$ rpki-client -vvf repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft File: E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft (raw, json) Hash identifier: vW3VH4MX0Nwj9H9yd14E5DDfWFc24aj0Vghw8DumeEQ= Subject key identifier: 60:C5:F4:62:66:7D:15:C9:62:48:E3:27:70:7A:AF:34:72:E8:0C:9F Authority key identifier: E0:7F:0E:8D:E2:57:2D:C7:B8:13:7E:C0:67:9F:42:64:5D:69:5A:54 Certificate issuer: /CN=E07F0E8DE2572DC7B8137EC0679F42645D695A54 Certificate serial: 285BD83179A2AEAD2B023AE599C5A5A45785E25D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft Manifest number: B1 Signing time: Wed 06 Aug 2025 03:20:41 +0000 Manifest this update: Wed 06 Aug 2025 03:15:41 +0000 Manifest next update: Sat 09 Aug 2025 06:21:41 +0000 Files and hashes: 1: E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl (hash: wUSgrZ8/ccZImXR2Nf9FEl+KaNpKNBzrvoAfPpa47zs=) 2: 323030313a6466333a666434303a3a2f34382d3438203d3e20313532303535.roa (hash: nQLud3Jn262khF6pI+ZrfSTaiFCpRTXR0OL4+TzR7ac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 06:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:5b:d8:31:79:a2:ae:ad:2b:02:3a:e5:99:c5:a5:a4:57:85:e2:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E07F0E8DE2572DC7B8137EC0679F42645D695A54 Validity Not Before: Aug 6 03:15:41 2025 GMT Not After : Aug 9 06:21:41 2025 GMT Subject: CN=60C5F462667D15C96248E327707AAF3472E80C9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4c:37:ce:b7:55:a8:2c:62:6a:9e:71:02:8d: 6f:07:c6:f3:a9:96:cf:be:10:d7:75:6a:36:25:75: 9e:d8:75:e4:bb:4f:00:be:ff:f0:b5:4e:fe:37:a6: 15:f7:2d:2f:70:2f:fb:87:e7:eb:da:27:2c:18:00: f5:aa:e2:e3:00:cd:87:8c:bc:99:92:d3:91:59:31: d0:26:36:94:04:4d:85:e0:1d:90:2b:27:a3:3e:f6: 9a:8e:9f:14:fa:ee:5c:42:a1:a1:de:12:d1:f3:6f: 6e:8f:96:ea:8a:44:fa:6a:b8:b8:71:ea:c1:65:f8: 72:02:a8:6b:4f:e1:10:a4:b0:82:38:21:dc:f2:fc: 49:af:a7:27:d4:2c:f8:c1:13:ec:8b:f5:21:b3:99: 0e:bc:8c:c7:9e:c9:69:44:73:3c:db:37:fc:c0:50: 3d:13:4e:17:75:ef:d2:b8:73:b2:82:60:be:f4:b4: ab:5f:32:0a:17:ee:b3:e9:87:c9:33:1b:fe:f5:73: d3:14:66:01:f7:20:a9:86:94:82:64:0f:9a:10:57: 77:de:79:41:84:cd:c0:2b:ba:dd:c5:08:0c:e9:fe: c6:c3:b7:45:2f:9b:fe:85:51:ee:50:ef:41:49:fe: 77:71:ec:57:b1:2e:77:83:55:f5:6e:aa:ca:80:aa: f9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C5:F4:62:66:7D:15:C9:62:48:E3:27:70:7A:AF:34:72:E8:0C:9F X509v3 Authority Key Identifier: keyid:E0:7F:0E:8D:E2:57:2D:C7:B8:13:7E:C0:67:9F:42:64:5D:69:5A:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:5f:d4:d2:c2:1e:b9:10:b6:1b:37:0c:8f:1b:0c:16:b5:3f: 69:32:8f:89:44:e4:93:89:20:3f:08:5b:87:18:ce:ed:f6:2c: d6:59:9e:02:38:5f:b2:6d:41:b1:ca:d2:62:eb:5e:90:1a:a7: 2c:ad:d7:94:35:33:77:0e:b6:b7:5d:2e:82:b8:77:5b:3e:3b: 51:14:19:d4:69:10:d0:a7:bd:04:b7:ba:2d:1e:4a:37:63:84: 99:52:fc:86:0f:56:7e:b6:da:dd:06:f6:ce:04:5c:21:64:bb: 5f:e0:2e:8f:98:24:03:c7:92:25:c5:a5:7b:2f:59:cb:48:ab: 07:9c:20:da:80:b4:92:0f:d5:67:91:4b:89:d2:1b:58:e1:c1: 50:3f:0f:47:72:c1:a9:59:a3:ac:eb:42:0c:fa:fc:80:5f:e2: 72:15:22:17:ce:98:6b:5f:5f:bd:e9:72:6e:b6:b0:74:0c:dd: ff:d6:b0:20:62:29:b2:73:e6:f1:ce:99:3b:16:b5:a5:ab:45: 78:21:92:8c:2e:d9:0a:83:de:b7:45:68:b2:9f:91:22:19:95: a9:e3:86:24:ba:73:ad:4a:b1:64:0e:88:ea:71:1f:a4:f1:22: 23:8a:00:42:b7:f6:3f:3b:5c:2a:f7:81:8f:30:b3:7f:97:54: 77:b9:80:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKFvYMXmirq0rAjrlmcWlpFeF4l0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA3RjBFOERFMjU3MkRDN0I4MTM3RUMwNjc5RjQyNjQ1 RDY5NUE1NDAeFw0yNTA4MDYwMzE1NDFaFw0yNTA4MDkwNjIxNDFaMDMxMTAvBgNV BAMTKDYwQzVGNDYyNjY3RDE1Qzk2MjQ4RTMyNzcwN0FBRjM0NzJFODBDOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOTDfOt1WoLGJqnnECjW8HxvOp ls++ENd1ajYldZ7YdeS7TwC+//C1Tv43phX3LS9wL/uH5+vaJywYAPWq4uMAzYeM vJmS05FZMdAmNpQETYXgHZArJ6M+9pqOnxT67lxCoaHeEtHzb26PluqKRPpquLhx 6sFl+HICqGtP4RCksII4Idzy/EmvpyfULPjBE+yL9SGzmQ68jMeeyWlEczzbN/zA UD0TThd179K4c7KCYL70tKtfMgoX7rPph8kzG/71c9MUZgH3IKmGlIJkD5oQV3fe eUGEzcArut3FCAzp/sbDt0Uvm/6FUe5Q70FJ/ndx7FexLneDVfVuqsqAqvmbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYMX0YmZ9FcliSOMncHqvNHLoDJ8wHwYDVR0j BBgwFoAU4H8OjeJXLce4E37AZ59CZF1pWlQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGYyODVlZi0zNDUzLTQxNzktYTU1My1mMTk1OTdkZTlkZWQvMC9FMDdGMEU4REUy NTcyREM3QjgxMzdFQzA2NzlGNDI2NDVENjk1QTU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA3RjBFOERFMjU3MkRDN0I4MTM3RUMwNjc5RjQyNjQ1RDY5 NUE1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThmMjg1ZWYtMzQ1My00MTc5LWE1 NTMtZjE5NTk3ZGU5ZGVkLzAvRTA3RjBFOERFMjU3MkRDN0I4MTM3RUMwNjc5RjQy NjQ1RDY5NUE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZf1NLCHrkQths3DI8bDBa1P2kyj4lE5JOJ ID8IW4cYzu32LNZZngI4X7JtQbHK0mLrXpAapyyt15Q1M3cOtrddLoK4d1s+O1EU GdRpENCnvQS3ui0eSjdjhJlS/IYPVn622t0G9s4EXCFku1/gLo+YJAPHkiXFpXsv WctIqwecINqAtJIP1WeRS4nSG1jhwVA/D0dywalZo6zrQgz6/IBf4nIVIhfOmGtf X73pcm62sHQM3f/WsCBiKbJz5vHOmTsWtaWrRXghkowu2QqD3rdFaLKfkSIZlanj hiS6c61KsWQOiOpxH6TxIiOKAEK39j87XCr3gY8ws3+XVHe5gHo= -----END CERTIFICATE-----Generated at Wed Aug 6 12:33:02 2025 by rpki-client