$ rpki-client -vvf repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft File: E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft (raw, json) Hash identifier: sGJUpHLDB0OMKwmrHZK7TGhlm6Vj7wlFq/sJtoJqK1w= Subject key identifier: BC:78:B4:C1:0B:F3:49:E9:D3:68:F8:28:C2:1E:F6:09:FD:27:74:CC Authority key identifier: E8:2A:E8:B6:91:C7:C5:3E:1C:E0:B3:96:D8:97:57:47:F1:56:04:D5 Certificate issuer: /CN=E82AE8B691C7C53E1CE0B396D8975747F15604D5 Certificate serial: 1AA45B310526E35FEE565D746B81E81C7DEA162F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft Manifest number: 01F6 Signing time: Thu 21 Aug 2025 08:40:58 +0000 Manifest this update: Thu 21 Aug 2025 08:35:58 +0000 Manifest next update: Sun 24 Aug 2025 14:27:58 +0000 Files and hashes: 1: 3130332e3137362e3235322e302f32332d3234203d3e20313437313433.roa (hash: 0eR/sossty6R9CW6sl77Vt0ZhuUxrN0f/0JSjyj94i0=) 2: E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl (hash: eTl8MgPrmsqbCv9+g3vQZyziJfmMfa5zgxCyxox5zCs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 14:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a4:5b:31:05:26:e3:5f:ee:56:5d:74:6b:81:e8:1c:7d:ea:16:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E82AE8B691C7C53E1CE0B396D8975747F15604D5 Validity Not Before: Aug 21 08:35:58 2025 GMT Not After : Aug 24 14:27:58 2025 GMT Subject: CN=BC78B4C10BF349E9D368F828C21EF609FD2774CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:87:21:50:d2:0a:9b:1a:7e:08:81:fd:37:c7: bb:5e:e0:ce:6c:86:13:89:ef:24:87:b2:47:88:f3: 9f:e8:ed:97:b2:2d:97:9d:9b:fa:88:27:81:a1:90: 3a:7a:24:c6:e6:a6:b8:0a:8d:48:f0:d2:ee:bd:71: 81:6a:66:91:b1:4e:50:43:f8:b2:32:62:a8:ef:14: 96:08:a2:20:bd:d0:ba:d0:9c:56:d5:d1:77:c6:95: 47:70:c6:f7:f6:77:f0:0c:35:d9:8d:19:08:ad:65: 0f:74:c3:5b:59:97:bc:9e:f6:c5:25:a2:2b:4b:13: 3c:91:52:f9:b0:4d:20:16:17:77:2e:9c:7c:b2:f0: 99:e8:8c:df:ef:99:b2:5c:07:24:fc:8f:aa:1d:7d: 57:db:82:9a:25:7c:20:e5:c4:90:a6:d7:97:a3:fe: 2a:bb:fa:c9:e7:6a:d0:81:70:c9:a1:4e:14:55:0f: de:fd:86:58:c7:fd:92:a4:a2:f5:3f:cc:27:bd:0f: 6a:5b:29:53:01:d7:bb:77:2c:b0:7d:dd:2c:57:09: 16:22:62:3c:d3:bf:7e:3f:e3:e1:79:ee:e2:d7:5d: 6d:09:cb:c2:d6:cb:62:23:4f:3b:8b:2c:b8:91:e2: 0f:dc:ad:a3:4c:c3:c1:d9:82:c6:a3:e1:17:eb:bc: 77:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:78:B4:C1:0B:F3:49:E9:D3:68:F8:28:C2:1E:F6:09:FD:27:74:CC X509v3 Authority Key Identifier: keyid:E8:2A:E8:B6:91:C7:C5:3E:1C:E0:B3:96:D8:97:57:47:F1:56:04:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:9b:aa:65:d7:bd:a5:d1:69:b6:fb:dd:30:43:83:34:1b:76: 2a:b2:3a:4c:e7:0e:f5:37:af:4c:eb:60:30:a0:78:dc:60:ca: 47:2b:a9:64:51:72:2a:7b:61:76:63:54:74:27:44:b2:2e:45: 84:de:4d:8e:74:a9:be:de:b2:d7:58:74:25:45:0c:f8:f4:46: 6a:a1:75:39:77:73:24:3c:b7:c7:72:3e:23:77:5d:1a:17:c1: ab:0f:72:0d:1d:ab:17:25:76:58:bb:7c:8a:c8:e7:ee:9d:70: a2:dd:6a:7e:87:cd:25:b1:98:f9:c9:b8:ea:71:b7:b6:3a:f6: 1d:e3:ae:9b:a4:12:c2:37:b1:6b:67:e6:fd:bb:d5:42:1a:6d: 42:b9:b9:b9:b0:7d:c3:58:dd:dc:21:61:bf:f9:a3:f7:39:c6: df:e6:dc:5c:24:50:16:a6:73:76:8b:5f:d9:80:2b:98:27:12: e9:ae:b3:5e:c1:b6:a8:a1:2e:cd:ae:ce:97:85:26:a1:b1:50: fc:02:3d:f2:fe:b3:ac:a3:c4:13:73:b6:f3:27:b2:82:42:56: 06:bd:54:a3:3b:4c:f5:a4:ee:1a:91:55:a1:cc:58:52:e7:5a: b6:49:1b:9e:2b:94:de:22:c3:43:2f:bf:a9:46:3c:1d:89:37: 53:14:d0:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGqRbMQUm41/uVl10a4HoHH3qFi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3NDdG MTU2MDRENTAeFw0yNTA4MjEwODM1NThaFw0yNTA4MjQxNDI3NThaMDMxMTAvBgNV BAMTKEJDNzhCNEMxMEJGMzQ5RTlEMzY4RjgyOEMyMUVGNjA5RkQyNzc0Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFhyFQ0gqbGn4Igf03x7te4M5s hhOJ7ySHskeI85/o7ZeyLZedm/qIJ4GhkDp6JMbmprgKjUjw0u69cYFqZpGxTlBD +LIyYqjvFJYIoiC90LrQnFbV0XfGlUdwxvf2d/AMNdmNGQitZQ90w1tZl7ye9sUl oitLEzyRUvmwTSAWF3cunHyy8JnojN/vmbJcByT8j6odfVfbgpolfCDlxJCm15ej /iq7+snnatCBcMmhThRVD979hljH/ZKkovU/zCe9D2pbKVMB17t3LLB93SxXCRYi YjzTv34/4+F57uLXXW0Jy8LWy2IjTzuLLLiR4g/craNMw8HZgsaj4RfrvHfZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvHi0wQvzSenTaPgowh72Cf0ndMwwHwYDVR0j BBgwFoAU6CrotpHHxT4c4LOW2JdXR/FWBNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWZmYjQzYi1mOGI1LTRmMWYtOWI4Zi01YjAyZGRiYjZmY2YvMC9FODJBRThCNjkx QzdDNTNFMUNFMEIzOTZEODk3NTc0N0YxNTYwNEQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3NDdGMTU2 MDRENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTlmZmI0M2ItZjhiNS00ZjFmLTli OGYtNWIwMmRkYmI2ZmNmLzAvRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3 NDdGMTU2MDRENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWbqmXXvaXRabb73TBDgzQbdiqyOkznDvU3 r0zrYDCgeNxgykcrqWRRcip7YXZjVHQnRLIuRYTeTY50qb7estdYdCVFDPj0Rmqh dTl3cyQ8t8dyPiN3XRoXwasPcg0dqxcldli7fIrI5+6dcKLdan6HzSWxmPnJuOpx t7Y69h3jrpukEsI3sWtn5v271UIabUK5ubmwfcNY3dwhYb/5o/c5xt/m3FwkUBam c3aLX9mAK5gnEumus17BtqihLs2uzpeFJqGxUPwCPfL+s6yjxBNztvMnsoJCVga9 VKM7TPWk7hqRVaHMWFLnWrZJG54rlN4iw0Mvv6lGPB2JN1MU0HA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:07:32 2025 by rpki-client