$ rpki-client -vvf repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft File: E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft (raw, json) Hash identifier: DoN5DveqA3BRb7m/z0OuuMYLMbLmfkIEGLiubXDJlvk= Subject key identifier: E1:7D:A2:AA:05:3E:95:69:9A:CA:79:B8:70:41:DD:9E:DE:E1:FC:B2 Authority key identifier: E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF Certificate issuer: /CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF Certificate serial: 6704901353B61BBDF69E50F39AC0436095FDB199 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft Manifest number: 01C2 Signing time: Fri 22 Aug 2025 19:00:01 +0000 Manifest this update: Fri 22 Aug 2025 18:55:01 +0000 Manifest next update: Mon 25 Aug 2025 19:09:01 +0000 Files and hashes: 1: E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl (hash: ZIY5SIr83JJ29+tIta4kA5l2rK1pHC7rVPZuo+/wzCM=) 2: 3130332e3138312e3234362e302f32342d3234203d3e20313439333935.roa (hash: hDiPHgG6pnFjAwZiLnb6ef4keBf/i47WPM6YZu2zsYg=) 3: 3130332e3138312e3234362e302f32332d3234203d3e20313439333935.roa (hash: LZnbIIsLDElVInIW5qq+Xdda/Rypkb/0FARs3D1/0Rk=) 4: 323030313a6466303a376263303a3a2f34382d3438203d3e20313439333935.roa (hash: KmwxYNBof+9d1bN3iAjGOYXY8SVr0+E+UsBOHaijDGU=) 5: 3130332e3138312e3234372e302f32342d3234203d3e20313439333935.roa (hash: BCXvxmyioKQvXTQ7T8iVRvqkwhqhpqQP5I9ID9+agWk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 19:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:04:90:13:53:b6:1b:bd:f6:9e:50:f3:9a:c0:43:60:95:fd:b1:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF Validity Not Before: Aug 22 18:55:01 2025 GMT Not After : Aug 25 19:09:01 2025 GMT Subject: CN=E17DA2AA053E95699ACA79B87041DD9EDEE1FCB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ea:24:ed:e3:80:2d:63:07:92:b2:b3:ac:d7: 3e:88:df:94:d0:e4:39:e8:61:8f:93:df:24:b0:07: ef:a5:d6:bb:37:91:a0:82:23:83:e5:10:69:c8:45: 8b:28:59:b0:15:88:23:5f:82:cc:f4:18:05:da:7c: 8c:50:52:76:0a:e4:df:82:a9:1f:ba:e5:f0:aa:1f: 96:01:49:d8:77:21:9a:df:1e:85:ef:9f:ab:b7:11: b4:10:f8:4e:90:b9:f1:e3:7a:e1:cf:44:87:4c:4a: 5a:b5:ab:0e:1d:81:42:dc:db:f0:ec:e2:ca:88:d9: 2c:79:5e:3c:b4:1d:83:8c:b7:80:0a:73:47:b5:5c: 4a:f8:ff:7f:04:56:0e:14:f4:86:7a:92:19:ac:2b: 08:c8:69:7f:1c:00:8f:41:37:2a:9f:b0:d4:1c:cf: 43:92:0b:2c:95:12:a9:50:55:6a:cb:d6:2e:12:8f: f6:c6:58:78:0f:5c:06:30:57:e8:f1:4e:da:27:1f: 3a:a5:c2:a3:fb:3a:14:7f:b9:65:d4:a1:63:de:66: ee:c3:87:1f:06:58:21:cd:f6:f7:17:90:c7:bf:b3: fe:7c:c0:c6:81:9d:a0:3f:5f:e5:21:fd:22:f2:33: a3:2d:a3:80:bf:e6:d7:77:6f:2d:ee:25:fa:0d:3f: 23:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7D:A2:AA:05:3E:95:69:9A:CA:79:B8:70:41:DD:9E:DE:E1:FC:B2 X509v3 Authority Key Identifier: keyid:E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:52:37:4a:4d:78:93:25:a6:99:f5:ee:e3:09:98:74:ee:e8: 72:86:cd:d9:dc:64:e1:da:3d:ee:87:b8:b2:11:55:1f:35:66: b6:fe:ff:fb:53:48:ae:92:32:88:73:31:73:fc:be:40:f1:3e: 00:fb:d2:5a:a9:69:f4:75:75:fe:ac:71:3b:18:37:8a:92:c8: de:ae:09:22:a1:fd:de:84:63:de:a8:96:76:9f:1d:c2:0a:ca: 99:82:76:c8:37:81:b0:7a:ee:1f:6c:fb:58:31:de:36:43:e2: 39:30:f7:60:dc:fb:ed:59:ca:d7:bc:67:f6:32:33:d4:3a:45: 08:3f:2b:20:98:f5:9d:11:a0:2b:1b:f8:00:63:b4:30:b7:f4: 06:bb:fb:13:c1:d2:9d:be:8a:d3:af:c5:b0:4c:47:ff:07:4f: 83:25:58:48:9a:b8:67:ec:80:ed:e4:fe:56:13:e3:c5:e8:2e: 70:07:bc:fd:5a:95:54:29:5e:b3:7b:2c:d5:31:16:b6:f3:6a: 14:04:57:6e:22:e5:e5:19:07:43:cb:d9:d8:a5:ae:99:24:29: e7:46:13:94:28:a0:7c:9d:34:62:94:09:a9:04:a6:51:a2:15: 33:50:18:92:55:87:9b:4c:f8:9f:b7:9c:ba:fa:c8:c0:26:ef: 41:8a:0a:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZwSQE1O2G732nlDzmsBDYJX9sZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVENDhE NkY3M0ZBRjAeFw0yNTA4MjIxODU1MDFaFw0yNTA4MjUxOTA5MDFaMDMxMTAvBgNV BAMTKEUxN0RBMkFBMDUzRTk1Njk5QUNBNzlCODcwNDFERDlFREVFMUZDQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx6iTt44AtYweSsrOs1z6I35TQ 5DnoYY+T3ySwB++l1rs3kaCCI4PlEGnIRYsoWbAViCNfgsz0GAXafIxQUnYK5N+C qR+65fCqH5YBSdh3IZrfHoXvn6u3EbQQ+E6QufHjeuHPRIdMSlq1qw4dgULc2/Ds 4sqI2Sx5Xjy0HYOMt4AKc0e1XEr4/38EVg4U9IZ6khmsKwjIaX8cAI9BNyqfsNQc z0OSCyyVEqlQVWrL1i4Sj/bGWHgPXAYwV+jxTtonHzqlwqP7OhR/uWXUoWPeZu7D hx8GWCHN9vcXkMe/s/58wMaBnaA/X+Uh/SLyM6Mto4C/5td3by3uJfoNPyMPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4X2iqgU+lWmaynm4cEHdnt7h/LIwHwYDVR0j BBgwFoAU6TFDB60UMC30DeGo7QtdSNb3P68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDFlMDhlZi0zYWU2LTRiOTAtYjQ3Ny0wZTkxNDBkMDQzODAvMC9FOTMxNDMwN0FE MTQzMDJERjQwREUxQThFRDBCNUQ0OEQ2RjczRkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVENDhENkY3 M0ZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQxZTA4ZWYtM2FlNi00YjkwLWI0 NzctMGU5MTQwZDA0MzgwLzAvRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVE NDhENkY3M0ZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABNSN0pNeJMlppn17uMJmHTu6HKGzdncZOHa Pe6HuLIRVR81Zrb+//tTSK6SMohzMXP8vkDxPgD70lqpafR1df6scTsYN4qSyN6u CSKh/d6EY96olnafHcIKypmCdsg3gbB67h9s+1gx3jZD4jkw92Dc++1Zyte8Z/Yy M9Q6RQg/KyCY9Z0RoCsb+ABjtDC39Aa7+xPB0p2+itOvxbBMR/8HT4MlWEiauGfs gO3k/lYT48XoLnAHvP1alVQpXrN7LNUxFrbzahQEV24i5eUZB0PL2dilrpkkKedG E5QooHydNGKUCakEplGiFTNQGJJVh5tM+J+3nLr6yMAm70GKCqI= -----END CERTIFICATE-----Generated at Sat Aug 23 16:05:46 2025 by rpki-client