$ rpki-client -vvf repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft File: E7D91E7B841DB274E77E823084312F8B78A5C951.mft (raw, json) Hash identifier: GxnhKQLnsZIzYbXIVKMqgVb/Ai3jCG0rqqa9Cmui8Y0= Subject key identifier: 98:2C:77:8E:AA:22:A5:FD:C3:47:6E:B5:E9:76:B7:A1:EC:0C:13:E9 Authority key identifier: E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51 Certificate issuer: /CN=E7D91E7B841DB274E77E823084312F8B78A5C951 Certificate serial: 58E02FEDD841EC708F4FC15B98347F84CA30A28D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft Manifest number: 04C3 Signing time: Sat 23 Aug 2025 01:11:36 +0000 Manifest this update: Sat 23 Aug 2025 01:06:36 +0000 Manifest next update: Tue 26 Aug 2025 06:13:36 +0000 Files and hashes: 1: 323030313a6466313a316338303a3a2f34382d3438203d3e20313339333637.roa (hash: FFu9qqO0bSps/kj6fyv5I//5Hd+4wId09goi1uFGoE8=) 2: E7D91E7B841DB274E77E823084312F8B78A5C951.crl (hash: y24t6xKh3s2BR7obRQWoCHOEZln16r/eMBNyCN/LZsc=) 3: 3130332e3134312e3233382e302f32332d3234203d3e20313339333637.roa (hash: Q8AiVS513YZaJstY9RUzjxicepMe2vYlP+usoxO41hE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.crl rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 06:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:e0:2f:ed:d8:41:ec:70:8f:4f:c1:5b:98:34:7f:84:ca:30:a2:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7D91E7B841DB274E77E823084312F8B78A5C951 Validity Not Before: Aug 23 01:06:36 2025 GMT Not After : Aug 26 06:13:36 2025 GMT Subject: CN=982C778EAA22A5FDC3476EB5E976B7A1EC0C13E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ad:37:40:de:df:9b:bf:43:e4:1f:8c:09:3a: d9:c4:71:0d:29:dc:9c:9c:bf:50:5c:30:d9:1a:66: cd:73:5e:35:07:0a:9c:c8:05:83:cd:69:64:16:c8: 53:b8:64:97:94:55:1f:85:1f:28:fd:ce:24:63:b4: f5:92:16:01:bc:32:19:e2:41:a4:f7:4f:88:bf:a1: 43:2b:76:2d:37:1d:2a:76:b1:28:c7:39:1e:67:78: 44:5a:6d:39:5e:b1:76:33:99:9f:6c:4e:59:ca:ce: a1:1e:eb:1d:24:36:5a:64:ea:79:9d:bd:2a:4e:0a: 74:66:72:4a:67:6b:ad:68:c3:2b:ee:b8:78:56:f2: 24:9e:3f:cf:a7:d6:5f:da:d1:ce:23:89:38:f5:9a: a4:f1:cc:a6:e4:8a:68:f0:5e:39:31:59:62:0b:bf: bd:59:a7:f3:87:b6:af:b9:a5:f9:ea:b4:25:2a:83: 64:32:94:a2:78:65:0f:d3:9c:64:86:7b:33:e3:98: e9:41:81:c3:bd:12:44:7d:f5:f1:de:c2:f4:75:2c: 48:1e:fb:99:f0:b2:74:ae:1d:80:df:a4:86:6b:b0: ea:f7:c3:62:00:61:34:0c:47:90:77:d0:19:28:c0: 29:40:34:59:bc:df:59:b9:30:f1:3b:fe:90:7b:2d: 88:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2C:77:8E:AA:22:A5:FD:C3:47:6E:B5:E9:76:B7:A1:EC:0C:13:E9 X509v3 Authority Key Identifier: keyid:E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:84:b2:43:e7:08:74:d5:d4:fa:3a:65:3f:82:63:5b:68:71: b4:ab:20:ce:fd:b2:50:f5:ce:d1:34:41:ff:e2:71:4c:44:8d: 02:7f:2a:f6:ed:ce:a7:fd:30:2d:2f:d9:a9:33:59:51:70:b7: 36:c8:04:e1:2c:cf:77:7e:6c:cd:06:db:06:6b:04:32:b4:97: fc:42:87:ae:b5:b1:48:ec:92:05:e8:6e:1f:a2:9c:56:35:0f: 2d:1c:12:d3:97:60:8d:5f:fa:ac:4f:d4:23:70:2d:74:fd:fd: 84:2a:1a:a9:4a:40:34:2e:23:4c:01:ec:58:44:1e:a8:ec:68: 78:7d:3c:68:e1:3c:9e:b1:68:21:f3:56:cf:dd:cb:1c:0b:f6: 1e:54:c3:fa:64:0d:73:89:51:9b:74:c7:60:2c:02:95:47:e5: d3:0f:af:6c:63:ca:4d:cf:aa:8d:51:0f:84:85:f7:90:ca:04: ba:07:7e:b6:58:a4:4f:5a:9f:9a:55:23:02:e6:4a:fd:aa:e5: fd:79:2a:13:d7:7a:a2:44:1b:82:90:87:1a:b4:76:9a:cd:73: 62:f7:17:fb:c2:a3:dd:f3:e7:67:24:75:ef:d6:d1:bc:05:1f: c2:73:7f:81:79:86:25:6e:00:34:ec:4c:c7:b1:a0:05:4b:6e: c3:a4:e7:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWOAv7dhB7HCPT8FbmDR/hMowoo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJGOEI3 OEE1Qzk1MTAeFw0yNTA4MjMwMTA2MzZaFw0yNTA4MjYwNjEzMzZaMDMxMTAvBgNV BAMTKDk4MkM3NzhFQUEyMkE1RkRDMzQ3NkVCNUU5NzZCN0ExRUMwQzEzRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDurTdA3t+bv0PkH4wJOtnEcQ0p 3Jycv1BcMNkaZs1zXjUHCpzIBYPNaWQWyFO4ZJeUVR+FHyj9ziRjtPWSFgG8Mhni QaT3T4i/oUMrdi03HSp2sSjHOR5neERabTlesXYzmZ9sTlnKzqEe6x0kNlpk6nmd vSpOCnRmckpna61owyvuuHhW8iSeP8+n1l/a0c4jiTj1mqTxzKbkimjwXjkxWWIL v71Zp/OHtq+5pfnqtCUqg2QylKJ4ZQ/TnGSGezPjmOlBgcO9EkR99fHewvR1LEge +5nwsnSuHYDfpIZrsOr3w2IAYTQMR5B30BkowClANFm831m5MPE7/pB7LYjjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmCx3jqoipf3DR2616Xa3oewME+kwHwYDVR0j BBgwFoAU59kee4QdsnTnfoIwhDEvi3ilyVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTcwODNhYi0yNzBhLTRiMGEtOGU1NS1hNDVlMWNmMWFmZDUvMC9FN0Q5MUU3Qjg0 MURCMjc0RTc3RTgyMzA4NDMxMkY4Qjc4QTVDOTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJGOEI3OEE1 Qzk1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3MDgzYWItMjcwYS00YjBhLThl NTUtYTQ1ZTFjZjFhZmQ1LzAvRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJG OEI3OEE1Qzk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSEskPnCHTV1Po6ZT+CY1tocbSrIM79slD1 ztE0Qf/icUxEjQJ/Kvbtzqf9MC0v2akzWVFwtzbIBOEsz3d+bM0G2wZrBDK0l/xC h661sUjskgXobh+inFY1Dy0cEtOXYI1f+qxP1CNwLXT9/YQqGqlKQDQuI0wB7FhE HqjsaHh9PGjhPJ6xaCHzVs/dyxwL9h5Uw/pkDXOJUZt0x2AsApVH5dMPr2xjyk3P qo1RD4SF95DKBLoHfrZYpE9an5pVIwLmSv2q5f15KhPXeqJEG4KQhxq0dprNc2L3 F/vCo93z52ckde/W0bwFH8Jzf4F5hiVuADTsTMexoAVLbsOk56k= -----END CERTIFICATE-----Generated at Sat Aug 23 10:23:33 2025 by rpki-client