$ rpki-client -vvf repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft File: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft (raw, json) Hash identifier: /OSq1rWPI2i56BBlq76LbB54iMY1Sv8rT+ywocVVMe8= Subject key identifier: 06:53:7D:51:06:6D:62:F3:9C:2F:72:E3:B7:1C:A5:E0:C7:0B:59:51 Authority key identifier: E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 Certificate issuer: /CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Certificate serial: 333C640BBF2604577D66F9CCF8842FBBEA3BC139 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft Manifest number: 0349 Signing time: Thu 07 Aug 2025 14:41:51 +0000 Manifest this update: Thu 07 Aug 2025 14:36:51 +0000 Manifest next update: Sun 10 Aug 2025 21:26:51 +0000 Files and hashes: 1: 3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa (hash: zTY/Xpdv3MSQoDsOl/9obTqa4WAjpeiNnIpy7In5lOI=) 2: 3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa (hash: Wwvtox4pnVKWLsRl/E/cxu7UuLzmLQJxzxgchSEOlMg=) 3: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl (hash: FCeeY4i6glMEQt/lUUvDspPN3zH4cshBLszp8EFOK0E=) 4: 3130332e3136342e3233312e302f32342d3234203d3e20313431393133.roa (hash: NK0HZEK3BAxoXUs/T9BsQ+3NHYIYmmtIH82zUm/fzDk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 21:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:3c:64:0b:bf:26:04:57:7d:66:f9:cc:f8:84:2f:bb:ea:3b:c1:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Validity Not Before: Aug 7 14:36:51 2025 GMT Not After : Aug 10 21:26:51 2025 GMT Subject: CN=06537D51066D62F39C2F72E3B71CA5E0C70B5951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b2:80:78:ed:52:d0:97:83:00:9b:df:65:ee: 03:9d:54:2f:7d:d9:f4:96:51:b6:8d:59:ed:a3:31: f1:ac:bb:e8:c9:b3:d9:e4:ff:d2:23:eb:9f:bd:b6: 66:97:9e:0b:d1:54:5e:ce:6b:7e:69:08:14:07:fd: 45:dd:45:9f:a8:ef:c0:d6:f1:ba:98:bc:63:b7:16: b6:a0:81:45:39:96:ca:b9:21:03:96:6b:b1:cd:2c: 7b:88:eb:8f:d3:0b:57:d6:2b:cd:f5:81:d7:e3:03: dc:db:e0:22:86:a3:2d:45:26:2b:81:d9:d4:42:37: 57:ae:32:36:78:5b:3e:38:09:23:5f:0b:f3:80:8d: 5c:17:0b:5f:7b:20:69:b0:b3:88:aa:78:58:dc:37: 85:3f:fb:11:83:f1:0d:d8:96:0b:36:17:e0:97:38: cc:3f:ab:b4:42:46:48:ed:2e:e6:2d:a0:6d:86:67: 27:1b:39:01:be:0a:59:0a:db:17:50:76:97:e8:a9: 86:fd:af:5d:58:1a:f1:4d:28:39:d5:28:e8:e5:66: fe:c9:17:a2:8a:e7:c5:8b:27:6b:5e:c4:f5:d0:d8: a6:28:62:68:2f:3c:42:cc:3c:e0:6f:5a:27:30:28: 1e:27:c2:b1:e2:a8:05:96:0b:46:06:59:ba:16:1a: e3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:53:7D:51:06:6D:62:F3:9C:2F:72:E3:B7:1C:A5:E0:C7:0B:59:51 X509v3 Authority Key Identifier: keyid:E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:9c:c1:dc:f8:f3:e9:31:cc:71:90:a4:91:3a:ee:c9:16:93: 32:05:ba:91:8e:e6:76:3c:f3:21:66:9c:1e:f4:97:78:c0:f9: d4:df:63:b8:78:b0:50:69:cd:36:83:99:1d:68:f4:7b:d4:4e: 27:de:09:67:6d:f6:5c:2b:a9:6e:0c:dc:81:60:12:fc:6c:0e: 59:a9:e4:29:7c:8c:d9:a8:75:9f:b5:f3:4d:80:f5:b9:ed:36: 2c:b6:da:1d:2a:7b:7f:52:5c:97:cc:8d:f8:5a:a0:f0:f9:fd: 37:b3:5d:b8:41:5f:63:a8:30:1c:47:ae:2e:46:59:01:2d:9d: 58:82:89:9d:3d:f9:92:90:33:59:b6:58:ed:c4:12:47:29:d5: 99:f6:50:21:51:ea:d8:77:20:2b:f0:9d:fd:28:fe:e7:3b:bc: 41:66:ae:16:5b:29:f5:56:51:d5:d7:d3:3c:3d:23:26:fc:4f: 80:7b:ab:b8:a6:e4:32:39:e4:98:b9:c4:2c:4f:c2:7c:c9:60: 6d:11:f4:7a:92:37:f5:a3:d9:89:20:b8:fc:03:7f:69:ca:58: 33:ef:72:94:4c:4b:11:5a:fb:60:6b:ad:35:6c:9e:ed:ce:0d: e5:28:90:24:79:8e:db:0f:da:14:c9:e7:02:61:7c:ad:fc:0a: f2:5c:bc:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMzxkC78mBFd9ZvnM+IQvu+o7wTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIz MzNFQkI1ODAeFw0yNTA4MDcxNDM2NTFaFw0yNTA4MTAyMTI2NTFaMDMxMTAvBgNV BAMTKDA2NTM3RDUxMDY2RDYyRjM5QzJGNzJFM0I3MUNBNUUwQzcwQjU5NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzsoB47VLQl4MAm99l7gOdVC99 2fSWUbaNWe2jMfGsu+jJs9nk/9Ij65+9tmaXngvRVF7Oa35pCBQH/UXdRZ+o78DW 8bqYvGO3FraggUU5lsq5IQOWa7HNLHuI64/TC1fWK831gdfjA9zb4CKGoy1FJiuB 2dRCN1euMjZ4Wz44CSNfC/OAjVwXC197IGmws4iqeFjcN4U/+xGD8Q3Ylgs2F+CX OMw/q7RCRkjtLuYtoG2GZycbOQG+ClkK2xdQdpfoqYb9r11YGvFNKDnVKOjlZv7J F6KK58WLJ2texPXQ2KYoYmgvPELMPOBvWicwKB4nwrHiqAWWC0YGWboWGuM5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBlN9UQZtYvOcL3Ljtxyl4McLWVEwHwYDVR0j BBgwFoAU5yMdGj4FG9kD24bX3gB3wjM+u1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTE3OTRhYS0zMjkxLTQ4M2ItYWMwYi03YmM3YjFhNjdjYzYvMC9FNzIzMUQxQTNF MDUxQkQ5MDNEQjg2RDdERTAwNzdDMjMzM0VCQjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIzMzNF QkI1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWExNzk0YWEtMzI5MS00ODNiLWFj MGItN2JjN2IxYTY3Y2M2LzAvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3 QzIzMzNFQkI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJecwdz48+kxzHGQpJE67skWkzIFupGO5nY8 8yFmnB70l3jA+dTfY7h4sFBpzTaDmR1o9HvUTifeCWdt9lwrqW4M3IFgEvxsDlmp 5Cl8jNmodZ+1802A9bntNiy22h0qe39SXJfMjfhaoPD5/TezXbhBX2OoMBxHri5G WQEtnViCiZ09+ZKQM1m2WO3EEkcp1Zn2UCFR6th3ICvwnf0o/uc7vEFmrhZbKfVW UdXX0zw9Iyb8T4B7q7im5DI55Ji5xCxPwnzJYG0R9HqSN/Wj2YkguPwDf2nKWDPv cpRMSxFa+2BrrTVsnu3ODeUokCR5jtsP2hTJ5wJhfK38CvJcvNM= -----END CERTIFICATE-----Generated at Sat Aug 9 02:46:23 2025 by rpki-client