$ rpki-client -vvf repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft File: E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft (raw, json) Hash identifier: DGN9o+v4UZDo5L1vyszZYE/cj4P+8T2sG/JtB7cfy+M= Subject key identifier: 50:48:9F:0D:24:7A:5E:06:54:8D:1A:17:B7:30:47:3D:EA:A7:11:E1 Authority key identifier: E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27 Certificate issuer: /CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27 Certificate serial: 2EBAB682C6A6CCC5F554BEF321B92FE8525EDC20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft Manifest number: 01BB Signing time: Sat 23 Aug 2025 10:31:05 +0000 Manifest this update: Sat 23 Aug 2025 10:26:05 +0000 Manifest next update: Tue 26 Aug 2025 12:07:05 +0000 Files and hashes: 1: 3130332e34372e31312e302f32342d3234203d3e203539323733.roa (hash: HBlBl4qnEWmFIIHkU9MPENaLHFOkHGNLtTU92POPS9Q=) 2: 3130332e34372e31302e302f32332d3233203d3e203539323733.roa (hash: rlKPT6Sw2+EZPDLUv/m04ksSr2kbhw7VmVT/BAYmQMM=) 3: 3130332e34372e31302e302f32342d3234203d3e203539323733.roa (hash: dFHjmVg8iByyDE0AoUz/kaQtWk08pnPg8xzNojTvhm0=) 4: E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl (hash: HADoI7wyaeid00c26UiYtmEWNpBAfllpfKmYKSo3CBU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ba:b6:82:c6:a6:cc:c5:f5:54:be:f3:21:b9:2f:e8:52:5e:dc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27 Validity Not Before: Aug 23 10:26:05 2025 GMT Not After : Aug 26 12:07:05 2025 GMT Subject: CN=50489F0D247A5E06548D1A17B730473DEAA711E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c8:4b:34:18:bc:77:6b:8c:c8:8c:f3:45:53: e9:b4:14:17:8f:67:68:c8:5a:8f:b9:c8:ee:f0:02: 8e:d3:54:86:8c:c3:5e:2e:2a:34:bb:c4:29:69:e1: 13:a9:f7:65:08:a9:4d:f7:6c:55:ae:ee:30:2f:cc: 4f:c3:1a:e4:01:17:60:3e:56:28:1a:c4:54:24:c4: 6c:d5:10:5b:5d:57:2d:f8:98:11:21:a2:1a:65:12: e5:d1:a8:c0:f3:1a:28:1d:ed:02:a9:0b:37:9e:6f: 39:3c:3d:51:1b:14:ea:a2:4b:ed:a2:bd:74:8a:8d: d4:03:51:20:e6:da:bf:c5:52:12:e9:6d:57:56:cb: e5:22:a1:03:34:01:92:6d:62:e2:ac:7c:54:8a:c2: 6e:75:ec:03:4a:45:f6:11:72:3c:3d:c8:4a:f7:21: 93:91:f5:2d:bc:54:bb:7b:e0:e2:bb:c7:2c:31:8d: d3:ce:12:45:3e:76:e4:5e:f2:16:87:77:1e:34:a3: ca:f1:c8:47:8f:d5:51:07:36:c4:97:89:17:b7:fa: ea:0a:08:ca:cd:12:e7:e2:94:af:0b:49:f6:75:a7: 32:58:83:79:9a:07:c2:40:7f:7f:88:b2:73:f4:ad: 2d:55:75:6e:68:f2:02:56:02:cd:5a:fa:b5:ee:d6: 56:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:48:9F:0D:24:7A:5E:06:54:8D:1A:17:B7:30:47:3D:EA:A7:11:E1 X509v3 Authority Key Identifier: keyid:E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:eb:00:3c:08:14:89:4f:66:33:8b:15:92:7b:6c:70:44:27: 9a:a0:5a:00:06:f4:e0:12:5f:d1:8a:00:c9:66:08:34:78:8a: dd:76:e3:d7:96:21:f3:b7:5e:50:af:7b:fd:94:fc:9c:55:57: 54:23:00:2e:dd:d6:bf:12:79:5e:05:c8:aa:75:16:19:82:e4: 19:32:6e:a8:91:7c:c7:42:cc:7b:21:cd:df:bb:0f:84:c9:0c: 1c:54:23:65:2d:ca:b3:f5:d1:f9:e8:e4:96:3c:f3:59:ce:a2: 97:cc:5f:22:31:38:cd:ce:84:60:c8:30:e2:68:8b:da:98:b6: c9:c4:d9:34:58:70:e5:55:97:0f:78:88:6c:75:d8:fe:c0:d0: b9:f2:bb:99:7f:4c:6b:29:e1:33:5a:8c:39:7d:51:fe:30:7d: 82:d8:08:d4:d1:00:15:cb:09:40:05:ec:ac:5a:cf:1f:91:c4: 4f:9d:de:1c:e6:35:3a:98:6f:10:46:7c:c5:a0:3d:ec:fb:7b: 57:55:41:e9:fa:4a:a8:60:7d:3f:e3:39:b3:4b:4e:cd:89:99: 73:a2:a6:7c:f5:00:90:f9:16:8e:bf:cc:ce:ec:32:59:cd:17: b0:8a:3e:c5:7f:a8:e4:e9:03:52:ac:03:d6:d5:6e:92:3f:e1: a5:69:27:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULrq2gsamzMX1VL7zIbkv6FJe3CAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZG QTI5QUIyNzAeFw0yNTA4MjMxMDI2MDVaFw0yNTA4MjYxMjA3MDVaMDMxMTAvBgNV BAMTKDUwNDg5RjBEMjQ3QTVFMDY1NDhEMUExN0I3MzA0NzNERUFBNzExRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClyEs0GLx3a4zIjPNFU+m0FBeP Z2jIWo+5yO7wAo7TVIaMw14uKjS7xClp4ROp92UIqU33bFWu7jAvzE/DGuQBF2A+ VigaxFQkxGzVEFtdVy34mBEhohplEuXRqMDzGigd7QKpCzeebzk8PVEbFOqiS+2i vXSKjdQDUSDm2r/FUhLpbVdWy+UioQM0AZJtYuKsfFSKwm517ANKRfYRcjw9yEr3 IZOR9S28VLt74OK7xywxjdPOEkU+duRe8haHdx40o8rxyEeP1VEHNsSXiRe3+uoK CMrNEufilK8LSfZ1pzJYg3maB8JAf3+IsnP0rS1VdW5o8gJWAs1a+rXu1laRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUEifDSR6XgZUjRoXtzBHPeqnEeEwHwYDVR0j BBgwFoAU6R1R5UqJwN29V/AKE+luNvopqycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWE3MmViOS04ZTUzLTQ0NzItYTM1YS1mZWU4YmYwYWY0NmYvMC9FOTFENTFFNTRB ODlDMEREQkQ1N0YwMEExM0U5NkUzNkZBMjlBQjI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZGQTI5 QUIyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVhNzJlYjktOGU1My00NDcyLWEz NWEtZmVlOGJmMGFmNDZmLzAvRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZF MzZGQTI5QUIyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnrADwIFIlPZjOLFZJ7bHBEJ5qgWgAG9OAS X9GKAMlmCDR4it1249eWIfO3XlCve/2U/JxVV1QjAC7d1r8SeV4FyKp1FhmC5Bky bqiRfMdCzHshzd+7D4TJDBxUI2UtyrP10fno5JY881nOopfMXyIxOM3OhGDIMOJo i9qYtsnE2TRYcOVVlw94iGx12P7A0Lnyu5l/TGsp4TNajDl9Uf4wfYLYCNTRABXL CUAF7Kxazx+RxE+d3hzmNTqYbxBGfMWgPez7e1dVQen6SqhgfT/jObNLTs2JmXOi pnz1AJD5Fo6/zM7sMlnNF7CKPsV/qOTpA1KsA9bVbpI/4aVpJ+8= -----END CERTIFICATE-----Generated at Sat Aug 23 13:30:44 2025 by rpki-client