$ rpki-client -vvf repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft File: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft (raw, json) Hash identifier: gA3XFstNfbJZ2WR/E10r1BH0hueeH9TSjQwkJ4EEksQ= Subject key identifier: 45:5C:42:C6:B0:6A:0C:84:7C:8E:31:B1:2E:DC:DE:EA:7E:C3:F3:13 Authority key identifier: E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F Certificate issuer: /CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Certificate serial: 23975AEA4AA22116417227ADE09437DD755D5B99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft Manifest number: D9 Signing time: Wed 06 Aug 2025 04:11:55 +0000 Manifest this update: Wed 06 Aug 2025 04:06:55 +0000 Manifest next update: Sat 09 Aug 2025 09:31:55 +0000 Files and hashes: 1: 323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa (hash: k742tyOIX18+4IlFbV4FgY2xaEXxztUec+tXVFs15vs=) 2: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl (hash: aQcpza8Vw17wKKrhVhwCFmL78mbhxzEh/8qNGBd2sCg=) 3: 3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa (hash: PEcDYL2YEDwvOwIh2isXFSsdo3mWol6RplkSJ7kPOGI=) 4: 3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (hash: 0+ulOJPEXxfRU9rDzPOyAhCIeStaBB8o7bfVtpS93+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 09:31:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:97:5a:ea:4a:a2:21:16:41:72:27:ad:e0:94:37:dd:75:5d:5b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Validity Not Before: Aug 6 04:06:55 2025 GMT Not After : Aug 9 09:31:55 2025 GMT Subject: CN=455C42C6B06A0C847C8E31B12EDCDEEA7EC3F313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f4:51:80:4e:6c:2c:89:f0:bb:1f:74:6d:17: bf:71:e9:1a:81:da:bf:64:b2:d8:b8:d4:19:63:c5: 58:f4:be:1c:79:fd:7b:c7:34:a5:6a:1e:0b:a3:6d: ca:cc:34:ab:9a:c6:f0:e3:83:de:4f:d3:72:d2:b8: ef:58:7a:8d:a1:e5:36:fd:ec:94:57:eb:0d:f8:d2: 20:0f:c0:22:e8:d5:79:d7:e5:1e:b6:2e:d3:01:ba: 2c:c1:98:8a:a0:63:a1:42:ab:9a:76:dc:b7:86:50: 3e:7d:70:72:48:20:f9:d6:a1:0e:4a:28:6d:b3:71: 86:bd:97:93:6f:06:9e:77:8d:93:61:d0:fa:a2:40: e4:bb:65:31:cb:7f:1d:9b:73:6b:76:3c:6c:44:9e: 21:ad:75:20:92:a5:0a:29:35:85:00:cd:f1:29:c8: ee:d9:ef:94:4c:4b:99:28:44:09:2c:de:d1:ed:c0: 52:30:c5:59:89:12:62:9f:e6:38:84:db:6b:e4:23: c7:f7:92:8f:9f:a2:21:89:71:bf:5c:32:e3:5f:c4: 9d:bf:3c:dd:2f:b5:ec:f3:31:f0:cd:7e:30:2c:b4: 8b:d4:66:4d:26:92:fb:9d:3a:fc:67:64:52:c1:ec: 98:7e:31:77:fd:bd:27:b2:90:1f:3d:28:f0:65:46: 43:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5C:42:C6:B0:6A:0C:84:7C:8E:31:B1:2E:DC:DE:EA:7E:C3:F3:13 X509v3 Authority Key Identifier: keyid:E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:2d:63:3c:d2:f1:2a:2a:a9:06:9b:b5:31:27:7b:76:76:bd: 89:9d:ee:f8:36:bb:3e:d8:5b:2c:99:79:78:b9:1e:f1:f7:47: e5:1f:d4:a7:ba:0a:80:a1:0f:e9:d3:4d:c4:b6:fc:79:7a:3d: 88:44:f2:c9:c9:c5:c7:5c:64:2c:79:ae:ad:e9:4a:17:41:9f: 09:21:e3:a4:58:69:c1:f3:ca:8a:79:a3:66:e6:b5:6b:e5:96: ad:46:13:ad:fa:35:36:0d:2e:97:6c:65:0f:78:ce:21:38:c3: f0:72:bd:45:ec:ae:27:4a:e4:e4:56:66:80:27:41:9c:99:72: 02:b0:42:09:fc:2b:8a:fa:30:7e:a5:87:27:d1:1f:e3:13:a4: 3d:d0:05:e2:3c:c4:21:cc:f6:ef:62:63:ba:e0:30:f6:c9:04: fa:95:25:f7:49:4c:b7:ff:05:ab:c9:df:e3:2c:ef:3d:24:93: e0:7c:0f:ad:ba:26:1b:2f:6f:93:d1:1c:61:62:1a:67:2b:5e: 95:21:04:49:e4:1b:91:4d:9a:45:86:a1:36:24:ec:e7:73:1d: db:8d:10:67:91:d1:c5:3c:ae:3c:98:0d:47:3f:e9:fe:60:29: 6a:73:6b:a5:31:1d:77:49:6a:f8:8a:65:b5:ca:1b:70:11:66: 63:df:1e:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI5da6kqiIRZBciet4JQ33XVdW5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0Iy REJCRUQwRjAeFw0yNTA4MDYwNDA2NTVaFw0yNTA4MDkwOTMxNTVaMDMxMTAvBgNV BAMTKDQ1NUM0MkM2QjA2QTBDODQ3QzhFMzFCMTJFRENERUVBN0VDM0YzMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx9FGATmwsifC7H3RtF79x6RqB 2r9ksti41BljxVj0vhx5/XvHNKVqHgujbcrMNKuaxvDjg95P03LSuO9Yeo2h5Tb9 7JRX6w340iAPwCLo1XnX5R62LtMBuizBmIqgY6FCq5p23LeGUD59cHJIIPnWoQ5K KG2zcYa9l5NvBp53jZNh0PqiQOS7ZTHLfx2bc2t2PGxEniGtdSCSpQopNYUAzfEp yO7Z75RMS5koRAks3tHtwFIwxVmJEmKf5jiE22vkI8f3ko+foiGJcb9cMuNfxJ2/ PN0vtezzMfDNfjAstIvUZk0mkvudOvxnZFLB7Jh+MXf9vSeykB89KPBlRkNzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURVxCxrBqDIR8jjGxLtze6n7D8xMwHwYDVR0j BBgwFoAU5M7BHyRL8Nq+wTb4Of1Tey277Q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmYzZjVkOS1jZmI4LTQxMjMtYTJiMS1iMGI1Mjk5ZjljNmUvMC9FNENFQzExRjI0 NEJGMERBQkVDMTM2RjgzOUZENTM3QjJEQkJFRDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0IyREJC RUQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJmM2Y1ZDktY2ZiOC00MTIzLWEy YjEtYjBiNTI5OWY5YzZlLzAvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUz N0IyREJCRUQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFstYzzS8SoqqQabtTEne3Z2vYmd7vg2uz7Y WyyZeXi5HvH3R+Uf1Ke6CoChD+nTTcS2/Hl6PYhE8snJxcdcZCx5rq3pShdBnwkh 46RYacHzyop5o2bmtWvllq1GE636NTYNLpdsZQ94ziE4w/ByvUXsridK5ORWZoAn QZyZcgKwQgn8K4r6MH6lhyfRH+MTpD3QBeI8xCHM9u9iY7rgMPbJBPqVJfdJTLf/ BavJ3+Ms7z0kk+B8D626Jhsvb5PRHGFiGmcrXpUhBEnkG5FNmkWGoTYk7OdzHduN EGeR0cU8rjyYDUc/6f5gKWpza6UxHXdJaviKZbXKG3ARZmPfHsM= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:36 2025 by rpki-client