$ rpki-client -vvf repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft File: E025EB5354ADB573B451D02820EA68FD4CAE920A.mft (raw, json) Hash identifier: CeDTQscBCpvtD95UxZUPFEzi7ji2U8raK+7/6z79wo4= Subject key identifier: CB:56:3E:F7:26:8F:EE:6D:B2:AA:A7:67:83:74:A4:0A:2B:E0:69:56 Authority key identifier: E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A Certificate issuer: /CN=E025EB5354ADB573B451D02820EA68FD4CAE920A Certificate serial: 61C445BC6E19496C8382D9C0E758BF2A9BD1F7C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft Manifest number: 0158 Signing time: Wed 06 Aug 2025 03:40:42 +0000 Manifest this update: Wed 06 Aug 2025 03:35:42 +0000 Manifest next update: Sat 09 Aug 2025 09:05:42 +0000 Files and hashes: 1: E025EB5354ADB573B451D02820EA68FD4CAE920A.crl (hash: LDXJ07QAOzeM1nAH3UKyVRDRtM+WfRrRySr8sW22zuI=) 2: 3130332e3233302e38312e302f32342d3234203d3e20313530393631.roa (hash: BRyZcy7P9c9jO1spuL0mDoDN9aAC7pRi+y0OjtQk3Qc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 09:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:c4:45:bc:6e:19:49:6c:83:82:d9:c0:e7:58:bf:2a:9b:d1:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E025EB5354ADB573B451D02820EA68FD4CAE920A Validity Not Before: Aug 6 03:35:42 2025 GMT Not After : Aug 9 09:05:42 2025 GMT Subject: CN=CB563EF7268FEE6DB2AAA7678374A40A2BE06956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:53:2b:7b:ab:71:42:8a:f1:51:9f:af:a0:a9: a1:b4:6d:61:0e:94:6c:dc:84:9e:d4:a3:4c:cc:ac: c1:0b:30:c3:11:a3:be:2a:99:db:66:90:0f:a2:53: 35:5c:da:a9:e9:3e:f1:b6:45:8e:5f:96:dd:ea:bb: f5:66:cb:52:ba:78:0f:bd:29:05:78:bb:e5:09:cc: 2a:74:f8:fb:36:83:33:e4:d6:0c:ee:6f:48:74:24: b1:fd:c4:97:b9:00:ad:23:81:58:04:1d:2e:9e:1c: 2f:89:6d:e0:9f:ef:3f:de:a9:6f:a8:0d:6d:b8:bd: dd:85:2f:51:c3:85:a4:29:25:36:04:90:a3:28:e5: f0:f4:c0:2d:d9:4f:0a:5a:48:b8:4a:c1:8b:f3:6e: ae:87:af:e8:20:86:53:c6:de:a1:18:4a:4e:c0:4e: 10:01:d7:2a:b9:e2:2f:6d:89:bc:4d:49:40:20:f2: e4:db:ee:aa:97:53:fb:64:67:f5:a8:14:86:f0:06: 85:d8:a1:9f:83:c1:1c:94:05:b5:1a:08:dc:b8:97: e2:c3:11:b6:81:ce:6b:26:a5:50:e4:26:05:81:62: 59:4a:0c:dc:99:52:02:b6:27:9d:c6:63:01:82:c4: 43:55:a2:67:f1:eb:9e:8b:c4:b2:f3:ef:19:78:9f: 12:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:56:3E:F7:26:8F:EE:6D:B2:AA:A7:67:83:74:A4:0A:2B:E0:69:56 X509v3 Authority Key Identifier: keyid:E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e3:ae:ea:0e:c2:aa:85:56:9e:ce:15:77:60:8f:e1:09:cd: 60:ef:99:03:cb:fc:7f:99:93:c5:67:56:2d:da:05:f0:bd:37: a1:dc:98:a0:ee:b9:89:a1:b7:90:be:14:09:4b:0c:75:8c:51: 58:5a:50:82:59:00:cb:e1:da:c1:c1:50:46:c8:d3:59:bc:ea: 39:8a:5d:85:84:4d:89:e5:86:19:0f:fa:9f:6c:d0:98:a2:30: 67:5e:8c:d4:ab:9b:43:61:a7:7d:ea:ac:bd:06:b0:67:c8:dd: cb:e6:05:9f:eb:b2:9c:99:c1:71:0c:15:bf:aa:7a:1d:44:02: c1:d8:d6:5a:c2:30:69:d7:e7:ef:27:42:cb:db:f4:0b:c0:f0: 56:0d:cc:a6:27:f8:6b:8a:79:62:ba:14:c5:67:fd:a5:d3:58: b6:96:78:02:e8:68:fb:6a:3e:89:ab:92:0b:a9:3d:d5:bc:95: 4b:46:4d:f6:0e:aa:ff:b6:c8:82:39:f8:29:96:58:f8:e3:20: 34:aa:88:0a:bf:95:b1:38:95:68:ab:33:60:77:5f:06:03:45: 4a:76:c8:ab:05:b7:6e:32:f2:ed:b2:1d:fb:96:bc:db:7e:ca: dc:13:a9:28:74:a6:5c:3e:a8:1b:cf:b8:dc:e1:55:3a:43:14: 21:23:56:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYcRFvG4ZSWyDgtnA51i/KpvR98AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4RkQ0 Q0FFOTIwQTAeFw0yNTA4MDYwMzM1NDJaFw0yNTA4MDkwOTA1NDJaMDMxMTAvBgNV BAMTKENCNTYzRUY3MjY4RkVFNkRCMkFBQTc2NzgzNzRBNDBBMkJFMDY5NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDUyt7q3FCivFRn6+gqaG0bWEO lGzchJ7Uo0zMrMELMMMRo74qmdtmkA+iUzVc2qnpPvG2RY5flt3qu/Vmy1K6eA+9 KQV4u+UJzCp0+Ps2gzPk1gzub0h0JLH9xJe5AK0jgVgEHS6eHC+JbeCf7z/eqW+o DW24vd2FL1HDhaQpJTYEkKMo5fD0wC3ZTwpaSLhKwYvzbq6Hr+gghlPG3qEYSk7A ThAB1yq54i9tibxNSUAg8uTb7qqXU/tkZ/WoFIbwBoXYoZ+DwRyUBbUaCNy4l+LD EbaBzmsmpVDkJgWBYllKDNyZUgK2J53GYwGCxENVomfx656LxLLz7xl4nxLxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy1Y+9yaP7m2yqqdng3SkCivgaVYwHwYDVR0j BBgwFoAU4CXrU1SttXO0UdAoIOpo/UyukgowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTRhMmE0MS0yODM4LTQzNjktOTk3Yi00Mjk5ZjE3ZWVlOTAvMC9FMDI1RUI1MzU0 QURCNTczQjQ1MUQwMjgyMEVBNjhGRDRDQUU5MjBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4RkQ0Q0FF OTIwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE0YTJhNDEtMjgzOC00MzY5LTk5 N2ItNDI5OWYxN2VlZTkwLzAvRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4 RkQ0Q0FFOTIwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzjruoOwqqFVp7OFXdgj+EJzWDvmQPL/H+Z k8VnVi3aBfC9N6HcmKDuuYmht5C+FAlLDHWMUVhaUIJZAMvh2sHBUEbI01m86jmK XYWETYnlhhkP+p9s0JiiMGdejNSrm0Nhp33qrL0GsGfI3cvmBZ/rspyZwXEMFb+q eh1EAsHY1lrCMGnX5+8nQsvb9AvA8FYNzKYn+GuKeWK6FMVn/aXTWLaWeALoaPtq PomrkgupPdW8lUtGTfYOqv+2yII5+CmWWPjjIDSqiAq/lbE4lWirM2B3XwYDRUp2 yKsFt24y8u2yHfuWvNt+ytwTqSh0plw+qBvPuNzhVTpDFCEjVqs= -----END CERTIFICATE-----Generated at Thu Aug 7 07:22:46 2025 by rpki-client