$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft File: E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft (raw, json) Hash identifier: tvlQu0VEZLHcFRj9PPxIR4i3aMPFiVFCIanyX+fcnT0= Subject key identifier: AB:16:D4:FA:68:A0:73:B5:44:A7:F1:F9:C7:2F:2A:BB:B3:5C:08:E4 Authority key identifier: E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1 Certificate issuer: /CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1 Certificate serial: 2AF651392498C9C8951AA422DFDF86A78FCB12A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft Manifest number: 02C2 Signing time: Sat 23 Aug 2025 01:22:21 +0000 Manifest this update: Sat 23 Aug 2025 01:17:21 +0000 Manifest next update: Tue 26 Aug 2025 05:58:21 +0000 Files and hashes: 1: 3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa (hash: JG72NXt605ww3XbVNf9DT18KzObGZzgsJOiqL+ceVSI=) 2: E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl (hash: 1YWAksLnSiw28V+jEGeI7WuB9gdCLZy5YyzqDdH7WEI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:58:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f6:51:39:24:98:c9:c8:95:1a:a4:22:df:df:86:a7:8f:cb:12:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1 Validity Not Before: Aug 23 01:17:21 2025 GMT Not After : Aug 26 05:58:21 2025 GMT Subject: CN=AB16D4FA68A073B544A7F1F9C72F2ABBB35C08E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bd:60:1d:3e:ef:5c:6d:65:46:34:d5:e5:b6: 54:61:9d:01:52:7f:33:26:ee:c8:36:c6:c4:95:57: fd:55:8f:2a:07:81:fe:56:61:77:bf:12:8c:a4:88: 1d:eb:ce:74:0e:80:21:a8:5b:a7:72:75:34:5c:55: f7:ee:d5:b8:90:21:3b:ae:8c:ef:95:7a:e7:16:e7: f7:99:fa:92:b8:d5:7f:57:15:d2:6c:64:9d:ce:02: 78:77:ac:23:6f:8f:a0:44:05:3f:d1:a8:cc:be:51: ee:41:ea:08:a5:a0:48:f8:d4:43:44:ea:73:fe:1b: c7:1c:3d:2e:fc:67:40:c6:53:74:cb:6a:41:cc:5b: bb:cc:de:7a:b0:6a:e2:fb:0d:75:65:71:68:19:42: b4:fb:8f:a9:1a:0e:d3:89:55:29:a4:c0:8c:3c:b5: 59:40:2b:b1:2f:83:01:b0:29:32:76:d1:8b:d1:95: 2b:d9:9d:d7:0a:4c:c4:f6:1a:40:ae:d9:64:de:82: 4f:dd:41:ea:3f:38:12:a6:be:9b:e4:6e:35:dd:08: 64:cb:00:eb:2b:9e:ec:22:5c:42:2e:d4:cc:37:19: fb:5a:51:e2:6d:03:6f:11:49:a3:ad:d2:1f:7d:54: 47:ea:c7:d9:ac:aa:21:4c:32:90:9a:4f:54:41:00: a2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:16:D4:FA:68:A0:73:B5:44:A7:F1:F9:C7:2F:2A:BB:B3:5C:08:E4 X509v3 Authority Key Identifier: keyid:E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:5d:31:06:55:3c:34:e7:49:bd:a8:cb:02:c6:20:18:c7:b4: 84:d2:8d:4b:79:7e:21:9a:df:d4:09:88:18:ff:dc:6e:33:15: 94:99:4b:40:00:3b:fe:9e:c3:5d:79:6d:20:8c:1a:f4:2b:da: d3:6b:4e:8d:0b:20:b0:10:14:64:52:9a:8d:95:f2:76:06:f9: d3:4f:5c:86:7c:b8:50:65:cf:ad:82:7e:8d:74:59:40:ea:66: 8f:e6:58:60:2b:17:4b:cc:d0:4e:39:22:fd:80:8d:61:cc:78: 82:57:c5:81:ee:bc:9c:6f:60:2d:3e:14:4b:4e:86:e3:fc:11: ad:60:08:af:1b:af:0b:02:41:a0:d2:a4:46:94:a6:58:70:85: bf:7f:75:0a:4e:05:17:d1:2d:78:6b:91:b5:08:63:88:c4:f9: 65:f0:bd:cc:24:c1:c1:24:eb:b7:1f:ee:0c:f7:54:be:33:46: 4c:77:54:22:ab:4d:5e:70:8a:e7:03:6e:bb:35:f9:6a:23:f6: fd:e9:e6:c9:e8:9d:88:ce:c2:2f:ea:9a:96:dc:11:a0:8f:d7: 9b:8b:7a:f4:02:1d:3a:a6:2e:64:18:bc:93:81:5c:75:03:cb: 9d:4c:9d:4f:26:8e:05:79:02:28:36:95:33:18:7c:bc:e0:fd: 53:d7:a4:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKvZROSSYyciVGqQi39+Gp4/LEqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAxNEU2RUQwMzUzN0U0NTM1NjVEMDZFN0I4QTMxQUE4 QTA1MjVBMTAeFw0yNTA4MjMwMTE3MjFaFw0yNTA4MjYwNTU4MjFaMDMxMTAvBgNV BAMTKEFCMTZENEZBNjhBMDczQjU0NEE3RjFGOUM3MkYyQUJCQjM1QzA4RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZvWAdPu9cbWVGNNXltlRhnQFS fzMm7sg2xsSVV/1VjyoHgf5WYXe/EoykiB3rznQOgCGoW6dydTRcVffu1biQITuu jO+VeucW5/eZ+pK41X9XFdJsZJ3OAnh3rCNvj6BEBT/RqMy+Ue5B6giloEj41ENE 6nP+G8ccPS78Z0DGU3TLakHMW7vM3nqwauL7DXVlcWgZQrT7j6kaDtOJVSmkwIw8 tVlAK7EvgwGwKTJ20YvRlSvZndcKTMT2GkCu2WTegk/dQeo/OBKmvpvkbjXdCGTL AOsrnuwiXEIu1Mw3GftaUeJtA28RSaOt0h99VEfqx9msqiFMMpCaT1RBAKLHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqxbU+migc7VEp/H5xy8qu7NcCOQwHwYDVR0j BBgwFoAU4BTm7QNTfkU1ZdBue4oxqooFJaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmIyOTM3OC00NWYwLTQ5ZDMtYTZhZi01NzNiZTdkY2E2ZDAvMC9FMDE0RTZFRDAz NTM3RTQ1MzU2NUQwNkU3QjhBMzFBQThBMDUyNUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAxNEU2RUQwMzUzN0U0NTM1NjVEMDZFN0I4QTMxQUE4QTA1 MjVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJiMjkzNzgtNDVmMC00OWQzLWE2 YWYtNTczYmU3ZGNhNmQwLzAvRTAxNEU2RUQwMzUzN0U0NTM1NjVEMDZFN0I4QTMx QUE4QTA1MjVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJFdMQZVPDTnSb2oywLGIBjHtITSjUt5fiGa 39QJiBj/3G4zFZSZS0AAO/6ew115bSCMGvQr2tNrTo0LILAQFGRSmo2V8nYG+dNP XIZ8uFBlz62Cfo10WUDqZo/mWGArF0vM0E45Iv2AjWHMeIJXxYHuvJxvYC0+FEtO huP8Ea1gCK8brwsCQaDSpEaUplhwhb9/dQpOBRfRLXhrkbUIY4jE+WXwvcwkwcEk 67cf7gz3VL4zRkx3VCKrTV5wiucDbrs1+Woj9v3p5snonYjOwi/qmpbcEaCP15uL evQCHTqmLmQYvJOBXHUDy51MnU8mjgV5Aig2lTMYfLzg/VPXpFo= -----END CERTIFICATE-----Generated at Sat Aug 23 13:01:47 2025 by rpki-client