$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft File: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft (raw, json) Hash identifier: k7UV95gDS29Nf/JQAwrOlTyDP02v1HnAo6haYmjfO2g= Subject key identifier: D0:18:AC:5C:B5:BC:D4:C9:F0:EC:74:42:06:4F:26:0A:1D:08:64:11 Authority key identifier: E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F Certificate issuer: /CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F Certificate serial: 78114980931CA480AA4C1E3A08481295185ADFCD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft Manifest number: 019C Signing time: Thu 21 Aug 2025 15:50:50 +0000 Manifest this update: Thu 21 Aug 2025 15:45:50 +0000 Manifest next update: Sun 24 Aug 2025 19:27:50 +0000 Files and hashes: 1: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl (hash: ObGVoCV25c066iSDsKxQ+fB6TDbCOoL7WyARIJl8Now=) 2: 3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa (hash: L7eyl2XZ6A1jGQ7W7TcXIFdLoB9CiiJsysljc4+PR9I=) 3: 3130332e3137322e3234322e302f32342d3234203d3e20313437303836.roa (hash: BUZVEiAJYJLqmtOMsKiwoKkvjDG5Aqhzz5fYoIUA7O8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 19:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:11:49:80:93:1c:a4:80:aa:4c:1e:3a:08:48:12:95:18:5a:df:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F Validity Not Before: Aug 21 15:45:50 2025 GMT Not After : Aug 24 19:27:50 2025 GMT Subject: CN=D018AC5CB5BCD4C9F0EC7442064F260A1D086411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e6:e4:d7:9e:2b:6f:ff:63:16:ea:a9:cb:03: 65:64:43:4d:93:b9:64:5c:37:83:82:90:02:a3:7c: 72:bb:b8:05:28:23:2e:20:bc:8e:12:a2:73:03:43: d9:3d:b6:e0:64:2d:49:6d:d8:41:39:e2:5c:5b:a6: 65:14:d1:bf:92:7c:2c:df:14:76:d9:ea:89:d4:13: 52:84:64:9c:8e:15:59:b3:5f:bc:7d:80:3b:ef:07: 1f:be:4b:d8:6b:6c:c8:23:33:27:ce:d6:69:e7:94: de:2f:76:09:07:e5:43:0e:a9:f7:a1:c7:72:2d:fd: b4:41:0d:62:ad:bd:13:63:31:5d:d0:18:d2:5b:55: 9f:25:dc:19:a6:52:c5:7e:61:92:d6:4f:82:30:4e: 9a:02:87:1f:45:43:9d:3c:8b:7c:6b:b6:b5:66:f1: 1a:54:8a:6d:05:12:15:87:e3:de:0f:0f:ac:65:0a: 34:e1:c1:c1:e7:1b:e8:3f:6a:85:4a:33:51:70:ab: a7:a9:51:db:93:82:3a:0e:d6:f7:43:39:c0:95:10: 91:ce:f8:ac:8c:e8:e6:41:e1:b3:4f:76:d2:8d:16: 3a:b0:2b:85:20:16:45:7b:04:f7:33:fd:30:a8:03: f9:ed:22:ac:00:41:a5:92:c6:2f:98:da:7b:01:de: c9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:18:AC:5C:B5:BC:D4:C9:F0:EC:74:42:06:4F:26:0A:1D:08:64:11 X509v3 Authority Key Identifier: keyid:E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:d7:01:dc:17:23:eb:8b:ce:81:a4:53:7e:7d:d9:82:cb:4e: 3c:0e:1b:be:33:26:2e:c8:58:31:99:cb:1a:fd:8f:45:2b:64: 6b:af:49:88:a3:55:70:80:2f:f8:c5:e9:70:d3:8b:b6:e1:d4: 1e:26:96:f5:6f:d4:7b:06:7e:8d:a5:a7:98:12:64:13:f5:2b: 1d:d9:fa:a8:f8:46:a0:ee:fe:7c:c4:68:11:1b:bd:52:c4:a1: f5:b8:cf:3f:a3:a2:72:ac:d0:aa:e7:f0:ea:6f:ce:19:09:18: d7:ec:8e:de:32:9d:23:72:90:a9:9c:66:52:d7:43:a1:59:c4: eb:2a:81:2c:a8:5d:34:83:9a:18:f0:8e:c2:94:7c:56:49:6d: 56:1b:98:ac:3c:24:8c:25:02:a2:b0:2f:04:1f:71:53:8f:33: 0a:81:61:73:c9:bc:36:11:15:94:e2:db:64:30:c9:cb:83:07: ae:b2:96:e4:ce:c0:9e:3c:a0:c9:71:c8:ff:23:d4:e9:ec:a8: 1f:35:56:f7:75:16:f6:5b:4d:0f:ab:08:65:72:1f:aa:74:ca: fb:5f:fe:86:95:10:4b:c1:54:8c:55:e4:6f:0c:e9:20:64:0a: cf:b2:21:6b:9a:ce:b0:ec:6c:23:15:00:db:4c:46:c8:40:c5: 0a:2f:34:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeBFJgJMcpICqTB46CEgSlRha380wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJBMDNG QUY1NzU2RjAeFw0yNTA4MjExNTQ1NTBaFw0yNTA4MjQxOTI3NTBaMDMxMTAvBgNV BAMTKEQwMThBQzVDQjVCQ0Q0QzlGMEVDNzQ0MjA2NEYyNjBBMUQwODY0MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl5uTXnitv/2MW6qnLA2VkQ02T uWRcN4OCkAKjfHK7uAUoIy4gvI4SonMDQ9k9tuBkLUlt2EE54lxbpmUU0b+SfCzf FHbZ6onUE1KEZJyOFVmzX7x9gDvvBx++S9hrbMgjMyfO1mnnlN4vdgkH5UMOqfeh x3It/bRBDWKtvRNjMV3QGNJbVZ8l3BmmUsV+YZLWT4IwTpoChx9FQ508i3xrtrVm 8RpUim0FEhWH494PD6xlCjThwcHnG+g/aoVKM1Fwq6epUduTgjoO1vdDOcCVEJHO +KyM6OZB4bNPdtKNFjqwK4UgFkV7BPcz/TCoA/ntIqwAQaWSxi+Y2nsB3skDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0BisXLW81Mnw7HRCBk8mCh0IZBEwHwYDVR0j BBgwFoAU4q7sffiXqdbk8NHRxDEqA/r1dW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjZkOGY5Ny1jODA2LTQ3OTktODVlMC04Y2NmMThkYmJiMzEvMC9FMkFFRUM3REY4 OTdBOUQ2RTRGMEQxRDFDNDMxMkEwM0ZBRjU3NTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJBMDNGQUY1 NzU2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2ZDhmOTctYzgwNi00Nzk5LTg1 ZTAtOGNjZjE4ZGJiYjMxLzAvRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJB MDNGQUY1NzU2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjXAdwXI+uLzoGkU3592YLLTjwOG74zJi7I WDGZyxr9j0UrZGuvSYijVXCAL/jF6XDTi7bh1B4mlvVv1HsGfo2lp5gSZBP1Kx3Z +qj4RqDu/nzEaBEbvVLEofW4zz+jonKs0Krn8OpvzhkJGNfsjt4ynSNykKmcZlLX Q6FZxOsqgSyoXTSDmhjwjsKUfFZJbVYbmKw8JIwlAqKwLwQfcVOPMwqBYXPJvDYR FZTi22QwycuDB66yluTOwJ48oMlxyP8j1OnsqB81Vvd1FvZbTQ+rCGVyH6p0yvtf /oaVEEvBVIxV5G8M6SBkCs+yIWuazrDsbCMVANtMRshAxQovNFk= -----END CERTIFICATE-----Generated at Sat Aug 23 13:58:43 2025 by rpki-client