$ rpki-client -vvf repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft File: E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft (raw, json) Hash identifier: UdAGfrMEUb6ehKkj85Sjq7LphT3yeXdGz6LzBtKaqG8= Subject key identifier: D9:9A:E1:B2:51:04:1E:B9:96:D8:E7:EC:80:C8:3B:03:C0:0C:B6:1E Authority key identifier: E0:AC:9F:73:54:2C:4F:A1:E5:2F:9E:56:5E:ED:95:2D:45:28:AB:D5 Certificate issuer: /CN=E0AC9F73542C4FA1E52F9E565EED952D4528ABD5 Certificate serial: 1A57186D762C3572833FE807DD5021E944EBBC2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft Manifest number: 018F Signing time: Sat 23 Aug 2025 05:21:56 +0000 Manifest this update: Sat 23 Aug 2025 05:16:56 +0000 Manifest next update: Tue 26 Aug 2025 10:06:56 +0000 Files and hashes: 1: 3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa (hash: bfGWWBYLFdBS0ipwVQx4h+wBe1EIqVM2TX2GM2uhPGQ=) 2: E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl (hash: FSFXz5JWg1QjHauWojQG7ij/wMtOAzhruAi7u+Wy3M0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:57:18:6d:76:2c:35:72:83:3f:e8:07:dd:50:21:e9:44:eb:bc:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0AC9F73542C4FA1E52F9E565EED952D4528ABD5 Validity Not Before: Aug 23 05:16:56 2025 GMT Not After : Aug 26 10:06:56 2025 GMT Subject: CN=D99AE1B251041EB996D8E7EC80C83B03C00CB61E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:29:39:4e:55:d5:c5:73:d5:cd:ba:70:0f:a4: e7:a4:2f:76:4d:0a:f7:92:b6:d7:92:10:ae:57:23: ea:7a:26:50:f2:0f:22:83:e1:fa:90:63:c6:0f:7b: 0a:8d:aa:c0:26:c5:cf:bb:0f:a1:39:de:ee:8f:bc: 87:5c:91:d3:07:ba:02:53:17:28:04:09:38:88:d2: 16:52:44:4b:8c:ed:a8:44:92:a8:1d:06:52:c2:6c: 17:12:49:1b:b2:bf:ae:00:d8:42:3a:03:c9:a1:95: 2c:02:1f:d3:c0:a4:e0:d8:30:5b:66:4d:11:c3:a7: 70:06:ee:7a:43:ea:f7:5c:83:fc:f8:e1:dc:05:b6: a5:44:f2:4f:fe:ce:b4:5d:b7:ce:e4:a6:b7:07:70: 80:50:f6:22:25:24:32:8c:25:6d:17:2b:59:92:51: bf:c8:50:aa:8d:33:ad:ac:6b:10:89:51:5d:16:d9: e3:dd:fa:30:7a:61:0f:c2:43:6f:45:57:7b:65:26: 4e:3c:a2:82:af:db:2c:aa:4f:72:dc:10:42:c4:62: 1d:ea:ac:a5:52:c0:a6:c8:a2:01:36:af:54:db:4c: 75:9b:b3:f4:77:7a:b8:fe:54:02:84:7d:c4:64:f8: 20:7a:f1:ab:52:14:10:15:36:51:f9:8d:ad:c9:20: fe:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9A:E1:B2:51:04:1E:B9:96:D8:E7:EC:80:C8:3B:03:C0:0C:B6:1E X509v3 Authority Key Identifier: keyid:E0:AC:9F:73:54:2C:4F:A1:E5:2F:9E:56:5E:ED:95:2D:45:28:AB:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:df:6a:61:f9:77:b4:71:77:5a:b6:56:39:4d:e9:76:0d:f9: a7:3e:02:11:84:0a:bc:ec:03:b1:4c:88:45:43:47:3d:35:a4: 81:8e:ac:b3:71:b0:df:52:a1:92:c9:7f:dc:2f:4a:03:aa:e1: 73:8e:76:1a:9c:83:00:f8:a1:90:65:db:39:f1:f2:77:94:ee: 32:81:bd:9c:55:0c:22:3a:db:9e:2b:a1:f0:b6:8c:62:c1:36: e4:c8:ac:64:54:04:2d:1b:df:74:b0:ed:2c:a1:e4:ce:3d:36: e4:f6:75:01:1d:c1:6f:67:f3:0e:b0:4d:3c:0f:f4:70:f8:9f: 15:4d:a2:3b:72:00:7c:df:9d:7f:ed:63:6d:46:bc:a8:1f:3e: 63:59:e5:15:72:c4:5c:50:ad:45:43:7e:d2:b0:0f:22:62:c8: 9a:81:ad:39:a5:f6:e8:26:15:dc:19:8c:7d:f8:28:1c:02:7b: 45:c1:0b:a6:08:3e:27:13:76:80:70:f2:8b:e1:b5:3f:88:c7: a0:8d:0f:30:03:3e:be:e5:4a:b8:bc:a2:7e:0a:9b:d3:6d:53: 62:02:fe:24:f4:c3:55:8b:ad:7c:91:56:60:cc:c9:e1:aa:87: 24:eb:9a:df:ea:d7:bb:f5:2a:c9:c8:c9:7a:b4:5d:fc:46:c1: d8:c1:c9:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGlcYbXYsNXKDP+gH3VAh6UTrvCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBBQzlGNzM1NDJDNEZBMUU1MkY5RTU2NUVFRDk1MkQ0 NTI4QUJENTAeFw0yNTA4MjMwNTE2NTZaFw0yNTA4MjYxMDA2NTZaMDMxMTAvBgNV BAMTKEQ5OUFFMUIyNTEwNDFFQjk5NkQ4RTdFQzgwQzgzQjAzQzAwQ0I2MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWKTlOVdXFc9XNunAPpOekL3ZN CveStteSEK5XI+p6JlDyDyKD4fqQY8YPewqNqsAmxc+7D6E53u6PvIdckdMHugJT FygECTiI0hZSREuM7ahEkqgdBlLCbBcSSRuyv64A2EI6A8mhlSwCH9PApODYMFtm TRHDp3AG7npD6vdcg/z44dwFtqVE8k/+zrRdt87kprcHcIBQ9iIlJDKMJW0XK1mS Ub/IUKqNM62saxCJUV0W2ePd+jB6YQ/CQ29FV3tlJk48ooKv2yyqT3LcEELEYh3q rKVSwKbIogE2r1TbTHWbs/R3erj+VAKEfcRk+CB68atSFBAVNlH5ja3JIP7RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2ZrhslEEHrmW2OfsgMg7A8AMth4wHwYDVR0j BBgwFoAU4Kyfc1QsT6HlL55WXu2VLUUoq9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWYwMDEzYi01OWE2LTQ3MzMtODlmOC0yOGZhM2Q4ODU3OWYvMC9FMEFDOUY3MzU0 MkM0RkExRTUyRjlFNTY1RUVEOTUyRDQ1MjhBQkQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBBQzlGNzM1NDJDNEZBMUU1MkY5RTU2NUVFRDk1MkQ0NTI4 QUJENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmMDAxM2ItNTlhNi00NzMzLTg5 ZjgtMjhmYTNkODg1NzlmLzAvRTBBQzlGNzM1NDJDNEZBMUU1MkY5RTU2NUVFRDk1 MkQ0NTI4QUJENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKffamH5d7Rxd1q2VjlN6XYN+ac+AhGECrzs A7FMiEVDRz01pIGOrLNxsN9SoZLJf9wvSgOq4XOOdhqcgwD4oZBl2znx8neU7jKB vZxVDCI6254rofC2jGLBNuTIrGRUBC0b33Sw7Syh5M49NuT2dQEdwW9n8w6wTTwP 9HD4nxVNojtyAHzfnX/tY21GvKgfPmNZ5RVyxFxQrUVDftKwDyJiyJqBrTml9ugm FdwZjH34KBwCe0XBC6YIPicTdoBw8ovhtT+Ix6CNDzADPr7lSri8on4Km9NtU2IC /iT0w1WLrXyRVmDMyeGqhyTrmt/q17v1KsnIyXq0XfxGwdjByU0= -----END CERTIFICATE-----Generated at Sat Aug 23 23:23:19 2025 by rpki-client