$ rpki-client -vvf repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft File: E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft (raw, json) Hash identifier: II1jhsPQvdC9GB+ibFVkWD1IkTpYeDRJjGqs6R0JzYE= Subject key identifier: 48:CE:C0:8C:32:D1:35:DA:04:37:77:FF:AD:4F:47:F5:2F:64:FD:1B Authority key identifier: E3:1C:BD:E5:C6:F3:3D:AE:3C:A9:7A:01:1E:A4:F4:E6:39:FB:4F:F6 Certificate issuer: /CN=E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6 Certificate serial: 5B3A4B5D917348F3E853EC744D05EEC2D6ECF22D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft Manifest number: 01F7 Signing time: Fri 08 Aug 2025 14:42:10 +0000 Manifest this update: Fri 08 Aug 2025 14:37:10 +0000 Manifest next update: Tue 12 Aug 2025 01:55:10 +0000 Files and hashes: 1: 323030313a6466303a323363303a3a2f34382d3438203d3e20313437313235.roa (hash: cdNwI4+yNgJqJT5/jVDzUTVdyDgbKctLin9GOuO6hd8=) 2: E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.crl (hash: SvCaaBewyuN0r1X0tVBSr2o54OMkYlvmsZUg55wgsB0=) 3: 3130332e3137352e3230352e302f32342d3234203d3e20313437313235.roa (hash: gA20Kw8fUFXrS9IHBKhI6TIYPne1muz2nraM3qEZjXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.crl rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 01:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:3a:4b:5d:91:73:48:f3:e8:53:ec:74:4d:05:ee:c2:d6:ec:f2:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6 Validity Not Before: Aug 8 14:37:10 2025 GMT Not After : Aug 12 01:55:10 2025 GMT Subject: CN=48CEC08C32D135DA043777FFAD4F47F52F64FD1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:03:f3:37:b0:6c:ce:e7:64:51:09:55:4b:5d: f5:c6:ef:1e:4e:99:94:0f:8b:4f:3b:62:4c:10:f6: 31:4a:86:a3:d7:a0:fe:c6:1c:67:fa:8a:7c:01:c8: b8:84:de:ec:4d:cd:7e:37:1d:93:f5:1e:1f:ba:87: 2d:8c:27:4e:c6:7a:64:05:2e:00:da:26:5c:b4:3b: f7:b1:16:d9:53:c0:b4:c3:d9:23:b8:7c:75:4c:ad: 24:37:c6:fe:9e:b2:d5:ef:13:b3:39:4e:fa:f7:53: 89:de:33:41:93:f4:bf:f9:36:32:88:b7:59:6b:5c: b2:7b:67:b9:d0:65:6e:fb:d6:53:36:81:0c:51:9d: a2:f2:50:c2:bf:1f:3f:9a:30:1c:26:f4:ab:15:ff: 10:90:cc:c9:2e:f2:b2:b8:2c:ca:d5:c1:0f:1a:9b: 48:de:a0:97:fe:6c:a2:e1:30:2e:aa:4b:eb:19:7a: cc:19:e1:bd:99:4e:d4:c3:08:33:c6:7f:59:e3:a8: c9:7b:85:b9:4e:aa:ab:d9:dd:db:5b:21:a4:dc:98: 60:4e:ac:52:72:30:41:64:b4:1f:63:48:3d:08:7a: 6b:cc:58:26:00:33:93:ce:f0:60:b4:fc:97:50:ec: 70:1d:74:95:8d:84:ea:a5:5a:f4:54:90:38:23:b8: 2a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:CE:C0:8C:32:D1:35:DA:04:37:77:FF:AD:4F:47:F5:2F:64:FD:1B X509v3 Authority Key Identifier: keyid:E3:1C:BD:E5:C6:F3:3D:AE:3C:A9:7A:01:1E:A4:F4:E6:39:FB:4F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:6b:96:0f:f5:7d:77:0d:97:bd:45:b1:03:f9:9d:9d:37:14: af:3d:0e:54:df:3b:f3:ae:a6:32:b7:a7:c7:07:96:e7:46:42: fd:64:97:4b:f8:ee:6e:be:dd:cb:83:8d:c3:d2:8b:3e:3d:26: 7e:0d:54:dc:78:cc:f6:89:0a:a3:63:9b:a3:a9:09:73:f0:0f: 00:a3:ff:cd:cc:8e:31:29:7e:bb:ae:69:ed:86:d7:87:2d:66: 75:15:31:ca:d7:a8:28:5c:fe:5b:0d:23:ca:b0:eb:51:76:91: 11:1c:5e:62:20:67:5f:f7:27:8d:70:b8:e9:2b:80:d0:a0:b2: ea:41:2e:44:8d:bd:da:b5:33:fd:d7:81:28:b4:22:21:2d:de: 21:7f:5d:a7:7c:f6:18:58:60:91:78:f0:57:96:0d:29:3f:ee: 90:24:b4:97:dd:20:2b:fd:96:47:05:a7:f8:cb:75:cc:e9:e7: da:9f:4e:a4:65:16:db:dd:05:c8:04:0d:14:d0:64:7b:12:23: bc:a7:78:98:61:c5:63:62:3a:39:eb:c4:c2:0f:35:8f:74:5f: 15:d2:fa:58:39:1c:ad:e9:e7:64:71:fe:e3:42:84:68:5d:06: 86:eb:78:a9:d7:9c:f3:e3:ef:e8:98:06:c9:3f:87:86:71:1b: 67:88:7d:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWzpLXZFzSPPoU+x0TQXuwtbs8i0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMxQ0JERTVDNkYzM0RBRTNDQTk3QTAxMUVBNEY0RTYz OUZCNEZGNjAeFw0yNTA4MDgxNDM3MTBaFw0yNTA4MTIwMTU1MTBaMDMxMTAvBgNV BAMTKDQ4Q0VDMDhDMzJEMTM1REEwNDM3NzdGRkFENEY0N0Y1MkY2NEZEMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNA/M3sGzO52RRCVVLXfXG7x5O mZQPi087YkwQ9jFKhqPXoP7GHGf6inwByLiE3uxNzX43HZP1Hh+6hy2MJ07GemQF LgDaJly0O/exFtlTwLTD2SO4fHVMrSQ3xv6estXvE7M5Tvr3U4neM0GT9L/5NjKI t1lrXLJ7Z7nQZW771lM2gQxRnaLyUMK/Hz+aMBwm9KsV/xCQzMku8rK4LMrVwQ8a m0jeoJf+bKLhMC6qS+sZeswZ4b2ZTtTDCDPGf1njqMl7hblOqqvZ3dtbIaTcmGBO rFJyMEFktB9jSD0IemvMWCYAM5PO8GC0/JdQ7HAddJWNhOqlWvRUkDgjuCrTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSM7AjDLRNdoEN3f/rU9H9S9k/RswHwYDVR0j BBgwFoAU4xy95cbzPa48qXoBHqT05jn7T/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzAyMDFlMy04NzVkLTQ5YzQtOGUxNC05OTk5NDkzNmQ0OTEvMC9FMzFDQkRFNUM2 RjMzREFFM0NBOTdBMDExRUE0RjRFNjM5RkI0RkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTMxQ0JERTVDNkYzM0RBRTNDQTk3QTAxMUVBNEY0RTYzOUZC NEZGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGMwMjAxZTMtODc1ZC00OWM0LThl MTQtOTk5OTQ5MzZkNDkxLzAvRTMxQ0JERTVDNkYzM0RBRTNDQTk3QTAxMUVBNEY0 RTYzOUZCNEZGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL1rlg/1fXcNl71FsQP5nZ03FK89DlTfO/Ou pjK3p8cHludGQv1kl0v47m6+3cuDjcPSiz49Jn4NVNx4zPaJCqNjm6OpCXPwDwCj /83MjjEpfruuae2G14ctZnUVMcrXqChc/lsNI8qw61F2kREcXmIgZ1/3J41wuOkr gNCgsupBLkSNvdq1M/3XgSi0IiEt3iF/Xad89hhYYJF48FeWDSk/7pAktJfdICv9 lkcFp/jLdczp59qfTqRlFtvdBcgEDRTQZHsSI7yneJhhxWNiOjnrxMIPNY90XxXS +lg5HK3p52Rx/uNChGhdBobreKnXnPPj7+iYBsk/h4ZxG2eIfcQ= -----END CERTIFICATE-----Generated at Sat Aug 9 10:53:35 2025 by rpki-client