$ rpki-client -vvf repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft File: E4C33FFA425046D044E7F503AC8065468BAF739E.mft (raw, json) Hash identifier: Qf9lXVTzV3klG3gaB22XW4p3klugoKlSY6ffdpv12cQ= Subject key identifier: EF:A4:23:9C:62:BA:5A:34:ED:77:2A:89:2C:14:5A:62:B6:0C:DD:65 Authority key identifier: E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E Certificate issuer: /CN=E4C33FFA425046D044E7F503AC8065468BAF739E Certificate serial: 382856FFA062F6BA0D25FBC5E0EB628444148917 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft Manifest number: 01AD Signing time: Tue 05 Aug 2025 12:52:04 +0000 Manifest this update: Tue 05 Aug 2025 12:47:04 +0000 Manifest next update: Fri 08 Aug 2025 23:13:04 +0000 Files and hashes: 1: 3130332e39392e32372e302f32342d3234203d3e20313530323739.roa (hash: 4oIhooNcjswOY06c5BLFSgUgdzWhNc2IjQmbzeqQDiU=) 2: E4C33FFA425046D044E7F503AC8065468BAF739E.crl (hash: e/sqqnt+aSzB78g6Qammh0Mwt2J0MhGzH6qq8LrPsTE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.crl rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 23:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:28:56:ff:a0:62:f6:ba:0d:25:fb:c5:e0:eb:62:84:44:14:89:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4C33FFA425046D044E7F503AC8065468BAF739E Validity Not Before: Aug 5 12:47:04 2025 GMT Not After : Aug 8 23:13:04 2025 GMT Subject: CN=EFA4239C62BA5A34ED772A892C145A62B60CDD65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7c:4a:de:2d:b5:bb:f1:f3:b2:a5:88:11:4d: 02:69:90:aa:78:3e:23:4c:02:df:d1:18:f9:46:f5: db:20:b1:68:f9:93:d4:94:86:df:76:1c:63:29:74: 5f:96:a4:56:74:0a:27:3c:88:0d:26:95:d9:b4:a4: a0:89:de:51:08:8a:3b:ff:9d:ae:fa:af:25:2f:c6: 9c:ad:3b:33:2b:ce:76:69:a1:13:24:ce:86:c1:5d: 7f:1a:12:05:ce:47:4e:1b:39:15:4a:12:f7:95:b2: 18:38:fa:30:df:f8:57:6d:04:29:e6:a2:8d:4a:02: b4:a7:3b:97:5e:00:bd:55:13:7f:96:3b:34:b8:61: e4:a2:de:c0:cc:05:38:c0:68:fb:f6:f2:a5:64:76: ae:92:20:49:01:bb:a9:d6:84:ec:95:ac:c1:7f:6b: 58:eb:79:4a:0c:01:02:fc:3f:20:39:cc:3c:dc:e8: 93:01:ad:c8:62:99:1b:3e:a9:01:a2:b0:b8:40:a5: ef:df:bb:3b:d5:39:7e:08:88:50:82:65:cc:52:71: a4:90:42:ae:2a:4f:62:53:74:70:4e:ed:57:bd:ef: bc:3a:26:c2:cd:a9:60:aa:f3:e5:9b:28:d8:33:5d: 8c:d0:70:64:c1:3a:ab:38:3f:d4:84:b4:77:18:83: ec:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A4:23:9C:62:BA:5A:34:ED:77:2A:89:2C:14:5A:62:B6:0C:DD:65 X509v3 Authority Key Identifier: keyid:E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:6a:bd:e1:b1:8e:ab:92:84:74:93:4b:c6:a9:ad:08:f3:94: 21:0e:89:9a:9b:9b:7f:c6:35:36:aa:10:cc:50:a9:6e:32:83: e3:b8:cb:e8:95:6a:04:5a:83:76:72:b9:3f:c5:ba:e4:5e:6c: 99:64:e2:5b:14:da:83:80:a2:7a:07:17:88:57:44:87:74:63: 1a:26:c8:b3:ed:4c:d1:70:7a:c3:11:8b:bc:bc:98:f5:29:5e: 13:51:60:34:e2:1a:d5:c5:e1:22:e8:76:e8:61:93:58:dd:6a: f3:45:e3:57:76:b2:6e:f0:9c:80:a4:94:a5:ff:35:77:70:57: 5f:ba:be:a2:50:28:22:eb:53:aa:ab:c3:1b:02:65:29:04:6a: 85:a1:71:75:aa:49:b6:e7:b9:1c:f9:b8:41:11:6b:66:1b:5d: 4a:8a:3e:12:39:29:4a:9f:6c:56:12:a0:ce:01:c8:42:f3:c4: 0d:3c:93:db:09:7b:57:00:89:e6:39:99:f5:6a:80:87:3c:b9: 0a:86:f9:9b:94:1d:c8:dd:47:36:2c:23:7d:cf:c0:8f:41:31: 9c:f1:a4:e6:be:d8:be:bf:be:10:e9:f7:37:cd:eb:2e:1b:44: 3f:a9:be:83:85:92:9d:10:89:d8:d3:76:bb:6e:6a:29:84:ff: ac:9e:37:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOChW/6Bi9roNJfvF4OtihEQUiRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1NDY4 QkFGNzM5RTAeFw0yNTA4MDUxMjQ3MDRaFw0yNTA4MDgyMzEzMDRaMDMxMTAvBgNV BAMTKEVGQTQyMzlDNjJCQTVBMzRFRDc3MkE4OTJDMTQ1QTYyQjYwQ0RENjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCefEreLbW78fOypYgRTQJpkKp4 PiNMAt/RGPlG9dsgsWj5k9SUht92HGMpdF+WpFZ0Cic8iA0mldm0pKCJ3lEIijv/ na76ryUvxpytOzMrznZpoRMkzobBXX8aEgXOR04bORVKEveVshg4+jDf+FdtBCnm oo1KArSnO5deAL1VE3+WOzS4YeSi3sDMBTjAaPv28qVkdq6SIEkBu6nWhOyVrMF/ a1jreUoMAQL8PyA5zDzc6JMBrchimRs+qQGisLhApe/fuzvVOX4IiFCCZcxScaSQ Qq4qT2JTdHBO7Ve977w6JsLNqWCq8+WbKNgzXYzQcGTBOqs4P9SEtHcYg+x9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU76QjnGK6WjTtdyqJLBRaYrYM3WUwHwYDVR0j BBgwFoAU5MM/+kJQRtBE5/UDrIBlRouvc54wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDk3NmUyNi05NTEzLTQ4ZmYtOWY3Zi1lYTNmZGNmM2UyZTgvMC9FNEMzM0ZGQTQy NTA0NkQwNDRFN0Y1MDNBQzgwNjU0NjhCQUY3MzlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1NDY4QkFG NzM5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA5NzZlMjYtOTUxMy00OGZmLTlm N2YtZWEzZmRjZjNlMmU4LzAvRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1 NDY4QkFGNzM5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIpqveGxjquShHSTS8aprQjzlCEOiZqbm3/G NTaqEMxQqW4yg+O4y+iVagRag3ZyuT/FuuRebJlk4lsU2oOAonoHF4hXRId0Yxom yLPtTNFwesMRi7y8mPUpXhNRYDTiGtXF4SLoduhhk1jdavNF41d2sm7wnICklKX/ NXdwV1+6vqJQKCLrU6qrwxsCZSkEaoWhcXWqSbbnuRz5uEERa2YbXUqKPhI5KUqf bFYSoM4ByELzxA08k9sJe1cAieY5mfVqgIc8uQqG+ZuUHcjdRzYsI33PwI9BMZzx pOa+2L6/vhDp9zfN6y4bRD+pvoOFkp0QidjTdrtuaimE/6yeNwk= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:07 2025 by rpki-client