$ rpki-client -vvf repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft File: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft (raw, json) Hash identifier: wTEEgXpyqBTLkZm7IsEly80aC8NimP/tqeA6GGNsNI0= Subject key identifier: 3E:10:15:2E:97:3E:DA:80:C2:B0:4A:39:DC:DE:E7:BB:9C:2D:DF:92 Authority key identifier: E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 Certificate issuer: /CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Certificate serial: 381D9733FB23CAB7643A79A6847A729E68444302 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft Manifest number: F1 Signing time: Wed 06 Aug 2025 20:51:09 +0000 Manifest this update: Wed 06 Aug 2025 20:46:09 +0000 Manifest next update: Sun 10 Aug 2025 04:37:09 +0000 Files and hashes: 1: E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl (hash: HpDQFkNCHfXb45Zsz+bAoSh1ZHdX1RzsAAnzAwXIoPw=) 2: 3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (hash: RhGN57E/ZSjGvHHK5MWz3epa97gXAk4w6YjAbvPV0fg=) 3: 3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa (hash: geAKj9+TOtyfNH9PasUiph/Br+j89slGEUwYIqBnSpQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 04:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:1d:97:33:fb:23:ca:b7:64:3a:79:a6:84:7a:72:9e:68:44:43:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943 Validity Not Before: Aug 6 20:46:09 2025 GMT Not After : Aug 10 04:37:09 2025 GMT Subject: CN=3E10152E973EDA80C2B04A39DCDEE7BB9C2DDF92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:fc:af:c6:34:17:f8:c4:ca:24:75:d0:1f:18: 04:13:fd:82:4d:84:00:1d:57:b0:fc:56:19:f9:a7: e7:0d:e0:b7:72:f3:26:2b:27:23:fb:b5:1d:72:1b: 7a:62:24:38:08:e8:70:15:89:57:54:44:a9:bb:32: 44:57:86:05:b9:52:5a:e7:d6:31:74:a2:81:d7:bb: 74:a7:ea:88:8a:03:9a:29:45:4a:a2:07:ca:a3:7f: 44:41:d9:d8:3e:71:cc:6a:ea:68:f5:33:22:63:2c: ea:4a:f5:d9:98:14:81:ea:eb:0a:0d:52:cb:50:64: c5:8e:e8:8b:db:13:c2:34:34:6f:e3:37:89:38:87: 22:c2:27:65:9d:bb:ff:e1:de:e1:60:f6:9c:52:5f: 67:be:4b:22:5d:f2:72:de:5c:51:a7:57:94:f8:18: a7:82:8f:43:5c:60:5e:6a:76:a7:da:0d:42:4b:cb: b6:75:3d:f0:5b:34:2b:94:8b:5b:84:d2:ae:92:74: 1d:dc:3c:c1:1f:99:7b:d8:72:79:45:71:dc:5e:87: ea:31:ab:2f:55:44:2d:b7:e1:a0:a1:0a:8b:e3:13: 18:45:8a:f4:93:d7:1e:70:60:51:8c:95:0d:ec:2e: 02:7c:6d:e8:f1:a9:e4:95:5d:20:69:a8:ba:3a:cd: 91:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:10:15:2E:97:3E:DA:80:C2:B0:4A:39:DC:DE:E7:BB:9C:2D:DF:92 X509v3 Authority Key Identifier: keyid:E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:9d:55:0a:cd:da:9c:a5:ed:22:38:48:9b:9c:f7:21:71:9a: b8:b3:0f:8c:df:a3:5e:83:59:00:d7:68:ba:0d:20:80:52:41: 17:f7:40:dc:58:08:a8:0d:fd:c6:68:2e:3e:e7:fd:8a:aa:70: bd:fd:56:3a:80:3f:a5:53:16:42:63:8c:67:bc:5d:df:d4:50: 7a:58:74:3c:78:07:85:8c:15:d6:23:e2:be:46:50:46:ed:d4: fc:17:e3:1c:58:b2:28:ab:12:71:1e:d1:5d:5b:e5:3a:8e:23: 18:eb:fe:c9:fd:b6:66:05:0a:01:44:a4:73:9c:b8:1d:b8:68: 77:b6:4b:c4:87:33:8f:c3:ee:77:77:60:13:f8:6f:ac:48:e1: 6d:d6:ae:09:d1:02:3e:54:bc:69:7d:4c:f9:4e:8c:c3:bc:b3: 06:49:5e:6b:f1:72:76:c1:85:c4:c3:92:82:91:fe:2e:a9:a6: 1b:42:9d:0f:2c:90:74:3e:54:7d:6b:d6:26:61:da:47:8a:72: 04:a0:2b:1d:31:75:eb:7d:a7:e1:63:69:3e:df:48:c7:bc:36: 52:ef:15:82:d9:8b:f3:2a:d5:62:b3:8e:83:c0:cc:f8:94:72: 42:4a:50:83:86:6c:87:ad:8e:e9:74:bb:54:cb:b6:30:e4:b5: d8:4c:61:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOB2XM/sjyrdkOnmmhHpynmhEQwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUz MkI4RTk0MzAeFw0yNTA4MDYyMDQ2MDlaFw0yNTA4MTAwNDM3MDlaMDMxMTAvBgNV BAMTKDNFMTAxNTJFOTczRURBODBDMkIwNEEzOURDREVFN0JCOUMyRERGOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn/K/GNBf4xMokddAfGAQT/YJN hAAdV7D8Vhn5p+cN4Ldy8yYrJyP7tR1yG3piJDgI6HAViVdURKm7MkRXhgW5Ulrn 1jF0ooHXu3Sn6oiKA5opRUqiB8qjf0RB2dg+ccxq6mj1MyJjLOpK9dmYFIHq6woN UstQZMWO6IvbE8I0NG/jN4k4hyLCJ2Wdu//h3uFg9pxSX2e+SyJd8nLeXFGnV5T4 GKeCj0NcYF5qdqfaDUJLy7Z1PfBbNCuUi1uE0q6SdB3cPMEfmXvYcnlFcdxeh+ox qy9VRC234aChCovjExhFivST1x5wYFGMlQ3sLgJ8bejxqeSVXSBpqLo6zZHhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPhAVLpc+2oDCsEo53N7nu5wt35IwHwYDVR0j BBgwFoAU4p6DwsWJf6T2zv48N+4aZTK46UMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTdjZjlhMC1lOTI3LTQ4MTQtODQ0Ny04YjNhMDAyNzYwYTgvMC9FMjlFODNDMkM1 ODk3RkE0RjZDRUZFM0MzN0VFMUE2NTMyQjhFOTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUzMkI4 RTk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk3Y2Y5YTAtZTkyNy00ODE0LTg0 NDctOGIzYTAwMjc2MGE4LzAvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFB NjUzMkI4RTk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANGdVQrN2pyl7SI4SJuc9yFxmrizD4zfo16D WQDXaLoNIIBSQRf3QNxYCKgN/cZoLj7n/YqqcL39VjqAP6VTFkJjjGe8Xd/UUHpY dDx4B4WMFdYj4r5GUEbt1PwX4xxYsiirEnEe0V1b5TqOIxjr/sn9tmYFCgFEpHOc uB24aHe2S8SHM4/D7nd3YBP4b6xI4W3WrgnRAj5UvGl9TPlOjMO8swZJXmvxcnbB hcTDkoKR/i6pphtCnQ8skHQ+VH1r1iZh2keKcgSgKx0xdet9p+FjaT7fSMe8NlLv FYLZi/Mq1WKzjoPAzPiUckJKUIOGbIetjul0u1TLtjDktdhMYT4= -----END CERTIFICATE-----Generated at Thu Aug 7 07:22:56 2025 by rpki-client