$ rpki-client -vvf repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft File: E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft (raw, json) Hash identifier: lg6Xox3DRKWFY8sJHj8Dl5lA+hQZJbumgFFDZKKgLc0= Subject key identifier: 62:97:A1:EB:35:AF:39:74:F6:7A:EF:97:B5:3A:D9:41:39:81:33:3E Authority key identifier: E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61 Certificate issuer: /CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61 Certificate serial: 1663C6B7AD853FD3AA8F2944444A87457FE7BC2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft Manifest number: 04DE Signing time: Sun 15 Jun 2025 22:01:42 +0000 Manifest this update: Sun 15 Jun 2025 21:56:42 +0000 Manifest next update: Thu 19 Jun 2025 07:00:42 +0000 Files and hashes: 1: 323430353a366334303a3a2f33322d3438203d3e203234353237.roa (hash: sdUNTLR9jp0dwpPELDIKx4SufivRxg0Tg+/QbjfBOQs=) 2: 3138332e38312e3135322e302f32312d3234203d3e203234353237.roa (hash: HrGCjeL9LpaajCgOCMCFmtzXiHgvf2onAjSq9sq+a5M=) 3: E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl (hash: kNORvgud50+ajV/jiN/KilSL7R5P44RjgO3m0uMA56E=) 4: 3230332e3136302e35362e302f32312d3234203d3e203234353237.roa (hash: P99HVIzqHVCWDBqJ4r8v17rUky9V8VmAdjN3/2RrLPI=) 5: 3130332e3134382e34362e302f32332d3234203d3e203234353237.roa (hash: eQEzsyxVfpTHgHfaMJEWpEAU8ae5FhvdVXRN2kONR8w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:63:c6:b7:ad:85:3f:d3:aa:8f:29:44:44:4a:87:45:7f:e7:bc:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61 Validity Not Before: Jun 15 21:56:42 2025 GMT Not After : Jun 19 07:00:42 2025 GMT Subject: CN=6297A1EB35AF3974F67AEF97B53AD9413981333E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4d:e7:e6:23:29:53:0e:6d:02:7b:11:32:2c: aa:79:de:cf:58:d1:8e:42:42:62:33:7e:66:71:ea: 84:a0:ce:b4:cd:07:4d:9e:40:45:b9:ac:f2:70:30: 64:c5:60:a7:33:4c:14:14:91:69:42:5c:61:eb:f0: b3:56:d2:75:b3:06:18:65:b2:46:77:7f:7f:a6:34: d1:8f:75:29:9c:3d:fd:2f:80:23:62:8e:28:48:8c: 66:cf:8a:88:53:c5:57:ad:c9:1e:09:47:95:a6:19: 72:6e:a4:38:92:64:5c:6b:08:7b:c8:25:b4:23:07: 36:8c:7a:c0:08:b0:b5:89:31:49:10:06:43:f9:a9: 30:5e:eb:9a:80:54:37:b8:f9:96:6b:46:af:f0:0b: e7:59:d8:4b:23:87:d2:27:39:a6:e3:90:ae:21:fd: 2f:57:ba:ed:8b:74:37:df:d3:8c:ab:68:16:ad:9f: af:3f:3a:96:86:81:51:5a:de:0e:3a:e4:0f:a4:7a: dd:41:7a:ed:61:39:36:d3:d2:9f:9e:61:de:c6:0b: 88:80:69:34:a4:7f:b2:ca:83:5f:51:d1:0b:49:91: 6e:f3:9f:51:3f:35:f8:9b:4d:ca:ec:fd:51:d2:23: 3d:13:12:8b:5a:f0:55:92:53:56:14:d8:9c:3b:21: 6d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:97:A1:EB:35:AF:39:74:F6:7A:EF:97:B5:3A:D9:41:39:81:33:3E X509v3 Authority Key Identifier: keyid:E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b9:c0:6c:34:05:94:76:80:73:d8:72:e5:4e:dc:da:20:8e: 08:27:fd:55:67:4a:c2:55:63:a2:82:96:dd:d1:51:5f:4b:53: cc:77:dd:34:76:8a:8a:07:7f:0f:5f:be:b6:88:4b:03:27:21: f7:3f:5c:4e:16:92:de:fc:75:27:ce:c9:fe:94:ea:ff:14:95: 6b:ab:75:f8:ad:36:bc:00:2c:77:84:2c:48:a9:e8:c0:a6:35: eb:a3:ed:6c:55:39:40:63:b7:77:7f:9e:e6:73:c7:14:0f:1e: 8e:e2:d0:e6:79:51:6f:21:28:e3:02:40:f6:3c:f9:36:71:7c: 42:b2:31:cd:77:5e:5c:70:9a:59:b7:fd:5c:7d:32:b0:45:9b: 9f:0b:be:9f:ad:e3:5e:21:e6:3d:ad:08:d1:fd:af:b5:89:2e: c2:04:f3:91:91:52:3d:8b:b2:59:1b:cc:c2:e0:48:09:4d:dd: 50:be:06:d9:74:8d:b1:61:4a:b3:b4:1e:39:1a:69:4a:7d:2b: 51:17:de:82:d1:14:57:10:6c:bd:d6:f4:42:c2:48:7c:e5:c6: 58:9c:2c:c0:c3:71:fa:96:eb:c7:c7:f1:76:a3:62:2b:79:15: e2:d9:4f:4e:89:7c:27:86:96:70:02:42:ba:08:ae:4d:d0:62: c3:9b:3d:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFmPGt62FP9OqjylEREqHRX/nvCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0QTAw NEFCMkM2MTAeFw0yNTA2MTUyMTU2NDJaFw0yNTA2MTkwNzAwNDJaMDMxMTAvBgNV BAMTKDYyOTdBMUVCMzVBRjM5NzRGNjdBRUY5N0I1M0FEOTQxMzk4MTMzM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+TefmIylTDm0CexEyLKp53s9Y 0Y5CQmIzfmZx6oSgzrTNB02eQEW5rPJwMGTFYKczTBQUkWlCXGHr8LNW0nWzBhhl skZ3f3+mNNGPdSmcPf0vgCNijihIjGbPiohTxVetyR4JR5WmGXJupDiSZFxrCHvI JbQjBzaMesAIsLWJMUkQBkP5qTBe65qAVDe4+ZZrRq/wC+dZ2Esjh9InOabjkK4h /S9Xuu2LdDff04yraBatn68/OpaGgVFa3g465A+ket1Beu1hOTbT0p+eYd7GC4iA aTSkf7LKg19R0QtJkW7zn1E/NfibTcrs/VHSIz0TEota8FWSU1YU2Jw7IW2tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYpeh6zWvOXT2eu+XtTrZQTmBMz4wHwYDVR0j BBgwFoAU6fegqm3Mof99PWFGDVU0oASrLGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmI4N2ZlYi0wZmUyLTQxOGEtYTM3YS1iZTNkZDFmMGU2M2MvMC9FOUY3QTBBQTZE Q0NBMUZGN0QzRDYxNDYwRDU1MzRBMDA0QUIyQzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0QTAwNEFC MkM2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZiODdmZWItMGZlMi00MThhLWEz N2EtYmUzZGQxZjBlNjNjLzAvRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0 QTAwNEFCMkM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADy5wGw0BZR2gHPYcuVO3Nogjggn/VVnSsJV Y6KClt3RUV9LU8x33TR2iooHfw9fvraISwMnIfc/XE4Wkt78dSfOyf6U6v8UlWur dfitNrwALHeELEip6MCmNeuj7WxVOUBjt3d/nuZzxxQPHo7i0OZ5UW8hKOMCQPY8 +TZxfEKyMc13Xlxwmlm3/Vx9MrBFm58Lvp+t414h5j2tCNH9r7WJLsIE85GRUj2L slkbzMLgSAlN3VC+Btl0jbFhSrO0HjkaaUp9K1EX3oLRFFcQbL3W9ELCSHzlxlic LMDDcfqW68fH8XajYit5FeLZT06JfCeGlnACQroIrk3QYsObPQ0= -----END CERTIFICATE-----Generated at Mon Jun 16 00:04:22 2025 by rpki-client