$ rpki-client -vvf repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft File: EC973BE13EF324E7D59046CF7690A12F9DF12932.mft (raw, json) Hash identifier: C3RGWk4lBO/iVz3KincyQUHukx0OZGWpl67Tg8ncmMw= Subject key identifier: C7:6C:80:4E:F7:36:3F:AE:10:F9:5C:0C:0B:C7:70:14:5D:25:31:F1 Authority key identifier: EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 Certificate issuer: /CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Certificate serial: 62005C19264EAC0D35B678DD902F1F709DD09409 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft Manifest number: 0221 Signing time: Sun 15 Jun 2025 07:11:17 +0000 Manifest this update: Sun 15 Jun 2025 07:06:17 +0000 Manifest next update: Wed 18 Jun 2025 08:54:17 +0000 Files and hashes: 1: EC973BE13EF324E7D59046CF7690A12F9DF12932.crl (hash: ljkZzusTApHeHz60TKpoutkAG874X2zAk0W7F7HBOHQ=) 2: 3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (hash: Fd7yVNtVPCM6piUfSXh9X3JKHqUDZdjbopzWmm3ObMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 08:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:00:5c:19:26:4e:ac:0d:35:b6:78:dd:90:2f:1f:70:9d:d0:94:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Validity Not Before: Jun 15 07:06:17 2025 GMT Not After : Jun 18 08:54:17 2025 GMT Subject: CN=C76C804EF7363FAE10F95C0C0BC770145D2531F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:68:09:fc:f1:6b:a0:20:88:38:78:f0:ad:22: e3:4e:ec:51:4e:7f:77:87:d6:4b:fa:f6:c0:54:6b: 37:ac:c3:e4:93:ef:07:e8:d0:35:a8:75:a8:2c:6c: 37:92:de:b8:2a:d3:41:9d:21:db:d7:98:4f:5d:c4: d1:8f:ac:a4:7b:f0:b5:68:a9:97:fc:0c:38:2a:6b: 84:76:a6:db:39:4c:d5:a3:3e:9c:d8:03:78:1d:72: d8:0b:d4:d3:d4:e8:da:f8:42:ba:71:f4:5c:06:26: e7:83:25:5d:68:89:88:ee:71:4d:a9:49:da:c7:4d: 48:d9:d3:b7:99:99:50:4f:9d:45:ce:a9:2b:21:a7: 3a:e4:1b:bb:88:28:3b:76:d0:6a:c5:7d:77:d4:14: 24:93:ee:33:cd:61:f3:6a:cd:b3:b6:50:f5:41:5c: 5b:54:42:4a:20:34:f1:16:03:fe:a0:5a:47:5d:3f: 69:1d:5a:46:b5:16:d7:66:22:5d:72:19:67:86:66: f6:fb:1f:53:d8:e7:74:d5:3a:8a:93:73:d4:18:cd: e8:ab:2e:18:6a:73:83:31:7c:09:5e:0b:50:0c:ba: 05:f8:28:f3:1e:cc:fa:66:20:46:f6:fb:73:c9:60: 6f:9d:41:69:68:87:c3:62:d7:4c:02:8c:11:85:31: fa:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:6C:80:4E:F7:36:3F:AE:10:F9:5C:0C:0B:C7:70:14:5D:25:31:F1 X509v3 Authority Key Identifier: keyid:EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:fc:fb:de:4d:5a:8d:d2:be:72:40:2a:a4:33:84:2c:70:b6: d6:1c:a3:7b:c6:89:29:5f:99:cb:06:f3:ed:38:76:61:fa:08: a4:30:7d:89:96:30:06:3b:db:27:42:88:8c:79:98:30:26:26: 09:6a:5d:57:47:44:65:8c:de:e9:c3:d9:21:5d:31:2e:80:e3: d3:79:71:b1:4e:35:a8:bd:0c:12:54:90:17:41:c7:e2:b7:47: e7:a6:c0:c1:80:d2:86:91:34:3d:de:2f:c6:e8:11:0a:e9:6f: 1b:9a:83:b9:a9:e6:63:b2:b9:03:ec:87:4d:b4:d8:c2:da:19: 56:bd:fa:cc:57:2b:a1:fd:3d:63:44:fe:75:d4:a7:60:2c:02: 2c:a4:9e:81:cd:ef:d1:ab:61:84:4c:30:ef:49:ae:a6:56:53: 1a:4b:bd:17:d3:05:51:3c:0a:d0:a0:86:85:e0:97:14:76:ce: 07:5c:62:62:c0:bb:ee:43:0d:ed:a4:6b:0f:f7:70:6b:98:42: aa:4b:68:df:5a:67:7a:a4:09:ec:3d:06:76:dd:16:9d:54:86: ef:a9:36:fc:51:2c:73:73:ab:53:a0:78:ab:7f:3d:19:50:89: 73:a9:5b:15:6a:f0:91:02:a1:66:64:be:5f:fd:17:08:1f:e6: 25:1f:53:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYgBcGSZOrA01tnjdkC8fcJ3QlAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5 REYxMjkzMjAeFw0yNTA2MTUwNzA2MTdaFw0yNTA2MTgwODU0MTdaMDMxMTAvBgNV BAMTKEM3NkM4MDRFRjczNjNGQUUxMEY5NUMwQzBCQzc3MDE0NUQyNTMxRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7aAn88WugIIg4ePCtIuNO7FFO f3eH1kv69sBUazesw+ST7wfo0DWodagsbDeS3rgq00GdIdvXmE9dxNGPrKR78LVo qZf8DDgqa4R2pts5TNWjPpzYA3gdctgL1NPU6Nr4Qrpx9FwGJueDJV1oiYjucU2p SdrHTUjZ07eZmVBPnUXOqSshpzrkG7uIKDt20GrFfXfUFCST7jPNYfNqzbO2UPVB XFtUQkogNPEWA/6gWkddP2kdWka1FtdmIl1yGWeGZvb7H1PY53TVOoqTc9QYzeir Lhhqc4MxfAleC1AMugX4KPMezPpmIEb2+3PJYG+dQWloh8Ni10wCjBGFMfq7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx2yATvc2P64Q+VwMC8dwFF0lMfEwHwYDVR0j BBgwFoAU7Jc74T7zJOfVkEbPdpChL53xKTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTFjYmQ3OS04ZjI2LTRiMGUtOGIzYi1hYjllOTkzOGZjYWUvMC9FQzk3M0JFMTNF RjMyNEU3RDU5MDQ2Q0Y3NjkwQTEyRjlERjEyOTMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5REYx MjkzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmUxY2JkNzktOGYyNi00YjBlLThi M2ItYWI5ZTk5MzhmY2FlLzAvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEEx MkY5REYxMjkzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIj8+95NWo3SvnJAKqQzhCxwttYco3vGiSlf mcsG8+04dmH6CKQwfYmWMAY72ydCiIx5mDAmJglqXVdHRGWM3unD2SFdMS6A49N5 cbFONai9DBJUkBdBx+K3R+emwMGA0oaRND3eL8boEQrpbxuag7mp5mOyuQPsh020 2MLaGVa9+sxXK6H9PWNE/nXUp2AsAiyknoHN79GrYYRMMO9JrqZWUxpLvRfTBVE8 CtCghoXglxR2zgdcYmLAu+5DDe2kaw/3cGuYQqpLaN9aZ3qkCew9BnbdFp1Uhu+p NvxRLHNzq1OgeKt/PRlQiXOpWxVq8JECoWZkvl/9Fwgf5iUfU+w= -----END CERTIFICATE-----Generated at Sun Jun 15 15:20:55 2025 by rpki-client