$ rpki-client -vvf repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft File: E0D54A271CD04583E0304613C7075C15FA03E497.mft (raw, json) Hash identifier: Q1PXFGF88WvAU3zGoEv+1qnc8VJUxeOBcZKEZIvbFKs= Subject key identifier: 58:52:9D:3B:63:09:61:FF:61:CE:80:05:61:0C:D7:6D:E2:46:53:98 Authority key identifier: E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 Certificate issuer: /CN=E0D54A271CD04583E0304613C7075C15FA03E497 Certificate serial: 3F35A7CBE6B9E43ED56DC572735AD26F3D580346 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft Manifest number: 03CA Signing time: Fri 08 Aug 2025 02:46:39 +0000 Manifest this update: Fri 08 Aug 2025 02:41:39 +0000 Manifest next update: Mon 11 Aug 2025 05:18:39 +0000 Files and hashes: 1: 323430343a636263303a3a2f33322d3332203d3e20313338383433.roa (hash: CUX/FZUFqFLVmfqcGn4Uxf38ndBFpWWkwqBCc1O0Nwg=) 2: E0D54A271CD04583E0304613C7075C15FA03E497.crl (hash: 8GkAJkpFGULcRsrUPurHmR1sGGMyOiZOzVmwEjQYgUA=) 3: 3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa (hash: iaC5WCoK/QU+xKaB0vnR2mTORiwDsx2/t1ElkG42yQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 05:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:35:a7:cb:e6:b9:e4:3e:d5:6d:c5:72:73:5a:d2:6f:3d:58:03:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0D54A271CD04583E0304613C7075C15FA03E497 Validity Not Before: Aug 8 02:41:39 2025 GMT Not After : Aug 11 05:18:39 2025 GMT Subject: CN=58529D3B630961FF61CE8005610CD76DE2465398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:87:a2:19:be:b0:46:3b:13:17:8b:bd:40:50: 77:30:3d:5e:69:49:61:b6:64:a7:94:af:ee:c8:da: 46:ce:a6:df:3c:a0:be:40:b9:c4:f9:e4:45:d3:b8: 49:69:92:9c:07:9e:e4:b9:77:75:5d:2f:ca:ef:76: 41:55:0a:b4:66:70:30:30:ba:2e:c6:d7:40:42:6b: 06:43:2a:24:a8:00:b1:91:f0:2f:ea:2e:d5:95:bb: 4a:df:d5:ff:dc:bf:d3:1a:eb:5f:de:1c:f7:b3:fd: fc:d5:27:d5:de:00:27:a6:b1:96:c2:61:3d:50:5c: 39:01:28:6c:18:02:dd:69:34:9a:83:17:f4:fa:61: c3:ef:b2:3f:21:ab:ee:c5:fb:cc:23:e7:a7:36:c0: ad:87:64:bd:be:54:e8:5e:d2:12:9e:eb:bd:1d:a8: c6:fa:b8:8e:bf:06:21:a4:6e:d0:f5:5a:4b:82:2d: a9:ae:27:37:18:c0:ae:68:89:1b:86:7b:d5:04:51: a7:3b:1d:26:cf:91:b6:1d:08:f1:56:30:fe:9c:64: 58:1d:a0:2d:ed:05:2b:03:86:ba:2b:49:c3:b1:9b: 5b:c1:c2:87:90:26:87:23:5c:e4:3e:5d:15:2a:99: 6c:80:8d:ae:de:e4:e0:a9:a1:cf:00:9b:86:de:74: f0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:52:9D:3B:63:09:61:FF:61:CE:80:05:61:0C:D7:6D:E2:46:53:98 X509v3 Authority Key Identifier: keyid:E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:8f:01:c7:25:ae:8f:0d:81:8b:7d:b7:f5:d4:04:7d:2f:16: 59:a7:ac:f4:86:ef:71:9c:2a:24:68:55:62:76:45:20:b8:2b: 89:42:63:ba:27:22:ce:7e:15:83:44:5b:04:48:87:be:9e:82: 5e:e7:2d:46:ab:99:51:b2:e1:28:ce:cb:ad:fc:46:a4:21:49: 0a:60:f9:1f:9a:32:b7:9d:5a:23:16:61:d5:48:d2:7d:b2:ff: 9b:92:ac:8a:a1:b6:13:26:b6:ac:4c:aa:9f:6f:86:34:47:c7: fa:1f:d4:b8:96:7b:f7:e4:9d:4c:c3:26:d5:87:31:1d:87:6a: 2b:3c:a1:18:1b:56:a8:da:1f:8a:fe:7a:ff:b3:d4:43:a7:64: 49:94:44:9d:90:d6:6f:ed:fd:73:33:9d:0a:64:3c:8d:2a:8d: 71:a3:0b:e1:38:cf:49:89:f1:fb:42:95:a6:c5:fa:f2:a5:2d: 8a:6e:97:44:fe:b4:25:2d:b2:e7:31:c5:33:0f:41:dd:4a:08: fd:83:6f:bc:ab:96:d4:a7:a3:f2:38:7b:e8:92:30:6c:2d:40: 5c:82:53:20:78:d1:4b:d9:cd:d5:4b:11:21:29:1a:26:42:42: 75:24:13:e3:6d:95:36:e3:c2:ad:f0:11:87:d8:5b:e7:ef:da: 15:16:41:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPzWny+a55D7VbcVyc1rSbz1YA0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVG QTAzRTQ5NzAeFw0yNTA4MDgwMjQxMzlaFw0yNTA4MTEwNTE4MzlaMDMxMTAvBgNV BAMTKDU4NTI5RDNCNjMwOTYxRkY2MUNFODAwNTYxMENENzZERTI0NjUzOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBh6IZvrBGOxMXi71AUHcwPV5p SWG2ZKeUr+7I2kbOpt88oL5AucT55EXTuElpkpwHnuS5d3VdL8rvdkFVCrRmcDAw ui7G10BCawZDKiSoALGR8C/qLtWVu0rf1f/cv9Ma61/eHPez/fzVJ9XeACemsZbC YT1QXDkBKGwYAt1pNJqDF/T6YcPvsj8hq+7F+8wj56c2wK2HZL2+VOhe0hKe670d qMb6uI6/BiGkbtD1WkuCLamuJzcYwK5oiRuGe9UEUac7HSbPkbYdCPFWMP6cZFgd oC3tBSsDhrorScOxm1vBwoeQJocjXOQ+XRUqmWyAja7e5OCpoc8Am4bedPAnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWFKdO2MJYf9hzoAFYQzXbeJGU5gwHwYDVR0j BBgwFoAU4NVKJxzQRYPgMEYTxwdcFfoD5JcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzU4NjdkOC0zZDZmLTQ4MTYtYjg0Zi1mZGQ1YzUwMmI2MzQvMC9FMEQ1NEEyNzFD RDA0NTgzRTAzMDQ2MTNDNzA3NUMxNUZBMDNFNDk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVGQTAz RTQ5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmM1ODY3ZDgtM2Q2Zi00ODE2LWI4 NGYtZmRkNWM1MDJiNjM0LzAvRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVD MTVGQTAzRTQ5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWPAcclro8NgYt9t/XUBH0vFlmnrPSG73Gc KiRoVWJ2RSC4K4lCY7onIs5+FYNEWwRIh76egl7nLUarmVGy4SjOy638RqQhSQpg +R+aMredWiMWYdVI0n2y/5uSrIqhthMmtqxMqp9vhjRHx/of1LiWe/fknUzDJtWH MR2Hais8oRgbVqjaH4r+ev+z1EOnZEmURJ2Q1m/t/XMznQpkPI0qjXGjC+E4z0mJ 8ftClabF+vKlLYpul0T+tCUtsucxxTMPQd1KCP2Db7yrltSno/I4e+iSMGwtQFyC UyB40UvZzdVLESEpGiZCQnUkE+NtlTbjwq3wEYfYW+fv2hUWQSg= -----END CERTIFICATE-----Generated at Sat Aug 9 22:38:19 2025 by rpki-client