$ rpki-client -vvf repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft File: E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft (raw, json) Hash identifier: CteXVDSxa/k90iAomUKMM2v/wO7uHte0IIR3OdCDne4= Subject key identifier: 77:9A:07:1C:37:82:16:9D:D9:81:A9:1E:0A:DF:D5:E9:06:A2:38:E8 Authority key identifier: E9:FC:7A:F3:FF:BA:00:98:63:D1:04:ED:E1:B4:5D:A0:59:25:35:E6 Certificate issuer: /CN=E9FC7AF3FFBA009863D104EDE1B45DA0592535E6 Certificate serial: 58A602AF26CDE0FAC89A9072765999280BCD866F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft Manifest number: 0224 Signing time: Fri 22 Aug 2025 12:22:20 +0000 Manifest this update: Fri 22 Aug 2025 12:17:20 +0000 Manifest next update: Mon 25 Aug 2025 13:47:20 +0000 Files and hashes: 1: E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl (hash: TpD9wqBskp1IfQjdYcgRyUuWa6xsOjhR1yESTQsz3t4=) 2: 3130332e3137352e3233362e302f32332d3234203d3e20313437313231.roa (hash: LFOqzDAyDWWdrBcQS4m60ydnXXk+fQv19GMLbDiq/ow=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 13:47:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a6:02:af:26:cd:e0:fa:c8:9a:90:72:76:59:99:28:0b:cd:86:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9FC7AF3FFBA009863D104EDE1B45DA0592535E6 Validity Not Before: Aug 22 12:17:20 2025 GMT Not After : Aug 25 13:47:20 2025 GMT Subject: CN=779A071C3782169DD981A91E0ADFD5E906A238E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:91:ce:fd:2b:ef:b0:4a:36:74:36:cb:16:40: 3f:d9:cc:9b:a8:36:d0:bb:77:77:75:9d:27:b0:1f: ba:28:9b:f8:cc:9f:3e:67:8a:4d:85:f7:bc:aa:03: 1c:3c:c0:d6:73:69:d0:0c:36:0a:1a:1f:02:d5:65: be:0d:f9:9e:9e:d4:be:2b:84:32:d1:a0:8f:eb:ac: f8:ea:b3:9e:c0:c4:5f:c2:f8:82:76:b0:b8:f1:06: b2:41:88:35:eb:34:79:e0:81:aa:ad:ae:1f:5f:f8: 51:0a:fe:79:72:74:2a:26:cc:24:75:5a:05:ca:a9: 27:14:cb:18:21:ac:fa:6a:21:a5:0c:be:31:9d:e3: 0e:56:27:31:dc:d6:5f:53:4e:99:0a:02:b1:a7:44: d8:22:86:47:83:91:6e:bf:69:83:fd:09:ea:93:38: 7d:e1:f3:e3:25:3d:d9:ff:c1:93:7c:63:ab:f7:ef: 64:bb:9a:cc:68:88:b2:4d:79:41:6f:a1:3e:c0:1b: 4e:2a:6c:c5:12:9a:7f:1d:61:27:9a:29:f0:ba:f2: ad:95:9f:58:8b:a1:03:f5:0c:46:50:70:13:cd:68: 59:b6:d4:8d:67:26:93:5f:ce:f4:4b:6e:c4:46:94: f9:b3:cb:1d:cd:c4:bb:00:63:02:29:b4:ee:5f:80: 96:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9A:07:1C:37:82:16:9D:D9:81:A9:1E:0A:DF:D5:E9:06:A2:38:E8 X509v3 Authority Key Identifier: keyid:E9:FC:7A:F3:FF:BA:00:98:63:D1:04:ED:E1:B4:5D:A0:59:25:35:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a5:8d:71:40:72:14:00:ed:93:02:62:18:17:83:8e:b0:bb: 96:f4:3d:25:34:4a:41:0d:84:67:77:0e:39:5e:c9:a7:63:e7: 78:29:1a:7e:d1:61:89:d4:8b:15:b5:3e:39:f7:85:b3:44:5b: da:18:77:d7:9f:4f:64:79:11:53:8e:cd:12:d6:b1:11:38:da: 0d:6c:3d:b3:2f:90:ab:7a:b5:b6:7e:53:5b:b7:bb:05:4f:85: 93:f9:36:1f:47:d8:d0:df:90:43:de:91:e7:a5:05:52:1f:7c: dc:68:cd:26:f7:25:d6:8e:95:e0:e9:0d:d1:c8:47:ff:95:9e: 77:17:cb:e9:11:55:22:6b:67:7b:06:29:2d:a7:03:d8:56:0d: 2a:07:24:aa:aa:6b:40:bc:81:7d:fd:ae:7d:b3:13:7f:23:0a: db:31:53:e4:93:c7:bb:f4:fe:d1:cd:45:78:5e:86:ed:65:4f: f9:c4:6a:f2:85:8b:8e:8d:ef:64:7a:57:1f:2f:20:7d:bb:1f: bc:35:c8:ca:71:b5:c1:c9:4a:fd:5a:4b:d0:8a:f2:96:6d:65: 01:e3:39:22:10:76:e1:14:a4:3b:b1:75:61:5a:7a:d0:b5:b0: 70:2f:e6:e3:16:93:30:47:54:50:62:09:be:3d:3e:af:0f:15: ec:95:5e:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWKYCrybN4PrImpBydlmZKAvNhm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVEQTA1 OTI1MzVFNjAeFw0yNTA4MjIxMjE3MjBaFw0yNTA4MjUxMzQ3MjBaMDMxMTAvBgNV BAMTKDc3OUEwNzFDMzc4MjE2OUREOTgxQTkxRTBBREZENUU5MDZBMjM4RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5kc79K++wSjZ0NssWQD/ZzJuo NtC7d3d1nSewH7oom/jMnz5nik2F97yqAxw8wNZzadAMNgoaHwLVZb4N+Z6e1L4r hDLRoI/rrPjqs57AxF/C+IJ2sLjxBrJBiDXrNHnggaqtrh9f+FEK/nlydComzCR1 WgXKqScUyxghrPpqIaUMvjGd4w5WJzHc1l9TTpkKArGnRNgihkeDkW6/aYP9CeqT OH3h8+MlPdn/wZN8Y6v372S7msxoiLJNeUFvoT7AG04qbMUSmn8dYSeaKfC68q2V n1iLoQP1DEZQcBPNaFm21I1nJpNfzvRLbsRGlPmzyx3NxLsAYwIptO5fgJb7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd5oHHDeCFp3ZgakeCt/V6QaiOOgwHwYDVR0j BBgwFoAU6fx68/+6AJhj0QTt4bRdoFklNeYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YjRjNzBhMS01MDM2LTQ1MGItYjkzNi01MDg0Zjc4ZjgxZWYvMC9FOUZDN0FGM0ZG QkEwMDk4NjNEMTA0RURFMUI0NURBMDU5MjUzNUU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVEQTA1OTI1 MzVFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmI0YzcwYTEtNTAzNi00NTBiLWI5 MzYtNTA4NGY3OGY4MWVmLzAvRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVE QTA1OTI1MzVFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2ljXFAchQA7ZMCYhgXg46wu5b0PSU0SkEN hGd3Djleyadj53gpGn7RYYnUixW1Pjn3hbNEW9oYd9efT2R5EVOOzRLWsRE42g1s PbMvkKt6tbZ+U1u3uwVPhZP5Nh9H2NDfkEPekeelBVIffNxozSb3JdaOleDpDdHI R/+VnncXy+kRVSJrZ3sGKS2nA9hWDSoHJKqqa0C8gX39rn2zE38jCtsxU+STx7v0 /tHNRXhehu1lT/nEavKFi46N72R6Vx8vIH27H7w1yMpxtcHJSv1aS9CK8pZtZQHj OSIQduEUpDuxdWFaetC1sHAv5uMWkzBHVFBiCb49Pq8PFeyVXp8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:14:25 2025 by rpki-client