$ rpki-client -vvf repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft File: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft (raw, json) Hash identifier: Zhnlxi5V6OOlVBq5aODKxVctrdjWmBpBF0qn0vPbZIg= Subject key identifier: A5:41:29:E7:FE:29:15:25:2F:1E:3E:93:64:BA:6D:4F:B2:14:00:6E Authority key identifier: E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE Certificate issuer: /CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE Certificate serial: 0A5A54F7ABCBD8EF1A27DADCF76AD121F86512C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft Manifest number: 0220 Signing time: Thu 21 Aug 2025 00:10:53 +0000 Manifest this update: Thu 21 Aug 2025 00:05:53 +0000 Manifest next update: Sun 24 Aug 2025 12:01:53 +0000 Files and hashes: 1: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl (hash: 3zqp+iVWGknfOCJXa8fiTes2m79jwgXRTp6gYcUZYXQ=) 2: 3130332e3137322e3139342e302f32332d3233203d3e20313437303735.roa (hash: xYxxyrQkuQeP1ZXr19Z8s6G5oCtciWVbaGSbTT9Dbxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 12:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:5a:54:f7:ab:cb:d8:ef:1a:27:da:dc:f7:6a:d1:21:f8:65:12:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE Validity Not Before: Aug 21 00:05:53 2025 GMT Not After : Aug 24 12:01:53 2025 GMT Subject: CN=A54129E7FE2915252F1E3E9364BA6D4FB214006E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2c:24:91:86:2c:9b:85:52:fa:b3:df:12:e4: 86:44:8b:12:22:48:64:f4:0d:96:be:a6:75:0c:ff: 7f:c3:8a:76:ff:2b:85:7f:a9:b2:b1:42:af:58:1b: 03:1d:48:9c:3d:4b:45:4c:d4:73:2c:8f:58:50:90: 24:17:99:ed:ba:d4:9a:be:af:77:0e:7b:a4:46:44: 6d:2f:7b:09:6f:a1:28:7d:0b:29:3d:75:05:3f:ce: c4:a6:37:31:76:fd:24:27:25:cb:f4:42:56:81:17: ce:65:fe:b4:c1:10:77:21:20:fb:7c:3c:ca:20:b6: 33:6c:c9:74:b2:3a:f1:d9:9b:52:64:37:e1:11:a7: 0c:85:36:7c:be:a8:99:6f:bd:fd:34:4c:6c:8d:01: bf:ce:ae:75:91:ac:0e:90:e1:be:77:69:cf:56:9b: 56:60:c9:be:6c:6c:ba:ed:c5:41:79:b6:a8:3f:eb: cc:f4:34:38:d0:c9:4a:be:58:f4:ac:fb:08:48:88: bb:89:a9:f9:07:a1:08:a4:9b:fd:ea:0a:33:fb:9b: e5:0a:e9:ca:ff:13:84:50:a0:1d:9c:75:84:c7:e6: bb:bb:82:77:a0:47:aa:61:72:e4:ba:14:20:fb:bd: 91:df:c8:9d:75:4d:ff:91:79:19:74:4c:f3:c9:1c: 9e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:41:29:E7:FE:29:15:25:2F:1E:3E:93:64:BA:6D:4F:B2:14:00:6E X509v3 Authority Key Identifier: keyid:E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:80:75:38:eb:fa:52:96:bb:3d:15:11:b1:b4:90:1e:01:9d: ac:3e:5d:65:28:ba:e0:86:d1:2c:25:b3:a7:9f:a2:a1:bc:f4: 9a:fd:6a:47:23:e8:7b:a6:ff:d7:f2:7a:f2:a8:70:d4:68:ba: 70:50:ab:a5:aa:f1:c9:3d:37:d2:15:8e:7d:a1:4d:69:12:26: cd:1d:fe:7c:de:b1:d4:36:5f:d6:93:7d:a0:0a:9a:ec:0d:3b: 7a:fe:f4:a3:20:48:d3:5a:14:77:70:8d:c7:34:10:59:d4:2c: 9b:3c:46:b9:5b:38:cb:3d:51:62:55:b0:38:f7:8d:7f:0b:d0: a8:d8:65:fd:0a:a0:7e:ef:0e:e6:17:bc:37:02:1a:f0:31:76: 45:06:5b:72:91:96:09:cc:97:c7:e9:e3:a6:ab:c9:87:5d:01: 23:64:92:d8:f1:de:27:5b:44:7f:a1:46:07:fe:c1:b7:06:d1: 6a:73:8e:27:5e:0b:5c:e5:64:26:e1:17:6e:ea:1e:01:f9:1d: 67:f1:03:db:52:f9:86:3c:a9:be:69:d8:98:01:0b:8a:1d:a9: e4:4a:9c:0f:c5:80:d5:c2:c5:99:19:8a:68:48:10:26:b7:cf: 7e:3d:89:30:90:30:e8:7a:51:d9:1d:de:20:5e:60:0c:63:da: c9:18:e7:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUClpU96vL2O8aJ9rc92rRIfhlEsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3 QjJBRTRCRTAeFw0yNTA4MjEwMDA1NTNaFw0yNTA4MjQxMjAxNTNaMDMxMTAvBgNV BAMTKEE1NDEyOUU3RkUyOTE1MjUyRjFFM0U5MzY0QkE2RDRGQjIxNDAwNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMLCSRhiybhVL6s98S5IZEixIi SGT0DZa+pnUM/3/Dinb/K4V/qbKxQq9YGwMdSJw9S0VM1HMsj1hQkCQXme261Jq+ r3cOe6RGRG0vewlvoSh9Cyk9dQU/zsSmNzF2/SQnJcv0QlaBF85l/rTBEHchIPt8 PMogtjNsyXSyOvHZm1JkN+ERpwyFNny+qJlvvf00TGyNAb/OrnWRrA6Q4b53ac9W m1Zgyb5sbLrtxUF5tqg/68z0NDjQyUq+WPSs+whIiLuJqfkHoQikm/3qCjP7m+UK 6cr/E4RQoB2cdYTH5ru7gnegR6phcuS6FCD7vZHfyJ11Tf+ReRl0TPPJHJ4lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpUEp5/4pFSUvHj6TZLptT7IUAG4wHwYDVR0j BBgwFoAU5IY04db7LooGpIgltNfuxHsq5L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2VjMmNiNi0zNWFkLTQxMDEtOTgyZS0yZTM0ZDU2NmVmZGEvMC9FNDg2MzRFMUQ2 RkIyRThBMDZBNDg4MjVCNEQ3RUVDNDdCMkFFNEJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3QjJB RTRCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNlYzJjYjYtMzVhZC00MTAxLTk4 MmUtMmUzNGQ1NjZlZmRhLzAvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VF QzQ3QjJBRTRCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6AdTjr+lKWuz0VEbG0kB4Bnaw+XWUouuCG 0Swls6efoqG89Jr9akcj6Hum/9fyevKocNRounBQq6Wq8ck9N9IVjn2hTWkSJs0d /nzesdQ2X9aTfaAKmuwNO3r+9KMgSNNaFHdwjcc0EFnULJs8RrlbOMs9UWJVsDj3 jX8L0KjYZf0KoH7vDuYXvDcCGvAxdkUGW3KRlgnMl8fp46aryYddASNkktjx3idb RH+hRgf+wbcG0WpzjideC1zlZCbhF27qHgH5HWfxA9tS+YY8qb5p2JgBC4odqeRK nA/FgNXCxZkZimhIECa3z349iTCQMOh6Udkd3iBeYAxj2skY5/o= -----END CERTIFICATE-----Generated at Sat Aug 23 12:16:05 2025 by rpki-client