$ rpki-client -vvf repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft File: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft (raw, json) Hash identifier: gKdIsmIUD5zU3T+txa/za3+j/lRDOMgCQRSZoCFiUhs= Subject key identifier: E8:74:7B:F2:8B:EB:6C:16:85:02:B2:2C:30:98:6B:02:25:CA:63:A9 Authority key identifier: E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F Certificate issuer: /CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Certificate serial: 39C407929132989A961105642120E212A77BE324 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft Manifest number: E0 Signing time: Fri 22 Aug 2025 05:31:51 +0000 Manifest this update: Fri 22 Aug 2025 05:26:51 +0000 Manifest next update: Mon 25 Aug 2025 15:29:51 +0000 Files and hashes: 1: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl (hash: 3kD8TZ+nT0xacr9oprq05uk5WSQGhx9pKjJFxgbRHQc=) 2: 323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa (hash: k742tyOIX18+4IlFbV4FgY2xaEXxztUec+tXVFs15vs=) 3: 3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa (hash: PEcDYL2YEDwvOwIh2isXFSsdo3mWol6RplkSJ7kPOGI=) 4: 3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (hash: 0+ulOJPEXxfRU9rDzPOyAhCIeStaBB8o7bfVtpS93+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:29:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:c4:07:92:91:32:98:9a:96:11:05:64:21:20:e2:12:a7:7b:e3:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Validity Not Before: Aug 22 05:26:51 2025 GMT Not After : Aug 25 15:29:51 2025 GMT Subject: CN=E8747BF28BEB6C168502B22C30986B0225CA63A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2d:ea:a9:d1:6c:5b:5f:36:56:bc:a4:35:3a: 89:23:e5:a1:16:0b:8f:00:4e:11:8d:c7:4f:77:6e: aa:ab:08:cd:3f:36:4a:82:dd:72:7d:0a:41:07:76: a5:0e:22:6e:cb:6d:2e:3f:20:fd:e7:ad:a9:28:ab: b6:67:95:be:7b:9c:8f:a7:d2:1d:1e:fe:7b:c7:7c: bd:8f:4d:3c:a0:b9:70:a7:fc:41:7b:ac:ea:f7:fa: dd:02:09:3a:51:ab:9f:ee:dd:cd:10:d4:21:4d:7b: a2:29:0b:cf:de:14:d6:52:31:09:a8:1f:e1:41:5c: 6f:e8:6f:e1:52:65:e8:ab:f3:f7:53:74:84:84:04: 6e:53:4e:a7:83:99:da:a9:b5:b4:9b:f3:6d:7b:b0: 36:23:63:85:83:bf:71:d0:d8:ba:c9:2c:6d:74:71: 4d:b3:23:ce:ae:4f:56:7d:50:be:d2:5b:9b:36:08: c5:22:a6:9c:30:1d:19:be:7e:64:0f:2e:3d:91:e2: 57:e7:ef:ae:b3:24:e1:d3:e4:c8:23:a7:37:f4:c7: 1f:5e:aa:d8:13:f9:1c:a9:02:8b:c7:73:c1:d0:48: e5:97:f2:3b:95:f3:4a:81:0c:a2:28:62:b5:31:8a: 2e:60:20:c6:d8:9f:10:6e:82:cc:1b:a9:ef:56:ae: 66:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:74:7B:F2:8B:EB:6C:16:85:02:B2:2C:30:98:6B:02:25:CA:63:A9 X509v3 Authority Key Identifier: keyid:E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:64:d2:0b:63:2c:eb:7e:c9:c7:38:45:77:c4:44:1b:d3:7c: 74:d4:6d:b2:6f:26:fc:00:73:55:20:cc:d2:07:88:14:7e:0c: 59:f6:5d:dc:8f:1b:69:e5:d9:7a:53:3d:e0:e4:6f:a8:97:f6: 1b:ef:97:20:9a:f3:af:be:c1:c0:60:f1:ad:1f:c1:f2:f4:22: fb:db:0e:48:7f:4b:9e:ff:7f:32:5d:3d:77:cb:1b:a6:d1:a8: 96:e1:34:54:bb:20:b8:5f:ce:4b:eb:41:ba:2c:f3:bd:34:69: 02:f0:a8:fe:6d:33:84:6e:a4:42:5d:9a:94:79:55:ca:cc:50: ca:af:58:8a:20:65:b4:44:93:f2:f2:58:69:3a:b8:a4:dd:b3: 3f:70:d4:b2:10:cd:17:0b:31:61:bf:48:dd:51:13:10:e3:b4: 79:1d:f9:9d:c3:30:87:75:03:fd:6b:32:9c:4f:14:8e:39:3c: b9:8e:95:e2:5b:30:f4:7c:13:54:fb:40:e5:9e:04:af:fa:48: 2b:b0:11:9c:4b:1a:07:8f:9f:f3:c9:df:eb:c0:ba:0b:e4:8f: 21:6c:51:b3:26:49:67:e9:4c:2e:50:be:fd:f3:60:95:48:53: c9:51:5e:61:36:b6:2e:24:65:d0:c3:27:2a:68:a7:1c:c9:56: 55:2a:43:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOcQHkpEymJqWEQVkISDiEqd74yQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0Iy REJCRUQwRjAeFw0yNTA4MjIwNTI2NTFaFw0yNTA4MjUxNTI5NTFaMDMxMTAvBgNV BAMTKEU4NzQ3QkYyOEJFQjZDMTY4NTAyQjIyQzMwOTg2QjAyMjVDQTYzQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFLeqp0WxbXzZWvKQ1Ookj5aEW C48AThGNx093bqqrCM0/NkqC3XJ9CkEHdqUOIm7LbS4/IP3nrakoq7Znlb57nI+n 0h0e/nvHfL2PTTyguXCn/EF7rOr3+t0CCTpRq5/u3c0Q1CFNe6IpC8/eFNZSMQmo H+FBXG/ob+FSZeir8/dTdISEBG5TTqeDmdqptbSb8217sDYjY4WDv3HQ2LrJLG10 cU2zI86uT1Z9UL7SW5s2CMUippwwHRm+fmQPLj2R4lfn766zJOHT5Mgjpzf0xx9e qtgT+RypAovHc8HQSOWX8juV80qBDKIoYrUxii5gIMbYnxBugswbqe9WrmanAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6HR78ovrbBaFArIsMJhrAiXKY6kwHwYDVR0j BBgwFoAU5M7BHyRL8Nq+wTb4Of1Tey277Q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmYzZjVkOS1jZmI4LTQxMjMtYTJiMS1iMGI1Mjk5ZjljNmUvMC9FNENFQzExRjI0 NEJGMERBQkVDMTM2RjgzOUZENTM3QjJEQkJFRDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0IyREJC RUQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJmM2Y1ZDktY2ZiOC00MTIzLWEy YjEtYjBiNTI5OWY5YzZlLzAvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUz N0IyREJCRUQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL1k0gtjLOt+ycc4RXfERBvTfHTUbbJvJvwA c1UgzNIHiBR+DFn2XdyPG2nl2XpTPeDkb6iX9hvvlyCa86++wcBg8a0fwfL0Ivvb Dkh/S57/fzJdPXfLG6bRqJbhNFS7ILhfzkvrQbos8700aQLwqP5tM4RupEJdmpR5 VcrMUMqvWIogZbREk/LyWGk6uKTdsz9w1LIQzRcLMWG/SN1RExDjtHkd+Z3DMId1 A/1rMpxPFI45PLmOleJbMPR8E1T7QOWeBK/6SCuwEZxLGgePn/PJ3+vAugvkjyFs UbMmSWfpTC5Qvv3zYJVIU8lRXmE2ti4kZdDDJypopxzJVlUqQzg= -----END CERTIFICATE-----Generated at Sat Aug 23 12:02:45 2025 by rpki-client