$ rpki-client -vvf repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft File: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft (raw, json) Hash identifier: AMt7S2yjHlXFHSyIzpGTGdsAbi0QGfvn08SjCzP/Z5w= Subject key identifier: 9E:84:29:76:0C:38:9D:A6:77:C4:AB:01:2B:22:CA:10:BF:E2:F0:C0 Authority key identifier: E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 Certificate issuer: /CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Certificate serial: 35B71D4613535DD9CA1A4B35D12CBACA85F7AA23 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft Manifest number: 034F Signing time: Thu 21 Aug 2025 07:11:49 +0000 Manifest this update: Thu 21 Aug 2025 07:06:49 +0000 Manifest next update: Sun 24 Aug 2025 19:00:49 +0000 Files and hashes: 1: 3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa (hash: Wwvtox4pnVKWLsRl/E/cxu7UuLzmLQJxzxgchSEOlMg=) 2: 3130332e3136342e3233312e302f32342d3234203d3e20313431393133.roa (hash: NK0HZEK3BAxoXUs/T9BsQ+3NHYIYmmtIH82zUm/fzDk=) 3: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl (hash: jGXBxGlRwUmFybrMCqMxmTq/snuRbsRvECbKOv09iBk=) 4: 3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa (hash: zTY/Xpdv3MSQoDsOl/9obTqa4WAjpeiNnIpy7In5lOI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:b7:1d:46:13:53:5d:d9:ca:1a:4b:35:d1:2c:ba:ca:85:f7:aa:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Validity Not Before: Aug 21 07:06:49 2025 GMT Not After : Aug 24 19:00:49 2025 GMT Subject: CN=9E8429760C389DA677C4AB012B22CA10BFE2F0C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1d:9d:6b:d1:66:e1:c4:c6:ac:d4:ec:71:92: c9:e7:b0:26:30:3c:8f:cf:3d:fa:01:46:4b:22:0c: e8:5d:dc:b7:57:a9:f8:ad:38:06:81:6b:85:b0:af: 7d:4e:8e:21:77:50:0b:8a:88:26:2a:58:b0:fc:d4: 99:56:6b:1d:46:93:c9:2c:b4:4d:4b:f1:6e:51:30: 03:c4:ab:e7:70:50:a0:2f:48:70:ce:b7:b4:a0:c1: 9c:84:3c:a9:b6:5f:c3:64:c4:1a:10:11:5d:6b:05: f3:f5:28:9f:3a:76:6d:6c:b2:b7:2c:2b:f2:0f:05: 95:4d:07:20:d1:35:9c:69:e4:a6:36:22:6e:47:ac: 26:e4:c6:32:d0:49:d8:4f:b0:4d:42:dd:11:2e:df: 5b:1d:56:ef:ed:cd:65:a2:e2:ea:06:22:27:71:b0: 99:4c:ee:ca:0c:ec:1e:3f:b3:21:13:92:b3:02:67: f6:fc:4e:19:0b:0b:05:9e:dc:75:69:5d:e0:39:80: d2:be:cb:14:aa:92:1e:11:28:f4:f3:22:dd:84:20: 18:d2:67:b4:8c:9b:24:68:dd:ff:17:dd:7e:61:4e: 8b:e0:0b:50:c0:d1:d0:70:cf:2b:99:0d:3b:32:7e: 57:a5:77:3b:3a:e5:7c:41:2a:a2:9b:b3:ec:3f:77: e1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:84:29:76:0C:38:9D:A6:77:C4:AB:01:2B:22:CA:10:BF:E2:F0:C0 X509v3 Authority Key Identifier: keyid:E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:51:24:ed:11:a7:98:ef:bc:76:93:28:27:e2:38:19:e7:98: 50:bb:0e:a5:bc:1a:2c:9e:d6:c3:53:a5:c5:3a:65:9c:ef:51: ca:62:f3:f8:9a:5e:4b:67:a9:f0:26:60:0b:a4:f3:42:5d:2e: c8:86:fb:62:03:41:e9:24:59:cd:c2:fc:a6:87:85:e6:a5:b5: 38:4d:23:1b:eb:a2:7d:44:2f:d0:e6:5b:8d:57:3a:33:86:e0: 60:3c:3c:dd:d6:13:fe:8f:eb:85:f4:7f:3e:36:b2:8a:af:7f: 89:e5:78:04:d9:70:da:6d:3b:4c:b8:fb:fc:a0:8f:60:43:1d: 6a:7f:95:cb:32:68:d4:52:b9:83:a4:93:d4:c1:09:db:52:23: d9:08:05:97:27:94:09:41:8c:8b:be:c9:b2:94:47:21:20:36: ec:b0:a0:7d:51:57:ba:54:69:33:5a:be:cd:02:3e:dc:a1:35: 31:c8:90:73:6e:71:3b:27:44:f9:66:9f:dc:0e:7b:5b:63:ae: 2c:f9:13:ed:7e:f0:1e:3b:fe:10:06:68:65:5a:a2:0a:a5:b8: 3c:90:7d:89:61:3a:e3:b1:85:b2:95:fb:32:4b:c5:6a:3e:df: 30:b5:8c:42:6f:3d:48:5d:da:e2:5f:b4:df:db:79:fa:82:8d: 0b:44:99:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNbcdRhNTXdnKGks10Sy6yoX3qiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIz MzNFQkI1ODAeFw0yNTA4MjEwNzA2NDlaFw0yNTA4MjQxOTAwNDlaMDMxMTAvBgNV BAMTKDlFODQyOTc2MEMzODlEQTY3N0M0QUIwMTJCMjJDQTEwQkZFMkYwQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWHZ1r0WbhxMas1OxxksnnsCYw PI/PPfoBRksiDOhd3LdXqfitOAaBa4Wwr31OjiF3UAuKiCYqWLD81JlWax1Gk8ks tE1L8W5RMAPEq+dwUKAvSHDOt7SgwZyEPKm2X8NkxBoQEV1rBfP1KJ86dm1ssrcs K/IPBZVNByDRNZxp5KY2Im5HrCbkxjLQSdhPsE1C3REu31sdVu/tzWWi4uoGIidx sJlM7soM7B4/syETkrMCZ/b8ThkLCwWe3HVpXeA5gNK+yxSqkh4RKPTzIt2EIBjS Z7SMmyRo3f8X3X5hTovgC1DA0dBwzyuZDTsyfleldzs65XxBKqKbs+w/d+FHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnoQpdgw4naZ3xKsBKyLKEL/i8MAwHwYDVR0j BBgwFoAU5yMdGj4FG9kD24bX3gB3wjM+u1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTE3OTRhYS0zMjkxLTQ4M2ItYWMwYi03YmM3YjFhNjdjYzYvMC9FNzIzMUQxQTNF MDUxQkQ5MDNEQjg2RDdERTAwNzdDMjMzM0VCQjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIzMzNF QkI1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWExNzk0YWEtMzI5MS00ODNiLWFj MGItN2JjN2IxYTY3Y2M2LzAvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3 QzIzMzNFQkI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJRJO0Rp5jvvHaTKCfiOBnnmFC7DqW8Giye 1sNTpcU6ZZzvUcpi8/iaXktnqfAmYAuk80JdLsiG+2IDQekkWc3C/KaHhealtThN Ixvron1EL9DmW41XOjOG4GA8PN3WE/6P64X0fz42soqvf4nleATZcNptO0y4+/yg j2BDHWp/lcsyaNRSuYOkk9TBCdtSI9kIBZcnlAlBjIu+ybKURyEgNuywoH1RV7pU aTNavs0CPtyhNTHIkHNucTsnRPlmn9wOe1tjriz5E+1+8B47/hAGaGVaogqluDyQ fYlhOuOxhbKV+zJLxWo+3zC1jEJvPUhd2uJftN/befqCjQtEmXE= -----END CERTIFICATE-----Generated at Sat Aug 23 21:24:15 2025 by rpki-client