$ rpki-client -vvf repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft File: E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft (raw, json) Hash identifier: xqBUQ71Dj4AX3qeStnD9Yjh7myOGo8dIZs55r0Ft+U0= Subject key identifier: 9C:1A:91:B9:83:7A:C7:C0:AB:B9:CD:30:32:E9:CC:C7:99:E6:F5:CB Authority key identifier: E1:A2:4B:09:8E:9A:C0:7C:65:8F:6A:FE:E0:99:07:51:CD:B6:92:A4 Certificate issuer: /CN=E1A24B098E9AC07C658F6AFEE0990751CDB692A4 Certificate serial: 6A11E51E353E1F64C9A7686ED94D143F88E1A8D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft Manifest number: 02AF Signing time: Sat 09 Aug 2025 10:21:28 +0000 Manifest this update: Sat 09 Aug 2025 10:16:28 +0000 Manifest next update: Tue 12 Aug 2025 11:51:28 +0000 Files and hashes: 1: E1A24B098E9AC07C658F6AFEE0990751CDB692A4.crl (hash: Si88o+SE2IIJ5LXw8Bli9wrvKufLZzj+8O5ZRYPRFEo=) 2: 3130332e3230332e37392e302f32342d3234203d3e20313334363230.roa (hash: 5lSAfhj3GmV5N5rxZTfCvtvsl+6ptfLew1sFCpnyjDk=) 3: 3130332e3230332e37362e302f32342d3234203d3e20313334363230.roa (hash: HRJAjVco4wIYsKRbuAUQNgm8bG2jFw6sl9TJnehlao0=) 4: 3130332e3230332e37382e302f32342d3234203d3e20313334363230.roa (hash: 9S8Hab+C+7s4q0CA4zayu/dByexmy88UzDOs+RZmtOs=) 5: 3130332e3230332e37362e302f32322d3232203d3e20313334363230.roa (hash: YqWb08XU4Ju7/nGoQJo+q2RiYjqzpe+bq60/2z57A5Q=) 6: 3130332e3230332e37372e302f32342d3234203d3e20313334363230.roa (hash: 0VdjtLo1xUnDKpM3htIEr490C2svqFG92AsZbj9kqUE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.crl rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 11:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:11:e5:1e:35:3e:1f:64:c9:a7:68:6e:d9:4d:14:3f:88:e1:a8:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A24B098E9AC07C658F6AFEE0990751CDB692A4 Validity Not Before: Aug 9 10:16:28 2025 GMT Not After : Aug 12 11:51:28 2025 GMT Subject: CN=9C1A91B9837AC7C0ABB9CD3032E9CCC799E6F5CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fa:c9:c4:a0:bd:29:d8:fa:fc:ba:a4:d4:a9: d4:db:b0:0d:21:8f:06:c8:05:b2:41:c6:f8:99:49: de:a5:39:a2:c7:55:c9:94:9b:ed:c2:98:ef:7c:bc: d5:d7:89:b3:70:26:49:86:86:96:c5:cf:20:c4:02: c3:94:98:e3:b2:5f:e7:e9:d7:82:49:4d:a1:de:50: 82:b5:66:70:f6:b3:c0:04:94:9d:e3:03:94:67:0e: d5:be:0f:8f:4d:3b:55:b0:c0:eb:79:8b:92:e4:0d: 1c:89:6e:b1:3b:3a:31:00:34:1a:4c:c5:62:60:f1: 45:67:cb:d2:b5:7e:53:b6:a7:0e:a5:47:6c:4f:f6: 42:8a:44:88:85:a3:44:9e:93:4f:4e:64:2a:ab:d6: 8f:a3:ce:fb:31:73:ff:09:47:12:48:b7:d6:1f:52: bf:ba:2d:44:5b:a3:fa:cf:e2:93:64:89:ad:a0:1b: 43:f2:34:5f:a5:90:bb:b9:ea:52:21:37:a1:b7:85: 8d:36:a9:dd:b1:ad:c1:d4:07:4c:96:86:a3:0c:de: 48:dd:3a:40:45:bf:88:32:f4:4c:3a:0a:91:86:66: 40:f5:d5:0a:79:4f:17:89:89:56:f7:c0:bf:6a:80: 51:79:59:f9:0a:29:18:f6:44:fc:ef:d5:06:c9:ba: 0b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:1A:91:B9:83:7A:C7:C0:AB:B9:CD:30:32:E9:CC:C7:99:E6:F5:CB X509v3 Authority Key Identifier: keyid:E1:A2:4B:09:8E:9A:C0:7C:65:8F:6A:FE:E0:99:07:51:CD:B6:92:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ef:dc:8c:44:52:18:9a:b3:62:48:0e:57:84:4f:f5:2a:33: c4:e0:7c:c4:76:5b:e8:74:93:40:3e:7d:9d:9a:ea:7e:a6:8a: fe:ca:7b:35:80:17:0d:e2:34:a8:93:f2:72:f7:22:15:dd:d8: 3c:15:f2:4b:e0:27:16:1c:27:8f:fa:72:57:31:3a:97:d5:69: c1:c1:6e:6a:a8:e1:48:89:8a:c3:13:64:7b:b1:ea:7e:3b:bf: ad:f2:ab:85:c3:ba:20:c4:30:2b:88:7d:29:c7:67:1d:ef:71: c6:9e:3d:18:c0:c2:c4:ae:be:a8:eb:f0:85:bb:5f:79:6f:cd: 1c:34:32:75:dd:6b:c6:81:77:cd:a7:43:7c:8e:2d:59:e6:4e: 11:92:73:0f:51:19:27:73:e8:0e:4d:7b:53:61:0d:3a:c4:45: 98:a7:d5:d4:dd:c3:f2:a4:ad:4b:d2:3f:2b:b8:ce:62:dc:b8: 23:94:69:9c:38:47:af:f1:95:6c:6f:d3:67:75:78:3b:58:2e: eb:a2:f4:6f:63:e4:30:0c:3b:e6:f3:0f:05:a7:df:2d:7b:4f: 6b:5b:66:da:c0:6b:28:61:bc:d6:ce:ba:77:1e:5e:6d:fd:21: 45:3f:91:21:5d:b4:59:df:db:96:c1:38:11:16:13:5d:b0:d4: 2d:c5:0d:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUahHlHjU+H2TJp2hu2U0UP4jhqNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFBMjRCMDk4RTlBQzA3QzY1OEY2QUZFRTA5OTA3NTFD REI2OTJBNDAeFw0yNTA4MDkxMDE2MjhaFw0yNTA4MTIxMTUxMjhaMDMxMTAvBgNV BAMTKDlDMUE5MUI5ODM3QUM3QzBBQkI5Q0QzMDMyRTlDQ0M3OTlFNkY1Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY+snEoL0p2Pr8uqTUqdTbsA0h jwbIBbJBxviZSd6lOaLHVcmUm+3CmO98vNXXibNwJkmGhpbFzyDEAsOUmOOyX+fp 14JJTaHeUIK1ZnD2s8AElJ3jA5RnDtW+D49NO1WwwOt5i5LkDRyJbrE7OjEANBpM xWJg8UVny9K1flO2pw6lR2xP9kKKRIiFo0Sek09OZCqr1o+jzvsxc/8JRxJIt9Yf Ur+6LURbo/rP4pNkia2gG0PyNF+lkLu56lIhN6G3hY02qd2xrcHUB0yWhqMM3kjd OkBFv4gy9Ew6CpGGZkD11Qp5TxeJiVb3wL9qgFF5WfkKKRj2RPzv1QbJugvjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnBqRuYN6x8Cruc0wMunMx5nm9cswHwYDVR0j BBgwFoAU4aJLCY6awHxlj2r+4JkHUc22kqQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZGFhNGMwZi05OTkyLTQyZmMtYTU0Mi1lZmY3NDA5MWIzMzQvMC9FMUEyNEIwOThF OUFDMDdDNjU4RjZBRkVFMDk5MDc1MUNEQjY5MkE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFBMjRCMDk4RTlBQzA3QzY1OEY2QUZFRTA5OTA3NTFDREI2 OTJBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGRhYTRjMGYtOTk5Mi00MmZjLWE1 NDItZWZmNzQwOTFiMzM0LzAvRTFBMjRCMDk4RTlBQzA3QzY1OEY2QUZFRTA5OTA3 NTFDREI2OTJBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3v3IxEUhias2JIDleET/UqM8TgfMR2W+h0 k0A+fZ2a6n6miv7KezWAFw3iNKiT8nL3IhXd2DwV8kvgJxYcJ4/6clcxOpfVacHB bmqo4UiJisMTZHux6n47v63yq4XDuiDEMCuIfSnHZx3vccaePRjAwsSuvqjr8IW7 X3lvzRw0MnXda8aBd82nQ3yOLVnmThGScw9RGSdz6A5Ne1NhDTrERZin1dTdw/Kk rUvSPyu4zmLcuCOUaZw4R6/xlWxv02d1eDtYLuui9G9j5DAMO+bzDwWn3y17T2tb ZtrAayhhvNbOunceXm39IUU/kSFdtFnf25bBOBEWE12w1C3FDc8= -----END CERTIFICATE-----Generated at Sun Aug 10 15:59:19 2025 by rpki-client