$ rpki-client -vvf repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft File: E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft (raw, json) Hash identifier: 5xDZD/l9ENx8FVphBIhA86/kawXvWcGxSLajQXjcVJ8= Subject key identifier: 34:BA:D7:DD:88:0D:B9:85:73:E5:14:A2:D0:58:EF:6D:5B:8C:90:5D Authority key identifier: E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A Certificate issuer: /CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A Certificate serial: 2B6E2D7A15FC783C705059FF86D1D963553619A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft Manifest number: 043C Signing time: Thu 07 Aug 2025 15:11:49 +0000 Manifest this update: Thu 07 Aug 2025 15:06:49 +0000 Manifest next update: Mon 11 Aug 2025 01:28:49 +0000 Files and hashes: 1: 3130332e3134382e32392e302f32342d3234203d3e20313430303132.roa (hash: 5eC7/I40aczbOTzlYXr05tpa3jo1C0J9l1xBueSDuOI=) 2: 323430353a633934303a3a2f33322d3332203d3e20313430303132.roa (hash: 0Ch00VaMiPntZrLpBaDMR1Y+kpCG3oxMGYz3YYRWkbY=) 3: E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl (hash: 8+kcndc/JVN4HXb3zNsc7/qgfP/qGwr7UsDnNE1Cyks=) 4: 3130332e3134382e32382e302f32342d3234203d3e20313430303132.roa (hash: +QupJ1EZByI+g6S06PODORTdzbTVZh4a1MkmGIToh1c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 01:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:6e:2d:7a:15:fc:78:3c:70:50:59:ff:86:d1:d9:63:55:36:19:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A Validity Not Before: Aug 7 15:06:49 2025 GMT Not After : Aug 11 01:28:49 2025 GMT Subject: CN=34BAD7DD880DB98573E514A2D058EF6D5B8C905D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:66:8e:c9:c5:03:dc:c6:90:4c:c3:97:9b:37: d8:78:96:02:b1:f9:8d:fe:7c:bd:1a:e2:52:ac:9d: b8:bc:0a:1b:f3:6b:ce:09:eb:90:5e:d4:8a:c3:1d: fe:d2:fa:6c:5a:6e:93:85:c3:b7:83:9b:02:ad:87: 42:44:95:55:91:a9:d4:41:f8:0f:8f:82:70:4c:1e: c6:3b:0f:3f:98:30:86:6b:aa:c5:c2:fd:b3:a7:e8: c3:b1:eb:38:d1:2e:89:ed:9e:ba:78:81:2c:19:7a: fc:87:04:06:cc:4d:9b:c9:3b:74:25:d2:f5:51:4b: 8b:27:6f:c4:2a:6c:fd:0b:28:b3:21:fc:f0:64:b0: 0a:2f:54:ff:60:45:ae:00:80:39:e9:50:ef:32:2b: e8:16:ee:b0:7c:d5:93:61:01:0c:4a:92:bf:15:40: 6a:d3:d7:15:7f:f9:a5:87:f4:be:2a:c4:03:b0:fb: e0:a0:ed:82:21:27:37:83:3f:39:b3:7d:1f:b3:a7: 6f:a8:41:c0:57:a8:fa:84:37:c9:f0:f2:5f:71:33: 99:45:1c:58:f2:a2:c8:3c:a7:e7:43:3a:79:e9:6e: 98:d9:e4:fa:95:a6:4a:c6:71:4b:30:0f:c0:a7:05: c3:de:4b:02:59:f4:97:2e:de:67:0b:28:f2:b9:fe: 87:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:BA:D7:DD:88:0D:B9:85:73:E5:14:A2:D0:58:EF:6D:5B:8C:90:5D X509v3 Authority Key Identifier: keyid:E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ed:4b:63:07:f6:f8:9f:24:dd:81:27:ea:2e:ee:da:2b:f7: 66:6c:26:ba:43:ea:54:0b:f0:5f:46:ca:86:0f:8e:24:ea:f9: 78:84:e9:6e:58:09:36:c8:b6:f8:10:eb:3b:43:82:7e:21:a6: 99:f2:7d:85:f9:c9:10:9c:64:a8:71:38:e7:ab:c2:93:b6:6c: 69:15:a6:4f:7d:dd:60:b2:41:fa:e7:94:5f:7e:3b:a6:e4:e8: a9:21:c1:1d:bd:b9:df:40:14:42:a2:58:91:9d:56:1e:c5:c9: 62:c7:5c:3e:12:a8:9d:95:1e:eb:2c:61:e4:26:31:b2:e8:e5: 5d:fa:cb:60:69:5f:89:90:86:3b:5c:c1:7c:23:97:16:81:57: 3f:35:9c:52:da:ba:07:97:79:b8:ad:b6:45:d8:1e:20:fa:b2: d8:87:52:5f:94:c6:3d:fc:4d:40:75:6b:93:b6:0b:53:80:bf: a4:c2:ec:f7:7b:98:2c:79:d9:83:46:1b:fa:53:25:f1:1c:1e: f0:16:95:45:7e:65:46:8b:04:ed:95:cf:25:e4:64:ad:2c:eb: ab:33:77:51:40:f9:e1:58:91:52:fe:a1:4d:3f:cc:86:4f:79: 91:10:b7:3c:c6:98:d6:fa:38:f0:de:36:15:8f:f0:ec:da:37: ac:9b:c4:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK24tehX8eDxwUFn/htHZY1U2GaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEyOTM2 QjkxMTY1QTAeFw0yNTA4MDcxNTA2NDlaFw0yNTA4MTEwMTI4NDlaMDMxMTAvBgNV BAMTKDM0QkFEN0REODgwREI5ODU3M0U1MTRBMkQwNThFRjZENUI4QzkwNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsZo7JxQPcxpBMw5ebN9h4lgKx +Y3+fL0a4lKsnbi8Chvza84J65Be1IrDHf7S+mxabpOFw7eDmwKth0JElVWRqdRB +A+PgnBMHsY7Dz+YMIZrqsXC/bOn6MOx6zjRLontnrp4gSwZevyHBAbMTZvJO3Ql 0vVRS4snb8QqbP0LKLMh/PBksAovVP9gRa4AgDnpUO8yK+gW7rB81ZNhAQxKkr8V QGrT1xV/+aWH9L4qxAOw++Cg7YIhJzeDPzmzfR+zp2+oQcBXqPqEN8nw8l9xM5lF HFjyosg8p+dDOnnpbpjZ5PqVpkrGcUswD8CnBcPeSwJZ9Jcu3mcLKPK5/oeJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNLrX3YgNuYVz5RSi0FjvbVuMkF0wHwYDVR0j BBgwFoAU4XNX5B82RNE+vHxLJbiik2uRFlowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmFjOWU2My05ODkwLTQyMmUtODhkYy03Y2I2ZGRhYzIyZmEvMC9FMTczNTdFNDFG MzY0NEQxM0VCQzdDNEIyNUI4QTI5MzZCOTExNjVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEyOTM2Qjkx MTY1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJhYzllNjMtOTg5MC00MjJlLTg4 ZGMtN2NiNmRkYWMyMmZhLzAvRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEy OTM2QjkxMTY1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHtS2MH9vifJN2BJ+ou7tor92ZsJrpD6lQL 8F9GyoYPjiTq+XiE6W5YCTbItvgQ6ztDgn4hppnyfYX5yRCcZKhxOOerwpO2bGkV pk993WCyQfrnlF9+O6bk6KkhwR29ud9AFEKiWJGdVh7FyWLHXD4SqJ2VHussYeQm MbLo5V36y2BpX4mQhjtcwXwjlxaBVz81nFLaugeXebittkXYHiD6stiHUl+Uxj38 TUB1a5O2C1OAv6TC7Pd7mCx52YNGG/pTJfEcHvAWlUV+ZUaLBO2VzyXkZK0s66sz d1FA+eFYkVL+oU0/zIZPeZEQtzzGmNb6OPDeNhWP8OzaN6ybxNk= -----END CERTIFICATE-----Generated at Sat Aug 9 02:46:11 2025 by rpki-client