$ rpki-client -vvf repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft File: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft (raw, json) Hash identifier: Qb069Y3hpMxa1Jwj/aDcnjmGbNcL9ErCD5Biq500Y78= Subject key identifier: A8:E4:AA:67:8F:D9:49:0D:04:0E:71:2B:12:2E:42:1E:CB:30:DC:FC Authority key identifier: E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 Certificate issuer: /CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Certificate serial: 5E367629896F2AD46402BADA2A4D64713A23E4B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft Manifest number: 0166 Signing time: Sun 15 Jun 2025 11:22:10 +0000 Manifest this update: Sun 15 Jun 2025 11:17:10 +0000 Manifest next update: Wed 18 Jun 2025 14:51:10 +0000 Files and hashes: 1: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl (hash: b6Vy/MSNhSpyOWgV0vFUFX1K3UIvCu9e07cHi+I6IEY=) 2: 3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa (hash: zvs63z9VCpiCzE9F7SS2YuDrGUS8w4FG4VYk90PMazI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 14:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:36:76:29:89:6f:2a:d4:64:02:ba:da:2a:4d:64:71:3a:23:e4:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Validity Not Before: Jun 15 11:17:10 2025 GMT Not After : Jun 18 14:51:10 2025 GMT Subject: CN=A8E4AA678FD9490D040E712B122E421ECB30DCFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:90:db:c6:24:84:09:9a:74:14:ec:ff:6c:85: 23:ed:04:3c:1a:41:9e:12:4d:3e:e3:56:54:f9:77: 36:41:55:ed:d8:81:42:1d:e9:44:34:17:16:62:fc: 77:7a:9a:b9:a7:ea:86:17:8a:7c:ea:f4:1a:ef:14: ee:98:fe:b2:e1:c4:0d:76:cc:cd:1b:7d:bc:6f:6f: 0d:3c:bf:97:d5:fc:00:e6:db:60:eb:60:d3:6f:a9: 25:7e:7b:e2:aa:53:f1:77:9d:9d:a5:31:7d:4e:c9: cc:ca:83:70:c0:10:c4:27:1c:34:12:9b:c6:58:f6: 81:58:12:bf:db:64:0a:4f:b1:60:7a:84:ad:0a:4a: 3a:06:de:2a:73:40:8b:1b:17:b9:3f:7d:c0:d9:32: 36:d7:e7:d6:c5:4c:4e:5d:c4:a1:cb:d0:28:4b:20: 2e:23:7c:75:0a:90:d6:d1:5f:07:e8:8d:4c:8f:5b: b4:a1:ce:d2:dd:45:f5:a5:37:33:52:99:f6:59:2e: 56:d0:d7:35:00:de:f4:31:6d:dd:13:51:cb:ca:b4: c0:96:89:2f:73:51:66:59:ed:2c:aa:21:3c:2a:6a: 08:f1:3e:a2:6f:0b:b4:4e:07:1b:79:9d:f9:84:94: fb:35:37:4e:2f:c0:fa:3f:df:87:f3:92:cb:23:a3: 88:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E4:AA:67:8F:D9:49:0D:04:0E:71:2B:12:2E:42:1E:CB:30:DC:FC X509v3 Authority Key Identifier: keyid:E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:49:b4:bc:d0:81:28:69:62:db:8e:1c:f5:ca:de:12:17:28: e0:11:4c:57:91:dc:1e:59:95:b0:fa:be:ef:34:5a:e9:15:94: c5:f8:c6:77:9d:0e:59:ac:40:6e:5a:e4:29:ba:50:89:99:cf: 91:8a:52:24:7d:2e:f6:62:86:40:dd:e5:c3:17:fd:30:d0:37: 76:3d:72:2d:e2:b9:f3:7b:ee:52:b7:a5:30:10:3b:c0:5e:97: e6:9f:58:3b:27:4c:64:29:c8:b5:81:8b:b8:70:fe:4e:bf:3c: 01:d4:7c:73:d0:da:03:b2:63:70:99:b4:d5:8b:10:cc:13:35: 1b:bf:e3:cd:73:77:f3:bd:54:21:3c:91:48:28:40:fd:2d:b8: a4:b8:e1:28:a9:2d:13:8a:74:71:08:72:da:73:4e:43:e7:15: 32:0d:49:a5:85:0d:ca:c2:ca:09:e4:b0:8e:a8:0a:18:ba:68: 9b:db:93:b3:2a:50:0a:6c:f4:11:4a:10:06:fe:90:df:fd:14: f6:73:41:db:fc:77:bb:0b:0b:7d:68:ac:1a:5f:d1:95:f6:a6: c2:ff:f2:f5:ba:d1:ea:93:f4:c9:f7:65:2c:a8:4d:6d:42:9f: 5e:5d:35:f4:f4:97:10:7d:bb:ed:0b:1b:1f:f8:2f:82:66:e2: b4:1f:15:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXjZ2KYlvKtRkArraKk1kcToj5LUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlG QkZGMTVDOTAeFw0yNTA2MTUxMTE3MTBaFw0yNTA2MTgxNDUxMTBaMDMxMTAvBgNV BAMTKEE4RTRBQTY3OEZEOTQ5MEQwNDBFNzEyQjEyMkU0MjFFQ0IzMERDRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQkNvGJIQJmnQU7P9shSPtBDwa QZ4STT7jVlT5dzZBVe3YgUId6UQ0FxZi/Hd6mrmn6oYXinzq9BrvFO6Y/rLhxA12 zM0bfbxvbw08v5fV/ADm22DrYNNvqSV+e+KqU/F3nZ2lMX1OyczKg3DAEMQnHDQS m8ZY9oFYEr/bZApPsWB6hK0KSjoG3ipzQIsbF7k/fcDZMjbX59bFTE5dxKHL0ChL IC4jfHUKkNbRXwfojUyPW7ShztLdRfWlNzNSmfZZLlbQ1zUA3vQxbd0TUcvKtMCW iS9zUWZZ7SyqITwqagjxPqJvC7ROBxt5nfmElPs1N04vwPo/34fzkssjo4hDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqOSqZ4/ZSQ0EDnErEi5CHssw3PwwHwYDVR0j BBgwFoAU6H2RT6U2zdocBIbwkj0r6fv/FckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Yjg0M2YwMC0yODIzLTQ3MzItOWI3Yy1kOGNmZTYzMDEwZGMvMC9FODdEOTE0RkE1 MzZDRERBMUMwNDg2RjA5MjNEMkJFOUZCRkYxNUM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlGQkZG MTVDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4NDNmMDAtMjgyMy00NzMyLTli N2MtZDhjZmU2MzAxMGRjLzAvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJC RTlGQkZGMTVDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRJtLzQgShpYtuOHPXK3hIXKOARTFeR3B5Z lbD6vu80WukVlMX4xnedDlmsQG5a5Cm6UImZz5GKUiR9LvZihkDd5cMX/TDQN3Y9 ci3iufN77lK3pTAQO8Bel+afWDsnTGQpyLWBi7hw/k6/PAHUfHPQ2gOyY3CZtNWL EMwTNRu/481zd/O9VCE8kUgoQP0tuKS44SipLROKdHEIctpzTkPnFTINSaWFDcrC ygnksI6oChi6aJvbk7MqUAps9BFKEAb+kN/9FPZzQdv8d7sLC31orBpf0ZX2psL/ 8vW60eqT9Mn3ZSyoTW1Cn15dNfT0lxB9u+0LGx/4L4Jm4rQfFX4= -----END CERTIFICATE-----Generated at Mon Jun 16 10:43:23 2025 by rpki-client