$ rpki-client -vvf repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft File: E5B2AB049E75667C8F00ECB0EBF617859558571D.mft (raw, json) Hash identifier: cSftpuc4NRyDwoBhbAFYyiemqwEnQs5PjkzPsFfoQlI= Subject key identifier: FD:26:A3:E1:26:FB:79:97:6C:3B:09:5C:22:67:18:C6:C0:01:96:16 Authority key identifier: E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D Certificate issuer: /CN=E5B2AB049E75667C8F00ECB0EBF617859558571D Certificate serial: 3FC1A346742B0F5C718A087152C69AC28E7340C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft Manifest number: 012A Signing time: Tue 05 Aug 2025 09:20:35 +0000 Manifest this update: Tue 05 Aug 2025 09:15:35 +0000 Manifest next update: Fri 08 Aug 2025 18:04:35 +0000 Files and hashes: 1: 3130332e3232342e37372e302f32342d3234203d3e203536323535.roa (hash: MHqEWkxk0lcqHf0DHOOzzwqgpatowmuSY53tgbg1pfo=) 2: 3130332e3232342e37362e302f32342d3234203d3e203536323535.roa (hash: Zqpcy0ugk8HAE+GYWRNcHEByrdTEefMutc7Cf14qofA=) 3: E5B2AB049E75667C8F00ECB0EBF617859558571D.crl (hash: BIkKA/Ey+0cM03bYSjh3lh7xwn0awTHRjc0Ir4ibHCI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 18:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:c1:a3:46:74:2b:0f:5c:71:8a:08:71:52:c6:9a:c2:8e:73:40:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5B2AB049E75667C8F00ECB0EBF617859558571D Validity Not Before: Aug 5 09:15:35 2025 GMT Not After : Aug 8 18:04:35 2025 GMT Subject: CN=FD26A3E126FB79976C3B095C226718C6C0019616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:25:ec:28:e4:59:41:f1:99:00:b0:90:d0:59: fb:f2:be:4e:92:1b:be:9d:96:16:23:24:23:b9:a9: f3:62:ec:67:f0:59:b6:86:22:0e:34:96:ac:f0:b3: a3:70:20:c6:9d:9c:85:77:56:a5:88:7e:d8:1c:9b: 7f:d1:78:47:98:7f:f2:30:91:68:89:ea:a9:f8:8a: 83:5c:98:63:e4:e5:7a:42:1f:ff:62:26:98:b0:18: a0:b8:5b:8a:70:39:e4:d0:46:27:d7:56:e1:bc:62: 39:2d:99:d8:67:9e:44:6c:40:21:e4:d2:c1:b1:bd: 6f:cb:ff:12:8d:d8:7e:03:43:57:f7:d9:88:d9:0c: 2b:5d:90:b0:08:18:21:c9:41:4c:d3:38:e9:f6:e8: 86:2b:d8:02:ee:c5:59:ce:68:79:79:86:7b:0c:02: bc:52:29:7f:0b:f4:25:c4:6e:8e:d8:ab:8e:06:84: 05:28:78:e7:1a:f3:ed:0c:17:d5:bb:19:5c:b7:eb: 96:a6:c1:a2:cc:5f:e4:0e:c9:a8:49:c3:12:07:b7: 71:9c:ab:f0:71:da:25:a9:97:8d:a0:20:f8:24:71: c2:08:46:96:28:8d:4c:17:a9:15:27:4c:cd:30:fb: 5b:7d:c6:85:8a:4e:47:29:0d:b3:b9:f4:49:7d:8e: 37:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:26:A3:E1:26:FB:79:97:6C:3B:09:5C:22:67:18:C6:C0:01:96:16 X509v3 Authority Key Identifier: keyid:E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:61:3f:8e:49:45:b6:d2:52:33:4f:1d:a4:45:56:dd:00:85: 92:17:a4:bb:31:5c:85:e2:a4:86:a5:92:eb:8c:5f:53:7c:7d: 57:1d:2a:ae:f6:2b:58:df:dd:ba:1e:fa:76:09:91:a2:01:1b: bb:10:c8:cc:a0:c4:b0:08:c7:7b:a6:31:17:52:0b:81:c5:3f: 43:07:92:ea:46:87:34:d6:4a:e4:a4:26:52:97:64:59:c5:03: 85:fa:93:b6:01:0f:43:6f:de:24:ec:a7:20:ee:21:9a:74:1f: 7a:6f:64:71:35:62:78:b2:07:65:98:ad:63:0e:de:b3:27:cb: e8:12:a9:4f:22:4c:c3:da:b3:a6:4e:36:58:1b:b1:87:5b:ae: ab:a2:5c:92:90:b9:88:be:2c:52:0b:69:22:77:44:7f:56:64: 8d:8f:6b:be:1d:56:04:f2:61:e9:43:da:da:cc:3c:8c:47:ca: 9a:e3:d6:1d:6f:a4:38:93:c3:43:87:c2:66:56:2f:74:5e:29: b9:b6:d1:36:cc:4d:82:dd:0a:d4:e8:57:da:fc:4d:16:85:a2: 6e:0a:64:4e:a5:8a:47:93:38:bf:e8:1b:f7:bc:4f:56:0d:55: d1:f9:e0:4e:87:ad:9b:26:34:af:cd:69:7c:7b:7e:4f:b6:65: 83:eb:86:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP8GjRnQrD1xxighxUsaawo5zQMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3ODU5 NTU4NTcxRDAeFw0yNTA4MDUwOTE1MzVaFw0yNTA4MDgxODA0MzVaMDMxMTAvBgNV BAMTKEZEMjZBM0UxMjZGQjc5OTc2QzNCMDk1QzIyNjcxOEM2QzAwMTk2MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRJewo5FlB8ZkAsJDQWfvyvk6S G76dlhYjJCO5qfNi7GfwWbaGIg40lqzws6NwIMadnIV3VqWIftgcm3/ReEeYf/Iw kWiJ6qn4ioNcmGPk5XpCH/9iJpiwGKC4W4pwOeTQRifXVuG8YjktmdhnnkRsQCHk 0sGxvW/L/xKN2H4DQ1f32YjZDCtdkLAIGCHJQUzTOOn26IYr2ALuxVnOaHl5hnsM ArxSKX8L9CXEbo7Yq44GhAUoeOca8+0MF9W7GVy365amwaLMX+QOyahJwxIHt3Gc q/Bx2iWpl42gIPgkccIIRpYojUwXqRUnTM0w+1t9xoWKTkcpDbO59El9jjcDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Saj4Sb7eZdsOwlcImcYxsABlhYwHwYDVR0j BBgwFoAU5bKrBJ51ZnyPAOyw6/YXhZVYVx0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjI2YjNlMS1kN2Y2LTQ2NWUtODMwMi03ZDUyZjVjMzQwZmYvMC9FNUIyQUIwNDlF NzU2NjdDOEYwMEVDQjBFQkY2MTc4NTk1NTg1NzFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3ODU5NTU4 NTcxRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIyNmIzZTEtZDdmNi00NjVlLTgz MDItN2Q1MmY1YzM0MGZmLzAvRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3 ODU5NTU4NTcxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVhP45JRbbSUjNPHaRFVt0AhZIXpLsxXIXi pIalkuuMX1N8fVcdKq72K1jf3boe+nYJkaIBG7sQyMygxLAIx3umMRdSC4HFP0MH kupGhzTWSuSkJlKXZFnFA4X6k7YBD0Nv3iTspyDuIZp0H3pvZHE1YniyB2WYrWMO 3rMny+gSqU8iTMPas6ZONlgbsYdbrquiXJKQuYi+LFILaSJ3RH9WZI2Pa74dVgTy YelD2trMPIxHyprj1h1vpDiTw0OHwmZWL3ReKbm20TbMTYLdCtToV9r8TRaFom4K ZE6likeTOL/oG/e8T1YNVdH54E6HrZsmNK/NaXx7fk+2ZYPrhrw= -----END CERTIFICATE-----Generated at Wed Aug 6 12:29:27 2025 by rpki-client