$ rpki-client -vvf repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft File: E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft (raw, json) Hash identifier: HiPtmbWeuz7tVSuUw4jOwwjl2+uu4HDNkTcAEGXJkOc= Subject key identifier: F0:34:DD:06:30:F3:09:B9:28:D2:80:93:4F:51:E2:42:0D:A5:5E:3F Authority key identifier: E3:5D:44:33:8E:59:37:B4:AE:26:9D:DD:CD:A4:0A:28:F8:7F:3E:C8 Certificate issuer: /CN=E35D44338E5937B4AE269DDDCDA40A28F87F3EC8 Certificate serial: 78DD6792FAF40D9E2352400B30C3F2A59FFAA19C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft Manifest number: 01E9 Signing time: Fri 22 Aug 2025 02:41:51 +0000 Manifest this update: Fri 22 Aug 2025 02:36:51 +0000 Manifest next update: Mon 25 Aug 2025 05:31:51 +0000 Files and hashes: 1: E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl (hash: KpDVDHWVtyFGfyv63pvrLdQ+OgO0Z2zWSOTlY6SKzBE=) 2: 3130332e32312e3139352e302f32342d3234203d3e20313439393637.roa (hash: ztOieajHr1k+CIYjNgErkUbe6vEvP2EXx+nQ8S+WL90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 05:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:dd:67:92:fa:f4:0d:9e:23:52:40:0b:30:c3:f2:a5:9f:fa:a1:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E35D44338E5937B4AE269DDDCDA40A28F87F3EC8 Validity Not Before: Aug 22 02:36:51 2025 GMT Not After : Aug 25 05:31:51 2025 GMT Subject: CN=F034DD0630F309B928D280934F51E2420DA55E3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:22:31:cb:2a:b4:0b:8c:38:4d:eb:b7:59:fd: a2:53:33:fc:ce:e5:ba:26:36:40:20:f9:5b:3a:42: 6e:aa:0b:69:3c:b2:6c:81:3a:e4:74:dc:dd:5f:59: 2a:c4:e5:4f:f2:34:2a:c4:3d:40:f0:c5:30:a4:b3: 36:ae:a3:b8:6c:b6:6c:e4:a6:28:c5:f0:fd:23:74: 43:da:55:10:da:b6:59:f8:f9:aa:03:a0:a9:5b:b7: e1:2c:6e:5c:fe:8b:28:48:f6:a5:f8:01:92:ea:94: 02:7c:07:0e:8f:26:0f:d2:74:b3:4d:b1:75:0c:d7: 3a:7e:9c:40:d5:45:eb:38:a4:c5:b9:52:90:cf:d9: f1:2a:e2:2c:23:fb:82:92:18:41:f2:bb:88:5a:8c: 2d:4e:ec:5c:b7:ac:d9:40:01:5f:6d:50:2d:f1:9e: b1:c2:34:b5:41:95:8e:5a:22:6c:73:86:92:b4:78: a8:d0:5a:99:a0:77:1d:98:b9:c3:dd:d1:9b:1d:7a: af:f0:64:6a:05:b3:d8:60:ea:de:3b:50:74:c7:19: d0:95:7e:6b:8c:01:8a:c0:2e:5f:8b:1b:6e:a5:4a: ab:8f:d6:2c:2e:cc:44:43:19:5a:8d:c0:e9:81:71: 2c:3e:22:59:b1:cf:d4:46:e9:0a:91:c6:4c:0d:c6: 1e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:34:DD:06:30:F3:09:B9:28:D2:80:93:4F:51:E2:42:0D:A5:5E:3F X509v3 Authority Key Identifier: keyid:E3:5D:44:33:8E:59:37:B4:AE:26:9D:DD:CD:A4:0A:28:F8:7F:3E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a683b27c-a730-4002-91b8-d0366dfac77e/0/E35D44338E5937B4AE269DDDCDA40A28F87F3EC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:3c:f2:2e:bc:f8:d4:ca:8a:a2:95:c3:f7:ea:96:b7:d3:b9: a0:99:5d:4f:64:37:28:55:cc:f5:12:f5:e9:46:49:44:54:a4: 53:f8:21:33:a3:8e:b2:7c:12:f9:c0:e4:9d:d9:d2:6e:57:7b: f9:fd:22:c9:5e:25:c4:b3:9c:87:aa:04:67:2a:3f:2d:e8:5d: 85:ce:e5:98:88:ac:4d:be:22:73:08:71:44:b8:ea:28:7b:59: 53:b9:f4:a1:33:66:12:7f:97:23:ff:07:c0:e9:58:6b:c1:61: e4:4a:7e:db:01:56:16:ca:1a:c3:15:35:20:e7:a6:ec:f1:ee: ac:7c:70:fd:0d:f7:f7:ba:6a:01:c9:58:d4:af:07:c5:28:d4: 63:6a:c3:a1:b6:1c:e2:5a:f0:0f:1d:b2:5b:40:fc:ab:1e:fa: 1d:ba:24:b8:1c:7e:a9:5f:c7:3f:bf:1f:e2:db:a1:c5:93:98: 78:38:12:6d:c8:2a:08:1d:c9:74:97:42:0f:f8:2e:8b:ad:57: 59:a0:18:cc:04:95:64:44:07:10:50:f4:37:08:34:c0:4e:28: eb:f2:0b:c6:73:e1:b2:72:0f:7d:5e:52:46:87:f4:33:00:d0: b5:e7:68:be:32:48:cb:dd:53:d0:11:5f:6b:c6:91:13:53:de: fa:a6:b7:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeN1nkvr0DZ4jUkALMMPypZ/6oZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBBMjhG ODdGM0VDODAeFw0yNTA4MjIwMjM2NTFaFw0yNTA4MjUwNTMxNTFaMDMxMTAvBgNV BAMTKEYwMzRERDA2MzBGMzA5QjkyOEQyODA5MzRGNTFFMjQyMERBNTVFM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZIjHLKrQLjDhN67dZ/aJTM/zO 5bomNkAg+Vs6Qm6qC2k8smyBOuR03N1fWSrE5U/yNCrEPUDwxTCkszauo7hstmzk pijF8P0jdEPaVRDatln4+aoDoKlbt+Esblz+iyhI9qX4AZLqlAJ8Bw6PJg/SdLNN sXUM1zp+nEDVRes4pMW5UpDP2fEq4iwj+4KSGEHyu4hajC1O7Fy3rNlAAV9tUC3x nrHCNLVBlY5aImxzhpK0eKjQWpmgdx2YucPd0Zsdeq/wZGoFs9hg6t47UHTHGdCV fmuMAYrALl+LG26lSquP1iwuzERDGVqNwOmBcSw+Ilmxz9RG6QqRxkwNxh7xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8DTdBjDzCbko0oCTT1HiQg2lXj8wHwYDVR0j BBgwFoAU411EM45ZN7SuJp3dzaQKKPh/PsgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjgzYjI3Yy1hNzMwLTQwMDItOTFiOC1kMDM2NmRmYWM3N2UvMC9FMzVENDQzMzhF NTkzN0I0QUUyNjlERERDREE0MEEyOEY4N0YzRUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBBMjhGODdG M0VDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY4M2IyN2MtYTczMC00MDAyLTkx YjgtZDAzNjZkZmFjNzdlLzAvRTM1RDQ0MzM4RTU5MzdCNEFFMjY5REREQ0RBNDBB MjhGODdGM0VDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKU88i68+NTKiqKVw/fqlrfTuaCZXU9kNyhV zPUS9elGSURUpFP4ITOjjrJ8EvnA5J3Z0m5Xe/n9IsleJcSznIeqBGcqPy3oXYXO 5ZiIrE2+InMIcUS46ih7WVO59KEzZhJ/lyP/B8DpWGvBYeRKftsBVhbKGsMVNSDn puzx7qx8cP0N9/e6agHJWNSvB8Uo1GNqw6G2HOJa8A8dsltA/Kse+h26JLgcfqlf xz+/H+LbocWTmHg4Em3IKggdyXSXQg/4LoutV1mgGMwElWREBxBQ9DcINMBOKOvy C8Zz4bJyD31eUkaH9DMA0LXnaL4ySMvdU9ARX2vGkRNT3vqmt5w= -----END CERTIFICATE-----Generated at Sat Aug 23 12:03:59 2025 by rpki-client