$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft File: E94D4099064713F1C3A5E211E817CFC2A40E6370.mft (raw, json) Hash identifier: 8JWJcuQJsWlx4BdFcd8d321F+AHGwXRVzkklFfWbsM4= Subject key identifier: 50:2D:CA:9F:46:BD:E1:4B:25:C1:B8:33:56:69:BF:99:BC:C3:C7:7F Authority key identifier: E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 Certificate issuer: /CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Certificate serial: 65BE7B1E28192706459CA94A451D97F44D914EDA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft Manifest number: 01AF Signing time: Thu 07 Aug 2025 17:41:29 +0000 Manifest this update: Thu 07 Aug 2025 17:36:29 +0000 Manifest next update: Mon 11 Aug 2025 03:43:29 +0000 Files and hashes: 1: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: Qay85z2tBE2gSsJ1As2R1DyRPFo67yuecJZbDwWzf5g=) 2: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: Qa9xNMpYcP+9pVUvEHAtgK4Z1jgnm3adWlqql9bkWPc=) 3: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: 3oRl4FLRpqbW8xFTv+6cj6QVd2OEB0Ox6NTFkqNqehI=) 4: E94D4099064713F1C3A5E211E817CFC2A40E6370.crl (hash: Rhe5DAfQNhsDDO+n/fhGRSuWKTQDeyEug0Qpi8S1YAg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 22:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:be:7b:1e:28:19:27:06:45:9c:a9:4a:45:1d:97:f4:4d:91:4e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Validity Not Before: Aug 7 17:36:29 2025 GMT Not After : Aug 11 03:43:29 2025 GMT Subject: CN=502DCA9F46BDE14B25C1B8335669BF99BCC3C77F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:aa:81:ca:4f:5b:2d:f7:45:07:20:9b:a9:cd: ba:60:a0:db:18:40:cf:ae:ee:c0:8d:63:aa:49:5f: ff:89:a2:00:3f:0c:db:e0:7f:2e:87:30:c1:62:ad: ee:36:16:ed:68:58:66:31:62:26:45:48:57:23:9d: de:49:50:90:0a:f6:be:9f:fe:79:ac:fc:c9:74:3d: 69:f2:48:88:67:1a:a6:72:65:c4:c3:44:4a:ef:41: 72:9a:a7:73:24:73:7b:c3:d6:13:08:4b:25:e0:f4: 0b:63:8b:24:b6:22:d8:d2:b2:72:a1:d4:da:d5:1c: d6:47:89:87:7f:0f:29:89:fb:c2:20:d9:78:1e:25: 46:aa:39:b6:ce:04:f2:02:f6:8e:46:3e:cd:13:e8: 5f:b3:d0:23:c6:0c:76:d0:c6:1b:8b:ed:db:67:df: f2:e3:a5:3d:5d:96:8a:0b:8b:f9:ef:6f:f7:78:21: 94:f9:30:69:e5:cf:e1:67:4c:63:50:e5:73:a3:5e: 3f:44:ee:d7:48:94:ab:1e:d0:11:2c:4e:ec:8f:3d: 15:50:b2:fc:2c:18:8a:e3:33:4a:cd:6c:9b:36:a4: 26:b9:f7:e9:22:11:7b:b2:69:2b:45:a1:f4:6a:7a: e5:15:fd:65:13:c1:02:bf:47:a0:65:d7:71:e8:83: ea:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2D:CA:9F:46:BD:E1:4B:25:C1:B8:33:56:69:BF:99:BC:C3:C7:7F X509v3 Authority Key Identifier: keyid:E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:5c:3d:1f:da:dc:5a:a2:ae:7d:44:65:d4:3e:ef:5a:c3:1b: 5a:e4:1d:63:d8:d5:e5:45:f9:2d:70:39:c0:84:9f:1b:9f:2a: 47:e4:38:6f:90:86:d4:21:2a:32:fc:23:c6:01:af:3b:62:0a: e9:34:a7:06:7d:67:4a:9d:3f:ce:5a:2e:5d:73:46:a0:42:41: ab:27:4b:4a:62:fa:a4:65:2a:d1:66:0d:9b:fa:1c:ba:f2:2b: 69:63:3c:79:90:68:e5:b6:ee:30:e6:bd:2f:75:c5:9d:83:47: fb:70:27:4e:f0:b4:7f:23:61:c7:ab:7f:61:9d:87:b0:13:e8: cf:d3:f3:84:8f:22:2d:04:90:d3:8d:0d:fc:ae:81:b8:57:f5: 20:ab:9f:2e:53:bc:2b:10:da:5f:94:50:a9:7d:1d:88:d4:ad: 27:a2:b4:17:30:b0:30:09:46:4c:af:fa:43:e6:7f:c2:a2:47: f5:e2:7a:b6:ec:77:d6:f1:c9:d9:42:b7:e5:bd:7f:15:3d:36: ee:52:8f:bb:17:5a:2b:5c:ba:7b:be:6e:84:1a:2f:08:a2:1f: 58:4b:d5:02:19:ba:6f:92:37:93:35:eb:f2:76:73:21:2e:cf: a1:13:25:61:ea:33:36:12:84:9f:2f:4a:a9:f8:75:b2:55:e4: 49:cc:ee:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZb57HigZJwZFnKlKRR2X9E2RTtowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJB NDBFNjM3MDAeFw0yNTA4MDcxNzM2MjlaFw0yNTA4MTEwMzQzMjlaMDMxMTAvBgNV BAMTKDUwMkRDQTlGNDZCREUxNEIyNUMxQjgzMzU2NjlCRjk5QkNDM0M3N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAqoHKT1st90UHIJupzbpgoNsY QM+u7sCNY6pJX/+JogA/DNvgfy6HMMFire42Fu1oWGYxYiZFSFcjnd5JUJAK9r6f /nms/Ml0PWnySIhnGqZyZcTDRErvQXKap3Mkc3vD1hMISyXg9AtjiyS2ItjSsnKh 1NrVHNZHiYd/DymJ+8Ig2XgeJUaqObbOBPIC9o5GPs0T6F+z0CPGDHbQxhuL7dtn 3/LjpT1dlooLi/nvb/d4IZT5MGnlz+FnTGNQ5XOjXj9E7tdIlKse0BEsTuyPPRVQ svwsGIrjM0rNbJs2pCa59+kiEXuyaStFofRqeuUV/WUTwQK/R6Bl13Hog+q/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUC3Kn0a94UslwbgzVmm/mbzDx38wHwYDVR0j BBgwFoAU6U1AmQZHE/HDpeIR6BfPwqQOY3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhZTgyZi01MzdlLTQ2MjYtYmU5ZS0zMzM5NGEyZGM5NjkvMC9FOTRENDA5OTA2 NDcxM0YxQzNBNUUyMTFFODE3Q0ZDMkE0MEU2MzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJBNDBF NjM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YWU4MmYtNTM3ZS00NjI2LWJl OWUtMzMzOTRhMmRjOTY5LzAvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NG QzJBNDBFNjM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALdcPR/a3Fqirn1EZdQ+71rDG1rkHWPY1eVF +S1wOcCEnxufKkfkOG+QhtQhKjL8I8YBrztiCuk0pwZ9Z0qdP85aLl1zRqBCQasn S0pi+qRlKtFmDZv6HLryK2ljPHmQaOW27jDmvS91xZ2DR/twJ07wtH8jYcerf2Gd h7AT6M/T84SPIi0EkNONDfyugbhX9SCrny5TvCsQ2l+UUKl9HYjUrSeitBcwsDAJ Rkyv+kPmf8KiR/Xierbsd9bxydlCt+W9fxU9Nu5Sj7sXWitcunu+boQaLwiiH1hL 1QIZum+SN5M16/J2cyEuz6ETJWHqMzYShJ8vSqn4dbJV5EnM7po= -----END CERTIFICATE-----Generated at Fri Aug 8 00:18:46 2025 by rpki-client