$ rpki-client -vvf repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft File: E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft (raw, json) Hash identifier: mOi/ARRp5/UnX2P5eh+nEWPocK7Fru2PR1SCw6XOuxk= Subject key identifier: 09:E8:E6:B2:02:03:A8:F0:44:4A:84:D1:0B:C0:8D:81:C9:83:B9:AA Authority key identifier: E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C Certificate issuer: /CN=E530A7B43C0C79FD8707007080E2F7AEA478FD1C Certificate serial: 18CDEAC402CBCEAA58267C5F4280B9197FC84409 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft Manifest number: 04F8 Signing time: Tue 05 Aug 2025 22:40:00 +0000 Manifest this update: Tue 05 Aug 2025 22:35:00 +0000 Manifest next update: Sat 09 Aug 2025 04:58:00 +0000 Files and hashes: 1: 323430323a613630303a3a2f33322d3332203d3e203137393936.roa (hash: mhHbC7IIWFFORZdV/WAdZvBGn0b08EabDQByz7GAvr4=) 2: E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl (hash: UbnjGXgG0q+uI3KB2Jq2zn89nx/6MUj5fBVnwkDmuBg=) 3: 3230322e3136322e33322e302f32302d3234203d3e203137393936.roa (hash: 7t1UfL5E/ZJwSEO7orDivflRDFpoQvNkURGau+OZ9WE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 04:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:cd:ea:c4:02:cb:ce:aa:58:26:7c:5f:42:80:b9:19:7f:c8:44:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E530A7B43C0C79FD8707007080E2F7AEA478FD1C Validity Not Before: Aug 5 22:35:00 2025 GMT Not After : Aug 9 04:58:00 2025 GMT Subject: CN=09E8E6B20203A8F0444A84D10BC08D81C983B9AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6b:ea:6b:19:3f:8f:60:c8:de:40:0b:65:e9: 8e:3e:b3:5f:91:81:35:c5:62:91:ff:b5:1b:66:5e: b5:2b:59:31:63:9f:1a:95:89:ab:88:fb:59:4e:93: 1b:af:03:9c:1c:51:62:41:9e:70:b9:b4:97:85:87: 91:bc:56:62:da:57:bf:95:5c:eb:75:41:65:f3:2e: 05:e7:d1:04:dd:aa:c3:9c:11:fb:e1:7b:d8:39:37: 57:fa:36:43:ba:e2:91:47:c2:26:3e:9f:c8:86:1d: 66:26:c6:f1:a3:50:83:aa:da:c7:1b:04:52:ff:81: 33:56:67:b7:4f:c2:6c:df:71:6e:a1:16:16:06:75: 11:fa:05:85:53:2f:ee:5a:ba:82:82:b5:8b:4a:cc: 1b:b2:7d:7f:a5:08:70:cf:2e:1a:cd:5b:9e:35:7a: 97:29:21:1b:c6:ad:2f:70:ee:d4:27:9e:d8:f5:d9: cd:45:d1:42:e1:5b:c6:fa:07:e0:bb:9b:9d:1c:fc: 86:39:6e:97:19:07:24:a4:3f:4d:30:5a:86:62:e5: 02:23:db:8e:0b:1b:b9:9d:d2:ab:68:96:c8:a5:91: 7f:66:2e:ea:2f:1d:e9:3a:ed:d0:29:a6:41:03:66: 4f:ce:2a:82:d3:d5:5e:27:fd:71:f5:70:34:5d:52: 35:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E8:E6:B2:02:03:A8:F0:44:4A:84:D1:0B:C0:8D:81:C9:83:B9:AA X509v3 Authority Key Identifier: keyid:E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:7a:7c:33:09:a5:6c:9e:0d:d2:2b:ac:2f:2c:8b:b5:36:0d: 61:81:c2:7f:dd:6f:c4:36:22:3a:32:ef:8e:38:33:e8:f2:c2: d5:f4:0b:f1:fb:c8:a9:7c:cf:f8:72:f9:62:be:9c:83:d1:f4: d1:8d:94:62:99:a2:0f:3a:24:25:30:c7:e4:8f:3d:a7:77:25: 58:79:a3:ef:79:d9:11:34:30:39:e0:bf:f3:a8:39:8a:3c:ae: b1:52:00:0d:96:93:ed:aa:d6:66:00:cd:2c:1a:4b:1d:38:89: 7e:5f:ef:81:37:7a:cb:81:c5:08:6d:d2:61:12:ca:c1:95:93: 32:b3:8a:8c:cc:5a:49:3a:83:5a:98:11:ca:e7:e1:d7:47:1a: 12:a1:f7:f9:f2:08:56:89:aa:cd:d8:f0:42:94:d2:62:e8:83: 60:c5:4d:a7:a2:47:cf:70:76:da:e9:9d:72:a1:86:e1:0b:da: e6:1c:8d:ed:53:ca:4a:4f:2e:86:f2:4b:4c:d1:59:c3:1d:81: fd:99:b5:fc:04:cf:83:b9:07:9e:d9:d6:62:23:7b:f2:60:07: 39:71:31:89:88:50:db:4f:61:db:96:36:9f:aa:72:63:df:76: 8f:20:f3:18:50:cd:19:0e:1c:8f:97:d7:c9:88:fe:83:08:32: 0f:32:72:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGM3qxALLzqpYJnxfQoC5GX/IRAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3QUVB NDc4RkQxQzAeFw0yNTA4MDUyMjM1MDBaFw0yNTA4MDkwNDU4MDBaMDMxMTAvBgNV BAMTKDA5RThFNkIyMDIwM0E4RjA0NDRBODREMTBCQzA4RDgxQzk4M0I5QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIa+prGT+PYMjeQAtl6Y4+s1+R gTXFYpH/tRtmXrUrWTFjnxqViauI+1lOkxuvA5wcUWJBnnC5tJeFh5G8VmLaV7+V XOt1QWXzLgXn0QTdqsOcEfvhe9g5N1f6NkO64pFHwiY+n8iGHWYmxvGjUIOq2scb BFL/gTNWZ7dPwmzfcW6hFhYGdRH6BYVTL+5auoKCtYtKzBuyfX+lCHDPLhrNW541 epcpIRvGrS9w7tQnntj12c1F0ULhW8b6B+C7m50c/IY5bpcZBySkP00wWoZi5QIj 244LG7md0qtolsilkX9mLuovHek67dAppkEDZk/OKoLT1V4n/XH1cDRdUjUTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCejmsgIDqPBESoTRC8CNgcmDuaowHwYDVR0j BBgwFoAU5TCntDwMef2HBwBwgOL3rqR4/RwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2QyZjJmOC0zNTEyLTQzZTUtYmUxNy1iMTFiNThmOTYwODMvMC9FNTMwQTdCNDND MEM3OUZEODcwNzAwNzA4MEUyRjdBRUE0NzhGRDFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3QUVBNDc4 RkQxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNkMmYyZjgtMzUxMi00M2U1LWJl MTctYjExYjU4Zjk2MDgzLzAvRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3 QUVBNDc4RkQxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJd6fDMJpWyeDdIrrC8si7U2DWGBwn/db8Q2 Ijoy7444M+jywtX0C/H7yKl8z/hy+WK+nIPR9NGNlGKZog86JCUwx+SPPad3JVh5 o+952RE0MDngv/OoOYo8rrFSAA2Wk+2q1mYAzSwaSx04iX5f74E3esuBxQht0mES ysGVkzKziozMWkk6g1qYEcrn4ddHGhKh9/nyCFaJqs3Y8EKU0mLog2DFTaeiR89w dtrpnXKhhuEL2uYcje1TykpPLobyS0zRWcMdgf2ZtfwEz4O5B57Z1mIje/JgBzlx MYmIUNtPYduWNp+qcmPfdo8g8xhQzRkOHI+X18mI/oMIMg8yciU= -----END CERTIFICATE-----Generated at Wed Aug 6 08:01:03 2025 by rpki-client