$ rpki-client -vvf repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft File: 04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft (raw, json) Hash identifier: S1OI8QvXZ65rB5or/d1oVuGLaMhxUxYmdJh73M5iF7o= Subject key identifier: C8:E7:D5:4E:3A:C4:9B:A2:24:83:F9:64:C5:64:B5:F3:AB:B0:47:09 Authority key identifier: 04:EE:3B:C3:69:17:32:E0:69:DF:0D:9D:29:DE:36:06:11:CC:F0:DB Certificate issuer: /CN=04EE3BC3691732E069DF0D9D29DE360611CCF0DB Certificate serial: 464F259AB1E89D794F2FA86805EA3F9BDC041B7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft Manifest number: 01D2 Signing time: Thu 21 Aug 2025 22:11:43 +0000 Manifest this update: Thu 21 Aug 2025 22:06:43 +0000 Manifest next update: Mon 25 Aug 2025 02:05:43 +0000 Files and hashes: 1: 3130332e38382e39302e302f32342d3234203d3e20313530323232.roa (hash: c8FIGaCU0t2/B828bx0ZmZOFxlHPrYIwjNCfoYq4Eck=) 2: 3130332e38382e39302e302f32332d3234203d3e20313530323232.roa (hash: RICXQj6rsugNHVh/wSozR+ATp/7OAGFCxt5pyTwldyU=) 3: 3130332e38382e39312e302f32342d3234203d3e20313530323232.roa (hash: 16WvPyi38t5aKz8ZyY3F0kSDSMJ8HK1h7g9RnFd2LL0=) 4: 04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl (hash: vthDGYb/sZcZlaPF+C+ZOmnke1mCYYeawlXYGHWw6qI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:4f:25:9a:b1:e8:9d:79:4f:2f:a8:68:05:ea:3f:9b:dc:04:1b:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04EE3BC3691732E069DF0D9D29DE360611CCF0DB Validity Not Before: Aug 21 22:06:43 2025 GMT Not After : Aug 25 02:05:43 2025 GMT Subject: CN=C8E7D54E3AC49BA22483F964C564B5F3ABB04709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:42:72:41:f0:01:94:ff:62:49:fc:8b:ae:93: 01:b4:4d:76:35:96:cf:40:f2:18:70:93:a7:55:76: 2a:e2:07:68:67:7d:f0:e7:43:19:fb:e8:53:d4:f6: 1e:fa:98:20:fa:46:c0:7f:33:ae:1f:9c:8a:18:3b: a1:24:22:7d:4d:a4:09:97:82:ee:70:85:bb:87:6d: 72:7c:df:f7:a5:0a:75:55:ab:cd:d1:3e:74:51:05: 0b:2f:f0:ee:84:00:8b:28:1e:26:98:32:25:fc:ad: ae:88:24:85:bd:36:0d:c4:7d:6e:5b:66:26:7d:1a: c0:9b:d3:a4:4a:69:07:3c:b5:4d:e4:de:24:61:9d: 91:55:e2:39:d8:8b:be:d8:67:46:ad:ce:af:e7:61: 4a:d6:2c:ed:17:30:7e:e1:83:fe:f3:9e:3b:42:ad: 49:b1:ab:f3:05:b9:6b:e2:42:44:ed:62:38:8e:74: 29:bd:20:28:b8:59:b6:ae:1c:b9:ad:94:e3:e3:6d: 3a:32:e2:91:a2:06:49:15:e6:96:c2:4f:28:40:5a: 5a:a7:8b:03:06:85:bf:46:85:45:53:0e:da:30:3c: 78:8a:f7:af:a5:db:fb:2f:f2:99:2b:5e:5e:49:4b: 6d:25:b7:c6:14:af:94:61:8b:d9:5c:c4:d7:76:3b: 42:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E7:D5:4E:3A:C4:9B:A2:24:83:F9:64:C5:64:B5:F3:AB:B0:47:09 X509v3 Authority Key Identifier: keyid:04:EE:3B:C3:69:17:32:E0:69:DF:0D:9D:29:DE:36:06:11:CC:F0:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:1c:d9:8c:dc:6b:91:e4:64:5f:c9:2a:7d:04:fa:bb:8b:22: 97:93:21:0e:6b:4b:8b:23:c6:5e:5e:df:4b:fe:40:74:9a:b4: b2:4b:fe:ef:78:8c:d5:e7:a2:7b:5f:0c:b8:db:cd:42:b0:7a: b2:79:65:d9:a4:9b:b2:c3:da:c9:8a:4f:88:4d:ce:62:fc:0c: fb:96:c5:0a:29:77:c5:52:0b:b7:04:27:ef:56:f0:f6:4e:59: 26:ec:f7:a7:00:aa:c7:7d:b0:97:14:1a:a2:00:27:da:37:36: bb:40:8c:0e:0d:9a:c7:09:11:72:88:ee:7c:fe:32:e4:b8:b5: b6:91:76:fa:36:f4:cc:1f:59:ef:99:28:27:d4:32:ba:d8:a4: 5d:29:a4:9d:94:70:3d:83:00:36:19:47:ee:be:05:ef:c1:1a: d2:53:f3:de:a0:28:07:7b:a1:0e:58:57:86:ee:35:15:27:c4: 81:a9:54:d8:ec:fe:91:f7:86:b5:87:41:90:39:20:ef:dd:8a: 2a:7f:cd:bb:56:83:7b:96:d3:bb:46:99:8e:c6:ba:8f:e6:de: 3d:02:a6:95:cb:e4:9a:1f:c7:7e:0c:d1:3d:b6:52:6c:5f:a1: ff:51:82:5a:d4:03:0f:78:15:91:5b:46:8a:53:2a:cf:f0:63: e4:df:cd:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURk8lmrHonXlPL6hoBeo/m9wEG38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2MDYx MUNDRjBEQjAeFw0yNTA4MjEyMjA2NDNaFw0yNTA4MjUwMjA1NDNaMDMxMTAvBgNV BAMTKEM4RTdENTRFM0FDNDlCQTIyNDgzRjk2NEM1NjRCNUYzQUJCMDQ3MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOQnJB8AGU/2JJ/IuukwG0TXY1 ls9A8hhwk6dVdiriB2hnffDnQxn76FPU9h76mCD6RsB/M64fnIoYO6EkIn1NpAmX gu5whbuHbXJ83/elCnVVq83RPnRRBQsv8O6EAIsoHiaYMiX8ra6IJIW9Ng3EfW5b ZiZ9GsCb06RKaQc8tU3k3iRhnZFV4jnYi77YZ0atzq/nYUrWLO0XMH7hg/7znjtC rUmxq/MFuWviQkTtYjiOdCm9ICi4WbauHLmtlOPjbToy4pGiBkkV5pbCTyhAWlqn iwMGhb9GhUVTDtowPHiK96+l2/sv8pkrXl5JS20lt8YUr5Rhi9lcxNd2O0IBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyOfVTjrEm6Ikg/lkxWS186uwRwkwHwYDVR0j BBgwFoAUBO47w2kXMuBp3w2dKd42BhHM8NswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTkxODA5ZS1kZDQ5LTRjNTItYjExZi0yYTUxOGMzYWE4NTYvMC8wNEVFM0JDMzY5 MTczMkUwNjlERjBEOUQyOURFMzYwNjExQ0NGMERCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2MDYxMUND RjBEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5MTgwOWUtZGQ0OS00YzUyLWIx MWYtMmE1MThjM2FhODU2LzAvMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2 MDYxMUNDRjBEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYc2Yzca5HkZF/JKn0E+ruLIpeTIQ5rS4sj xl5e30v+QHSatLJL/u94jNXnontfDLjbzUKwerJ5Zdmkm7LD2smKT4hNzmL8DPuW xQopd8VSC7cEJ+9W8PZOWSbs96cAqsd9sJcUGqIAJ9o3NrtAjA4NmscJEXKI7nz+ MuS4tbaRdvo29MwfWe+ZKCfUMrrYpF0ppJ2UcD2DADYZR+6+Be/BGtJT896gKAd7 oQ5YV4buNRUnxIGpVNjs/pH3hrWHQZA5IO/diip/zbtWg3uW07tGmY7Guo/m3j0C ppXL5Jofx34M0T22Umxfof9RglrUAw94FZFbRopTKs/wY+Tfzf4= -----END CERTIFICATE-----Generated at Sat Aug 23 12:05:49 2025 by rpki-client