$ rpki-client -vvf repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft File: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft (raw, json) Hash identifier: YqPTMiGEX296h4tjLL2/kwff78pOEhRQr1Ydkmda3Ww= Subject key identifier: 6A:E8:9A:D0:AF:1B:50:8C:8A:DF:03:0D:C6:3D:55:70:F1:20:22:BE Authority key identifier: E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 Certificate issuer: /CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Certificate serial: 0E90D656C7DEABBF52667B3F31AF6542BD00A476 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft Manifest number: D9 Signing time: Sat 14 Jun 2025 09:11:08 +0000 Manifest this update: Sat 14 Jun 2025 09:06:08 +0000 Manifest next update: Tue 17 Jun 2025 11:55:08 +0000 Files and hashes: 1: 3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (hash: RhGN57E/ZSjGvHHK5MWz3epa97gXAk4w6YjAbvPV0fg=) 2: 3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa (hash: geAKj9+TOtyfNH9PasUiph/Br+j89slGEUwYIqBnSpQ=) 3: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl (hash: OlPScMLmIH4K0MIcS/KbtJYqVq3m7MruM7hCoeXOUNo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 11:55:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:90:d6:56:c7:de:ab:bf:52:66:7b:3f:31:af:65:42:bd:00:a4:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Validity Not Before: Jun 14 09:06:08 2025 GMT Not After : Jun 17 11:55:08 2025 GMT Subject: CN=6AE89AD0AF1B508C8ADF030DC63D5570F12022BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4c:7d:ea:ba:db:27:9c:7c:ad:f2:10:5f:48: 57:4a:dc:cb:12:b0:06:21:40:2a:48:dd:78:2e:81: cf:8c:e2:19:e8:3f:88:22:d5:fb:0e:e1:37:1c:58: cf:3c:17:3a:db:ef:34:a9:f0:d3:ea:9d:6a:bd:69: 7c:7f:2a:df:d6:3d:e0:8a:c8:28:0e:24:a7:f7:4c: c1:15:c7:69:5c:de:db:69:c4:81:90:a1:b8:63:9e: 90:c1:0a:03:ac:43:3a:65:94:4c:30:8a:16:79:73: 71:0f:52:cf:57:3d:ff:a7:6b:5c:3d:ff:df:4f:6c: 39:9e:e8:dc:b8:d2:33:8a:ca:8d:88:f6:32:13:c9: ba:bd:7f:3d:c3:df:cf:35:a6:a5:af:8e:af:f2:4d: a4:87:4c:ba:8c:3d:72:7a:27:83:40:b8:14:73:85: b1:95:04:6c:a4:a2:49:ba:ee:60:89:8c:2c:c9:c9: e9:9b:cb:4c:18:ff:7c:99:14:58:b7:dc:80:8f:aa: 49:12:fa:a2:1e:2a:cb:71:c3:4f:77:27:09:a9:74: 01:eb:e8:d1:23:5b:40:fd:54:0b:af:c4:7a:06:9f: 39:96:8b:ee:d5:be:15:8a:b7:fc:22:a7:4f:af:d2: cc:dc:88:95:82:93:b4:90:a5:5a:e3:2a:ba:cc:cf: 83:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E8:9A:D0:AF:1B:50:8C:8A:DF:03:0D:C6:3D:55:70:F1:20:22:BE X509v3 Authority Key Identifier: keyid:E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:38:61:85:bc:fb:eb:2b:bd:ec:62:1d:62:56:99:f0:44:bc: 45:be:51:88:51:f6:3b:6f:c7:86:b0:9e:4e:22:23:3a:c8:60: 6e:25:75:01:6f:b6:7c:e2:9d:3f:ff:24:89:87:48:bb:32:7f: b2:07:91:6a:3e:7f:1c:71:9a:6c:e5:17:4f:f4:a7:09:54:79: 77:93:7f:3a:b5:da:68:b4:dc:bf:ac:d4:89:54:e4:ff:72:7b: e6:92:f2:ac:3f:18:ba:05:63:26:7f:12:3d:10:89:cc:ce:4b: 45:66:2a:8d:33:33:15:a0:7a:f0:ff:ce:f3:26:d1:cd:fc:24: 39:2c:48:2b:5e:96:d5:ce:95:db:83:4d:3f:dd:2a:a7:78:50: e7:61:42:c3:86:7c:e1:9e:d1:a2:02:da:aa:96:70:4a:28:21: 87:07:24:01:89:7f:4e:71:2f:73:9b:dc:f3:2c:55:97:b7:1f: 52:55:ee:d6:f8:58:cf:2b:5c:14:1f:fe:aa:00:43:84:34:f3: e4:70:d2:78:64:f6:f3:66:67:bd:93:a3:1b:e4:60:a9:c9:7c: cc:a0:70:0c:4a:94:b8:19:82:f0:90:dc:28:37:d5:01:cd:90: f6:6e:10:aa:ef:12:0f:4a:25:55:33:19:89:95:bb:c0:c5:2c: 11:5e:b5:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDpDWVsfeq79SZns/Ma9lQr0ApHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUz MkI4RTk0MzAeFw0yNTA2MTQwOTA2MDhaFw0yNTA2MTcxMTU1MDhaMDMxMTAvBgNV BAMTKDZBRTg5QUQwQUYxQjUwOEM4QURGMDMwREM2M0Q1NTcwRjEyMDIyQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyTH3qutsnnHyt8hBfSFdK3MsS sAYhQCpI3Xgugc+M4hnoP4gi1fsO4TccWM88Fzrb7zSp8NPqnWq9aXx/Kt/WPeCK yCgOJKf3TMEVx2lc3ttpxIGQobhjnpDBCgOsQzpllEwwihZ5c3EPUs9XPf+na1w9 /99PbDme6Ny40jOKyo2I9jITybq9fz3D3881pqWvjq/yTaSHTLqMPXJ6J4NAuBRz hbGVBGykokm67mCJjCzJyemby0wY/3yZFFi33ICPqkkS+qIeKstxw093JwmpdAHr 6NEjW0D9VAuvxHoGnzmWi+7VvhWKt/wip0+v0szciJWCk7SQpVrjKrrMz4MNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUauia0K8bUIyK3wMNxj1VcPEgIr4wHwYDVR0j BBgwFoAU4p6DwsWJf6T2zv48N+4aZTK46UMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTdjZjlhMC1lOTI3LTQ4MTQtODQ0Ny04YjNhMDAyNzYwYTgvMC9FMjlFODNDMkM1 ODk3RkE0RjZDRUZFM0MzN0VFMUE2NTMyQjhFOTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUzMkI4 RTk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk3Y2Y5YTAtZTkyNy00ODE0LTg0 NDctOGIzYTAwMjc2MGE4LzAvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFB NjUzMkI4RTk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEo4YYW8++srvexiHWJWmfBEvEW+UYhR9jtv x4awnk4iIzrIYG4ldQFvtnzinT//JImHSLsyf7IHkWo+fxxxmmzlF0/0pwlUeXeT fzq12mi03L+s1IlU5P9ye+aS8qw/GLoFYyZ/Ej0QiczOS0VmKo0zMxWgevD/zvMm 0c38JDksSCteltXOlduDTT/dKqd4UOdhQsOGfOGe0aIC2qqWcEooIYcHJAGJf05x L3Ob3PMsVZe3H1JV7tb4WM8rXBQf/qoAQ4Q08+Rw0nhk9vNmZ72ToxvkYKnJfMyg cAxKlLgZgvCQ3Cg31QHNkPZuEKrvEg9KJVUzGYmVu8DFLBFete8= -----END CERTIFICATE-----Generated at Mon Jun 16 11:47:23 2025 by rpki-client