$ rpki-client -vvf repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft File: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft (raw, json) Hash identifier: R3fL6jqqOwCVYq12M0sAei0vfSZegQP0TsBIpdQ4y/U= Subject key identifier: 1F:D3:89:31:FB:65:B4:DC:9C:CC:16:63:25:C0:79:AD:D4:C4:DA:1D Authority key identifier: E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42 Certificate issuer: /CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42 Certificate serial: 79B0110F8978CAF6EBDAED66E94004F7D2E7E21E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft Manifest number: 04FF Signing time: Tue 05 Aug 2025 04:30:05 +0000 Manifest this update: Tue 05 Aug 2025 04:25:05 +0000 Manifest next update: Fri 08 Aug 2025 13:33:05 +0000 Files and hashes: 1: 35392e3135332e32342e302f32332d3233203d3e203539323835.roa (hash: 1SizngiTVzIbRBWH1t3CjVmzzkPKhWLCfAxINTFYNoo=) 2: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl (hash: NkUoerhBNxWvArP91QpohYxXGJYs9BEMzIKDOxm8V6A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 13:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b0:11:0f:89:78:ca:f6:eb:da:ed:66:e9:40:04:f7:d2:e7:e2:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42 Validity Not Before: Aug 5 04:25:05 2025 GMT Not After : Aug 8 13:33:05 2025 GMT Subject: CN=1FD38931FB65B4DC9CCC166325C079ADD4C4DA1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f8:47:24:f3:cb:3f:d1:17:95:9a:41:f7:ef: 25:0b:ee:2a:4f:1f:b8:11:5d:0d:f0:11:88:d7:eb: 08:9b:2b:43:cc:33:9a:56:fe:7f:22:df:4f:72:97: 09:c8:24:63:a3:32:85:bc:af:db:95:e0:7f:ba:1b: 9f:6a:57:50:ed:04:6c:fb:f6:bb:48:39:4e:a6:09: 65:02:13:02:91:27:fc:ae:14:01:8e:07:af:c6:9a: c6:f4:31:f0:f2:cc:55:aa:fa:52:81:ca:ec:9b:84: 41:a1:26:08:4e:19:bf:44:13:22:71:2d:8e:f7:ca: de:e9:ae:77:36:bd:2f:0e:68:f3:ea:f4:bb:96:d9: e8:df:82:4a:83:35:a1:d7:18:7e:f5:d1:91:6f:4d: bd:f7:5f:e1:f1:3a:bb:eb:e5:61:9a:61:40:26:f6: 7d:ea:61:a8:4e:ef:5c:fb:25:e0:a4:90:fc:8b:24: c5:7f:ff:f2:9e:53:e9:8b:1b:fb:ff:0f:e3:47:57: 08:59:38:44:5d:e0:1f:ab:9f:81:76:05:7d:95:03: ea:14:17:83:4e:ae:84:0a:f5:45:a2:d3:41:0f:2a: 8a:dc:ac:9f:d8:3b:a5:9e:cd:69:dd:80:8f:d3:9a: b2:9b:0a:fa:91:d9:74:95:c5:d9:00:cc:b9:c9:09: 34:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D3:89:31:FB:65:B4:DC:9C:CC:16:63:25:C0:79:AD:D4:C4:DA:1D X509v3 Authority Key Identifier: keyid:E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:8d:c5:55:29:4b:73:c6:10:24:1b:51:80:98:fa:dd:54:57: 4b:8e:df:05:70:56:7a:d8:a1:91:df:20:dd:9c:07:6e:d1:ee: 6d:66:52:83:49:b1:d1:8c:cc:8d:d8:c8:9a:58:ef:a1:9d:dc: a1:c8:f6:36:13:08:bc:02:e3:7a:39:00:0a:77:10:72:95:0c: ae:42:95:a6:27:88:08:34:b6:63:38:26:81:cb:0e:91:c9:c9: 36:65:16:13:85:10:bc:11:85:ba:cd:a4:f2:13:3b:48:12:35: 66:70:d3:42:5a:fe:cf:58:b7:7d:97:53:27:25:69:a2:7f:38: 64:d1:cf:e5:4f:02:e7:7c:30:fd:a7:f4:51:5a:33:7f:7a:11: fa:82:e7:7c:76:b8:94:42:dd:22:52:be:60:b2:49:3d:ce:51: 2b:90:b5:1b:89:e9:af:dd:7d:91:3c:7c:f6:71:9d:f0:70:e5: 91:d5:bb:b5:dd:58:a2:98:0b:3b:d5:b8:55:be:21:03:74:19: ac:88:b8:a0:1e:07:d6:10:f1:3e:2b:30:6d:b3:ad:a2:4a:50: c2:5c:d6:21:e9:b0:06:eb:1a:da:69:de:d1:3a:21:9c:57:6e: 4b:88:26:1d:40:40:7b:0d:c1:73:14:bf:a2:3b:50:f2:e5:c7: c7:a6:5d:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUebARD4l4yvbr2u1m6UAE99Ln4h4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRDNTYw MUJERUE0MjAeFw0yNTA4MDUwNDI1MDVaFw0yNTA4MDgxMzMzMDVaMDMxMTAvBgNV BAMTKDFGRDM4OTMxRkI2NUI0REM5Q0NDMTY2MzI1QzA3OUFERDRDNERBMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ+Eck88s/0ReVmkH37yUL7ipP H7gRXQ3wEYjX6wibK0PMM5pW/n8i309ylwnIJGOjMoW8r9uV4H+6G59qV1DtBGz7 9rtIOU6mCWUCEwKRJ/yuFAGOB6/Gmsb0MfDyzFWq+lKByuybhEGhJghOGb9EEyJx LY73yt7prnc2vS8OaPPq9LuW2ejfgkqDNaHXGH710ZFvTb33X+HxOrvr5WGaYUAm 9n3qYahO71z7JeCkkPyLJMV///KeU+mLG/v/D+NHVwhZOERd4B+rn4F2BX2VA+oU F4NOroQK9UWi00EPKorcrJ/YO6WezWndgI/TmrKbCvqR2XSVxdkAzLnJCTQ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH9OJMftltNyczBZjJcB5rdTE2h0wHwYDVR0j BBgwFoAU4PugPWtolc61NyLO/blMVgG96kIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTFmM2IzNy1iZDU0LTQ5MTEtOTA1Yi0zNjU0OTY2ODdjOGQvMC9FMEZCQTAzRDZC Njg5NUNFQjUzNzIyQ0VGREI5NEM1NjAxQkRFQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRDNTYwMUJE RUE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExZjNiMzctYmQ1NC00OTExLTkw NWItMzY1NDk2Njg3YzhkLzAvRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRD NTYwMUJERUE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSNxVUpS3PGECQbUYCY+t1UV0uO3wVwVnrY oZHfIN2cB27R7m1mUoNJsdGMzI3YyJpY76Gd3KHI9jYTCLwC43o5AAp3EHKVDK5C laYniAg0tmM4JoHLDpHJyTZlFhOFELwRhbrNpPITO0gSNWZw00Ja/s9Yt32XUycl aaJ/OGTRz+VPAud8MP2n9FFaM396EfqC53x2uJRC3SJSvmCyST3OUSuQtRuJ6a/d fZE8fPZxnfBw5ZHVu7XdWKKYCzvVuFW+IQN0GayIuKAeB9YQ8T4rMG2zraJKUMJc 1iHpsAbrGtpp3tE6IZxXbkuIJh1AQHsNwXMUv6I7UPLlx8emXXA= -----END CERTIFICATE-----Generated at Thu Aug 7 11:20:42 2025 by rpki-client