$ rpki-client -vvf repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft File: E420F134FA1A6BA70588424BD4E862EE6C50C188.mft (raw, json) Hash identifier: g4ikrYVGvNbrr4hj8Ew/Gyo0/JmmRKTIFgow+3rPW6Q= Subject key identifier: D7:01:3B:85:11:97:86:52:93:7C:1C:F1:76:2E:FB:C4:80:1C:8C:1F Authority key identifier: E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88 Certificate issuer: /CN=E420F134FA1A6BA70588424BD4E862EE6C50C188 Certificate serial: 509790DED213D09E23CAF6C2E803E3D52D7D5434 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft Manifest number: 04FC Signing time: Fri 22 Aug 2025 01:01:17 +0000 Manifest this update: Fri 22 Aug 2025 00:56:17 +0000 Manifest next update: Mon 25 Aug 2025 12:01:17 +0000 Files and hashes: 1: E420F134FA1A6BA70588424BD4E862EE6C50C188.crl (hash: hXL6gq9vDC+8aiOnsQUiJvnr7BpK3MdkIT+qnYJkbSA=) 2: 323430323a636438303a3a2f33322d3438203d3e203633383835.roa (hash: MDl2DN2os7/fU39oaMG8yA+MKomCGHMu/9vzlZ9xU2U=) 3: 3130332e3139342e3137322e302f32322d3234203d3e203633383835.roa (hash: nIcaXDvKx2+XVxNFuL8CckiCEV48hFgqOSdn9qzzkF4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 12:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:97:90:de:d2:13:d0:9e:23:ca:f6:c2:e8:03:e3:d5:2d:7d:54:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E420F134FA1A6BA70588424BD4E862EE6C50C188 Validity Not Before: Aug 22 00:56:17 2025 GMT Not After : Aug 25 12:01:17 2025 GMT Subject: CN=D7013B8511978652937C1CF1762EFBC4801C8C1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bd:5f:e0:42:3f:28:00:6a:ca:d8:7d:12:b0: 13:37:d5:6e:79:29:c1:3b:8c:22:bd:de:66:6c:a8: e0:53:ae:09:14:a9:6c:a5:2a:91:b8:73:df:27:ff: 29:d2:7a:cd:a8:92:93:da:18:60:bb:02:2d:f5:23: 3f:0d:cc:11:0b:8d:35:c7:74:56:f8:53:c0:2b:54: 15:25:f8:95:8a:26:3f:17:b3:47:2f:18:26:8b:1f: d0:66:77:d1:42:49:e2:9a:a1:48:5e:ff:44:7b:74: 80:4d:a8:15:d4:d6:80:50:29:9a:51:44:fc:e3:d8: e1:e5:75:7a:c3:05:b8:0b:1c:0d:8d:26:cb:74:38: e1:e8:b9:6e:b7:8c:e0:0c:26:ba:03:50:28:2e:31: db:7b:cf:52:10:64:52:d5:74:bf:f0:4f:b2:8d:46: ed:a9:dc:41:c4:7f:b5:8c:38:52:f8:42:ca:d2:a6: 28:87:29:3b:84:64:c9:0d:e3:97:51:8f:54:34:f7: 61:1a:4a:8c:30:e2:8e:68:7d:14:89:11:1f:fe:67: 53:fd:6e:8b:41:dc:3f:a9:54:5f:02:8f:12:e1:20: fd:6b:52:d1:2d:c6:58:fd:e3:14:41:f8:47:dd:cd: 51:72:26:58:56:f5:fd:44:36:83:3b:fe:db:72:d1: b2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:01:3B:85:11:97:86:52:93:7C:1C:F1:76:2E:FB:C4:80:1C:8C:1F X509v3 Authority Key Identifier: keyid:E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:e1:7e:3c:4b:81:c5:59:f2:c5:3e:af:de:22:95:f1:3b:22: a7:d2:54:0a:a7:09:9d:48:a5:41:2a:cb:9b:eb:5f:e3:c9:be: dc:80:b0:a1:9e:e9:29:a8:42:32:cb:78:73:ec:72:12:91:5a: c5:38:ff:8f:31:2e:21:76:97:cb:35:92:b8:16:cc:9b:cb:a7: 3f:c5:37:af:45:ba:cc:92:d8:35:59:10:91:4b:71:c0:85:33: fe:77:a4:94:86:d5:71:dc:c9:17:84:13:29:bd:a9:79:24:db: d8:f2:97:1b:46:1c:1d:2c:24:fe:83:b8:9e:77:6d:ed:e9:1f: e6:35:4f:c8:fc:df:e6:21:0a:23:d6:85:cd:4a:69:ec:be:3f: d6:de:8a:8d:09:1d:c9:4b:a5:da:43:a2:22:ea:04:46:da:c3: d0:34:d5:44:40:80:be:dd:e1:88:f5:f8:ad:d3:a6:1b:29:95: 5d:46:f4:de:99:44:98:c3:9f:9b:ce:9e:93:f4:65:8e:bc:19: a9:c6:7f:66:ae:30:72:f7:1a:67:e0:55:7f:50:7a:26:32:3b: 00:48:fd:5e:50:df:32:18:1b:f7:be:0f:75:ac:6c:64:c3:b5: 33:b4:b7:27:72:ac:f5:ef:c9:15:06:2b:dd:90:2e:27:8e:51: 08:17:b5:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUJeQ3tIT0J4jyvbC6APj1S19VDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYyRUU2 QzUwQzE4ODAeFw0yNTA4MjIwMDU2MTdaFw0yNTA4MjUxMjAxMTdaMDMxMTAvBgNV BAMTKEQ3MDEzQjg1MTE5Nzg2NTI5MzdDMUNGMTc2MkVGQkM0ODAxQzhDMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAvV/gQj8oAGrK2H0SsBM31W55 KcE7jCK93mZsqOBTrgkUqWylKpG4c98n/ynSes2okpPaGGC7Ai31Iz8NzBELjTXH dFb4U8ArVBUl+JWKJj8Xs0cvGCaLH9Bmd9FCSeKaoUhe/0R7dIBNqBXU1oBQKZpR RPzj2OHldXrDBbgLHA2NJst0OOHouW63jOAMJroDUCguMdt7z1IQZFLVdL/wT7KN Ru2p3EHEf7WMOFL4QsrSpiiHKTuEZMkN45dRj1Q092EaSoww4o5ofRSJER/+Z1P9 botB3D+pVF8CjxLhIP1rUtEtxlj94xRB+EfdzVFyJlhW9f1ENoM7/tty0bL3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1wE7hRGXhlKTfBzxdi77xIAcjB8wHwYDVR0j BBgwFoAU5CDxNPoaa6cFiEJL1Ohi7mxQwYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZmUzNWZhYS1lZDJiLTQyNzEtYjQ4Yy00ZWEyMWMzMDkzNTIvMC9FNDIwRjEzNEZB MUE2QkE3MDU4ODQyNEJENEU4NjJFRTZDNTBDMTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYyRUU2QzUw QzE4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZlMzVmYWEtZWQyYi00MjcxLWI0 OGMtNGVhMjFjMzA5MzUyLzAvRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYy RUU2QzUwQzE4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIThfjxLgcVZ8sU+r94ilfE7IqfSVAqnCZ1I pUEqy5vrX+PJvtyAsKGe6SmoQjLLeHPschKRWsU4/48xLiF2l8s1krgWzJvLpz/F N69FusyS2DVZEJFLccCFM/53pJSG1XHcyReEEym9qXkk29jylxtGHB0sJP6DuJ53 be3pH+Y1T8j83+YhCiPWhc1Kaey+P9beio0JHclLpdpDoiLqBEbaw9A01URAgL7d 4Yj1+K3TphsplV1G9N6ZRJjDn5vOnpP0ZY68GanGf2auMHL3GmfgVX9QeiYyOwBI /V5Q3zIYG/e+D3WsbGTDtTO0tydyrPXvyRUGK92QLieOUQgXtcA= -----END CERTIFICATE-----Generated at Sat Aug 23 12:08:04 2025 by rpki-client