$ rpki-client -vvf repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft File: E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft (raw, json) Hash identifier: wurQltlV7ZOYh2U26YUaeY6tRZpJrpfHJc1CbrbiAsE= Subject key identifier: CE:E8:61:D0:8A:BD:26:E6:4B:79:67:A9:BD:F7:F7:DC:DE:4C:8F:F2 Authority key identifier: E8:2A:E8:B6:91:C7:C5:3E:1C:E0:B3:96:D8:97:57:47:F1:56:04:D5 Certificate issuer: /CN=E82AE8B691C7C53E1CE0B396D8975747F15604D5 Certificate serial: 2A00AF5D4C5399E6054C2C0CFB1116EBA01ADEAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft Manifest number: 01F1 Signing time: Sat 09 Aug 2025 22:30:58 +0000 Manifest this update: Sat 09 Aug 2025 22:25:58 +0000 Manifest next update: Wed 13 Aug 2025 06:42:58 +0000 Files and hashes: 1: 3130332e3137362e3235322e302f32332d3234203d3e20313437313433.roa (hash: 0eR/sossty6R9CW6sl77Vt0ZhuUxrN0f/0JSjyj94i0=) 2: E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl (hash: /ZXSvQdcHi5ZVPJEpmTC+36/XZx8UNeDpNZSV+rbp24=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 06:42:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:00:af:5d:4c:53:99:e6:05:4c:2c:0c:fb:11:16:eb:a0:1a:de:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E82AE8B691C7C53E1CE0B396D8975747F15604D5 Validity Not Before: Aug 9 22:25:58 2025 GMT Not After : Aug 13 06:42:58 2025 GMT Subject: CN=CEE861D08ABD26E64B7967A9BDF7F7DCDE4C8FF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0e:64:96:2e:97:f6:18:07:14:4b:0d:57:c2: 64:6d:6c:17:11:b8:3f:2d:09:65:57:a7:28:a1:f9: db:74:a2:32:c2:9c:93:5d:22:2d:4c:10:85:cc:42: 0b:94:f6:a5:22:09:ca:58:98:7d:90:94:2d:71:9b: e4:50:d7:f3:b3:61:5e:82:9e:73:75:91:b7:89:ee: 7b:90:6c:ab:11:2d:1c:14:94:b4:21:68:fe:8c:08: 7f:27:00:38:de:56:55:b0:2e:3b:ab:bf:7a:b9:5c: a9:9e:e3:f7:e4:19:61:44:0d:ff:16:ec:75:d7:66: 0f:9b:b6:bc:dd:50:f9:2f:09:bd:25:b5:5d:ce:4e: c7:e1:09:22:cd:b0:f8:69:05:d9:4b:e8:0f:91:19: 10:bc:d0:d4:d1:89:8d:81:7a:fc:83:c1:0e:c2:ba: 91:ba:ed:13:16:95:8d:12:9f:d5:6e:54:45:28:74: 7a:b7:75:5f:7a:45:0e:55:0a:2e:7b:ca:aa:00:89: 8a:f8:90:7d:3e:27:2c:08:3d:33:01:b4:07:46:e0: 4b:95:f3:a2:70:38:17:c3:f3:45:42:cb:61:99:3b: c0:f6:b1:29:6c:7b:1d:39:84:84:87:c9:ce:7a:b1: 7e:be:17:ae:b9:82:1f:03:b3:e3:6f:61:74:3e:2c: 2a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E8:61:D0:8A:BD:26:E6:4B:79:67:A9:BD:F7:F7:DC:DE:4C:8F:F2 X509v3 Authority Key Identifier: keyid:E8:2A:E8:B6:91:C7:C5:3E:1C:E0:B3:96:D8:97:57:47:F1:56:04:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b0:3e:1b:93:cf:99:d9:1e:c2:81:4a:cb:22:64:7e:76:3e: b0:bb:4f:c0:6f:68:27:2b:af:d7:94:21:38:ce:94:6f:b2:76: b3:7b:83:b4:65:2c:f5:12:de:cc:f9:8c:00:ea:65:91:51:eb: 7d:09:d6:f3:cb:ce:1d:90:2d:f7:06:cb:1a:8d:9c:cb:3a:25: 4a:95:6d:4b:20:a0:8e:c8:9e:4f:08:00:b2:d7:11:33:b3:ad: 0a:ec:79:c6:ce:6c:46:8b:96:c8:be:28:27:98:9a:93:a0:1f: c5:07:ac:32:a6:c6:31:dc:ac:52:16:68:15:34:f4:38:03:bd: ac:79:16:43:21:32:7f:9f:91:d7:a5:5b:07:cb:40:84:86:fa: 2b:50:04:92:7a:48:67:2e:38:92:75:11:15:a8:50:a7:58:4c: 64:0a:a6:4f:fd:1b:03:e9:9f:15:d2:47:5c:21:33:5f:8b:a7: ae:d1:00:5a:d3:d2:e5:4f:54:47:08:bd:41:0b:5d:d5:87:88: 1a:1c:0e:70:bc:07:22:7e:61:17:0b:a7:37:35:c8:f0:10:c7: 4f:0d:da:8d:ee:ed:d0:de:0d:4f:c0:18:f0:f2:3d:f9:ae:f3: c9:60:8e:bc:6c:56:de:b2:81:64:f8:27:3c:60:69:e2:2f:0e: 4c:ae:12:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKgCvXUxTmeYFTCwM+xEW66Aa3q4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3NDdG MTU2MDRENTAeFw0yNTA4MDkyMjI1NThaFw0yNTA4MTMwNjQyNThaMDMxMTAvBgNV BAMTKENFRTg2MUQwOEFCRDI2RTY0Qjc5NjdBOUJERjdGN0RDREU0QzhGRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxDmSWLpf2GAcUSw1XwmRtbBcR uD8tCWVXpyih+dt0ojLCnJNdIi1MEIXMQguU9qUiCcpYmH2QlC1xm+RQ1/OzYV6C nnN1kbeJ7nuQbKsRLRwUlLQhaP6MCH8nADjeVlWwLjurv3q5XKme4/fkGWFEDf8W 7HXXZg+btrzdUPkvCb0ltV3OTsfhCSLNsPhpBdlL6A+RGRC80NTRiY2BevyDwQ7C upG67RMWlY0Sn9VuVEUodHq3dV96RQ5VCi57yqoAiYr4kH0+JywIPTMBtAdG4EuV 86JwOBfD80VCy2GZO8D2sSlsex05hISHyc56sX6+F665gh8Ds+NvYXQ+LCrxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzuhh0Iq9JuZLeWepvff33N5Mj/IwHwYDVR0j BBgwFoAU6CrotpHHxT4c4LOW2JdXR/FWBNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWZmYjQzYi1mOGI1LTRmMWYtOWI4Zi01YjAyZGRiYjZmY2YvMC9FODJBRThCNjkx QzdDNTNFMUNFMEIzOTZEODk3NTc0N0YxNTYwNEQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3NDdGMTU2 MDRENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTlmZmI0M2ItZjhiNS00ZjFmLTli OGYtNWIwMmRkYmI2ZmNmLzAvRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3 NDdGMTU2MDRENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2wPhuTz5nZHsKBSssiZH52PrC7T8BvaCcr r9eUITjOlG+ydrN7g7RlLPUS3sz5jADqZZFR630J1vPLzh2QLfcGyxqNnMs6JUqV bUsgoI7Ink8IALLXETOzrQrsecbObEaLlsi+KCeYmpOgH8UHrDKmxjHcrFIWaBU0 9DgDvax5FkMhMn+fkdelWwfLQISG+itQBJJ6SGcuOJJ1ERWoUKdYTGQKpk/9GwPp nxXSR1whM1+Lp67RAFrT0uVPVEcIvUELXdWHiBocDnC8ByJ+YRcLpzc1yPAQx08N 2o3u7dDeDU/AGPDyPfmu88lgjrxsVt6ygWT4JzxgaeIvDkyuEiU= -----END CERTIFICATE-----Generated at Mon Aug 11 07:47:07 2025 by rpki-client