$ rpki-client -vvf repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft File: E07D333345CD7D30F1DC10D98F6E73457739DF18.mft (raw, json) Hash identifier: 6OMjZf6Ri3jXjIQt9nzW+E20gsKuYVttWcT0DmOVFvM= Subject key identifier: BB:80:A0:64:CC:94:0C:52:E2:ED:D2:87:AF:B0:97:76:9D:40:48:72 Authority key identifier: E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18 Certificate issuer: /CN=E07D333345CD7D30F1DC10D98F6E73457739DF18 Certificate serial: 242082341C909DAEF551414A4E61A0F1DC8962B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft Manifest number: 02A8 Signing time: Tue 05 Aug 2025 05:02:07 +0000 Manifest this update: Tue 05 Aug 2025 04:57:07 +0000 Manifest next update: Fri 08 Aug 2025 13:58:07 +0000 Files and hashes: 1: E07D333345CD7D30F1DC10D98F6E73457739DF18.crl (hash: SvHs22CIpTtEYqTM6u8QQSFguST8ERNaT0cz3ZWPNOU=) 2: 3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa (hash: Ss59sjtuzZzHxU4wVgffc5lRWrpUhdlYbl1sQ1q9oHY=) 3: 3130332e3137352e32342e302f32342d3234203d3e20313339393532.roa (hash: 6N2zZq51uiKWHkHr8bnvsHH+UdIZQrumHmhwLr8jJiM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 13:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:20:82:34:1c:90:9d:ae:f5:51:41:4a:4e:61:a0:f1:dc:89:62:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E07D333345CD7D30F1DC10D98F6E73457739DF18 Validity Not Before: Aug 5 04:57:07 2025 GMT Not After : Aug 8 13:58:07 2025 GMT Subject: CN=BB80A064CC940C52E2EDD287AFB097769D404872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:33:41:c2:f9:12:63:a0:a7:be:15:14:f0:0b: 8d:ca:bd:f7:e9:21:55:25:04:11:0e:5e:c9:77:41: cd:4f:4e:f1:97:02:d4:60:da:c2:da:e1:da:a8:6b: bc:3c:a3:e4:bc:32:b0:24:cf:40:c2:79:32:ed:9c: fb:ca:a6:a8:77:55:bc:ce:2e:1c:9e:33:c6:6d:fd: 36:06:ae:2c:5f:12:c2:84:cd:34:9c:d3:57:28:48: b5:20:e7:1e:92:70:39:5f:b7:5a:0f:c0:db:d4:07: c4:bb:b3:3e:cf:f5:99:6f:4c:8f:84:73:71:00:5f: 52:e0:4c:31:c8:b9:6b:22:b7:7b:36:27:7b:6a:b6: ff:fa:62:2b:8a:46:5c:53:2a:ce:40:be:ae:76:37: c7:95:4e:8d:bc:46:cb:95:85:fa:11:bc:ce:66:97: e6:16:56:81:a1:9b:0e:90:1c:df:94:f7:1a:eb:f4: 7b:88:c9:d1:a9:23:c3:34:58:ef:70:af:f2:fc:c0: 9e:90:30:45:d1:89:1d:a7:e2:e9:05:27:1f:64:eb: 73:c2:79:34:af:7c:2f:55:7f:fb:89:8b:a2:92:b2: f9:54:97:30:b6:02:5f:e6:4b:2d:86:32:6f:02:9a: 67:3b:ec:de:67:14:ff:a9:fb:7d:d5:1b:3c:67:13: 93:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:80:A0:64:CC:94:0C:52:E2:ED:D2:87:AF:B0:97:76:9D:40:48:72 X509v3 Authority Key Identifier: keyid:E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:6e:d1:1b:ba:3e:ce:d3:a8:b8:88:ca:af:99:f9:8c:e0:98: 93:72:ea:05:da:0d:ab:c0:2a:97:f7:21:a3:f7:ac:b5:4a:d7: eb:cb:14:95:12:7d:ee:c5:7f:bb:d9:bb:b8:15:59:d9:eb:55: e4:d1:af:15:e4:06:b7:03:19:ec:60:b3:e0:e0:94:b0:7c:3b: f0:4e:2b:de:1a:c1:05:f8:20:aa:dc:ba:fb:a7:9e:3c:09:74: 55:e2:e7:26:70:02:2c:72:b7:f0:13:a3:73:14:a7:ac:06:6a: 6c:69:94:a7:11:46:1b:3c:20:0e:3e:54:d8:de:4d:3e:01:b2: de:8c:c5:91:72:ae:a0:47:4a:a8:7a:e4:1f:97:6f:7b:32:02: 8a:a2:b7:bc:89:1f:51:d9:cc:9f:dc:bd:ff:4f:51:ad:fd:d7: 8d:e0:17:bf:16:d1:d6:cd:12:a5:20:9d:cd:6c:17:7a:77:a0: 64:5f:1e:90:1a:00:77:c7:71:36:7f:4d:f6:01:23:0f:8c:20: 0b:b0:f5:63:55:f3:83:37:7d:2e:55:b5:34:05:bc:25:b6:d8: 19:d3:74:7b:2f:5c:cf:29:43:b4:44:89:e2:bb:85:fa:f8:8c: 31:4b:c7:7c:08:83:05:81:f7:9a:b4:4f:66:43:cb:0c:3b:2a: a4:e8:2f:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJCCCNByQna71UUFKTmGg8dyJYrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTczNDU3 NzM5REYxODAeFw0yNTA4MDUwNDU3MDdaFw0yNTA4MDgxMzU4MDdaMDMxMTAvBgNV BAMTKEJCODBBMDY0Q0M5NDBDNTJFMkVERDI4N0FGQjA5Nzc2OUQ0MDQ4NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtM0HC+RJjoKe+FRTwC43Kvffp IVUlBBEOXsl3Qc1PTvGXAtRg2sLa4dqoa7w8o+S8MrAkz0DCeTLtnPvKpqh3VbzO LhyeM8Zt/TYGrixfEsKEzTSc01coSLUg5x6ScDlft1oPwNvUB8S7sz7P9ZlvTI+E c3EAX1LgTDHIuWsit3s2J3tqtv/6YiuKRlxTKs5Avq52N8eVTo28RsuVhfoRvM5m l+YWVoGhmw6QHN+U9xrr9HuIydGpI8M0WO9wr/L8wJ6QMEXRiR2n4ukFJx9k63PC eTSvfC9Vf/uJi6KSsvlUlzC2Al/mSy2GMm8Cmmc77N5nFP+p+33VGzxnE5NhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu4CgZMyUDFLi7dKHr7CXdp1ASHIwHwYDVR0j BBgwFoAU4H0zM0XNfTDx3BDZj25zRXc53xgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTYyODgwZS1kNWYyLTQwNjktODhmZi0xMjY3YjdjYzAxYzUvMC9FMDdEMzMzMzQ1 Q0Q3RDMwRjFEQzEwRDk4RjZFNzM0NTc3MzlERjE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTczNDU3NzM5 REYxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU2Mjg4MGUtZDVmMi00MDY5LTg4 ZmYtMTI2N2I3Y2MwMWM1LzAvRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTcz NDU3NzM5REYxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExu0Ru6Ps7TqLiIyq+Z+YzgmJNy6gXaDavA Kpf3IaP3rLVK1+vLFJUSfe7Ff7vZu7gVWdnrVeTRrxXkBrcDGexgs+DglLB8O/BO K94awQX4IKrcuvunnjwJdFXi5yZwAixyt/ATo3MUp6wGamxplKcRRhs8IA4+VNje TT4Bst6MxZFyrqBHSqh65B+Xb3syAoqit7yJH1HZzJ/cvf9PUa39143gF78W0dbN EqUgnc1sF3p3oGRfHpAaAHfHcTZ/TfYBIw+MIAuw9WNV84M3fS5VtTQFvCW22BnT dHsvXM8pQ7REieK7hfr4jDFLx3wIgwWB95q0T2ZDyww7KqToL/k= -----END CERTIFICATE-----Generated at Thu Aug 7 03:16:18 2025 by rpki-client