$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft File: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft (raw, json) Hash identifier: aG60VGvIGRUyNw5tNz5RzJ0Nc7LzKJ8I8shU6YgGy7k= Subject key identifier: 48:92:3B:18:48:60:A6:81:59:02:24:4E:2E:46:6D:93:B2:D5:D7:8C Authority key identifier: EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 Certificate issuer: /CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Certificate serial: 2F6817EAA03BAB7BB944B410D7E15F82DF6174B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft Manifest number: 01CC Signing time: Fri 22 Aug 2025 07:31:13 +0000 Manifest this update: Fri 22 Aug 2025 07:26:13 +0000 Manifest next update: Mon 25 Aug 2025 15:32:13 +0000 Files and hashes: 1: 3130332e32302e38362e302f32332d3233203d3e2039333431.roa (hash: +RIRdxOQj98KpyUFzbwvH1+p1ELhEQk4ECMOCZ1qPKs=) 2: 3130332e32302e38372e302f32342d3234203d3e2039333431.roa (hash: AHcDCGLpSbw6Wx72m+rIylEXaACluMi2gVr+3VqfEGw=) 3: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl (hash: jaFm9XDBTzavkg8D8rKNizffVhybCQHYIqLcoSPigWM=) 4: 3130332e32302e38362e302f32342d3234203d3e2039333431.roa (hash: vQ/JQod4pjiK4qjkcMAE6/5YAgXsND0ZYI10hmKECPY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:68:17:ea:a0:3b:ab:7b:b9:44:b4:10:d7:e1:5f:82:df:61:74:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Validity Not Before: Aug 22 07:26:13 2025 GMT Not After : Aug 25 15:32:13 2025 GMT Subject: CN=48923B184860A6815902244E2E466D93B2D5D78C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bf:ea:17:ab:10:0e:cb:ad:53:c3:48:e9:17: a5:00:cd:bb:ec:d3:22:84:97:49:96:30:6d:2a:b4: 89:de:fe:b4:df:b9:3e:9f:bd:77:90:24:9b:97:05: 73:eb:73:8d:8c:b6:0d:c6:03:99:72:c4:72:2e:d8: 01:01:39:84:60:d1:25:bb:f3:23:bf:12:19:8c:f7: 7e:a9:b3:37:67:9a:57:36:1c:93:ef:2b:40:2a:c5: 3f:12:f2:51:ff:48:f8:5d:97:d4:0e:68:e7:22:29: f6:c8:db:09:34:8e:37:15:10:87:e8:92:8d:d6:6a: 6b:83:10:62:95:fc:ae:33:14:4f:74:ec:dd:0c:f0: e9:91:02:cd:64:70:ca:c9:31:2c:74:86:a4:34:87: 0e:a8:e1:eb:07:52:ea:be:66:6a:1e:4f:5c:e5:60: 13:cb:3d:6a:35:d5:88:ae:ff:f7:90:b4:3e:02:2c: 75:9a:65:48:37:69:26:9f:13:31:ba:5f:1e:ec:09: cd:52:f9:78:09:5e:36:24:cd:fb:22:50:74:8a:b1: 7c:05:af:38:03:d4:38:f5:0b:9a:c2:2a:96:a6:58: 60:fc:29:31:38:0a:f4:32:b8:e5:c6:6f:d8:9a:c1: 73:35:32:34:f5:d2:29:fd:0b:25:f2:da:6f:ac:26: 67:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:92:3B:18:48:60:A6:81:59:02:24:4E:2E:46:6D:93:B2:D5:D7:8C X509v3 Authority Key Identifier: keyid:EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:2d:e8:ca:43:56:34:c8:38:be:16:be:8c:07:5e:1f:06:e7: 2d:69:23:83:a0:13:4b:d3:ab:74:b3:f4:f8:57:7c:09:c2:56: 1c:ff:ab:7e:51:76:2e:6e:38:cb:b3:b0:c8:bf:86:63:ca:4b: 5d:52:04:f0:c1:9c:3d:2d:44:4d:5d:b9:35:e4:ee:3d:f7:ca: 47:06:37:78:34:7c:a1:c4:87:0d:7d:87:b9:f6:65:04:5a:90: a0:a4:f7:14:47:2b:4e:8c:88:57:bf:8e:82:84:14:1e:8a:4c: 56:3c:ac:b2:b8:93:66:5b:f8:5d:af:59:19:fa:38:4b:95:cd: da:e1:26:90:e1:8c:e7:25:9b:84:39:06:10:2f:0f:df:3b:4a: c7:09:bb:b8:eb:77:f5:a1:b9:bd:50:75:11:f9:78:59:69:e0: 2c:e4:f3:7f:19:33:0e:c6:f0:00:8c:c8:76:c0:73:2e:27:bc: c6:1d:99:eb:cc:47:d4:8c:4e:3b:98:43:4e:b0:7d:08:d8:68: 61:ac:19:59:97:86:02:35:e3:17:b7:44:62:b8:86:a3:cf:1f: 1b:b4:d4:74:60:2e:04:4d:4f:39:69:1e:aa:e1:cb:c3:31:8b: 42:dc:66:f2:0b:4e:e8:a5:2e:fe:3c:41:39:53:46:9a:10:09: a0:35:7d:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL2gX6qA7q3u5RLQQ1+Ffgt9hdLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVF N0U0NUQ2ODAeFw0yNTA4MjIwNzI2MTNaFw0yNTA4MjUxNTMyMTNaMDMxMTAvBgNV BAMTKDQ4OTIzQjE4NDg2MEE2ODE1OTAyMjQ0RTJFNDY2RDkzQjJENUQ3OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1v+oXqxAOy61Tw0jpF6UAzbvs 0yKEl0mWMG0qtIne/rTfuT6fvXeQJJuXBXPrc42Mtg3GA5lyxHIu2AEBOYRg0SW7 8yO/EhmM936pszdnmlc2HJPvK0AqxT8S8lH/SPhdl9QOaOciKfbI2wk0jjcVEIfo ko3WamuDEGKV/K4zFE907N0M8OmRAs1kcMrJMSx0hqQ0hw6o4esHUuq+ZmoeT1zl YBPLPWo11Yiu//eQtD4CLHWaZUg3aSafEzG6Xx7sCc1S+XgJXjYkzfsiUHSKsXwF rzgD1Dj1C5rCKpamWGD8KTE4CvQyuOXGb9iawXM1MjT10in9CyXy2m+sJmdrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSJI7GEhgpoFZAiROLkZtk7LV14wwHwYDVR0j BBgwFoAU7ixS975SoOtpWlSaQucB7ufkXWgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWE0ODlhNi01NDg1LTQ4N2YtYjVkZC04ZjRlZGViNDZiY2IvMC9FRTJDNTJGN0JF NTJBMEVCNjk1QTU0OUE0MkU3MDFFRUU3RTQ1RDY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVFN0U0 NUQ2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhNDg5YTYtNTQ4NS00ODdmLWI1 ZGQtOGY0ZWRlYjQ2YmNiLzAvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAx RUVFN0U0NUQ2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkt6MpDVjTIOL4WvowHXh8G5y1pI4OgE0vT q3Sz9PhXfAnCVhz/q35Rdi5uOMuzsMi/hmPKS11SBPDBnD0tRE1duTXk7j33ykcG N3g0fKHEhw19h7n2ZQRakKCk9xRHK06MiFe/joKEFB6KTFY8rLK4k2Zb+F2vWRn6 OEuVzdrhJpDhjOclm4Q5BhAvD987SscJu7jrd/Whub1QdRH5eFlp4Czk838ZMw7G 8ACMyHbAcy4nvMYdmevMR9SMTjuYQ06wfQjYaGGsGVmXhgI14xe3RGK4hqPPHxu0 1HRgLgRNTzlpHqrhy8Mxi0LcZvILTuilLv48QTlTRpoQCaA1fZc= -----END CERTIFICATE-----Generated at Sat Aug 23 12:07:04 2025 by rpki-client