$ rpki-client -vvf repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft File: 0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft (raw, json) Hash identifier: +HPXeZIyKndXfX1JdxQ5sK0oE9Zuzade28QT6wsYIso= Subject key identifier: 8E:2E:3E:E0:22:01:E5:63:A5:3B:A3:FF:A8:FD:79:80:6E:C1:2C:1E Authority key identifier: 0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 Certificate issuer: /CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Certificate serial: 38DFCDBF864C121E6C94B7BFE3ABF4CAE0CA81AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft Manifest number: 0174 Signing time: Thu 21 Aug 2025 19:41:16 +0000 Manifest this update: Thu 21 Aug 2025 19:36:16 +0000 Manifest next update: Mon 25 Aug 2025 01:57:16 +0000 Files and hashes: 1: 3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa (hash: yEcjBYMEhWAt95OnuEgZE8+ngUIiXOyjNrn3KEwiAMQ=) 2: 0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl (hash: MjdwQoRKHHd/bGWgy0yXeHvoXyV2Ww2ZerZpQCE7TXI=) 3: 323430303a613334303a3a2f33322d3332203d3e20313336303735.roa (hash: lN/0N+kBLkh9oCnDV7GHH4dEry+Eu95iWP1NL/JaKa0=) 4: 3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa (hash: 5vckiyQJuSi5InScnRJB6lh0igVA9LU4uDMI9g1nnHk=) 5: 3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa (hash: aKqDqYBnpCKhc8gJwr/XqiZQGx53wEdqRvJeZczMctg=) 6: 3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa (hash: YVW6U8qaSLxFWjHeTdwpm9kiRp4vZO+dMYcJdXXF9qE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:df:cd:bf:86:4c:12:1e:6c:94:b7:bf:e3:ab:f4:ca:e0:ca:81:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Validity Not Before: Aug 21 19:36:16 2025 GMT Not After : Aug 25 01:57:16 2025 GMT Subject: CN=8E2E3EE02201E563A53BA3FFA8FD79806EC12C1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:06:d8:2b:10:ea:8f:e3:66:d8:3e:a6:55:a2: 82:c3:34:84:35:64:92:21:8c:04:ce:b7:2f:e4:60: 54:ac:0e:c9:c6:f6:f2:61:80:96:87:90:45:dc:bb: 7d:cc:41:47:9a:d8:72:d1:50:46:47:e9:8d:66:f7: 08:ee:f2:5b:2a:15:e9:f9:04:c2:da:81:83:56:bf: 39:3f:95:07:3d:19:06:15:30:e7:4d:a0:c2:76:64: 33:42:8f:9f:e4:d9:85:f3:c3:8b:a5:d0:4f:a1:22: f2:59:39:fa:6a:c7:b9:09:86:94:16:8b:32:cf:37: 13:81:01:0d:34:67:62:b2:a0:41:a1:e0:c2:64:43: 0f:85:15:59:6e:78:b9:f6:ba:37:79:5d:23:f1:bf: 93:21:1b:31:90:cb:1e:44:82:41:b2:74:40:b6:10: fc:d6:84:3d:61:50:f1:9b:f8:ed:30:b3:ee:53:87: f7:a3:bf:8f:db:91:5e:a4:9c:81:2c:4c:c4:00:07: 02:86:45:ce:f4:1b:b0:28:eb:2b:06:df:92:da:ef: 5d:2e:67:66:81:0f:44:07:27:d0:a2:a2:07:b9:d5: ee:0c:8c:f1:e5:2d:dd:92:a2:95:df:56:d4:fa:98: 3f:40:0f:9a:a7:1a:c9:0e:a0:c4:fd:3c:39:c8:23: ac:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2E:3E:E0:22:01:E5:63:A5:3B:A3:FF:A8:FD:79:80:6E:C1:2C:1E X509v3 Authority Key Identifier: keyid:0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:58:0f:33:1e:8d:a3:3a:d3:2b:01:83:aa:8a:8d:ae:89:1f: c1:dd:14:dc:a2:8c:b9:1d:da:77:31:15:8b:de:fe:37:43:47: 57:0c:42:d3:71:da:48:a7:5c:8b:a6:26:88:2a:2c:e0:f1:17: fa:9a:e4:7c:80:f7:cc:c3:53:ba:34:63:85:f2:41:dd:39:f1: 79:26:de:62:23:a7:55:c0:9c:ac:17:c6:43:98:58:11:88:ca: df:72:bb:54:87:e7:79:e7:9b:10:b3:b1:bd:82:5a:1d:8b:9f: 58:a7:20:c7:06:1b:eb:4e:80:63:59:86:30:4a:a3:28:4a:c4: 7b:b5:e5:13:f1:1c:af:a4:28:da:76:8f:86:49:eb:f1:44:95: 50:9d:f1:d1:5d:f3:e1:6c:04:d2:06:73:b9:d7:64:d6:9d:16: 26:3b:4b:85:42:b8:1a:78:be:06:7d:72:86:d0:26:97:a7:39: 17:71:2f:7b:95:a0:73:a1:97:df:85:a5:e9:fd:44:f8:21:7c: e9:98:9f:3c:0a:88:aa:58:72:6b:cb:08:f2:60:54:b5:03:ff: f8:67:b1:64:9d:32:e1:cf:ce:19:9e:4a:1e:d7:3b:98:d3:ae: 54:b1:e8:bd:93:2d:89:03:80:ae:00:1a:cb:b8:4b:f8:79:14: 3b:c2:90:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUON/Nv4ZMEh5slLe/46v0yuDKgawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJD QUVBREM5NjAeFw0yNTA4MjExOTM2MTZaFw0yNTA4MjUwMTU3MTZaMDMxMTAvBgNV BAMTKDhFMkUzRUUwMjIwMUU1NjNBNTNCQTNGRkE4RkQ3OTgwNkVDMTJDMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9BtgrEOqP42bYPqZVooLDNIQ1 ZJIhjATOty/kYFSsDsnG9vJhgJaHkEXcu33MQUea2HLRUEZH6Y1m9wju8lsqFen5 BMLagYNWvzk/lQc9GQYVMOdNoMJ2ZDNCj5/k2YXzw4ul0E+hIvJZOfpqx7kJhpQW izLPNxOBAQ00Z2KyoEGh4MJkQw+FFVlueLn2ujd5XSPxv5MhGzGQyx5EgkGydEC2 EPzWhD1hUPGb+O0ws+5Th/ejv4/bkV6knIEsTMQABwKGRc70G7Ao6ysG35La710u Z2aBD0QHJ9Cioge51e4MjPHlLd2SopXfVtT6mD9AD5qnGskOoMT9PDnII6w5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUji4+4CIB5WOlO6P/qP15gG7BLB4wHwYDVR0j BBgwFoAUDkImpfF2aurnaKKmdsPossrq3JYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTBlNWFjMi1iNmJiLTRiZWMtOWRjOS1lNDMwYTY3MzMyMTYvMC8wRTQyMjZBNUYx NzY2QUVBRTc2OEEyQTY3NkMzRThCMkNBRUFEQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJDQUVB REM5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUwZTVhYzItYjZiYi00YmVjLTlk YzktZTQzMGE2NzMzMjE2LzAvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4 QjJDQUVBREM5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVYDzMejaM60ysBg6qKja6JH8HdFNyijLkd 2ncxFYve/jdDR1cMQtNx2kinXIumJogqLODxF/qa5HyA98zDU7o0Y4XyQd058Xkm 3mIjp1XAnKwXxkOYWBGIyt9yu1SH53nnmxCzsb2CWh2Ln1inIMcGG+tOgGNZhjBK oyhKxHu15RPxHK+kKNp2j4ZJ6/FElVCd8dFd8+FsBNIGc7nXZNadFiY7S4VCuBp4 vgZ9cobQJpenORdxL3uVoHOhl9+Fpen9RPghfOmYnzwKiKpYcmvLCPJgVLUD//hn sWSdMuHPzhmeSh7XO5jTrlSx6L2TLYkDgK4AGsu4S/h5FDvCkJQ= -----END CERTIFICATE-----Generated at Sun Aug 24 03:11:26 2025 by rpki-client