01:f8:51:5d:cf:26:4f:41: 07:46:a8:41:1a:6e:e0:8d:13:6d:a6:01:e8:a1:7e:8d:e7:e1: 80:7a:7f:c2:1f:7c:4f:e1:b4:43:4b:17:5b:96:45:7f:a9:e4: 76:01:8f:45:ad:b0:fa:e2:35:0f:b0:f5:6f:90:58:e4:75:a8: 82:a5:70:9a:cb:27:f6:f9:17:95:3e:71:d0:84:5b:e4:8f:5c: 16:d4:b4:c5:e6:f3:fa:bc:39:d0:2d:57:b5:24:4c:51:1f:4f: 4f:63:90:f3:19:c4:9c:d2:b8:cf:a4:9a:ec:0b:66:c3:a1:0f: e9:ef:30:2f:c3:8a:f5:3f:3c:86:69:e3:78:98:23:18:b3:7e: 18:ad:3e:76:95:6d:90:90:12:b7:d8:d0:93:cf:29:6e:42:84: 00:bf:42:9c:8d:cd:26:d3:0f:fb:3f:1f:8a:ef:ec:78:db:ed: a0:1b:15:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB5fCmhRjSdSAJxppRBuOScQKBoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0QTAw NEFCMkM2MTAeFw0yNTA4MDYyMjM2NDFaFw0yNTA4MTAwNDU1NDFaMDMxMTAvBgNV BAMTKEJEMTc5OTA3MDJBNDExMTFFMDZFODlBNTE1NjA4RkU0MEE0OUUwQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDshZUGOKT8vuRVd+B6M1QOyN5u 1dK6mYArpStb51z+z4OYJkp2dAcqHvvYYAtSSjnZqa0h4ZvHhMGOtZvbjwFfFfuC FOJhDpQUW42Ae+C1eP+fscnZVHoQTBGvS2V4uoX8beMZZ5rcUBXyZCojAj7qDefH T/pEcodT98aZmJCGdxqtQUdvmkir23N0qhH4b7Higt0kVUARu/c4Z9hchh7aKUZJ kpljxZuqxihXzDaqBW+nEx4gawwEQc20KToLhG5ntJ5cqQAtDnNF/Ovk2NdHVZky /TxwsFVCNMFu0pdMRvXdFdye191aZ83/o08Mp+k02tu1u8Ggy9s1ZhZD20RRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvReZBwKkERHgbomlFWCP5ApJ4M0wHwYDVR0j BBgwFoAU6fegqm3Mof99PWFGDVU0oASrLGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmI4N2ZlYi0wZmUyLTQxOGEtYTM3YS1iZTNkZDFmMGU2M2MvMC9FOUY3QTBBQTZE Q0NBMUZGN0QzRDYxNDYwRDU1MzRBMDA0QUIyQzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0QTAwNEFC MkM2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZiODdmZWItMGZlMi00MThhLWEz N2EtYmUzZGQxZjBlNjNjLzAvRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0 QTAwNEFCMkM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmDk+4ODUHC3TaMLllmxLVaZrx6FPpX+261 hr0aoHJP4kcshOCdEztSqUi5+7GFdTJqStGpGJvTH1uz6db/GT+mf2MWyHEt1QQ0 BRMbGi0yowAB+FFdzyZPQQdGqEEabuCNE22mAeihfo3n4YB6f8IffE/htENLF1uW RX+p5HYBj0WtsPriNQ+w9W+QWOR1qIKlcJrLJ/b5F5U+cdCEW+SPXBbUtMXm8/q8 OdAtV7UkTFEfT09jkPMZxJzSuM+kmuwLZsOhD+nvMC/DivU/PIZp43iYIxizfhit PnaVbZCQErfY0JPPKW5ChAC/QpyNzSbTD/s/H4rv7Hjb7aAbFW0= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:50 2025 by rpki-client