$ rpki-client -vvf repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft File: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft (raw, json) Hash identifier: F/rThccrmfM+JMncSMYXcXHbhSgj20N6f6QDbyHOepo= Subject key identifier: 02:B7:F6:48:01:2D:59:AF:ED:FD:EC:0F:1F:10:4B:9C:47:23:23:4D Authority key identifier: E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42 Certificate issuer: /CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42 Certificate serial: 735AD1B6B4273E31EB542FB505345F11318679C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft Manifest number: 04E7 Signing time: Fri 13 Jun 2025 11:10:05 +0000 Manifest this update: Fri 13 Jun 2025 11:05:05 +0000 Manifest next update: Mon 16 Jun 2025 15:36:05 +0000 Files and hashes: 1: 35392e3135332e32342e302f32332d3233203d3e203539323835.roa (hash: 1SizngiTVzIbRBWH1t3CjVmzzkPKhWLCfAxINTFYNoo=) 2: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl (hash: Y+tcU7ykFy2PLI7hBe9Bnzc/WgQscECNr/vyPAreW/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 15:36:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:5a:d1:b6:b4:27:3e:31:eb:54:2f:b5:05:34:5f:11:31:86:79:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42 Validity Not Before: Jun 13 11:05:05 2025 GMT Not After : Jun 16 15:36:05 2025 GMT Subject: CN=02B7F648012D59AFEDFDEC0F1F104B9C4723234D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4a:49:5c:9f:cb:36:61:1f:f8:b2:90:15:11: 47:e4:b4:a9:5c:00:32:25:aa:97:9c:7a:e0:2a:cb: 81:65:07:6b:0b:fd:8b:6d:b4:03:04:2c:a2:de:7f: 67:2d:86:1c:00:2f:c4:a9:d0:a3:ce:dc:56:73:de: ed:b9:84:24:ab:ac:b7:5a:18:02:0e:02:31:11:8f: b4:c2:1e:ee:c1:58:24:9b:ce:b7:cc:28:28:4b:a9: 53:eb:7e:b9:36:99:88:8f:fb:b1:71:f8:be:39:3d: 23:5a:32:4e:33:1b:2b:64:29:e0:3d:30:1b:81:f8: b8:52:33:8c:2c:b1:72:1a:74:4d:87:ef:4c:4f:b6: 9f:72:ab:5a:c4:91:2a:64:42:80:b5:e2:5c:3e:6e: 1a:ea:9f:24:2c:d6:1b:6d:0c:31:bd:e6:5a:fd:20: 91:a9:54:77:5b:81:e9:c3:4a:65:49:47:1d:8b:b0: f4:bd:ae:f4:40:2f:c3:99:46:47:92:e1:e9:04:34: 64:59:f5:16:e1:da:a3:52:68:70:02:4d:f9:69:0c: ff:3a:ed:8d:a1:c6:77:23:aa:92:b1:3a:08:cf:86: b4:6e:74:6e:b9:70:0e:2a:e6:6b:92:49:40:42:9b: 94:63:31:b3:2a:6f:3d:92:04:d6:52:77:98:03:7b: 03:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B7:F6:48:01:2D:59:AF:ED:FD:EC:0F:1F:10:4B:9C:47:23:23:4D X509v3 Authority Key Identifier: keyid:E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:80:30:56:28:4f:b6:d4:f2:3a:94:8e:a0:0b:34:02:45:0f: ba:80:54:ed:17:17:48:21:61:f7:e6:a9:b8:31:88:bb:01:61: 74:c7:e6:17:db:88:e4:0a:b8:78:84:44:e3:95:bf:88:a2:4d: 42:85:0f:53:c6:60:07:08:79:43:fe:68:70:f6:5b:dd:bb:f6: 44:c2:9d:d4:5e:1d:54:b9:78:18:80:77:fe:89:1d:d8:00:2e: fb:1d:5b:92:6f:fb:9c:ed:2a:fc:ee:73:bc:1c:bf:6d:84:9e: 7b:84:8b:e1:e2:8f:da:9e:db:00:d4:ed:e2:51:ed:18:44:4f: 19:91:a1:8d:94:ed:08:db:a1:37:d8:dd:ab:3c:e5:d2:11:89: 04:d3:52:34:15:25:77:9d:90:c6:01:ec:bc:03:7b:12:a2:4e: 9b:9a:58:10:7e:35:3b:7d:9f:27:32:41:31:0d:01:c9:04:33: e8:2f:eb:eb:71:8b:25:fc:b8:4a:75:5e:41:11:05:d0:9f:58: ee:fd:fd:91:88:fe:40:58:48:e2:19:1b:4a:c2:27:73:97:0c: c2:37:79:f8:4f:8d:15:66:46:eb:4c:40:54:28:74:ab:39:55: 21:c8:1a:ad:8c:32:98:df:6b:57:4c:3e:99:0b:d8:78:f1:fd: 8d:ce:02:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc1rRtrQnPjHrVC+1BTRfETGGeckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRDNTYw MUJERUE0MjAeFw0yNTA2MTMxMTA1MDVaFw0yNTA2MTYxNTM2MDVaMDMxMTAvBgNV BAMTKDAyQjdGNjQ4MDEyRDU5QUZFREZERUMwRjFGMTA0QjlDNDcyMzIzNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDESklcn8s2YR/4spAVEUfktKlc ADIlqpeceuAqy4FlB2sL/YtttAMELKLef2cthhwAL8Sp0KPO3FZz3u25hCSrrLda GAIOAjERj7TCHu7BWCSbzrfMKChLqVPrfrk2mYiP+7Fx+L45PSNaMk4zGytkKeA9 MBuB+LhSM4wssXIadE2H70xPtp9yq1rEkSpkQoC14lw+bhrqnyQs1httDDG95lr9 IJGpVHdbgenDSmVJRx2LsPS9rvRAL8OZRkeS4ekENGRZ9Rbh2qNSaHACTflpDP86 7Y2hxncjqpKxOgjPhrRudG65cA4q5muSSUBCm5RjMbMqbz2SBNZSd5gDewMNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUArf2SAEtWa/t/ewPHxBLnEcjI00wHwYDVR0j BBgwFoAU4PugPWtolc61NyLO/blMVgG96kIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTFmM2IzNy1iZDU0LTQ5MTEtOTA1Yi0zNjU0OTY2ODdjOGQvMC9FMEZCQTAzRDZC Njg5NUNFQjUzNzIyQ0VGREI5NEM1NjAxQkRFQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRDNTYwMUJE RUE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExZjNiMzctYmQ1NC00OTExLTkw NWItMzY1NDk2Njg3YzhkLzAvRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRD NTYwMUJERUE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECAMFYoT7bU8jqUjqALNAJFD7qAVO0XF0gh YffmqbgxiLsBYXTH5hfbiOQKuHiEROOVv4iiTUKFD1PGYAcIeUP+aHD2W9279kTC ndReHVS5eBiAd/6JHdgALvsdW5Jv+5ztKvzuc7wcv22EnnuEi+Hij9qe2wDU7eJR 7RhETxmRoY2U7QjboTfY3as85dIRiQTTUjQVJXedkMYB7LwDexKiTpuaWBB+NTt9 nycyQTENAckEM+gv6+txiyX8uEp1XkERBdCfWO79/ZGI/kBYSOIZG0rCJ3OXDMI3 efhPjRVmRutMQFQodKs5VSHIGq2MMpjfa1dMPpkL2Hjx/Y3OArM= -----END CERTIFICATE-----Generated at Sun Jun 15 17:56:14 2025 by rpki-client