$ rpki-client -vvf repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft File: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft (raw, json) Hash identifier: gENwlgtpGYb6ScL6PfdVUrFd2dL+tNGM64whai38enM= Subject key identifier: 75:BB:C4:67:58:D5:01:4C:B7:11:0B:E0:C2:1D:2C:F7:72:A3:15:34 Authority key identifier: E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 Certificate issuer: /CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Certificate serial: 7A92B7D3968225A9040CD0EC5A53D33774A89612 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft Manifest number: F8 Signing time: Fri 22 Aug 2025 05:01:09 +0000 Manifest this update: Fri 22 Aug 2025 04:56:09 +0000 Manifest next update: Mon 25 Aug 2025 16:49:09 +0000 Files and hashes: 1: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl (hash: hG2nAJiUVayEgHIgOy/QLb587U7W2TGDzzN0EojHnic=) 2: 3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (hash: RhGN57E/ZSjGvHHK5MWz3epa97gXAk4w6YjAbvPV0fg=) 3: 3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa (hash: geAKj9+TOtyfNH9PasUiph/Br+j89slGEUwYIqBnSpQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 16:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:92:b7:d3:96:82:25:a9:04:0c:d0:ec:5a:53:d3:37:74:a8:96:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Validity Not Before: Aug 22 04:56:09 2025 GMT Not After : Aug 25 16:49:09 2025 GMT Subject: CN=75BBC46758D5014CB7110BE0C21D2CF772A31534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:84:e8:88:42:29:c9:c9:6d:27:11:f1:f2:41: 6f:0b:95:52:89:1a:55:45:67:5e:a0:bf:54:a2:1d: 8a:29:2f:38:a5:a9:27:fd:99:97:00:37:f5:2a:ab: 09:13:91:66:76:31:37:14:54:a8:f6:9a:1b:3e:40: 72:b8:fe:91:08:11:3c:c9:0c:5f:32:e6:bc:c6:61: 80:df:4c:6c:43:a2:a6:05:f6:5f:1b:7d:e2:02:5d: 56:ca:ee:fe:7d:92:c7:db:be:38:25:87:31:74:8a: 3f:33:9b:2f:70:ef:bc:9f:75:f8:68:d1:13:06:dd: 2b:2e:70:42:ba:72:ec:6f:fa:0e:47:e1:02:79:bc: 72:9a:ff:d6:60:63:41:6c:83:5d:23:98:95:c6:7e: 0c:c6:f0:0c:63:e8:69:e4:65:e6:6b:8f:d8:e8:83: 78:b4:69:5b:8b:33:ae:a4:32:a9:22:f4:93:52:91: 85:36:2c:bb:c0:b3:22:d3:2c:34:87:91:58:59:02: db:0a:91:44:40:61:16:69:ff:78:27:a1:7f:a7:a4: 75:3c:d0:bf:a4:73:76:a2:c3:c9:47:48:49:fe:05: a5:47:c6:80:d6:38:63:b8:82:b6:c9:90:3e:51:72: b3:69:01:b0:92:98:19:dc:2a:0b:d1:af:33:36:b5: 68:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BB:C4:67:58:D5:01:4C:B7:11:0B:E0:C2:1D:2C:F7:72:A3:15:34 X509v3 Authority Key Identifier: keyid:E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:2f:b6:95:36:46:32:e3:20:1a:70:c0:64:50:4b:47:ea:aa: 3d:78:01:40:8a:12:9d:14:2b:a5:21:e6:5d:97:02:ab:38:1c: 80:c4:b3:18:44:c7:7a:06:2c:82:63:92:5b:d6:63:5a:70:d8: f2:1c:5a:7b:e1:7d:cf:59:b7:99:86:02:57:c8:76:f6:06:81: 67:40:47:24:46:d5:e6:c5:bf:7d:e1:be:8b:b3:f2:36:d6:6f: 1b:1b:c6:73:55:82:e7:40:94:78:62:12:c3:44:d2:f1:43:2e: f4:8a:30:7d:1e:0b:43:b2:07:60:0b:e9:d2:ff:af:c9:26:c6: f0:67:d4:d5:e0:ba:a1:a7:9a:0d:48:ba:22:8c:a9:51:bc:90: 7b:cc:f9:2d:e2:7d:b6:3e:9e:f5:70:20:83:0c:5c:cb:89:21: d2:fd:91:2b:01:fb:12:1b:dc:0d:92:b1:6d:52:a3:92:aa:28: a7:28:bf:8f:18:af:95:a6:57:d7:da:cc:ee:1a:14:df:9c:96: 14:41:77:ba:16:d9:c4:cd:7f:b7:22:9a:da:86:11:34:53:6f: 86:cd:5b:bd:4f:19:13:ae:44:a7:1d:98:7d:36:6e:88:0a:97: fc:4e:53:58:f0:60:6d:49:82:99:73:32:a9:d7:f2:a7:9a:94: b7:bc:45:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUepK305aCJakEDNDsWlPTN3SolhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUz MkI4RTk0MzAeFw0yNTA4MjIwNDU2MDlaFw0yNTA4MjUxNjQ5MDlaMDMxMTAvBgNV BAMTKDc1QkJDNDY3NThENTAxNENCNzExMEJFMEMyMUQyQ0Y3NzJBMzE1MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+hOiIQinJyW0nEfHyQW8LlVKJ GlVFZ16gv1SiHYopLzilqSf9mZcAN/UqqwkTkWZ2MTcUVKj2mhs+QHK4/pEIETzJ DF8y5rzGYYDfTGxDoqYF9l8bfeICXVbK7v59ksfbvjglhzF0ij8zmy9w77yfdfho 0RMG3SsucEK6cuxv+g5H4QJ5vHKa/9ZgY0Fsg10jmJXGfgzG8Axj6GnkZeZrj9jo g3i0aVuLM66kMqki9JNSkYU2LLvAsyLTLDSHkVhZAtsKkURAYRZp/3gnoX+npHU8 0L+kc3aiw8lHSEn+BaVHxoDWOGO4grbJkD5RcrNpAbCSmBncKgvRrzM2tWiVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdbvEZ1jVAUy3EQvgwh0s93KjFTQwHwYDVR0j BBgwFoAU4p6DwsWJf6T2zv48N+4aZTK46UMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTdjZjlhMC1lOTI3LTQ4MTQtODQ0Ny04YjNhMDAyNzYwYTgvMC9FMjlFODNDMkM1 ODk3RkE0RjZDRUZFM0MzN0VFMUE2NTMyQjhFOTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUzMkI4 RTk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk3Y2Y5YTAtZTkyNy00ODE0LTg0 NDctOGIzYTAwMjc2MGE4LzAvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFB NjUzMkI4RTk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgvtpU2RjLjIBpwwGRQS0fqqj14AUCKEp0U K6Uh5l2XAqs4HIDEsxhEx3oGLIJjklvWY1pw2PIcWnvhfc9Zt5mGAlfIdvYGgWdA RyRG1ebFv33hvouz8jbWbxsbxnNVgudAlHhiEsNE0vFDLvSKMH0eC0OyB2AL6dL/ r8kmxvBn1NXguqGnmg1IuiKMqVG8kHvM+S3ifbY+nvVwIIMMXMuJIdL9kSsB+xIb 3A2SsW1So5KqKKcov48Yr5WmV9fazO4aFN+clhRBd7oW2cTNf7cimtqGETRTb4bN W71PGROuRKcdmH02bogKl/xOU1jwYG1JgplzMqnX8qealLe8RRo= -----END CERTIFICATE-----Generated at Sat Aug 23 15:42:56 2025 by rpki-client