$ rpki-client -vvf repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft File: E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft (raw, json) Hash identifier: auTPpPSh2AmmVlmz/q8+iJGlBGrNiwXTgtsyMy13RZA= Subject key identifier: D5:41:56:FC:56:7A:74:29:1D:D6:65:82:E7:D8:01:BC:28:75:34:7B Authority key identifier: E3:1C:BD:E5:C6:F3:3D:AE:3C:A9:7A:01:1E:A4:F4:E6:39:FB:4F:F6 Certificate issuer: /CN=E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6 Certificate serial: E756D694394E3C908867DF3D14EADA2FDB17B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft Manifest number: 01E0 Signing time: Tue 17 Jun 2025 21:12:10 +0000 Manifest this update: Tue 17 Jun 2025 21:07:10 +0000 Manifest next update: Sat 21 Jun 2025 04:39:10 +0000 Files and hashes: 1: 323030313a6466303a323363303a3a2f34382d3438203d3e20313437313235.roa (hash: cdNwI4+yNgJqJT5/jVDzUTVdyDgbKctLin9GOuO6hd8=) 2: 3130332e3137352e3230352e302f32342d3234203d3e20313437313235.roa (hash: gA20Kw8fUFXrS9IHBKhI6TIYPne1muz2nraM3qEZjXM=) 3: E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.crl (hash: D93qlhziA3oT1X7Om/YOJ/YSASsQHZF6BLGjZy/WFDE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.crl rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 04:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: e7:56:d6:94:39:4e:3c:90:88:67:df:3d:14:ea:da:2f:db:17:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6 Validity Not Before: Jun 17 21:07:10 2025 GMT Not After : Jun 21 04:39:10 2025 GMT Subject: CN=D54156FC567A74291DD66582E7D801BC2875347B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fe:f1:76:d6:48:c7:00:c1:89:1f:ef:82:0b: 5d:0f:9c:56:38:57:6f:5b:6f:10:0d:f0:ea:6f:e0: ca:c1:73:31:98:3b:19:11:eb:4d:1e:2f:94:2b:8a: fe:55:76:d0:28:ea:f5:6b:55:c4:7b:7b:87:24:06: 7d:0c:bc:ee:99:6e:5d:80:6f:db:c7:5c:fc:cd:29: 08:76:1d:98:4a:5b:43:33:9c:ee:9e:8a:4d:19:84: bb:24:c3:c6:92:44:35:ac:e8:1e:1b:a5:50:c6:c8: 45:82:51:4d:7d:b4:c4:8a:fa:29:12:03:40:ec:45: be:04:80:95:44:ae:09:55:b2:6d:fc:8b:6f:e3:e8: fb:da:21:39:ef:a3:af:89:59:27:18:84:d4:04:fc: e4:e1:60:b9:59:b3:b7:3b:5f:7f:a0:f5:d0:26:70: 04:8f:7c:93:72:b1:ae:a3:c4:9a:f2:69:58:47:a7: ef:33:55:31:ed:27:2f:0b:31:50:4e:30:b5:4f:36: d3:05:13:08:d3:73:23:4c:76:14:64:3e:4f:f8:1a: bb:63:3e:4a:6b:a2:dd:e8:af:81:92:8c:55:18:7c: ba:2a:6f:24:cf:d6:4e:a8:99:5b:83:eb:12:03:7b: 49:77:73:f0:5c:77:73:08:eb:b9:59:0a:35:44:14: 2e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:41:56:FC:56:7A:74:29:1D:D6:65:82:E7:D8:01:BC:28:75:34:7B X509v3 Authority Key Identifier: keyid:E3:1C:BD:E5:C6:F3:3D:AE:3C:A9:7A:01:1E:A4:F4:E6:39:FB:4F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:46:68:d8:f1:f5:c9:92:3b:0e:27:d1:d8:b5:b7:ed:c6:44: 93:08:82:0f:52:27:36:7e:b0:e1:2c:8b:0d:7a:c3:9f:da:a8: 6a:33:07:b6:ab:25:dd:c5:d9:eb:50:aa:39:fb:bf:65:9e:4e: d1:e0:4b:ad:37:43:4c:cc:67:68:ae:80:58:62:56:38:b9:df: 69:de:a6:71:52:a9:ad:09:42:2d:ab:f2:1b:35:ad:e7:be:51: 90:b7:76:b7:06:df:5c:ec:48:18:20:ea:af:9d:47:75:2e:93: 8c:f9:de:ab:1f:a0:95:c8:ff:13:74:7b:75:01:24:2c:b7:08: f9:c6:70:4a:8e:a7:50:90:99:b0:a9:aa:bf:8f:ef:ac:da:e8: 1c:4e:d2:27:1e:5a:7f:c6:de:4b:5a:a3:79:03:8b:e5:df:b5: 44:3a:fc:2b:64:f2:b7:43:92:76:4f:0d:9a:bf:56:dc:55:d4: 74:b6:3e:18:f0:51:95:a5:26:bc:64:89:1c:62:98:01:0f:48: ed:a1:a6:e7:e1:a9:22:83:88:71:63:54:78:28:0a:b2:25:dd: 27:27:d7:0b:73:cf:6a:a8:0d:2c:15:22:2d:9c:d2:34:95:32: 09:a3:64:61:dd:bb:12:5c:2c:0e:0a:b9:bb:de:7b:0c:9f:86: 80:ca:50:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAOdW1pQ5TjyQiGffPRTq2i/bF7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMxQ0JERTVDNkYzM0RBRTNDQTk3QTAxMUVBNEY0RTYz OUZCNEZGNjAeFw0yNTA2MTcyMTA3MTBaFw0yNTA2MjEwNDM5MTBaMDMxMTAvBgNV BAMTKEQ1NDE1NkZDNTY3QTc0MjkxREQ2NjU4MkU3RDgwMUJDMjg3NTM0N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/vF21kjHAMGJH++CC10PnFY4 V29bbxAN8Opv4MrBczGYOxkR600eL5Qriv5VdtAo6vVrVcR7e4ckBn0MvO6Zbl2A b9vHXPzNKQh2HZhKW0MznO6eik0ZhLskw8aSRDWs6B4bpVDGyEWCUU19tMSK+ikS A0DsRb4EgJVErglVsm38i2/j6PvaITnvo6+JWScYhNQE/OThYLlZs7c7X3+g9dAm cASPfJNysa6jxJryaVhHp+8zVTHtJy8LMVBOMLVPNtMFEwjTcyNMdhRkPk/4Grtj Pkprot3or4GSjFUYfLoqbyTP1k6omVuD6xIDe0l3c/Bcd3MI67lZCjVEFC6xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1UFW/FZ6dCkd1mWC59gBvCh1NHswHwYDVR0j BBgwFoAU4xy95cbzPa48qXoBHqT05jn7T/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzAyMDFlMy04NzVkLTQ5YzQtOGUxNC05OTk5NDkzNmQ0OTEvMC9FMzFDQkRFNUM2 RjMzREFFM0NBOTdBMDExRUE0RjRFNjM5RkI0RkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTMxQ0JERTVDNkYzM0RBRTNDQTk3QTAxMUVBNEY0RTYzOUZC NEZGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGMwMjAxZTMtODc1ZC00OWM0LThl MTQtOTk5OTQ5MzZkNDkxLzAvRTMxQ0JERTVDNkYzM0RBRTNDQTk3QTAxMUVBNEY0 RTYzOUZCNEZGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFGaNjx9cmSOw4n0di1t+3GRJMIgg9SJzZ+ sOEsiw16w5/aqGozB7arJd3F2etQqjn7v2WeTtHgS603Q0zMZ2iugFhiVji532ne pnFSqa0JQi2r8hs1ree+UZC3drcG31zsSBgg6q+dR3Uuk4z53qsfoJXI/xN0e3UB JCy3CPnGcEqOp1CQmbCpqr+P76za6BxO0iceWn/G3ktao3kDi+XftUQ6/Ctk8rdD knZPDZq/VtxV1HS2PhjwUZWlJrxkiRximAEPSO2hpufhqSKDiHFjVHgoCrIl3Scn 1wtzz2qoDSwVIi2c0jSVMgmjZGHduxJcLA4KubveewyfhoDKUGU= -----END CERTIFICATE-----Generated at Wed Jun 18 18:45:11 2025 by rpki-client