$ rpki-client -vvf repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft File: E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft (raw, json) Hash identifier: /wv7/W/HEqZJa2EJbOmzAB/bBQ8eRAAhpgg5aAPhBGw= Subject key identifier: 38:D4:D2:E1:7F:03:9D:9F:54:CC:77:F7:4C:DC:50:75:55:BD:BB:7E Authority key identifier: E3:1C:BD:E5:C6:F3:3D:AE:3C:A9:7A:01:1E:A4:F4:E6:39:FB:4F:F6 Certificate issuer: /CN=E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6 Certificate serial: 2C17B1FCD935863D94EC9D77369D34957D6F7C4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft Manifest number: 01FD Signing time: Fri 22 Aug 2025 12:12:17 +0000 Manifest this update: Fri 22 Aug 2025 12:07:17 +0000 Manifest next update: Mon 25 Aug 2025 16:47:17 +0000 Files and hashes: 1: E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.crl (hash: PcsE/tFuxDpueCozc027O8xAzaQxeJmiwCcUUdCxVKA=) 2: 3130332e3137352e3230352e302f32342d3234203d3e20313437313235.roa (hash: gA20Kw8fUFXrS9IHBKhI6TIYPne1muz2nraM3qEZjXM=) 3: 323030313a6466303a323363303a3a2f34382d3438203d3e20313437313235.roa (hash: cdNwI4+yNgJqJT5/jVDzUTVdyDgbKctLin9GOuO6hd8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.crl rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 16:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:17:b1:fc:d9:35:86:3d:94:ec:9d:77:36:9d:34:95:7d:6f:7c:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6 Validity Not Before: Aug 22 12:07:17 2025 GMT Not After : Aug 25 16:47:17 2025 GMT Subject: CN=38D4D2E17F039D9F54CC77F74CDC507555BDBB7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:05:5e:7c:33:8b:95:4a:e2:a6:94:e5:7d:83: e8:ff:15:5c:8d:c7:5c:cf:11:01:8f:92:e9:66:48: f6:91:e3:78:70:7e:98:85:44:47:1e:c1:55:d1:89: 85:7b:36:59:ca:2a:85:c6:67:b2:ee:9c:aa:0f:2b: c9:cd:21:b0:8c:2d:5f:28:77:d4:c7:8f:c5:b2:e4: 32:c3:56:40:bb:44:de:a9:3e:db:37:9a:4b:2b:8c: 67:22:0c:0d:8b:a5:7f:b4:8a:04:94:8f:e8:7a:c8: 27:e4:27:96:48:2a:60:e0:47:e3:2a:06:15:34:2f: 33:02:5e:9e:8e:9d:47:da:d4:41:90:c7:c6:15:0e: 7e:f8:21:e4:ef:fa:0b:6d:07:63:c2:72:ee:6c:9b: d8:82:20:a7:b0:54:51:9b:07:d8:11:68:ed:e7:bf: 2d:28:75:ef:d5:7c:13:10:5b:5d:60:00:8d:31:62: c4:60:07:49:6b:fd:d0:cd:91:92:32:66:ed:10:43: fe:eb:80:0b:29:4d:f4:44:28:58:dd:40:04:be:56: fb:47:d2:44:2d:db:e9:f1:99:c2:42:c6:c1:9f:35: 33:c7:84:3c:d7:22:f5:f3:85:49:b3:d1:5a:82:1e: c0:4c:17:51:a3:a3:8e:e1:2e:46:00:c9:b0:ae:4b: 96:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D4:D2:E1:7F:03:9D:9F:54:CC:77:F7:4C:DC:50:75:55:BD:BB:7E X509v3 Authority Key Identifier: keyid:E3:1C:BD:E5:C6:F3:3D:AE:3C:A9:7A:01:1E:A4:F4:E6:39:FB:4F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:51:fb:ac:e5:6f:5c:8c:8f:93:bf:48:72:13:d2:f9:da:1e: 75:b6:46:60:dd:de:f7:9a:47:6f:10:86:d8:d6:9b:ab:fb:fe: a6:77:35:d6:a1:28:99:ee:b5:57:e4:7c:cd:3f:ce:04:88:77: 25:37:b6:8f:9e:e3:20:b4:3f:8c:dd:c9:9d:dc:96:91:99:c5: 8f:c7:01:ef:49:f1:3e:b2:b7:0d:f0:41:b1:8f:ef:d6:91:a9: 2b:9e:11:4a:48:29:b3:53:4e:76:63:1c:5e:35:c9:07:3a:af: 7e:3f:06:ea:ec:47:74:b2:6b:9b:82:88:10:3f:23:0c:9c:d2: 75:d5:c8:9c:0d:ba:da:97:0c:80:6f:70:7f:15:d2:ab:e0:c3: 44:96:9b:19:f8:74:5b:95:13:8f:e3:42:d5:40:cf:87:c4:bc: 5a:19:a7:68:c4:45:52:e2:15:70:cf:e0:0f:56:ad:1d:99:a9: ad:58:5e:3d:43:a4:a2:32:8c:1b:a0:16:a8:3f:41:62:de:01: 00:4c:13:69:46:fb:eb:93:57:f9:45:cc:6d:df:68:b9:4a:a3: 54:f9:8c:a6:c8:71:0f:3c:7e:e1:b0:6b:15:a7:b4:04:31:3c: 07:87:86:39:8c:5a:cf:ec:41:16:e1:ac:b1:e7:11:33:2d:67: d0:d5:d2:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULBex/Nk1hj2U7J13Np00lX1vfE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMxQ0JERTVDNkYzM0RBRTNDQTk3QTAxMUVBNEY0RTYz OUZCNEZGNjAeFw0yNTA4MjIxMjA3MTdaFw0yNTA4MjUxNjQ3MTdaMDMxMTAvBgNV BAMTKDM4RDREMkUxN0YwMzlEOUY1NENDNzdGNzRDREM1MDc1NTVCREJCN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbBV58M4uVSuKmlOV9g+j/FVyN x1zPEQGPkulmSPaR43hwfpiFREcewVXRiYV7NlnKKoXGZ7LunKoPK8nNIbCMLV8o d9THj8Wy5DLDVkC7RN6pPts3mksrjGciDA2LpX+0igSUj+h6yCfkJ5ZIKmDgR+Mq BhU0LzMCXp6OnUfa1EGQx8YVDn74IeTv+gttB2PCcu5sm9iCIKewVFGbB9gRaO3n vy0ode/VfBMQW11gAI0xYsRgB0lr/dDNkZIyZu0QQ/7rgAspTfREKFjdQAS+VvtH 0kQt2+nxmcJCxsGfNTPHhDzXIvXzhUmz0VqCHsBMF1Gjo47hLkYAybCuS5bZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUONTS4X8DnZ9UzHf3TNxQdVW9u34wHwYDVR0j BBgwFoAU4xy95cbzPa48qXoBHqT05jn7T/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzAyMDFlMy04NzVkLTQ5YzQtOGUxNC05OTk5NDkzNmQ0OTEvMC9FMzFDQkRFNUM2 RjMzREFFM0NBOTdBMDExRUE0RjRFNjM5RkI0RkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTMxQ0JERTVDNkYzM0RBRTNDQTk3QTAxMUVBNEY0RTYzOUZC NEZGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGMwMjAxZTMtODc1ZC00OWM0LThl MTQtOTk5OTQ5MzZkNDkxLzAvRTMxQ0JERTVDNkYzM0RBRTNDQTk3QTAxMUVBNEY0 RTYzOUZCNEZGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAElR+6zlb1yMj5O/SHIT0vnaHnW2RmDd3vea R28QhtjWm6v7/qZ3NdahKJnutVfkfM0/zgSIdyU3to+e4yC0P4zdyZ3clpGZxY/H Ae9J8T6ytw3wQbGP79aRqSueEUpIKbNTTnZjHF41yQc6r34/BursR3Sya5uCiBA/ Iwyc0nXVyJwNutqXDIBvcH8V0qvgw0SWmxn4dFuVE4/jQtVAz4fEvFoZp2jERVLi FXDP4A9WrR2Zqa1YXj1DpKIyjBugFqg/QWLeAQBME2lG++uTV/lFzG3faLlKo1T5 jKbIcQ88fuGwaxWntAQxPAeHhjmMWs/sQRbhrLHnETMtZ9DV0no= -----END CERTIFICATE-----Generated at Sat Aug 23 17:13:42 2025 by rpki-client