$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft File: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft (raw, json) Hash identifier: R5X5DVJ4lyZ1XrrEKGj6mWe6apbyD0vxdND1FbSRUiA= Subject key identifier: B4:A4:4B:B0:7D:84:E6:97:C6:0D:12:EE:21:F9:2B:DC:8A:2C:AA:DB Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 Certificate issuer: /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Certificate serial: 2078D37FDA3518CF9EF8F37FA8C3ABCCD099ADC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft Manifest number: 04DD Signing time: Sun 15 Jun 2025 15:32:03 +0000 Manifest this update: Sun 15 Jun 2025 15:27:03 +0000 Manifest next update: Wed 18 Jun 2025 23:03:03 +0000 Files and hashes: 1: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl (hash: xACSd6xmyjchEB3E4qZP90vsUx/qLxsTBCvZuwx/mSs=) 2: 3130332e3133302e36332e302f32342d3234203d3e20313338303739.roa (hash: BTJyyClQJ2ooNN9EN9agUZZ+ml+xViKf+qFHMjyGIK0=) 3: 3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa (hash: 8GAdTJuNR1Zetl+ziDhBJwBFLCcefBc1zOZpq/utdAc=) 4: 3130332e3133302e36302e302f32322d3232203d3e20313338303739.roa (hash: dr1CQsFDr+grBIANLd3KqKBw7/lJxKh8r7O2jOMsoyE=) 5: 3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa (hash: gA/G4KU0S654m0JbYV6SpYNvybqVwcWtbGvUC8YnGdc=) 6: 3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa (hash: t1GlQPTqCX0tSN2oGwnozLwYbWtyVQRe58xqkUEfAuQ=) 7: 3130332e3133302e36312e302f32342d3234203d3e20313338303739.roa (hash: VmKn4H92OZlUtnRAAPlH3DAWvPgKEL7aXZz1kY1YrQ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 23:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:78:d3:7f:da:35:18:cf:9e:f8:f3:7f:a8:c3:ab:cc:d0:99:ad:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Validity Not Before: Jun 15 15:27:03 2025 GMT Not After : Jun 18 23:03:03 2025 GMT Subject: CN=B4A44BB07D84E697C60D12EE21F92BDC8A2CAADB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f4:51:4d:59:77:fa:22:27:3c:1c:c9:da:69: ad:8b:00:cf:44:55:fd:bf:eb:e5:3b:c0:6c:0d:b6: 67:2d:86:96:17:67:86:64:e2:2c:48:79:9d:17:5c: 2e:93:fd:51:8a:d9:45:c0:cd:6a:9e:fc:e6:25:40: 28:df:47:b6:ba:06:13:5f:fd:8d:a9:f1:c1:8e:1a: 8f:01:27:fc:b0:f5:0b:14:e5:c0:d6:dc:f6:70:33: 8e:b1:ea:31:e7:19:a5:7d:9e:30:d5:bd:06:fd:a8: 3e:7c:fc:8b:d7:e5:87:a1:6c:93:d4:33:c3:c3:d5: b1:b9:36:da:f7:a3:3a:e5:06:8a:34:da:0b:33:43: 92:b2:2a:59:0b:9d:c8:80:ac:ad:0d:ae:b2:b0:d5: 17:3a:72:38:03:ba:35:15:d8:6b:e0:51:b7:0f:3b: 3e:d4:af:36:9d:85:71:a0:f1:f9:df:12:23:0c:6d: 59:8b:53:85:a1:64:84:f1:af:ee:44:0b:38:3c:d1: 1a:37:40:c9:f4:df:c9:23:f5:de:bc:76:e5:e0:15: 99:21:3c:b9:c0:57:05:b3:2f:72:2a:87:23:0d:cc: ce:3f:46:fd:88:ed:1a:e9:d8:1b:ca:7f:0d:e4:e6: 7a:19:30:e9:f5:18:63:f8:11:d3:34:6d:22:84:92: c6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A4:4B:B0:7D:84:E6:97:C6:0D:12:EE:21:F9:2B:DC:8A:2C:AA:DB X509v3 Authority Key Identifier: keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:82:27:2d:6d:97:78:58:49:d7:ea:4a:a4:00:6a:cd:3d:fa: dd:d5:68:d5:df:46:0f:c4:79:72:d3:67:94:30:45:8f:3f:b0: 1c:f6:70:ba:3c:f3:38:13:03:d9:ee:9d:ad:ce:4d:5b:1f:f6: f7:02:a1:75:9e:22:76:2e:02:a3:5a:93:4f:03:67:8d:e0:f5: 92:0e:f5:d6:a3:82:e6:01:9d:db:49:53:09:4f:bc:c0:48:b0: 77:82:d2:59:2d:8c:80:db:b4:f4:1f:9d:2b:04:7c:28:06:6e: c8:47:09:e6:70:85:96:35:a5:f4:23:73:d4:be:80:ca:09:dd: 7b:87:18:94:73:04:e6:f3:6d:a4:a4:70:2f:d2:3e:15:db:eb: d1:c3:9b:ce:9a:8a:51:51:42:e7:86:52:9b:a1:10:c4:88:2b: ea:de:d9:b3:2d:dd:54:a6:90:e1:3a:6d:9c:bd:66:65:28:2f: 5d:6a:3a:e2:0c:32:b5:cf:0c:dc:6c:15:eb:23:eb:36:41:52: 6e:a0:30:75:22:55:e8:56:93:4b:83:24:a0:94:08:68:7f:13: 78:c6:60:3f:5f:77:53:bd:ee:ff:a8:23:15:07:50:78:70:8c: 3a:09:ea:3f:79:39:79:8b:75:b8:17:c7:ad:6c:e2:2a:e6:4d: 47:d0:b4:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIHjTf9o1GM+e+PN/qMOrzNCZrccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVE Q0YwOEY1MjAeFw0yNTA2MTUxNTI3MDNaFw0yNTA2MTgyMzAzMDNaMDMxMTAvBgNV BAMTKEI0QTQ0QkIwN0Q4NEU2OTdDNjBEMTJFRTIxRjkyQkRDOEEyQ0FBREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ9FFNWXf6Iic8HMnaaa2LAM9E Vf2/6+U7wGwNtmcthpYXZ4Zk4ixIeZ0XXC6T/VGK2UXAzWqe/OYlQCjfR7a6BhNf /Y2p8cGOGo8BJ/yw9QsU5cDW3PZwM46x6jHnGaV9njDVvQb9qD58/IvX5YehbJPU M8PD1bG5Ntr3ozrlBoo02gszQ5KyKlkLnciArK0NrrKw1Rc6cjgDujUV2GvgUbcP Oz7UrzadhXGg8fnfEiMMbVmLU4WhZITxr+5ECzg80Ro3QMn038kj9d68duXgFZkh PLnAVwWzL3IqhyMNzM4/Rv2I7Rrp2BvKfw3k5noZMOn1GGP4EdM0bSKEksYxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtKRLsH2E5pfGDRLuIfkr3IosqtswHwYDVR0j BBgwFoAU4XpeuUFW3iP83I8pshD83tzwj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTJhM2YyOC04MjczLTRkZDUtODdmYy0xZWYwMGFjYWM5YjYvMC9FMTdBNUVCOTQx NTZERTIzRkNEQzhGMjlCMjEwRkNERURDRjA4RjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVEQ0Yw OEY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTEyYTNmMjgtODI3My00ZGQ1LTg3 ZmMtMWVmMDBhY2FjOWI2LzAvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZD REVEQ0YwOEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACCJy1tl3hYSdfqSqQAas09+t3VaNXfRg/E eXLTZ5QwRY8/sBz2cLo88zgTA9nuna3OTVsf9vcCoXWeInYuAqNak08DZ43g9ZIO 9dajguYBndtJUwlPvMBIsHeC0lktjIDbtPQfnSsEfCgGbshHCeZwhZY1pfQjc9S+ gMoJ3XuHGJRzBObzbaSkcC/SPhXb69HDm86ailFRQueGUpuhEMSIK+re2bMt3VSm kOE6bZy9ZmUoL11qOuIMMrXPDNxsFesj6zZBUm6gMHUiVehWk0uDJKCUCGh/E3jG YD9fd1O97v+oIxUHUHhwjDoJ6j95OXmLdbgXx61s4irmTUfQtOU= -----END CERTIFICATE-----Generated at Mon Jun 16 13:43:24 2025 by rpki-client