$ rpki-client -vvf repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft File: E380AA52674666F5E074BF511BB72FA0713E5270.mft (raw, json) Hash identifier: OpfLNODg5qG1xhhScKOT3+EqWJIYK+5s0rXIyqztBVY= Subject key identifier: 32:E4:64:07:2E:4C:90:4F:08:B6:72:51:C5:C7:35:FC:47:B9:7D:EF Authority key identifier: E3:80:AA:52:67:46:66:F5:E0:74:BF:51:1B:B7:2F:A0:71:3E:52:70 Certificate issuer: /CN=E380AA52674666F5E074BF511BB72FA0713E5270 Certificate serial: 05C4F926D3ED2559232593284C7B7E58C5012341 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft Manifest number: F3 Signing time: Tue 16 Sep 2025 00:41:10 +0000 Manifest this update: Tue 16 Sep 2025 00:36:10 +0000 Manifest next update: Fri 19 Sep 2025 00:50:10 +0000 Files and hashes: 1: 33362e35302e34372e302f32342d3234203d3e20313338383838.roa (hash: fz83fAQNZ6LIg2KoJilnb9N/Vfy7mhurHRooAOvm+QY=) 2: E380AA52674666F5E074BF511BB72FA0713E5270.crl (hash: g0fAERxjCB79Avj4xmU3cM+39nq6rxv+saDnZx/onSs=) 3: 33362e35302e34362e302f32332d3233203d3e20313338383838.roa (hash: mxtXjA73LS1mZhkBSLMdwKqT16ev1fS5k+J/P85pAXY=) 4: 33362e35302e34362e302f32342d3234203d3e20313338383838.roa (hash: thuZAYiRf9cIoV+ku3A0Gac0iLlUZNRvonSPzOtwW4g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.crl rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Sep 2025 00:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c4:f9:26:d3:ed:25:59:23:25:93:28:4c:7b:7e:58:c5:01:23:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E380AA52674666F5E074BF511BB72FA0713E5270 Validity Not Before: Sep 16 00:36:10 2025 GMT Not After : Sep 19 00:50:10 2025 GMT Subject: CN=32E464072E4C904F08B67251C5C735FC47B97DEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:57:18:dd:eb:96:c9:b4:b7:fe:e3:06:85:3b: f6:43:ab:1f:f3:73:ab:c6:b0:80:47:c7:6d:92:3b: e4:8e:72:a6:5e:fe:65:af:2c:9b:c6:76:91:f4:6d: 08:7e:70:cf:1f:48:62:57:8d:eb:30:74:d4:3a:04: b3:a9:fd:72:54:b9:7a:ad:d8:e0:55:da:7a:3b:7a: 07:d8:84:44:a0:b0:dd:b5:47:21:9e:1c:a9:27:27: f5:b7:6e:1f:1e:bb:8d:f5:b6:c4:19:99:b8:54:ef: d3:95:fe:8b:8e:f9:19:8a:b7:36:65:be:13:f8:0e: fa:91:e5:ab:cf:ad:97:bf:0a:7d:dc:e5:d4:8f:ef: 93:ac:19:31:b8:3b:45:df:f6:73:48:3b:ea:ed:ab: 24:02:5e:31:8b:ce:7c:69:83:69:b6:b7:97:85:62: b8:a8:74:ba:4d:3c:24:a9:ff:13:11:d0:f1:11:9b: 66:8d:99:fe:f1:c9:b4:bc:31:48:e4:7e:7b:eb:1e: cd:c9:68:64:c2:52:5e:6b:f9:ca:00:c8:9f:7d:c9: df:58:e9:3f:ff:27:24:0a:5b:78:c2:1c:cb:dd:b7: f1:ba:1c:a5:36:3c:0f:e9:dd:9b:b3:b6:5d:e7:93: 6b:98:98:29:4b:13:40:53:a5:cd:b5:f6:92:49:cd: fe:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E4:64:07:2E:4C:90:4F:08:B6:72:51:C5:C7:35:FC:47:B9:7D:EF X509v3 Authority Key Identifier: keyid:E3:80:AA:52:67:46:66:F5:E0:74:BF:51:1B:B7:2F:A0:71:3E:52:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:fe:36:14:9e:81:33:cc:d1:a6:a3:ae:da:8f:75:df:11:3f: 1b:07:09:cf:3e:f8:4e:23:e1:b0:0e:43:8a:db:64:f3:64:17: 3b:e3:b2:28:38:df:14:50:d3:a8:c3:c8:4f:77:e7:36:e6:31: e5:8b:9a:b4:41:72:50:e2:51:ba:e2:4d:d7:0d:b4:59:78:2f: cc:1e:9d:26:31:d9:06:f0:ad:6e:70:70:89:22:41:f9:57:fa: cf:02:5a:d5:f0:93:a2:05:22:c9:62:c0:7d:9e:97:d9:93:70: a4:7d:c9:ed:03:f7:68:fd:da:51:34:bb:84:45:ad:6a:ab:ac: ac:72:57:4c:9b:18:2d:1c:a8:29:66:9a:2b:fb:d4:ca:76:8d: 70:90:96:99:a4:6a:7d:40:40:42:7b:9c:1f:13:37:d0:11:00: 73:e7:9c:75:73:2a:ef:28:1d:a8:45:df:ab:03:e1:ad:de:af: d4:d9:40:ba:42:0c:9a:1d:39:98:db:9d:b5:26:0d:61:67:42: 72:d8:76:c4:66:35:7c:0e:ec:38:fa:ae:f6:9d:2b:16:db:7e: b3:64:a8:ad:25:06:d3:03:fe:66:10:25:b5:5e:3b:d2:39:0c: f7:71:8a:c5:12:23:df:8f:dc:e7:ae:34:1e:ce:f3:12:c9:7e: 75:0d:10:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBcT5JtPtJVkjJZMoTHt+WMUBI0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM4MEFBNTI2NzQ2NjZGNUUwNzRCRjUxMUJCNzJGQTA3 MTNFNTI3MDAeFw0yNTA5MTYwMDM2MTBaFw0yNTA5MTkwMDUwMTBaMDMxMTAvBgNV BAMTKDMyRTQ2NDA3MkU0QzkwNEYwOEI2NzI1MUM1QzczNUZDNDdCOTdERUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmVxjd65bJtLf+4waFO/ZDqx/z c6vGsIBHx22SO+SOcqZe/mWvLJvGdpH0bQh+cM8fSGJXjeswdNQ6BLOp/XJUuXqt 2OBV2no7egfYhESgsN21RyGeHKknJ/W3bh8eu431tsQZmbhU79OV/ouO+RmKtzZl vhP4DvqR5avPrZe/Cn3c5dSP75OsGTG4O0Xf9nNIO+rtqyQCXjGLznxpg2m2t5eF YriodLpNPCSp/xMR0PERm2aNmf7xybS8MUjkfnvrHs3JaGTCUl5r+coAyJ99yd9Y 6T//JyQKW3jCHMvdt/G6HKU2PA/p3Zuztl3nk2uYmClLE0BTpc219pJJzf6dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMuRkBy5MkE8ItnJRxcc1/Ee5fe8wHwYDVR0j BBgwFoAU44CqUmdGZvXgdL9RG7cvoHE+UnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjY4NDYyZS1iZmE1LTQzMzctOTE1My1jNTU2ZDlkNzcxZmEvMC9FMzgwQUE1MjY3 NDY2NkY1RTA3NEJGNTExQkI3MkZBMDcxM0U1MjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM4MEFBNTI2NzQ2NjZGNUUwNzRCRjUxMUJCNzJGQTA3MTNF NTI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI2ODQ2MmUtYmZhNS00MzM3LTkx NTMtYzU1NmQ5ZDc3MWZhLzAvRTM4MEFBNTI2NzQ2NjZGNUUwNzRCRjUxMUJCNzJG QTA3MTNFNTI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJn+NhSegTPM0aajrtqPdd8RPxsHCc8++E4j 4bAOQ4rbZPNkFzvjsig43xRQ06jDyE935zbmMeWLmrRBclDiUbriTdcNtFl4L8we nSYx2QbwrW5wcIkiQflX+s8CWtXwk6IFIsliwH2el9mTcKR9ye0D92j92lE0u4RF rWqrrKxyV0ybGC0cqClmmiv71Mp2jXCQlpmkan1AQEJ7nB8TN9ARAHPnnHVzKu8o HahF36sD4a3er9TZQLpCDJodOZjbnbUmDWFnQnLYdsRmNXwO7Dj6rvadKxbbfrNk qK0lBtMD/mYQJbVeO9I5DPdxisUSI9+P3OeuNB7O8xLJfnUNEJk= -----END CERTIFICATE-----Generated at Tue Sep 16 09:48:59 2025 by rpki-client