$ rpki-client -vvf repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft File: E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft (raw, json) Hash identifier: PS4Cx6eYcx65/O/84eewPrwZYgl+6QS0HRjewTyaSI4= Subject key identifier: 1D:B1:9D:AD:E6:16:95:9A:B0:FB:F0:82:86:92:86:13:FA:8F:8F:63 Authority key identifier: E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81 Certificate issuer: /CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81 Certificate serial: 3F240845C3F9B6A04833D09DDDF608B326B6E57A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft Manifest number: 0200 Signing time: Mon 16 Jun 2025 11:41:40 +0000 Manifest this update: Mon 16 Jun 2025 11:36:40 +0000 Manifest next update: Thu 19 Jun 2025 21:28:40 +0000 Files and hashes: 1: E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl (hash: qnLFGhgDtUgGR6rXk+byXzif/srGTErHQiMdWduQi04=) 2: 3130332e3135362e37342e302f32332d3234203d3e20313431303832.roa (hash: +uanKrOlJ1inyxGrMVmi+UClp9vCCzs4JkeBJaqGWYc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:24:08:45:c3:f9:b6:a0:48:33:d0:9d:dd:f6:08:b3:26:b6:e5:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81 Validity Not Before: Jun 16 11:36:40 2025 GMT Not After : Jun 19 21:28:40 2025 GMT Subject: CN=1DB19DADE616959AB0FBF08286928613FA8F8F63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0a:d5:2a:57:6e:29:46:98:79:41:e2:b5:a4: 7c:f3:ef:5a:b5:29:19:33:d4:2a:b0:e1:2b:a2:0b: 0d:e9:c2:86:e3:4e:d7:a7:d9:81:c6:c5:b0:38:06: 65:ad:a0:73:5e:bc:4c:33:d6:d5:15:5e:84:d3:45: 10:cc:d8:1a:b2:fe:5b:1c:13:f6:b5:30:30:92:b8: 22:b9:51:fd:80:b4:46:45:85:c6:b0:26:57:ad:91: 19:f6:79:20:b2:44:4c:f5:c4:b6:23:29:b2:25:0e: b0:58:71:85:45:73:21:5c:c9:42:d2:e2:50:87:ce: e1:a8:5e:04:4f:69:39:6e:f5:40:c5:25:c6:05:48: f7:dc:32:6c:fd:36:8f:09:05:6c:a8:12:68:72:4f: 2e:bf:cc:e1:41:30:6f:42:ac:17:9f:cb:90:d4:91: f7:d7:f7:fe:f3:ef:ec:06:21:31:05:6a:7f:eb:8b: f8:33:b9:4b:f7:6b:a0:23:9b:ff:36:5e:0f:19:74: 26:2f:47:88:2a:45:32:b6:a6:cb:65:13:0b:aa:78: 8c:42:82:9b:2d:59:12:72:38:68:8c:2b:30:49:6d: 9c:86:09:6b:d3:bb:4f:21:83:a0:6d:75:92:9b:8d: 7b:00:35:4c:85:01:b8:d8:97:f1:f2:0c:ed:05:af: b5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B1:9D:AD:E6:16:95:9A:B0:FB:F0:82:86:92:86:13:FA:8F:8F:63 X509v3 Authority Key Identifier: keyid:E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:e9:7d:55:19:44:97:9e:81:3a:2b:8e:e2:ec:f9:07:93:20: 4b:5c:40:5d:11:9c:37:aa:9d:dd:d1:8a:8f:35:14:f9:39:83: 61:dd:c5:31:3a:87:dc:4c:8c:3a:fe:17:54:c2:38:6c:db:98: 0c:2b:07:b9:a6:93:3b:1f:2a:fa:a5:a4:78:c1:7b:40:34:fe: 02:32:c3:09:01:79:14:7c:75:7d:11:f7:01:b1:53:95:7f:55: 26:7f:72:3a:a5:f2:11:d2:8b:bb:ba:46:03:45:f5:a5:38:67: a6:c8:1d:da:52:10:0e:42:34:7b:ff:50:59:ec:4b:21:bc:a3: d1:b6:ac:60:4a:35:cf:55:f8:ee:a2:82:01:c8:02:3e:9c:0f: f4:d4:0a:a4:72:c5:f0:12:87:e6:78:c4:88:74:d7:d4:6b:9f: f9:02:5c:3b:cd:a5:7e:bd:4a:94:19:62:c6:fc:d5:2f:66:7e: b0:93:45:99:bb:81:1d:69:04:ae:7d:84:12:97:db:f9:da:79: 16:a8:d0:10:12:ad:0e:a0:37:1a:fc:b9:96:90:c3:ab:11:ac: 90:b4:55:e8:66:7c:af:72:81:4e:7b:cf:e8:b1:6c:d2:39:96: 9f:43:14:99:7f:13:7d:7d:f9:65:e9:31:2a:b5:e8:0d:87:64: 1f:05:d3:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPyQIRcP5tqBIM9Cd3fYIsya25XowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4NzY3 QjQxMUE4MTAeFw0yNTA2MTYxMTM2NDBaFw0yNTA2MTkyMTI4NDBaMDMxMTAvBgNV BAMTKDFEQjE5REFERTYxNjk1OUFCMEZCRjA4Mjg2OTI4NjEzRkE4RjhGNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgCtUqV24pRph5QeK1pHzz71q1 KRkz1Cqw4SuiCw3pwobjTten2YHGxbA4BmWtoHNevEwz1tUVXoTTRRDM2Bqy/lsc E/a1MDCSuCK5Uf2AtEZFhcawJletkRn2eSCyREz1xLYjKbIlDrBYcYVFcyFcyULS 4lCHzuGoXgRPaTlu9UDFJcYFSPfcMmz9No8JBWyoEmhyTy6/zOFBMG9CrBefy5DU kffX9/7z7+wGITEFan/ri/gzuUv3a6Ajm/82Xg8ZdCYvR4gqRTK2pstlEwuqeIxC gpstWRJyOGiMKzBJbZyGCWvTu08hg6BtdZKbjXsANUyFAbjYl/HyDO0Fr7UxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHbGdreYWlZqw+/CChpKGE/qPj2MwHwYDVR0j BBgwFoAU4APoULd8dvDgJPHabvvYdntBGoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDAxMDJkMC03MTRmLTRiNTItOWJlNS1kZWQxNmVkZmU0YTIvMC9FMDAzRTg1MEI3 N0M3NkYwRTAyNEYxREE2RUZCRDg3NjdCNDExQTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4NzY3QjQx MUE4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjAwMTAyZDAtNzE0Zi00YjUyLTli ZTUtZGVkMTZlZGZlNGEyLzAvRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4 NzY3QjQxMUE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMfpfVUZRJeegTorjuLs+QeTIEtcQF0RnDeq nd3Rio81FPk5g2HdxTE6h9xMjDr+F1TCOGzbmAwrB7mmkzsfKvqlpHjBe0A0/gIy wwkBeRR8dX0R9wGxU5V/VSZ/cjql8hHSi7u6RgNF9aU4Z6bIHdpSEA5CNHv/UFns SyG8o9G2rGBKNc9V+O6iggHIAj6cD/TUCqRyxfASh+Z4xIh019Rrn/kCXDvNpX69 SpQZYsb81S9mfrCTRZm7gR1pBK59hBKX2/naeRao0BASrQ6gNxr8uZaQw6sRrJC0 VehmfK9ygU57z+ixbNI5lp9DFJl/E319+WXpMSq16A2HZB8F020= -----END CERTIFICATE-----Generated at Tue Jun 17 13:04:34 2025 by rpki-client