$ rpki-client -vvf repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft File: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft (raw, json) Hash identifier: AhPYj+WFkgdww+eAZs3SRC1r5GY+H9LUFmTFvYTPlWk= Subject key identifier: 34:35:51:50:85:C2:52:8A:3A:D1:1F:3D:E6:B8:03:C3:F5:61:AC:72 Authority key identifier: E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70 Certificate issuer: /CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70 Certificate serial: 2B6276CB2376C10417352D61D8B8C9B775686DBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft Manifest number: 021A Signing time: Wed 06 Aug 2025 04:20:57 +0000 Manifest this update: Wed 06 Aug 2025 04:15:57 +0000 Manifest next update: Sat 09 Aug 2025 04:43:57 +0000 Files and hashes: 1: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl (hash: T7XoBhsjvgWQ/BeW4ECylFzFgtHBm6sXvXcqddfTYd8=) 2: 3130332e3138362e302e302f32332d3234203d3e20313336303532.roa (hash: YlWhhG5+SXJ+RtEZrRBNLk9BnFzp5Av7c11ptEycGe4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 04:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:62:76:cb:23:76:c1:04:17:35:2d:61:d8:b8:c9:b7:75:68:6d:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70 Validity Not Before: Aug 6 04:15:57 2025 GMT Not After : Aug 9 04:43:57 2025 GMT Subject: CN=3435515085C2528A3AD11F3DE6B803C3F561AC72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c6:01:db:86:26:1a:1c:54:96:b1:9c:12:97: 47:55:08:77:e8:3e:53:a6:29:c2:41:c9:d9:15:f5: 10:6f:7d:2d:04:f2:f1:de:bf:a0:ca:79:9d:a9:85: 8e:a2:2d:23:28:65:1f:77:18:5c:9a:a2:77:3a:72: 02:4c:16:4e:8c:06:8a:2c:1c:2a:f5:e0:cd:1a:b2: 84:29:b4:80:c7:84:73:cd:7c:81:17:bf:a6:d7:f6: 4a:e7:12:3c:bf:98:54:37:20:b2:1b:2a:81:a4:78: 2d:38:5c:47:f1:a4:2f:c6:3e:39:cb:2c:79:a8:41: be:47:17:5d:9a:07:03:83:25:a0:f0:cd:e6:d8:1a: 01:d1:01:4c:49:8f:92:47:47:89:3b:ab:8a:b1:a1: f1:14:2f:77:63:82:81:25:8a:94:97:ed:08:ce:76: c6:60:e2:91:22:49:fe:8e:56:3f:92:ac:9d:bd:8c: 88:fd:0d:f3:75:c4:ea:10:df:e5:6a:87:8a:09:0e: 03:d6:c3:f4:da:65:bc:88:b0:ee:2e:b2:fd:95:d1: 23:3b:9b:df:13:05:2a:4b:45:5a:89:ba:4a:4a:6c: 17:9c:fc:76:99:23:12:d6:9e:50:9c:70:56:37:4a: 32:0b:f9:f0:55:b8:1f:8c:71:a8:75:00:a1:49:b6: 62:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:35:51:50:85:C2:52:8A:3A:D1:1F:3D:E6:B8:03:C3:F5:61:AC:72 X509v3 Authority Key Identifier: keyid:E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:5e:d2:80:15:d1:36:e6:63:ea:ca:97:58:d0:76:e9:b5:f1: 68:cc:74:66:fa:de:52:bd:5e:ca:85:f7:f0:e4:bf:60:e6:5d: 06:99:40:61:cf:22:09:fc:a9:7e:59:2b:e9:9c:ff:ad:7c:ac: 74:70:b3:b1:d9:b6:a1:18:5d:aa:d2:38:7c:4d:92:93:76:36: 4f:2a:12:2e:28:fd:6a:e4:64:52:0b:fb:91:1c:58:2a:b0:4f: 5c:19:e0:a8:e8:c3:55:5f:da:a0:05:be:1b:7e:a5:7c:b2:c5: 9b:80:eb:5d:bf:70:8b:bc:45:4c:81:c7:c1:d1:98:84:66:8e: 29:e6:70:ae:af:36:e8:14:42:d8:54:a9:db:93:2a:c5:02:3a: 81:79:3d:04:5e:dc:ef:c7:c4:80:7f:83:19:fe:4b:f8:1c:0f: 47:ef:2d:fe:66:59:61:c6:23:04:76:a9:5f:e6:bb:56:9d:d7: 7d:c0:3a:86:2f:65:0b:6c:f5:a9:9a:64:71:b8:dd:02:78:3f: b0:ba:a5:0d:b8:8d:f6:3d:35:86:bf:27:36:cc:19:b7:70:ff: d2:1c:3e:71:e0:4f:d0:16:ca:58:97:41:b8:2c:f7:50:f2:42: 21:fa:77:ba:24:9a:cc:3d:6b:e7:0f:4a:1a:15:75:98:4d:df: 66:c5:44:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK2J2yyN2wQQXNS1h2LjJt3Vobb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0Ex QURBNUQ3MDAeFw0yNTA4MDYwNDE1NTdaFw0yNTA4MDkwNDQzNTdaMDMxMTAvBgNV BAMTKDM0MzU1MTUwODVDMjUyOEEzQUQxMUYzREU2QjgwM0MzRjU2MUFDNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDExgHbhiYaHFSWsZwSl0dVCHfo PlOmKcJBydkV9RBvfS0E8vHev6DKeZ2phY6iLSMoZR93GFyaonc6cgJMFk6MBoos HCr14M0asoQptIDHhHPNfIEXv6bX9krnEjy/mFQ3ILIbKoGkeC04XEfxpC/GPjnL LHmoQb5HF12aBwODJaDwzebYGgHRAUxJj5JHR4k7q4qxofEUL3djgoElipSX7QjO dsZg4pEiSf6OVj+SrJ29jIj9DfN1xOoQ3+Vqh4oJDgPWw/TaZbyIsO4usv2V0SM7 m98TBSpLRVqJukpKbBec/HaZIxLWnlCccFY3SjIL+fBVuB+Mcah1AKFJtmKPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNDVRUIXCUoo60R895rgDw/VhrHIwHwYDVR0j BBgwFoAU4JZ1Se8y2J6f8WOPzxg0ehraXXAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzdhNmRkOC1hODQzLTQ2OTgtYTVmMy0zZWVjNDY4ZDE0YTQvMC9FMDk2NzU0OUVG MzJEODlFOUZGMTYzOEZDRjE4MzQ3QTFBREE1RDcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0ExQURB NUQ3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM3YTZkZDgtYTg0My00Njk4LWE1 ZjMtM2VlYzQ2OGQxNGE0LzAvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0 N0ExQURBNUQ3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhe0oAV0TbmY+rKl1jQdum18WjMdGb63lK9 XsqF9/Dkv2DmXQaZQGHPIgn8qX5ZK+mc/618rHRws7HZtqEYXarSOHxNkpN2Nk8q Ei4o/WrkZFIL+5EcWCqwT1wZ4Kjow1Vf2qAFvht+pXyyxZuA612/cIu8RUyBx8HR mIRmjinmcK6vNugUQthUqduTKsUCOoF5PQRe3O/HxIB/gxn+S/gcD0fvLf5mWWHG IwR2qV/mu1ad133AOoYvZQts9amaZHG43QJ4P7C6pQ24jfY9NYa/JzbMGbdw/9Ic PnHgT9AWyliXQbgs91DyQiH6d7okmsw9a+cPShoVdZhN32bFREY= -----END CERTIFICATE-----Generated at Thu Aug 7 03:29:57 2025 by rpki-client