$ rpki-client -vvf repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft File: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft (raw, json) Hash identifier: HRs3iv6vacqlVy893Cb0z9aeW0pCQ/pF4xOIPUn1Y9I= Subject key identifier: E8:AB:9A:42:A2:63:D9:7C:49:F5:FF:99:98:26:2E:37:6B:28:9C:B7 Authority key identifier: E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE Certificate issuer: /CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE Certificate serial: 0EC33799B454CFCB7B7522190AD141C45F667B26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft Manifest number: 021A Signing time: Thu 07 Aug 2025 12:50:57 +0000 Manifest this update: Thu 07 Aug 2025 12:45:57 +0000 Manifest next update: Sun 10 Aug 2025 19:50:57 +0000 Files and hashes: 1: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl (hash: q+gj4/v9oid471t3oi4QuPSx3qNpSHS9Jz+Mkloa+sI=) 2: 3130332e3137322e3139342e302f32332d3233203d3e20313437303735.roa (hash: xYxxyrQkuQeP1ZXr19Z8s6G5oCtciWVbaGSbTT9Dbxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 19:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:c3:37:99:b4:54:cf:cb:7b:75:22:19:0a:d1:41:c4:5f:66:7b:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE Validity Not Before: Aug 7 12:45:57 2025 GMT Not After : Aug 10 19:50:57 2025 GMT Subject: CN=E8AB9A42A263D97C49F5FF9998262E376B289CB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f2:5b:55:fc:bc:14:cb:8e:22:9b:66:ff:69: 17:76:0c:4e:80:aa:29:c7:de:0c:f6:1e:44:65:5e: 7d:fe:17:26:5b:47:10:87:f6:c8:13:90:95:94:98: 46:6e:50:34:b0:84:fe:f8:a5:5e:ca:db:aa:6c:5e: 04:ae:6b:0a:34:d7:73:8c:32:54:e3:fa:31:e0:8c: d0:be:80:fc:50:df:e1:d0:6b:5f:bc:e3:ab:e6:71: 8d:e8:93:7a:d7:04:87:db:d5:4c:d3:ea:d0:50:b9: 21:ff:dd:4e:14:d8:90:30:e5:54:50:f1:a0:f7:67: a2:10:5e:f4:ff:86:20:1c:76:b4:b8:d0:8e:40:b6: e2:8a:fa:2a:23:7a:e3:36:7d:82:f5:56:7e:ae:86: fb:18:b3:1b:af:75:ff:25:ff:f3:26:06:7a:49:39: 6a:8a:c7:48:45:b0:79:e7:a6:dc:fb:bf:54:5e:2a: 3e:38:4b:87:57:72:70:b9:34:da:25:8f:c8:17:7f: bf:39:b7:43:61:a9:9c:b0:f7:89:72:85:49:d2:30: 62:9d:ce:9a:9a:59:e3:fc:8a:d9:7b:13:0e:bb:d7: 7a:20:77:c3:42:1d:87:d5:30:7e:61:e6:79:1e:c2: a8:4c:cb:ef:8c:47:e0:de:14:0c:44:bc:44:f7:c3: 08:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AB:9A:42:A2:63:D9:7C:49:F5:FF:99:98:26:2E:37:6B:28:9C:B7 X509v3 Authority Key Identifier: keyid:E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:aa:0d:ae:14:1b:18:14:3f:c1:ac:87:32:e2:1e:56:3d:36: 32:8f:7a:6c:d5:53:5a:bc:26:e6:83:09:ce:1e:aa:59:f2:76: c3:b1:ce:e3:af:62:0d:1e:9a:bc:5b:e9:21:1e:54:00:32:e6: 4e:56:39:cd:95:a0:0f:23:d1:15:f9:98:44:89:91:9d:a9:f5: 41:6c:9b:49:08:0f:b3:43:af:18:c6:76:ee:fd:0c:e7:82:d6: e9:1a:87:e2:7f:4a:6a:01:4b:b6:3f:f1:c6:86:22:07:c8:66: ed:2d:d7:2b:87:16:f6:e4:88:06:b6:9f:67:b0:17:78:70:30: 37:74:2d:c7:9e:6e:0f:d0:5e:ae:19:05:51:3b:a1:65:e0:4c: 6a:e5:fb:1b:2e:b5:8f:00:37:7c:3a:d1:22:43:9d:1d:f2:6a: 1a:2c:f7:13:f7:cc:0b:bd:09:3e:7c:6c:bd:12:48:67:25:49: c5:26:f2:80:36:c3:31:f9:81:21:0e:a0:db:b0:f7:15:41:2f: 1f:23:d7:85:de:73:36:2b:61:f8:fb:db:85:60:6c:a1:b2:91: 69:16:20:41:5b:9f:1c:67:98:bb:8d:a5:22:52:70:db:99:12: fd:b0:02:55:da:d3:f9:27:e7:64:34:0f:7a:80:26:cb:6e:19: 82:6c:99:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDsM3mbRUz8t7dSIZCtFBxF9meyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3 QjJBRTRCRTAeFw0yNTA4MDcxMjQ1NTdaFw0yNTA4MTAxOTUwNTdaMDMxMTAvBgNV BAMTKEU4QUI5QTQyQTI2M0Q5N0M0OUY1RkY5OTk4MjYyRTM3NkIyODlDQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO8ltV/LwUy44im2b/aRd2DE6A qinH3gz2HkRlXn3+FyZbRxCH9sgTkJWUmEZuUDSwhP74pV7K26psXgSuawo013OM MlTj+jHgjNC+gPxQ3+HQa1+846vmcY3ok3rXBIfb1UzT6tBQuSH/3U4U2JAw5VRQ 8aD3Z6IQXvT/hiAcdrS40I5AtuKK+iojeuM2fYL1Vn6uhvsYsxuvdf8l//MmBnpJ OWqKx0hFsHnnptz7v1ReKj44S4dXcnC5NNolj8gXf785t0NhqZyw94lyhUnSMGKd zpqaWeP8itl7Ew6713ogd8NCHYfVMH5h5nkewqhMy++MR+DeFAxEvET3wwghAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6KuaQqJj2XxJ9f+ZmCYuN2sonLcwHwYDVR0j BBgwFoAU5IY04db7LooGpIgltNfuxHsq5L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2VjMmNiNi0zNWFkLTQxMDEtOTgyZS0yZTM0ZDU2NmVmZGEvMC9FNDg2MzRFMUQ2 RkIyRThBMDZBNDg4MjVCNEQ3RUVDNDdCMkFFNEJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3QjJB RTRCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNlYzJjYjYtMzVhZC00MTAxLTk4 MmUtMmUzNGQ1NjZlZmRhLzAvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VF QzQ3QjJBRTRCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiqDa4UGxgUP8GshzLiHlY9NjKPemzVU1q8 JuaDCc4eqlnydsOxzuOvYg0emrxb6SEeVAAy5k5WOc2VoA8j0RX5mESJkZ2p9UFs m0kID7NDrxjGdu79DOeC1ukah+J/SmoBS7Y/8caGIgfIZu0t1yuHFvbkiAa2n2ew F3hwMDd0Lceebg/QXq4ZBVE7oWXgTGrl+xsutY8AN3w60SJDnR3yahos9xP3zAu9 CT58bL0SSGclScUm8oA2wzH5gSEOoNuw9xVBLx8j14XeczYrYfj724VgbKGykWkW IEFbnxxnmLuNpSJScNuZEv2wAlXa0/kn52Q0D3qAJstuGYJsmfU= -----END CERTIFICATE-----Generated at Sat Aug 9 20:47:45 2025 by rpki-client