$ rpki-client -vvf repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft File: 04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft (raw, json) Hash identifier: QNtn/tUoYLiiyBRH7mFqHXW8pcYjUQxHROfILLh9TEM= Subject key identifier: A3:66:C5:B1:B4:83:94:F0:C8:43:12:86:7E:C0:D3:8D:84:03:C3:A1 Authority key identifier: 04:EE:3B:C3:69:17:32:E0:69:DF:0D:9D:29:DE:36:06:11:CC:F0:DB Certificate issuer: /CN=04EE3BC3691732E069DF0D9D29DE360611CCF0DB Certificate serial: C34E6D142B0450F94D335AF69215FB3958E347 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft Manifest number: 01CB Signing time: Tue 05 Aug 2025 18:01:46 +0000 Manifest this update: Tue 05 Aug 2025 17:56:46 +0000 Manifest next update: Fri 08 Aug 2025 18:37:46 +0000 Files and hashes: 1: 3130332e38382e39302e302f32332d3234203d3e20313530323232.roa (hash: RICXQj6rsugNHVh/wSozR+ATp/7OAGFCxt5pyTwldyU=) 2: 3130332e38382e39302e302f32342d3234203d3e20313530323232.roa (hash: c8FIGaCU0t2/B828bx0ZmZOFxlHPrYIwjNCfoYq4Eck=) 3: 04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl (hash: pG3bjoo4dRVSg/BgD/E82V/MUmYsg3bdnd+6gpgIzWk=) 4: 3130332e38382e39312e302f32342d3234203d3e20313530323232.roa (hash: 16WvPyi38t5aKz8ZyY3F0kSDSMJ8HK1h7g9RnFd2LL0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 18:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c3:4e:6d:14:2b:04:50:f9:4d:33:5a:f6:92:15:fb:39:58:e3:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04EE3BC3691732E069DF0D9D29DE360611CCF0DB Validity Not Before: Aug 5 17:56:46 2025 GMT Not After : Aug 8 18:37:46 2025 GMT Subject: CN=A366C5B1B48394F0C84312867EC0D38D8403C3A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c6:46:10:79:10:c8:1d:0f:07:57:ac:28:ab: bc:b3:36:4b:f4:92:98:8e:35:69:53:eb:7a:55:48: f3:98:b9:c1:09:2a:ae:42:33:c3:74:b1:4e:f2:19: 54:d2:0d:2e:a1:15:ac:cd:87:ce:3b:30:d5:e1:c0: 6c:d7:33:d9:90:eb:06:22:9b:09:af:48:25:73:27: f7:40:21:06:ab:b1:66:5b:dd:c5:ac:df:2c:84:b6: 6c:d7:4a:77:0c:47:38:93:df:59:9c:fb:11:5b:39: 87:46:a2:db:a9:ea:07:fa:c1:0f:42:0c:06:07:87: 91:aa:00:e1:2d:57:1e:de:e0:35:bb:f9:19:53:bd: b7:d5:a7:b9:0f:a2:34:0e:44:06:c6:84:11:f0:3a: 4a:f7:0d:7b:03:00:8e:6a:93:b9:78:3f:8e:6f:0e: 60:e9:63:d6:f6:35:53:77:df:ab:0d:26:08:a7:9a: c2:f7:fe:f5:a0:f3:83:60:7a:34:3a:2f:0f:44:e3: 7a:f1:1a:36:cf:6d:e5:63:9f:ad:eb:38:04:35:af: 4b:17:0c:13:23:28:cc:2e:ee:ad:90:a9:0e:8f:59: c7:50:89:2f:1c:d7:86:1d:08:1e:b6:aa:19:f6:ef: af:e4:6a:14:3b:cc:c1:a3:38:c1:56:30:1b:f3:9e: ba:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:66:C5:B1:B4:83:94:F0:C8:43:12:86:7E:C0:D3:8D:84:03:C3:A1 X509v3 Authority Key Identifier: keyid:04:EE:3B:C3:69:17:32:E0:69:DF:0D:9D:29:DE:36:06:11:CC:F0:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:92:cc:34:95:b1:fe:58:03:9f:da:06:f4:67:03:3b:9e:70: 06:05:1c:16:8b:0a:63:ac:d5:6d:3f:e9:f1:36:36:09:e9:83: fd:79:e8:55:0e:ab:dc:ba:64:16:e2:fd:45:7a:0e:75:6c:de: 86:d6:22:cb:7f:97:4c:27:11:1f:11:50:51:b5:b9:06:94:8b: bd:77:e9:11:df:de:cb:e0:34:23:10:0a:2b:72:2a:ed:06:bb: b5:7e:ee:cb:1f:f8:bd:28:f4:6a:e6:61:50:dc:62:a7:5c:32: 3f:2f:41:5a:df:bc:11:48:d4:b9:bc:b6:55:8f:05:3d:2b:c4: 64:c9:ac:a4:e9:c5:99:b6:50:2f:5e:65:8b:94:b8:fc:2e:15: 47:e8:84:ce:b3:66:6e:6a:a0:94:8e:b9:ad:8d:d7:91:b3:f3: 84:9a:70:e7:59:49:27:c3:5b:ce:3e:64:84:fb:39:0e:b3:2d: 42:fd:7e:f7:b3:87:bf:fa:45:4b:60:bc:b4:76:ec:b6:92:74: ee:47:9f:21:96:fe:75:bf:e6:8b:14:da:cb:f6:ba:12:cc:3b: 62:60:d9:ff:ee:e2:21:84:2a:f7:ce:55:c5:bc:f3:6c:55:19: a6:d2:8b:91:37:e7:fa:b8:60:c9:87:ad:f3:2b:2f:00:6e:2f: b7:c5:98:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAMNObRQrBFD5TTNa9pIV+zlY40cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2MDYx MUNDRjBEQjAeFw0yNTA4MDUxNzU2NDZaFw0yNTA4MDgxODM3NDZaMDMxMTAvBgNV BAMTKEEzNjZDNUIxQjQ4Mzk0RjBDODQzMTI4NjdFQzBEMzhEODQwM0MzQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfxkYQeRDIHQ8HV6woq7yzNkv0 kpiONWlT63pVSPOYucEJKq5CM8N0sU7yGVTSDS6hFazNh847MNXhwGzXM9mQ6wYi mwmvSCVzJ/dAIQarsWZb3cWs3yyEtmzXSncMRziT31mc+xFbOYdGotup6gf6wQ9C DAYHh5GqAOEtVx7e4DW7+RlTvbfVp7kPojQORAbGhBHwOkr3DXsDAI5qk7l4P45v DmDpY9b2NVN336sNJginmsL3/vWg84NgejQ6Lw9E43rxGjbPbeVjn63rOAQ1r0sX DBMjKMwu7q2QqQ6PWcdQiS8c14YdCB62qhn276/kahQ7zMGjOMFWMBvznrp9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo2bFsbSDlPDIQxKGfsDTjYQDw6EwHwYDVR0j BBgwFoAUBO47w2kXMuBp3w2dKd42BhHM8NswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTkxODA5ZS1kZDQ5LTRjNTItYjExZi0yYTUxOGMzYWE4NTYvMC8wNEVFM0JDMzY5 MTczMkUwNjlERjBEOUQyOURFMzYwNjExQ0NGMERCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2MDYxMUND RjBEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5MTgwOWUtZGQ0OS00YzUyLWIx MWYtMmE1MThjM2FhODU2LzAvMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2 MDYxMUNDRjBEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCSzDSVsf5YA5/aBvRnAzuecAYFHBaLCmOs 1W0/6fE2Ngnpg/156FUOq9y6ZBbi/UV6DnVs3obWIst/l0wnER8RUFG1uQaUi713 6RHf3svgNCMQCityKu0Gu7V+7ssf+L0o9GrmYVDcYqdcMj8vQVrfvBFI1Lm8tlWP BT0rxGTJrKTpxZm2UC9eZYuUuPwuFUfohM6zZm5qoJSOua2N15Gz84SacOdZSSfD W84+ZIT7OQ6zLUL9fvezh7/6RUtgvLR27LaSdO5HnyGW/nW/5osU2sv2uhLMO2Jg 2f/u4iGEKvfOVcW882xVGabSi5E35/q4YMmHrfMrLwBuL7fFmCw= -----END CERTIFICATE-----Generated at Wed Aug 6 12:25:16 2025 by rpki-client