$ rpki-client -vvf repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft File: E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft (raw, json) Hash identifier: vANQgDIKL83UNsYB+oZ858C23X+frmxpnhDOLZZ2ZdA= Subject key identifier: C3:3F:AC:5D:1A:43:C3:23:53:AA:2F:AC:22:7F:7F:29:68:3E:DC:54 Authority key identifier: E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F Certificate issuer: /CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F Certificate serial: 111EC3EE1EA15A5350999A70C7269713709AF83C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft Manifest number: D0 Signing time: Fri 22 Aug 2025 15:51:10 +0000 Manifest this update: Fri 22 Aug 2025 15:46:10 +0000 Manifest next update: Mon 25 Aug 2025 19:20:10 +0000 Files and hashes: 1: 3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa (hash: fkNU7FdVjKHsjFj1YpiV+gYURzvDFsZYzfTu/zHhcfE=) 2: E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl (hash: F/D8Q9xrZdHwbSe0JylZvXciKDRp+zLdQFJ0J8O+Vys=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 19:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:1e:c3:ee:1e:a1:5a:53:50:99:9a:70:c7:26:97:13:70:9a:f8:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F Validity Not Before: Aug 22 15:46:10 2025 GMT Not After : Aug 25 19:20:10 2025 GMT Subject: CN=C33FAC5D1A43C32353AA2FAC227F7F29683EDC54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:47:ca:ad:d3:1c:82:04:b9:76:ab:b2:41:67: 89:f6:99:74:8f:3f:64:7d:21:ec:d6:bf:c6:4e:39: a3:b7:66:ad:27:75:63:57:ad:32:3b:99:19:a2:b1: ad:dd:45:65:15:53:91:f8:bd:75:2a:ca:50:17:27: d8:9a:a7:f9:a9:f4:65:9d:62:80:94:a8:39:62:f4: f5:7e:ae:75:78:1f:ac:ca:df:60:c5:fe:24:35:18: 5f:5a:4b:70:ba:57:4a:6e:39:11:b6:de:d5:48:bd: ef:d3:b2:9a:80:7e:f3:33:30:93:82:0f:e6:e6:df: a1:e2:04:cd:43:8a:36:4f:7f:9b:50:ce:1e:9b:16: eb:5f:c6:37:76:df:1a:2b:74:5c:ad:89:78:cb:e3: 92:dd:7a:8a:7d:9e:29:b6:5f:7c:e2:ed:96:40:0b: 7c:fb:2b:2f:d6:ae:23:b7:00:98:9b:56:ee:cc:bd: 09:e7:ef:2c:03:58:b9:11:cc:52:6f:02:d3:48:99: 03:0f:79:c4:da:bf:a2:fc:e6:11:69:27:c4:ef:d0: 3e:f2:70:96:25:86:e9:fd:b9:60:9d:75:9d:98:9c: 91:d0:8b:cb:d8:3a:90:9a:c7:5e:a2:ca:45:45:a0: fe:62:1b:74:05:d6:47:20:2e:51:4c:68:f7:b8:bd: bf:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3F:AC:5D:1A:43:C3:23:53:AA:2F:AC:22:7F:7F:29:68:3E:DC:54 X509v3 Authority Key Identifier: keyid:E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:59:38:b2:12:a8:96:38:bc:c3:5a:4f:ac:54:13:16:5a:47: be:52:6d:5f:e1:e5:be:cd:8f:5d:4c:ec:ad:8c:54:80:55:7b: 72:ca:02:7a:d0:b7:f1:a4:fc:dc:cd:c3:be:32:45:e5:a9:ec: 8f:f8:63:4c:95:27:04:14:63:ed:f8:de:fc:bc:0d:4e:2d:bc: d5:79:fa:c2:e0:fa:a6:9b:42:23:19:f1:50:ca:c2:2a:ef:f2: a4:4e:b0:4d:c4:ec:03:4c:b5:59:8a:86:cb:bb:62:eb:bb:f5: 4e:fa:b4:24:1a:36:bf:bb:bc:0d:bf:4a:9a:f8:a3:c2:22:03: bf:df:b8:5b:c3:7f:19:54:1d:31:af:3e:16:08:66:fa:89:a9: 24:1e:b4:80:ce:af:d2:20:6d:92:3e:20:43:32:80:b6:f5:78: 69:18:9a:ac:86:be:0b:74:64:75:df:36:2f:51:c5:04:69:82: df:65:1d:a7:68:68:67:dc:31:e3:e7:ff:a1:37:01:61:7d:26: 5e:90:27:6c:76:dd:8e:09:dd:52:15:14:bf:4b:37:19:f2:8a: 16:9e:2d:3e:15:93:aa:6b:48:d8:17:dc:de:86:c9:36:34:74: 28:02:f4:35:ee:fd:f7:76:fd:9a:cd:e1:6f:66:19:4e:c7:d8: 4b:29:97:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUER7D7h6hWlNQmZpwxyaXE3Ca+DwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJFMDhD QzJGNUM3RjAeFw0yNTA4MjIxNTQ2MTBaFw0yNTA4MjUxOTIwMTBaMDMxMTAvBgNV BAMTKEMzM0ZBQzVEMUE0M0MzMjM1M0FBMkZBQzIyN0Y3RjI5NjgzRURDNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjR8qt0xyCBLl2q7JBZ4n2mXSP P2R9IezWv8ZOOaO3Zq0ndWNXrTI7mRmisa3dRWUVU5H4vXUqylAXJ9iap/mp9GWd YoCUqDli9PV+rnV4H6zK32DF/iQ1GF9aS3C6V0puORG23tVIve/TspqAfvMzMJOC D+bm36HiBM1DijZPf5tQzh6bFutfxjd23xordFytiXjL45Ldeop9nim2X3zi7ZZA C3z7Ky/WriO3AJibVu7MvQnn7ywDWLkRzFJvAtNImQMPecTav6L85hFpJ8Tv0D7y cJYlhun9uWCddZ2YnJHQi8vYOpCax16iykVFoP5iG3QF1kcgLlFMaPe4vb+DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwz+sXRpDwyNTqi+sIn9/KWg+3FQwHwYDVR0j BBgwFoAU6QK/TPydmX42qeGjL6ouCMwvXH8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmI0NjZjNi0zNzQzLTQ5NWYtYjFhOC0yNjA3Y2M5OTU3M2YvMC9FOTAyQkY0Q0ZD OUQ5OTdFMzZBOUUxQTMyRkFBMkUwOENDMkY1QzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJFMDhDQzJG NUM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZiNDY2YzYtMzc0My00OTVmLWIx YTgtMjYwN2NjOTk1NzNmLzAvRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJF MDhDQzJGNUM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZZOLISqJY4vMNaT6xUExZaR75SbV/h5b7N j11M7K2MVIBVe3LKAnrQt/Gk/NzNw74yReWp7I/4Y0yVJwQUY+343vy8DU4tvNV5 +sLg+qabQiMZ8VDKwirv8qROsE3E7ANMtVmKhsu7Yuu79U76tCQaNr+7vA2/Spr4 o8IiA7/fuFvDfxlUHTGvPhYIZvqJqSQetIDOr9IgbZI+IEMygLb1eGkYmqyGvgt0 ZHXfNi9RxQRpgt9lHadoaGfcMePn/6E3AWF9Jl6QJ2x23Y4J3VIVFL9LNxnyihae LT4Vk6prSNgX3N6GyTY0dCgC9DXu/fd2/ZrN4W9mGU7H2Espl6E= -----END CERTIFICATE-----Generated at Sat Aug 23 18:40:55 2025 by rpki-client