$ rpki-client -vvf repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft File: E42B0752D5FFAB254C3F0E221499F67420870FEB.mft (raw, json) Hash identifier: z0nkk2PD+cj13ooBHQdDDyz+0dYhLvgSKmxb2ddpbOM= Subject key identifier: 34:E4:C7:2A:85:5C:45:37:9F:6F:BF:C7:C4:DB:BB:15:96:9C:47:6B Authority key identifier: E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB Certificate issuer: /CN=E42B0752D5FFAB254C3F0E221499F67420870FEB Certificate serial: 2768748E6062288906AA0A5AA9B6F79325E50050 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft Manifest number: 0483 Signing time: Fri 22 Aug 2025 20:21:15 +0000 Manifest this update: Fri 22 Aug 2025 20:16:15 +0000 Manifest next update: Tue 26 Aug 2025 08:03:15 +0000 Files and hashes: 1: 3230322e35382e3136302e302f32302d3234203d3e203234353236.roa (hash: v44nTeNOx/KqdniK95QY0LHF9vkB+FOSNNbRKZTEdnM=) 2: E42B0752D5FFAB254C3F0E221499F67420870FEB.crl (hash: Nh++3fn6p6AGXa3dMimtdh/j0olfHoqmNeM6ScGGHys=) 3: 323430323a646130303a3a2f33322d3438203d3e203234353236.roa (hash: KXkQEzDE7eAOGwkwjqYSUBJ2gO8yBncemPnpiy3ztzA=) 4: 3230322e35382e3137362e302f32312d3234203d3e203234353236.roa (hash: hoFhirnLUQz/p84odzqMxw9tsnTuNV/GRFdBFOkjvGI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.crl rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 08:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:68:74:8e:60:62:28:89:06:aa:0a:5a:a9:b6:f7:93:25:e5:00:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E42B0752D5FFAB254C3F0E221499F67420870FEB Validity Not Before: Aug 22 20:16:15 2025 GMT Not After : Aug 26 08:03:15 2025 GMT Subject: CN=34E4C72A855C45379F6FBFC7C4DBBB15969C476B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:66:14:c2:c9:21:8c:e6:0e:30:93:22:9c:df: d9:25:7f:31:fe:26:7d:c1:f0:3d:8f:75:8a:04:91: 4f:49:44:54:5b:97:46:4d:7a:e1:64:59:d4:e6:56: 1a:f4:e3:83:9b:7c:ea:1b:6f:4e:49:bd:a5:1a:bf: 97:8f:50:b8:c3:44:c0:70:8b:e4:ea:fb:37:64:21: c5:d9:2b:4f:76:4d:31:be:04:64:f2:57:80:67:29: 3a:8e:b1:0c:89:80:66:da:69:63:38:20:7b:18:63: e9:59:5e:2c:dd:61:85:7b:72:15:b8:63:6b:f7:8f: f8:3a:5d:ea:c3:df:8f:86:e7:48:26:af:f5:f5:dd: 71:a2:78:6e:a3:ac:ba:37:9b:2d:ba:cb:89:be:14: c1:b3:ad:c0:0b:01:42:e5:82:e0:a8:ed:bd:43:8b: ce:12:6b:4b:77:73:56:2d:79:a5:80:92:0a:3c:76: 5b:22:84:6d:f7:75:d9:54:bc:37:2f:c4:ac:28:17: 45:1d:45:d8:26:32:02:6c:02:84:d2:93:38:f9:87: 2e:86:5a:d3:dc:c1:b1:d0:37:23:cb:d9:e8:40:71: c0:99:30:4b:de:b2:e8:ee:91:38:ab:88:94:dd:87: 36:5b:4d:b9:79:1f:55:86:ed:89:7b:a0:b2:6c:06: 00:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E4:C7:2A:85:5C:45:37:9F:6F:BF:C7:C4:DB:BB:15:96:9C:47:6B X509v3 Authority Key Identifier: keyid:E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:86:06:f5:0a:5f:14:50:89:04:75:7b:cb:b6:c1:f5:49:be: da:f1:84:3f:9d:09:93:65:dc:3c:7f:de:a1:66:1f:a8:77:08: 5b:fe:12:0e:2a:c1:27:8d:2b:e2:30:e5:e4:31:dc:e4:bc:2f: 6d:f1:72:ff:ab:a7:7c:5d:32:7b:39:ea:a5:52:23:9c:f0:1a: 17:61:2c:78:c2:27:ea:7a:b2:d6:61:7d:5f:1f:89:22:63:4b: ac:db:91:c7:1d:7e:ae:e5:1f:f7:45:49:c5:44:f4:5a:1e:aa: 35:ce:bf:ee:b7:43:bb:62:b7:88:de:79:86:ab:14:36:aa:1a: b0:25:a6:a5:77:6d:67:11:c7:57:60:62:24:de:bf:0a:07:57: 07:9c:ac:c6:64:1d:91:b3:45:bf:88:0d:31:3b:1a:47:eb:59: 28:40:9b:4f:be:fd:90:5c:40:d7:74:5c:33:ed:f3:22:8f:42: cb:5d:4a:fd:dc:00:7b:d4:01:31:75:14:d7:7d:b9:a0:07:f6: 0c:b4:57:5c:28:a7:e0:69:3c:12:56:00:31:2c:1e:45:64:ad: 78:69:89:8a:d1:99:be:b9:77:59:3c:a4:38:86:31:87:82:26: e6:52:af:22:04:5c:e4:95:b3:fa:aa:bd:80:cb:76:a6:55:c1: 79:5a:62:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ2h0jmBiKIkGqgpaqbb3kyXlAFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2NzQy MDg3MEZFQjAeFw0yNTA4MjIyMDE2MTVaFw0yNTA4MjYwODAzMTVaMDMxMTAvBgNV BAMTKDM0RTRDNzJBODU1QzQ1Mzc5RjZGQkZDN0M0REJCQjE1OTY5QzQ3NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmZhTCySGM5g4wkyKc39klfzH+ Jn3B8D2PdYoEkU9JRFRbl0ZNeuFkWdTmVhr044ObfOobb05JvaUav5ePULjDRMBw i+Tq+zdkIcXZK092TTG+BGTyV4BnKTqOsQyJgGbaaWM4IHsYY+lZXizdYYV7chW4 Y2v3j/g6XerD34+G50gmr/X13XGieG6jrLo3my26y4m+FMGzrcALAULlguCo7b1D i84Sa0t3c1YteaWAkgo8dlsihG33ddlUvDcvxKwoF0UdRdgmMgJsAoTSkzj5hy6G WtPcwbHQNyPL2ehAccCZMEvesujukTiriJTdhzZbTbl5H1WG7Yl7oLJsBgBtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNOTHKoVcRTefb7/HxNu7FZacR2swHwYDVR0j BBgwFoAU5CsHUtX/qyVMPw4iFJn2dCCHD+swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzUxMjllNC0yMzI4LTQzZDItYTQ1OC05ZDM4Mjk2MTQ4MTUvMC9FNDJCMDc1MkQ1 RkZBQjI1NEMzRjBFMjIxNDk5RjY3NDIwODcwRkVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2NzQyMDg3 MEZFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM1MTI5ZTQtMjMyOC00M2QyLWE0 NTgtOWQzODI5NjE0ODE1LzAvRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2 NzQyMDg3MEZFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiGBvUKXxRQiQR1e8u2wfVJvtrxhD+dCZNl 3Dx/3qFmH6h3CFv+Eg4qwSeNK+Iw5eQx3OS8L23xcv+rp3xdMns56qVSI5zwGhdh LHjCJ+p6stZhfV8fiSJjS6zbkccdfq7lH/dFScVE9FoeqjXOv+63Q7tit4jeeYar FDaqGrAlpqV3bWcRx1dgYiTevwoHVwecrMZkHZGzRb+IDTE7GkfrWShAm0++/ZBc QNd0XDPt8yKPQstdSv3cAHvUATF1FNd9uaAH9gy0V1wop+BpPBJWADEsHkVkrXhp iYrRmb65d1k8pDiGMYeCJuZSryIEXOSVs/qqvYDLdqZVwXlaYrA= -----END CERTIFICATE-----Generated at Sat Aug 23 12:10:37 2025 by rpki-client