$ rpki-client -vvf repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft File: E07D333345CD7D30F1DC10D98F6E73457739DF18.mft (raw, json) Hash identifier: 6yDWy4P933DlrFqbyFXU9ALn1ok7a8hnJMspu+E2Ytg= Subject key identifier: D8:17:F5:11:0F:44:49:4E:1B:54:7B:51:93:13:25:C6:DF:E4:38:2C Authority key identifier: E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18 Certificate issuer: /CN=E07D333345CD7D30F1DC10D98F6E73457739DF18 Certificate serial: 5B62F0EB67133BBC18A7C7AE836C714734E3CB9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft Manifest number: 0292 Signing time: Tue 17 Jun 2025 04:12:04 +0000 Manifest this update: Tue 17 Jun 2025 04:07:04 +0000 Manifest next update: Fri 20 Jun 2025 04:34:04 +0000 Files and hashes: 1: 3130332e3137352e32342e302f32342d3234203d3e20313339393532.roa (hash: 6N2zZq51uiKWHkHr8bnvsHH+UdIZQrumHmhwLr8jJiM=) 2: 3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa (hash: Ss59sjtuzZzHxU4wVgffc5lRWrpUhdlYbl1sQ1q9oHY=) 3: E07D333345CD7D30F1DC10D98F6E73457739DF18.crl (hash: BjuQCKhyx2Vmc2kJnXETJmOkWMTLrQ2c88HVFqM1XUI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:62:f0:eb:67:13:3b:bc:18:a7:c7:ae:83:6c:71:47:34:e3:cb:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E07D333345CD7D30F1DC10D98F6E73457739DF18 Validity Not Before: Jun 17 04:07:04 2025 GMT Not After : Jun 20 04:34:04 2025 GMT Subject: CN=D817F5110F44494E1B547B51931325C6DFE4382C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a8:7b:2e:a9:8c:16:06:f0:24:3a:71:72:80: c5:12:51:63:51:1a:57:82:13:5a:7a:4f:2f:a5:21: 4d:ad:cc:0e:ff:e7:7f:6a:f3:de:45:32:7f:11:df: 9f:f9:00:12:14:e9:74:ec:bf:d4:a6:dd:dd:9f:b8: 77:b4:b0:9f:ec:d5:dd:85:4b:6a:c7:65:ba:92:7b: c7:1c:38:18:a9:11:a1:a5:cc:cb:a1:7c:7d:fc:39: f1:69:26:1b:8d:17:c1:e4:5a:34:8d:af:56:95:86: 71:83:a4:67:84:e5:62:4d:13:42:30:f5:6a:f2:98: 3d:58:46:48:12:0d:cf:9e:53:7b:27:d9:62:1a:ef: a8:0a:5e:4b:f2:66:68:a5:c4:75:57:f5:a2:1e:30: 27:24:dd:7d:ec:88:10:5e:ca:84:c0:41:f6:6b:dd: 9b:92:36:a6:bd:aa:93:23:59:e3:ee:6a:25:0f:0d: 96:23:21:cf:d5:91:75:2e:e6:ec:1f:1b:49:0d:b9: 36:e9:a7:6b:2f:89:de:59:91:04:85:27:3c:8e:85: 3e:81:ba:ec:c8:e3:fb:ce:d8:1b:5c:d2:1f:00:a0: c2:94:10:d3:36:c3:b8:42:86:5e:c9:43:6c:b5:38: 6e:50:aa:18:d0:1d:53:33:22:1c:dc:8a:a7:d5:95: e9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:17:F5:11:0F:44:49:4E:1B:54:7B:51:93:13:25:C6:DF:E4:38:2C X509v3 Authority Key Identifier: keyid:E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:1c:f7:df:10:7e:64:cc:ac:07:47:42:1a:67:60:2a:17:c7: df:5e:16:6a:d1:98:4a:56:e1:cd:3a:da:ce:f2:96:cc:45:55: db:6b:19:b4:11:a1:c6:57:35:0e:7b:4f:26:09:2f:dd:2d:fc: c0:80:ba:c5:79:72:d1:4e:ae:84:d7:82:cf:88:2a:4f:9d:ab: 23:20:13:16:b5:f2:7c:83:99:50:45:50:ca:86:c2:52:fc:68: 82:df:34:61:a9:cf:fc:34:c3:1a:dc:a7:8b:42:8e:6f:b1:ee: 15:09:ac:5a:07:0e:b6:02:47:de:ca:7f:a1:f1:05:ba:b1:76: 2a:e0:fc:e4:6f:93:3d:35:b7:a6:68:29:5a:c2:6a:25:39:52: 64:5f:78:8d:95:84:1e:26:49:22:3e:4f:31:89:0b:e2:3d:be: e1:6f:e7:c8:8d:45:b7:81:67:d7:da:22:b6:cc:d0:03:84:ae: 80:75:9f:20:a4:ca:69:a2:b4:67:ec:f2:00:6f:e6:2c:63:95: e8:8e:e5:b3:f7:3f:e8:2f:df:0e:b2:bd:ee:16:df:03:4e:9c: 64:10:3b:c3:2d:f7:d5:ac:67:5f:5f:b3:60:be:0f:a6:b5:22: 80:6b:f1:88:f5:06:8a:82:26:2a:bb:08:c7:19:1e:8f:ba:5a: b5:93:f7:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW2Lw62cTO7wYp8eug2xxRzTjy58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTczNDU3 NzM5REYxODAeFw0yNTA2MTcwNDA3MDRaFw0yNTA2MjAwNDM0MDRaMDMxMTAvBgNV BAMTKEQ4MTdGNTExMEY0NDQ5NEUxQjU0N0I1MTkzMTMyNUM2REZFNDM4MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBqHsuqYwWBvAkOnFygMUSUWNR GleCE1p6Ty+lIU2tzA7/539q895FMn8R35/5ABIU6XTsv9Sm3d2fuHe0sJ/s1d2F S2rHZbqSe8ccOBipEaGlzMuhfH38OfFpJhuNF8HkWjSNr1aVhnGDpGeE5WJNE0Iw 9WrymD1YRkgSDc+eU3sn2WIa76gKXkvyZmilxHVX9aIeMCck3X3siBBeyoTAQfZr 3ZuSNqa9qpMjWePuaiUPDZYjIc/VkXUu5uwfG0kNuTbpp2svid5ZkQSFJzyOhT6B uuzI4/vO2Btc0h8AoMKUENM2w7hChl7JQ2y1OG5QqhjQHVMzIhzciqfVlemXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Bf1EQ9ESU4bVHtRkxMlxt/kOCwwHwYDVR0j BBgwFoAU4H0zM0XNfTDx3BDZj25zRXc53xgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTYyODgwZS1kNWYyLTQwNjktODhmZi0xMjY3YjdjYzAxYzUvMC9FMDdEMzMzMzQ1 Q0Q3RDMwRjFEQzEwRDk4RjZFNzM0NTc3MzlERjE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTczNDU3NzM5 REYxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU2Mjg4MGUtZDVmMi00MDY5LTg4 ZmYtMTI2N2I3Y2MwMWM1LzAvRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTcz NDU3NzM5REYxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkc998QfmTMrAdHQhpnYCoXx99eFmrRmEpW 4c062s7ylsxFVdtrGbQRocZXNQ57TyYJL90t/MCAusV5ctFOroTXgs+IKk+dqyMg Exa18nyDmVBFUMqGwlL8aILfNGGpz/w0wxrcp4tCjm+x7hUJrFoHDrYCR97Kf6Hx Bbqxdirg/ORvkz01t6ZoKVrCaiU5UmRfeI2VhB4mSSI+TzGJC+I9vuFv58iNRbeB Z9faIrbM0AOEroB1nyCkymmitGfs8gBv5ixjleiO5bP3P+gv3w6yve4W3wNOnGQQ O8Mt99WsZ19fs2C+D6a1IoBr8Yj1BoqCJiq7CMcZHo+6WrWT9wM= -----END CERTIFICATE-----Generated at Tue Jun 17 08:13:00 2025 by rpki-client