$ rpki-client -vvf repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft File: E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft (raw, json) Hash identifier: SdTuLjo69kdEwuy2I5PztuAZYB1EmFXBZzejRhyfYyA= Subject key identifier: 35:D6:58:52:84:FD:73:D4:90:63:66:3F:DF:AF:72:01:88:37:65:D0 Authority key identifier: E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C Certificate issuer: /CN=E530A7B43C0C79FD8707007080E2F7AEA478FD1C Certificate serial: 48AC1ACBA922D092D07AA5D07119DE2D8F5E1171 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft Manifest number: 04E1 Signing time: Sun 15 Jun 2025 15:10:00 +0000 Manifest this update: Sun 15 Jun 2025 15:05:00 +0000 Manifest next update: Wed 18 Jun 2025 20:38:00 +0000 Files and hashes: 1: E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl (hash: Q+kSMxk6f0eAnLC6qEzEgoOb5yyzdqBq4yXFFq/JeM4=) 2: 323430323a613630303a3a2f33322d3332203d3e203137393936.roa (hash: mhHbC7IIWFFORZdV/WAdZvBGn0b08EabDQByz7GAvr4=) 3: 3230322e3136322e33322e302f32302d3234203d3e203137393936.roa (hash: 7t1UfL5E/ZJwSEO7orDivflRDFpoQvNkURGau+OZ9WE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ac:1a:cb:a9:22:d0:92:d0:7a:a5:d0:71:19:de:2d:8f:5e:11:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E530A7B43C0C79FD8707007080E2F7AEA478FD1C Validity Not Before: Jun 15 15:05:00 2025 GMT Not After : Jun 18 20:38:00 2025 GMT Subject: CN=35D6585284FD73D49063663FDFAF7201883765D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:17:43:be:8f:66:48:b4:e7:6d:19:7a:1b:f4: 17:73:b7:ea:94:93:16:e6:3b:61:c0:6f:e8:e6:4b: f6:7a:4e:e0:3c:d9:3d:5b:1c:91:c9:f2:41:fa:0b: 18:c9:1d:c9:a2:d0:2f:29:8f:ea:88:ce:74:46:c8: 87:90:cd:c4:1c:59:e6:64:c6:54:eb:a2:57:ef:bd: db:d3:66:7a:55:28:ec:8e:3e:4d:96:77:71:44:c3: 81:40:3f:5e:20:15:40:88:59:e3:17:d6:f9:04:59: c8:f5:f7:0e:13:12:74:ed:29:ee:73:cd:1a:0a:e1: 7b:a1:65:53:79:af:4d:d9:3d:09:42:db:51:1e:f5: ad:83:ed:a4:c0:6a:2a:56:e4:82:36:18:f0:2e:c2: fd:a9:89:33:9b:7e:9c:54:26:60:63:a3:45:95:b1: c1:30:13:a1:e3:31:d6:45:8b:1b:55:40:ce:2a:df: 14:ec:12:39:15:ac:ea:cf:e9:fe:65:93:dd:83:66: 26:53:73:85:22:99:e5:3d:e9:6a:05:d8:f1:7d:ef: b4:d4:9f:42:0a:2c:ab:72:f6:24:18:42:34:f7:e7: d9:d3:85:f7:0b:36:4a:77:18:98:83:ff:ed:08:87: 97:15:ce:d6:b3:d8:41:98:03:4d:ce:91:21:88:f9: aa:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D6:58:52:84:FD:73:D4:90:63:66:3F:DF:AF:72:01:88:37:65:D0 X509v3 Authority Key Identifier: keyid:E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f9:fe:d0:92:be:e8:ff:e9:e2:1a:11:96:4d:86:03:35:ad: e1:6b:ed:d8:21:8d:e0:d4:c9:a2:50:7e:7f:99:df:fa:6b:c4: 91:5e:3e:b3:66:cb:f0:06:40:a5:46:e4:7f:ca:25:8d:5f:cc: 93:d6:a1:f6:5b:49:1f:8a:d2:40:75:ac:56:5e:f2:d9:c0:c9: fb:7e:96:47:d3:f5:95:7d:b2:4c:d6:67:02:40:a2:60:73:e9: c6:21:c7:97:60:19:2e:28:8c:73:08:f0:68:bc:f3:72:6b:83: f5:01:63:5e:e1:1a:93:93:d0:ed:1c:7a:d3:b5:9e:24:45:19: 95:af:9c:f3:e5:75:ed:0e:13:8a:d1:7e:92:13:ec:00:80:69: ef:15:cc:1c:e6:1d:19:f3:04:10:60:b6:7a:39:8a:b7:7a:73: e4:72:c2:c4:3c:f8:01:d0:67:7c:9e:67:21:39:4e:8d:50:69: 89:54:f5:5f:f0:0a:15:ee:1a:cc:d1:f1:88:43:e4:0b:e2:ab: 55:79:f6:55:7c:c7:16:8b:44:9c:f9:51:33:08:ea:56:5b:4e: 5a:b0:76:f4:f9:13:97:e8:24:42:61:19:6c:12:4d:fb:ff:a0: 3e:d2:99:2a:ef:c5:7a:54:8f:86:a7:82:3b:94:17:97:59:d2: 7a:64:87:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSKway6ki0JLQeqXQcRneLY9eEXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3QUVB NDc4RkQxQzAeFw0yNTA2MTUxNTA1MDBaFw0yNTA2MTgyMDM4MDBaMDMxMTAvBgNV BAMTKDM1RDY1ODUyODRGRDczRDQ5MDYzNjYzRkRGQUY3MjAxODgzNzY1RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrF0O+j2ZItOdtGXob9Bdzt+qU kxbmO2HAb+jmS/Z6TuA82T1bHJHJ8kH6CxjJHcmi0C8pj+qIznRGyIeQzcQcWeZk xlTrolfvvdvTZnpVKOyOPk2Wd3FEw4FAP14gFUCIWeMX1vkEWcj19w4TEnTtKe5z zRoK4XuhZVN5r03ZPQlC21Ee9a2D7aTAaipW5II2GPAuwv2piTObfpxUJmBjo0WV scEwE6HjMdZFixtVQM4q3xTsEjkVrOrP6f5lk92DZiZTc4UimeU96WoF2PF977TU n0IKLKty9iQYQjT359nThfcLNkp3GJiD/+0Ih5cVztaz2EGYA03OkSGI+arpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNdZYUoT9c9SQY2Y/369yAYg3ZdAwHwYDVR0j BBgwFoAU5TCntDwMef2HBwBwgOL3rqR4/RwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2QyZjJmOC0zNTEyLTQzZTUtYmUxNy1iMTFiNThmOTYwODMvMC9FNTMwQTdCNDND MEM3OUZEODcwNzAwNzA4MEUyRjdBRUE0NzhGRDFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3QUVBNDc4 RkQxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNkMmYyZjgtMzUxMi00M2U1LWJl MTctYjExYjU4Zjk2MDgzLzAvRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3 QUVBNDc4RkQxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABr5/tCSvuj/6eIaEZZNhgM1reFr7dghjeDU yaJQfn+Z3/prxJFePrNmy/AGQKVG5H/KJY1fzJPWofZbSR+K0kB1rFZe8tnAyft+ lkfT9ZV9skzWZwJAomBz6cYhx5dgGS4ojHMI8Gi883Jrg/UBY17hGpOT0O0cetO1 niRFGZWvnPPlde0OE4rRfpIT7ACAae8VzBzmHRnzBBBgtno5ird6c+RywsQ8+AHQ Z3yeZyE5To1QaYlU9V/wChXuGszR8YhD5Aviq1V59lV8xxaLRJz5UTMI6lZbTlqw dvT5E5foJEJhGWwSTfv/oD7SmSrvxXpUj4angjuUF5dZ0npkh1Y= -----END CERTIFICATE-----Generated at Mon Jun 16 01:30:50 2025 by rpki-client