$ rpki-client -vvf repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft File: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft (raw, json) Hash identifier: izv9Tp/v90m3WIj/yXotE3xixzele2xXJt8NVrGh2Xo= Subject key identifier: 22:FE:5B:E7:31:2D:37:1C:8B:9B:62:55:39:2E:05:8C:5F:3D:8F:BB Authority key identifier: ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A Certificate issuer: /CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Certificate serial: 18F2C649EE69E2105595D89FAC8CBCAD48D69A86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft Manifest number: 01F7 Signing time: Fri 22 Aug 2025 18:31:11 +0000 Manifest this update: Fri 22 Aug 2025 18:26:11 +0000 Manifest next update: Tue 26 Aug 2025 02:58:11 +0000 Files and hashes: 1: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl (hash: nUF5F4zDrErO/kqgsglmG0D09sEHewExFtck11jNQoY=) 2: 3130332e3133352e34382e302f32322d3234203d3e203338333230.roa (hash: /cF+CKjnrx0BGZ8wL/sfXfp5hgNUQBZIeeM9AfAYFsU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 02:58:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:f2:c6:49:ee:69:e2:10:55:95:d8:9f:ac:8c:bc:ad:48:d6:9a:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Validity Not Before: Aug 22 18:26:11 2025 GMT Not After : Aug 26 02:58:11 2025 GMT Subject: CN=22FE5BE7312D371C8B9B6255392E058C5F3D8FBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:db:91:57:14:50:c1:52:7e:11:25:ca:46:67: 8e:e1:b1:a7:be:27:2d:07:5e:ae:a1:1e:68:9c:6b: 7f:23:7b:f4:12:6a:37:66:c9:73:c8:54:c9:43:11: f8:7f:41:72:e9:2c:46:34:ab:93:62:6c:54:26:07: 17:52:2e:ac:a2:cb:62:db:4b:2e:ed:64:96:0a:6b: dd:56:cd:e4:72:c6:01:f4:3b:a7:1a:be:5b:3f:be: 12:c7:8d:ff:05:21:db:68:5a:80:91:f2:61:d8:25: 7a:44:67:08:98:fa:83:96:6f:8c:77:22:05:6f:6f: ac:15:3f:1f:b4:12:b4:ea:88:18:3f:36:ce:6e:d1: cf:a9:ae:ae:4a:71:9f:b1:a1:80:3a:9d:d4:62:ac: 8a:9b:68:2f:0e:ec:7f:9e:4c:88:8b:aa:8c:cd:08: c1:fc:25:8c:61:1d:16:b8:61:33:ae:78:ff:3f:5d: 8d:5a:9d:9b:5e:1b:0d:3b:29:21:4f:d3:d0:b1:05: 81:b0:c6:7f:01:66:f5:3b:9a:70:b0:46:de:51:c7: b9:d7:d3:e5:b2:78:52:82:f2:78:07:b5:a8:32:fd: a1:a5:b7:00:bc:be:26:64:58:03:a8:fc:37:0c:b9: 4b:22:40:cb:ac:d3:ef:65:08:76:04:e2:3d:4e:fc: 1d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FE:5B:E7:31:2D:37:1C:8B:9B:62:55:39:2E:05:8C:5F:3D:8F:BB X509v3 Authority Key Identifier: keyid:ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:5d:1e:c4:c3:e9:0c:a8:3c:f8:1f:bf:18:b8:92:5f:9b:31: 6c:c4:25:0c:a4:42:64:66:a9:8c:70:8d:31:ee:fb:90:ff:a8: fa:7a:4a:a7:b0:ed:fc:dc:66:e1:a8:5c:1f:af:65:f8:64:d2: 25:7f:56:95:f2:44:1b:4e:a9:d4:36:88:0f:17:4a:5d:ba:e2: f4:f1:dd:27:35:a1:08:9d:87:07:d1:4d:4e:b2:10:44:1e:01: 66:19:a9:77:69:5e:23:cb:92:c4:7d:00:57:47:9a:bf:36:7c: d6:16:f5:1d:c5:b5:7d:72:98:ae:c7:98:1e:7c:0a:bb:cd:f4: e0:e9:71:f6:29:d1:85:33:18:50:b0:7d:27:87:af:8d:ee:4d: d1:a4:78:58:48:9b:6b:eb:d3:fb:cd:03:c0:30:e9:a2:5d:b2: ad:42:a3:f9:2f:2e:7d:bf:a7:06:43:6b:7f:5d:f4:3d:a9:0f: ba:90:8d:51:40:c5:b9:cd:45:87:43:a6:39:78:d2:3a:17:d7: 89:84:b6:de:05:ca:e3:f7:63:12:a7:57:7e:ed:ed:58:3a:c5: 7b:a4:80:2a:f0:b3:a7:53:b3:a0:58:f1:03:5e:41:01:8e:3b: 95:7c:b0:a9:46:3c:62:df:45:8f:cb:66:3d:66:ac:32:5f:d4: c1:a2:25:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGPLGSe5p4hBVldifrIy8rUjWmoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RB OTFDQTE1QTAeFw0yNTA4MjIxODI2MTFaFw0yNTA4MjYwMjU4MTFaMDMxMTAvBgNV BAMTKDIyRkU1QkU3MzEyRDM3MUM4QjlCNjI1NTM5MkUwNThDNUYzRDhGQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG25FXFFDBUn4RJcpGZ47hsae+ Jy0HXq6hHmica38je/QSajdmyXPIVMlDEfh/QXLpLEY0q5NibFQmBxdSLqyiy2Lb Sy7tZJYKa91WzeRyxgH0O6cavls/vhLHjf8FIdtoWoCR8mHYJXpEZwiY+oOWb4x3 IgVvb6wVPx+0ErTqiBg/Ns5u0c+prq5KcZ+xoYA6ndRirIqbaC8O7H+eTIiLqozN CMH8JYxhHRa4YTOueP8/XY1anZteGw07KSFP09CxBYGwxn8BZvU7mnCwRt5Rx7nX 0+WyeFKC8ngHtagy/aGltwC8viZkWAOo/DcMuUsiQMus0+9lCHYE4j1O/B1hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIv5b5zEtNxyLm2JVOS4FjF89j7swHwYDVR0j BBgwFoAU7TznJkVjrblA6vr0vYfNzakcoVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Y2NjMmFmNC1hNjJkLTQ3MDgtYjY4OC0xODkyNTk0YmE5ODkvMC9FRDNDRTcyNjQ1 NjNBREI5NDBFQUZBRjRCRDg3Q0RDREE5MUNBMTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RBOTFD QTE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGNjYzJhZjQtYTYyZC00NzA4LWI2 ODgtMTg5MjU5NGJhOTg5LzAvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NE Q0RBOTFDQTE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALddHsTD6QyoPPgfvxi4kl+bMWzEJQykQmRm qYxwjTHu+5D/qPp6Sqew7fzcZuGoXB+vZfhk0iV/VpXyRBtOqdQ2iA8XSl264vTx 3Sc1oQidhwfRTU6yEEQeAWYZqXdpXiPLksR9AFdHmr82fNYW9R3FtX1ymK7HmB58 CrvN9ODpcfYp0YUzGFCwfSeHr43uTdGkeFhIm2vr0/vNA8Aw6aJdsq1Co/kvLn2/ pwZDa39d9D2pD7qQjVFAxbnNRYdDpjl40joX14mEtt4FyuP3YxKnV37t7Vg6xXuk gCrws6dTs6BY8QNeQQGOO5V8sKlGPGLfRY/LZj1mrDJf1MGiJbg= -----END CERTIFICATE-----Generated at Sat Aug 23 12:30:06 2025 by rpki-client