$ rpki-client -vvf repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft File: E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft (raw, json) Hash identifier: NRAgKoD3B9AXFAXFS1TfE0gadcc3YVYS3c4P43JPvMQ= Subject key identifier: D1:D6:1B:B7:3D:DC:EB:5C:54:49:3E:F8:84:AF:64:18:29:36:13:03 Authority key identifier: E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9 Certificate issuer: /CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9 Certificate serial: 38E4FF358824322E47E2EFA72A5B93E9095F5BE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft Manifest number: 01E1 Signing time: Fri 22 Aug 2025 15:51:29 +0000 Manifest this update: Fri 22 Aug 2025 15:46:29 +0000 Manifest next update: Tue 26 Aug 2025 01:44:29 +0000 Files and hashes: 1: 3130332e3138392e3234392e302f32342d3234203d3e20313439383838.roa (hash: D0t/YeMSaxANRp7Cjj+UYZjgVfcPEy0eqBQGOyEnZWA=) 2: 3130332e3138392e3234382e302f32342d3234203d3e20313439383838.roa (hash: imfZYd+PwuMIdN7UcBrml21Vlzc4h9f5RzLmotI9hlU=) 3: E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl (hash: 9gywpBlXuYG5wkmAkz/H0o4WYlS+Bgcl0tLUbe9YOYs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 01:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e4:ff:35:88:24:32:2e:47:e2:ef:a7:2a:5b:93:e9:09:5f:5b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9 Validity Not Before: Aug 22 15:46:29 2025 GMT Not After : Aug 26 01:44:29 2025 GMT Subject: CN=D1D61BB73DDCEB5C54493EF884AF641829361303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:13:1c:d9:ca:d8:c0:4c:21:43:f7:60:78:23: 46:a9:06:fd:68:97:bc:ee:92:79:e4:09:56:2b:37: 55:e2:57:54:32:ea:47:55:1e:e6:f8:6c:5e:9a:db: 07:78:64:36:80:78:3c:45:de:81:43:44:37:40:09: 76:21:96:99:45:72:1f:cc:41:ed:86:7a:b9:26:94: 29:25:0b:63:00:64:0d:9e:bf:d9:48:08:e8:a6:6d: 85:60:01:cf:9e:35:48:80:10:60:5b:17:50:b5:2d: 63:15:5a:8a:2a:07:9b:49:2d:26:0d:19:ce:a5:87: c8:0a:ef:df:a1:b4:1f:1e:7a:0b:f5:48:07:0e:9d: 18:56:72:a2:b4:5d:c6:35:9e:bc:8b:da:f7:d4:6c: e8:fe:f9:c1:9d:49:1b:d1:51:ba:b6:fd:6a:4e:3b: eb:35:99:97:87:da:bf:fa:23:17:31:db:14:f1:d7: b0:48:f8:6e:61:15:8a:00:5a:b6:4b:0a:42:c7:81: 02:46:d9:87:70:34:45:56:e2:98:bc:54:a8:93:84: 87:3d:ee:ed:ed:95:5c:86:64:92:bb:f1:1c:bd:6e: 92:fd:3e:8d:98:f6:5d:db:bd:ce:68:ee:32:ff:d2: 3c:fd:ec:45:78:24:1e:38:e7:f8:b5:c6:53:88:52: 06:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D6:1B:B7:3D:DC:EB:5C:54:49:3E:F8:84:AF:64:18:29:36:13:03 X509v3 Authority Key Identifier: keyid:E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:72:5f:c4:84:36:b0:e1:15:14:8d:30:52:c1:eb:07:db:3c: 3d:0a:1f:79:58:26:f8:99:b5:c4:a4:83:78:09:65:b8:b2:78: ae:f4:92:f8:7d:3d:af:24:77:b4:33:a6:3e:92:75:af:98:4e: 93:b9:d9:17:77:95:26:60:64:31:9b:27:5b:14:79:bf:08:16: 6f:bd:65:89:dd:06:cf:8f:a1:5b:81:36:4f:6c:b6:79:fa:a4: c7:60:32:4a:16:a4:33:dd:58:eb:fc:2f:86:0f:b8:9a:b1:c3: 77:73:a9:18:8c:fc:fc:a5:06:15:20:34:27:a1:7e:5e:90:7b: c9:57:c4:c2:5b:1c:5e:32:95:d5:4d:3c:f1:d7:1c:9f:87:6e: ea:1f:83:2b:d1:d2:21:12:5f:bf:8b:b3:e8:64:32:94:87:ea: 10:3d:4a:09:b6:6c:20:9c:c4:2d:db:eb:61:f4:f5:d0:5c:b3: c8:28:9c:1f:73:fe:6d:ac:26:24:3c:b8:0e:bc:93:56:29:05: 8c:d8:d9:c3:ef:c3:96:ca:66:8e:3f:6e:db:f3:f9:99:a6:40: 7f:75:4f:99:7d:f2:01:a4:4d:a6:ea:58:98:3f:e6:2a:ef:89: ec:e5:b7:69:42:cf:77:7a:f3:18:12:5a:54:74:86:e4:b6:77: a3:db:57:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOOT/NYgkMi5H4u+nKluT6QlfW+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VEMjEx QzlGMjFDOTAeFw0yNTA4MjIxNTQ2MjlaFw0yNTA4MjYwMTQ0MjlaMDMxMTAvBgNV BAMTKEQxRDYxQkI3M0REQ0VCNUM1NDQ5M0VGODg0QUY2NDE4MjkzNjEzMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOExzZytjATCFD92B4I0apBv1o l7zuknnkCVYrN1XiV1Qy6kdVHub4bF6a2wd4ZDaAeDxF3oFDRDdACXYhlplFch/M Qe2GerkmlCklC2MAZA2ev9lICOimbYVgAc+eNUiAEGBbF1C1LWMVWooqB5tJLSYN Gc6lh8gK79+htB8eegv1SAcOnRhWcqK0XcY1nryL2vfUbOj++cGdSRvRUbq2/WpO O+s1mZeH2r/6Ixcx2xTx17BI+G5hFYoAWrZLCkLHgQJG2YdwNEVW4pi8VKiThIc9 7u3tlVyGZJK78Ry9bpL9Po2Y9l3bvc5o7jL/0jz97EV4JB445/i1xlOIUga/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0dYbtz3c61xUST74hK9kGCk2EwMwHwYDVR0j BBgwFoAU4s2qIjv7bysTlz64A1PtIRyfIckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGY0MTY0ZS03NGU1LTQwZDYtOWEzMC1iMzcyYTRkMmE0NTQvMC9FMkNEQUEyMjNC RkI2RjJCMTM5NzNFQjgwMzUzRUQyMTFDOUYyMUM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VEMjExQzlG MjFDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRmNDE2NGUtNzRlNS00MGQ2LTlh MzAtYjM3MmE0ZDJhNDU0LzAvRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VE MjExQzlGMjFDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJyX8SENrDhFRSNMFLB6wfbPD0KH3lYJviZ tcSkg3gJZbiyeK70kvh9Pa8kd7Qzpj6Sda+YTpO52Rd3lSZgZDGbJ1sUeb8IFm+9 ZYndBs+PoVuBNk9stnn6pMdgMkoWpDPdWOv8L4YPuJqxw3dzqRiM/PylBhUgNCeh fl6Qe8lXxMJbHF4yldVNPPHXHJ+HbuofgyvR0iESX7+Ls+hkMpSH6hA9Sgm2bCCc xC3b62H09dBcs8gonB9z/m2sJiQ8uA68k1YpBYzY2cPvw5bKZo4/btvz+ZmmQH91 T5l98gGkTabqWJg/5irviezlt2lCz3d68xgSWlR0huS2d6PbV2o= -----END CERTIFICATE-----Generated at Sat Aug 23 20:07:07 2025 by rpki-client