$ rpki-client -vvf repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft File: E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft (raw, json) Hash identifier: tqz+/oSpg0jZT7OpQjkN80Y6iPwwtNh45ZWsjwiMSEE= Subject key identifier: AC:4E:66:23:DE:AF:BA:0F:61:D1:EB:11:64:8F:F4:7B:9F:41:2B:EE Authority key identifier: E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77 Certificate issuer: /CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977 Certificate serial: 13B16ABE95E0AE182CE2D1F3D4E094FC26F45C2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft Manifest number: 04F5 Signing time: Wed 06 Aug 2025 20:31:20 +0000 Manifest this update: Wed 06 Aug 2025 20:26:20 +0000 Manifest next update: Sun 10 Aug 2025 01:43:20 +0000 Files and hashes: 1: E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl (hash: xuIe5B/hfRAJqqsvS5A4UUT0nYTKUYUuF6fVyOjjLGQ=) 2: 3130332e3135332e322e302f32342d3234203d3e20313430333839.roa (hash: GxaX4eV/kFPfj8NmbOkhswC/G4Bnl9v3vVSuFyouusY=) 3: 3130332e3135332e322e302f32332d3233203d3e20313430333839.roa (hash: A1pg6GpZFjYyhGEeCVl6G4t4Mmj6bG3hF/2pgiRzD7c=) 4: 3130332e3135332e332e302f32342d3234203d3e20313430333839.roa (hash: Od61s2CG7Pl8XbUZdUJwcwOoJ91FfP8RQCV9emNwZ0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 01:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b1:6a:be:95:e0:ae:18:2c:e2:d1:f3:d4:e0:94:fc:26:f4:5c:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977 Validity Not Before: Aug 6 20:26:20 2025 GMT Not After : Aug 10 01:43:20 2025 GMT Subject: CN=AC4E6623DEAFBA0F61D1EB11648FF47B9F412BEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f2:b5:14:cd:23:ee:fe:fc:78:17:7a:9a:e2: 54:58:27:41:ff:5e:09:e5:44:9d:66:ec:2a:ac:39: ff:df:22:3e:a2:52:a1:48:96:10:2b:55:de:02:25: 3a:62:4b:7f:45:10:55:89:f6:50:b7:b8:55:b8:c8: 15:13:af:0c:07:d9:d0:79:77:36:9c:a8:d3:25:aa: d4:d3:ad:79:58:51:5e:ac:db:63:5a:60:82:1f:00: c5:be:e1:20:a2:f3:36:09:96:69:7d:0d:fb:f0:05: 55:04:a0:3a:7f:13:66:53:20:b3:c3:31:64:92:7d: 4d:63:2c:5d:4a:5c:bb:cc:02:3d:0c:46:6e:66:e3: 33:58:03:49:b2:cf:a9:cc:6d:d2:f9:d4:1f:4b:13: dc:74:dd:8a:c8:3b:3e:50:d1:95:6a:9e:e1:01:ca: 32:4c:21:58:f7:f1:5d:34:ed:aa:4f:11:1c:ea:ef: 9c:f4:1b:d1:77:fa:8c:94:27:ed:0a:22:b9:ab:a1: 62:69:26:88:c8:c2:74:31:a1:a0:8d:57:30:c6:8a: 39:fa:e6:8f:ec:cb:20:4c:a2:9d:b7:62:5a:01:c8: b3:1e:b8:10:5d:4d:63:37:a0:4b:be:0f:3a:a0:16: 14:26:10:e7:04:8f:02:f0:86:05:11:d8:58:7d:5e: ff:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4E:66:23:DE:AF:BA:0F:61:D1:EB:11:64:8F:F4:7B:9F:41:2B:EE X509v3 Authority Key Identifier: keyid:E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:12:83:b7:75:f5:ba:5a:06:6c:2d:cd:e7:5c:89:f9:32:f1: 24:c8:0a:fc:1f:df:dc:be:19:7c:6a:dd:ca:e5:4c:e8:a0:0e: a3:c0:42:b3:61:b1:a0:d8:e1:26:7f:cc:d4:be:c8:27:aa:58: 08:e3:43:41:2d:40:c1:0c:b6:06:45:4b:99:40:c4:9b:8d:6f: a8:e6:88:65:a2:92:98:da:77:c4:d3:e6:0b:86:33:1e:62:20: 08:5e:80:ee:66:af:da:7a:e1:fb:53:9e:d2:55:7d:d9:b4:cf: be:fc:ab:dd:22:ed:d1:34:6d:b8:e1:e4:3f:d4:17:67:83:16: 6b:50:08:5f:8c:5d:84:d0:15:5e:7a:ae:9f:11:3f:64:9e:00: a4:69:2a:74:a1:da:16:18:b7:19:94:4f:81:d7:51:33:ba:6e: 70:d6:fe:97:e6:7f:72:0a:7a:ce:84:d4:0b:61:ea:cd:96:12: 90:fb:0d:f2:c8:2b:42:8b:17:70:dd:10:39:b3:cf:42:b8:14: 00:45:02:c0:86:3f:7e:9b:13:fe:39:37:e6:d7:ed:d8:36:56: 09:b0:ca:f0:2a:ef:7d:15:b6:0e:e2:c6:15:55:c9:ff:d1:9b: b5:5b:47:e9:1b:e9:e4:40:2f:35:e8:3c:84:bf:96:90:a8:be: e6:eb:b4:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE7FqvpXgrhgs4tHz1OCU/Cb0XCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIxQ0ZE ODBDRjk3NzAeFw0yNTA4MDYyMDI2MjBaFw0yNTA4MTAwMTQzMjBaMDMxMTAvBgNV BAMTKEFDNEU2NjIzREVBRkJBMEY2MUQxRUIxMTY0OEZGNDdCOUY0MTJCRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv8rUUzSPu/vx4F3qa4lRYJ0H/ XgnlRJ1m7CqsOf/fIj6iUqFIlhArVd4CJTpiS39FEFWJ9lC3uFW4yBUTrwwH2dB5 dzacqNMlqtTTrXlYUV6s22NaYIIfAMW+4SCi8zYJlml9DfvwBVUEoDp/E2ZTILPD MWSSfU1jLF1KXLvMAj0MRm5m4zNYA0myz6nMbdL51B9LE9x03YrIOz5Q0ZVqnuEB yjJMIVj38V007apPERzq75z0G9F3+oyUJ+0KIrmroWJpJojIwnQxoaCNVzDGijn6 5o/syyBMop23YloByLMeuBBdTWM3oEu+DzqgFhQmEOcEjwLwhgUR2Fh9Xv+TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrE5mI96vug9h0esRZI/0e59BK+4wHwYDVR0j BBgwFoAU4ia0+oQtzmw4ZEnxT4whz9gM+XcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmMxYWI3MS05MWQwLTRmMGItYmIyOS1jYmI3ZDM1ZTc0YmEvMC9FMjI2QjRGQTg0 MkRDRTZDMzg2NDQ5RjE0RjhDMjFDRkQ4MENGOTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIxQ0ZEODBD Rjk3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWJjMWFiNzEtOTFkMC00ZjBiLWJi MjktY2JiN2QzNWU3NGJhLzAvRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIx Q0ZEODBDRjk3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoSg7d19bpaBmwtzedcifky8STICvwf39y+ GXxq3crlTOigDqPAQrNhsaDY4SZ/zNS+yCeqWAjjQ0EtQMEMtgZFS5lAxJuNb6jm iGWikpjad8TT5guGMx5iIAhegO5mr9p64ftTntJVfdm0z778q90i7dE0bbjh5D/U F2eDFmtQCF+MXYTQFV56rp8RP2SeAKRpKnSh2hYYtxmUT4HXUTO6bnDW/pfmf3IK es6E1Ath6s2WEpD7DfLIK0KLF3DdEDmzz0K4FABFAsCGP36bE/45N+bX7dg2Vgmw yvAq730Vtg7ixhVVyf/Rm7VbR+kb6eRALzXoPIS/lpCovubrtD4= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:46 2025 by rpki-client