$ rpki-client -vvf repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft File: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft (raw, json) Hash identifier: xl9/nGYcTF+nTzASBvYb8cAsA4clY78CDmDlwnpOEAc= Subject key identifier: F4:1C:EF:88:44:72:EC:D2:46:0D:EC:06:0A:51:2B:7F:26:7E:76:F2 Authority key identifier: E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70 Certificate issuer: /CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70 Certificate serial: 6AF25AD9AD8547A478A32921968B1B2E1411CB79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft Manifest number: 0221 Signing time: Thu 21 Aug 2025 16:00:58 +0000 Manifest this update: Thu 21 Aug 2025 15:55:58 +0000 Manifest next update: Sun 24 Aug 2025 20:55:58 +0000 Files and hashes: 1: 3130332e3138362e302e302f32332d3234203d3e20313336303532.roa (hash: YlWhhG5+SXJ+RtEZrRBNLk9BnFzp5Av7c11ptEycGe4=) 2: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl (hash: 45B6FzcSSwJezo5jkCRuy2FLk0Kxgi0Cs0KYM/xEzJo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 20:55:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:f2:5a:d9:ad:85:47:a4:78:a3:29:21:96:8b:1b:2e:14:11:cb:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70 Validity Not Before: Aug 21 15:55:58 2025 GMT Not After : Aug 24 20:55:58 2025 GMT Subject: CN=F41CEF884472ECD2460DEC060A512B7F267E76F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:6c:f7:36:08:5f:00:23:d1:1c:63:d6:73:0b: d6:0a:ed:6e:2f:8b:0d:bc:04:0c:28:e2:a8:65:85: ba:63:0f:b7:a8:c5:22:5c:a2:4b:63:67:e2:5d:0e: 17:27:81:73:e6:a8:d2:b7:2b:c0:95:96:1b:46:bb: 01:34:c2:9f:a7:93:40:e9:5c:09:39:9f:fa:fa:e1: ae:95:89:9c:d2:8a:89:9c:80:c7:af:42:72:fd:bd: f5:9d:ad:3a:9c:db:d3:e1:4f:8f:45:56:15:25:84: 14:ca:59:85:09:23:5d:d9:fa:fb:c2:a7:9f:2e:1c: a6:bb:ac:9b:c0:eb:d7:cb:cd:f8:e6:34:f1:da:42: fc:bd:ea:20:ae:0d:70:13:7e:be:9b:d6:49:70:06: 84:8a:f4:4e:49:57:6b:6b:e7:6f:28:60:00:40:83: 30:39:81:aa:44:8c:cb:7f:90:0f:85:52:55:2e:63: 0e:fd:b8:5c:f9:a7:f5:46:b6:9e:31:2a:a0:5f:74: 9e:16:57:ea:81:4d:19:9d:07:89:da:e5:95:a1:98: 57:95:b3:98:43:cb:2f:c3:a3:70:97:96:1b:2f:1f: 10:2d:d4:f3:4a:1d:83:14:81:34:9e:b7:88:cb:88: ed:ce:36:f8:c4:b4:b6:a0:a9:a1:54:7c:4c:17:36: 12:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1C:EF:88:44:72:EC:D2:46:0D:EC:06:0A:51:2B:7F:26:7E:76:F2 X509v3 Authority Key Identifier: keyid:E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:40:89:cf:bc:3f:89:5d:d4:ac:a8:d5:75:a0:16:53:21:27: 42:e2:dd:cb:6b:db:06:45:65:43:40:16:0a:8a:44:5c:21:e9: ab:f0:cf:27:4a:bc:5c:0c:b4:c8:08:79:12:69:0f:03:f5:6c: 43:db:4e:b1:8c:38:1c:9e:25:c3:13:b5:b9:55:0b:d9:93:11: 76:36:b1:25:7c:00:59:56:06:6d:41:55:ce:24:d8:01:c8:b8: b1:d4:fa:09:dc:60:26:d3:b2:45:fd:d4:8b:2f:d5:65:dd:72: 7f:56:94:42:62:6e:57:eb:12:5f:00:e7:32:10:56:0b:f2:11: a6:b5:4e:7c:12:93:f6:87:14:61:55:b2:d5:9c:39:29:80:ab: f6:15:98:d2:61:02:97:f7:a6:79:f8:ea:6c:fb:91:b0:a6:6e: ad:26:b9:4e:4a:d7:ca:d3:8d:21:1c:dc:7e:56:6a:3c:e3:9a: 81:87:96:9b:b2:54:95:9f:90:ea:45:cb:1a:6d:99:37:84:98: 6f:fe:65:5c:45:50:12:70:ed:6a:71:9d:06:dd:f9:d8:ab:4e: da:b7:f0:a8:f6:a2:98:a0:49:91:56:14:b1:dd:c5:ea:dc:a8: c4:63:4a:6c:0d:6c:11:b4:4d:9e:6c:51:c4:be:30:58:e5:96: 7b:f8:79:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUavJa2a2FR6R4oykhlosbLhQRy3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0Ex QURBNUQ3MDAeFw0yNTA4MjExNTU1NThaFw0yNTA4MjQyMDU1NThaMDMxMTAvBgNV BAMTKEY0MUNFRjg4NDQ3MkVDRDI0NjBERUMwNjBBNTEyQjdGMjY3RTc2RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1bPc2CF8AI9EcY9ZzC9YK7W4v iw28BAwo4qhlhbpjD7eoxSJcoktjZ+JdDhcngXPmqNK3K8CVlhtGuwE0wp+nk0Dp XAk5n/r64a6ViZzSiomcgMevQnL9vfWdrTqc29PhT49FVhUlhBTKWYUJI13Z+vvC p58uHKa7rJvA69fLzfjmNPHaQvy96iCuDXATfr6b1klwBoSK9E5JV2tr528oYABA gzA5gapEjMt/kA+FUlUuYw79uFz5p/VGtp4xKqBfdJ4WV+qBTRmdB4na5ZWhmFeV s5hDyy/Do3CXlhsvHxAt1PNKHYMUgTSet4jLiO3ONvjEtLagqaFUfEwXNhINAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9BzviERy7NJGDewGClErfyZ+dvIwHwYDVR0j BBgwFoAU4JZ1Se8y2J6f8WOPzxg0ehraXXAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzdhNmRkOC1hODQzLTQ2OTgtYTVmMy0zZWVjNDY4ZDE0YTQvMC9FMDk2NzU0OUVG MzJEODlFOUZGMTYzOEZDRjE4MzQ3QTFBREE1RDcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0ExQURB NUQ3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM3YTZkZDgtYTg0My00Njk4LWE1 ZjMtM2VlYzQ2OGQxNGE0LzAvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0 N0ExQURBNUQ3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhAic+8P4ld1Kyo1XWgFlMhJ0Li3ctr2wZF ZUNAFgqKRFwh6avwzydKvFwMtMgIeRJpDwP1bEPbTrGMOByeJcMTtblVC9mTEXY2 sSV8AFlWBm1BVc4k2AHIuLHU+gncYCbTskX91Isv1WXdcn9WlEJiblfrEl8A5zIQ VgvyEaa1TnwSk/aHFGFVstWcOSmAq/YVmNJhApf3pnn46mz7kbCmbq0muU5K18rT jSEc3H5WajzjmoGHlpuyVJWfkOpFyxptmTeEmG/+ZVxFUBJw7WpxnQbd+dirTtq3 8Kj2opigSZFWFLHdxercqMRjSmwNbBG0TZ5sUcS+MFjllnv4eZs= -----END CERTIFICATE-----Generated at Sat Aug 23 10:12:34 2025 by rpki-client