$ rpki-client -vvf repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft File: E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft (raw, json) Hash identifier: g8j4ed37fM84tR7ZLRoFdgJY07tytFIC6CJGA33WTKE= Subject key identifier: A0:39:F3:54:7B:8D:1E:26:97:B7:03:3E:CF:3F:BA:6C:AD:0B:4D:75 Authority key identifier: E7:DC:BB:5E:91:2C:56:AB:C8:9C:BB:C8:FA:42:B5:E6:3D:15:2A:F4 Certificate issuer: /CN=E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4 Certificate serial: 198050D668CCFEB7CEA4DB24623BFF7BD759B297 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft Manifest number: 050A Signing time: Sat 06 Sep 2025 19:02:25 +0000 Manifest this update: Sat 06 Sep 2025 18:57:25 +0000 Manifest next update: Wed 10 Sep 2025 00:40:25 +0000 Files and hashes: 1: 3130332e3133392e3138362e302f32342d3234203d3e20313338383634.roa (hash: hCqKQAmBft8A8taUBcT8sOYve7SjkWXpgzjj9NA6B/s=) 2: E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl (hash: 15skTiYiOBVv/5FFP9wnVgrbOYB2eyhrZoAgRi8rXoc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 00:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:80:50:d6:68:cc:fe:b7:ce:a4:db:24:62:3b:ff:7b:d7:59:b2:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4 Validity Not Before: Sep 6 18:57:25 2025 GMT Not After : Sep 10 00:40:25 2025 GMT Subject: CN=A039F3547B8D1E2697B7033ECF3FBA6CAD0B4D75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f1:ca:5a:93:7c:1a:30:f3:35:0f:cd:b7:b4: 19:c6:e8:b0:7f:69:92:4d:48:2f:0c:71:48:c1:ed: e3:4b:5f:83:c1:41:b8:6d:65:8b:10:0e:c4:9c:eb: 97:8e:13:ff:23:2d:ca:95:ca:26:07:d4:2b:4d:a3: 93:f7:9d:2a:e6:48:b6:a5:65:8a:42:d9:74:4b:86: 53:db:6b:d4:5e:9c:82:43:95:88:bc:57:d3:a5:2f: 68:13:01:0c:d6:3d:c9:bc:74:08:c9:1c:f9:aa:ca: be:da:04:f2:d0:cc:0e:4a:de:ae:a1:dd:8d:60:74: f6:54:32:e1:b6:9c:f9:9b:ff:11:81:34:04:a6:35: 22:a3:f9:74:19:d1:9a:2f:b6:f6:06:67:91:d5:6a: f3:01:2d:c9:53:e9:eb:cf:c4:72:dc:7e:c3:19:22: 8b:08:b5:64:94:68:f8:ba:0e:bd:ca:eb:54:d0:82: bc:82:10:4e:c3:9a:38:6d:a8:77:1f:46:6d:54:e6: ca:f1:6d:79:63:13:ee:75:29:b2:57:2e:a1:fb:5c: e4:6a:8d:2d:30:58:02:9e:e2:eb:e0:9d:ac:83:23: fd:ed:33:06:e2:fb:c9:e0:13:57:d2:d9:d8:dd:bb: 5c:46:96:fa:c8:d8:ca:6d:cf:a5:b7:65:b1:90:54: b1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:39:F3:54:7B:8D:1E:26:97:B7:03:3E:CF:3F:BA:6C:AD:0B:4D:75 X509v3 Authority Key Identifier: keyid:E7:DC:BB:5E:91:2C:56:AB:C8:9C:BB:C8:FA:42:B5:E6:3D:15:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:25:c9:19:53:d8:b1:0a:c9:a5:08:f3:57:f4:00:44:f0:5d: 7d:98:3d:c7:77:bf:14:d9:5e:0b:6e:f4:51:72:85:c1:f0:2d: 59:76:b5:ed:1c:b5:94:f4:2f:04:7b:84:4a:8b:e8:7d:ff:75: 26:df:b0:52:e6:98:c0:63:97:a1:7e:c8:db:3f:94:cd:41:05: ff:4b:d4:78:4d:23:de:e0:54:50:03:57:b4:f6:d1:30:fa:b5: 7e:84:4f:d7:dd:4e:60:ea:e2:48:d6:b6:27:65:2a:67:e4:40: 31:3d:2b:c3:98:64:42:b5:f6:48:eb:69:cc:22:47:41:1c:17: 8f:0e:3d:51:ed:6e:a3:1c:ff:02:74:e7:4d:00:b2:d6:f6:72: e4:3e:67:7f:21:14:dd:5c:13:f1:d6:d5:d5:8b:b1:e3:5a:cc: a7:8e:de:cc:51:72:50:15:72:cd:34:21:f6:c6:d6:e0:04:66: 47:d8:68:16:b4:e7:f4:93:b8:8a:9f:50:b1:91:87:bf:ea:17: 80:4c:f6:83:1f:36:d5:f5:0b:53:ad:22:2d:38:cb:1c:23:74: f3:fc:66:d0:40:f3:56:ff:54:c9:8a:0a:8c:37:e8:a2:b1:99: d1:d8:2d:57:16:26:74:49:ad:7c:74:f8:ee:da:3b:32:11:ee: 7d:ec:bf:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGYBQ1mjM/rfOpNskYjv/e9dZspcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdEQ0JCNUU5MTJDNTZBQkM4OUNCQkM4RkE0MkI1RTYz RDE1MkFGNDAeFw0yNTA5MDYxODU3MjVaFw0yNTA5MTAwMDQwMjVaMDMxMTAvBgNV BAMTKEEwMzlGMzU0N0I4RDFFMjY5N0I3MDMzRUNGM0ZCQTZDQUQwQjRENzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf8cpak3waMPM1D823tBnG6LB/ aZJNSC8McUjB7eNLX4PBQbhtZYsQDsSc65eOE/8jLcqVyiYH1CtNo5P3nSrmSLal ZYpC2XRLhlPba9RenIJDlYi8V9OlL2gTAQzWPcm8dAjJHPmqyr7aBPLQzA5K3q6h 3Y1gdPZUMuG2nPmb/xGBNASmNSKj+XQZ0ZovtvYGZ5HVavMBLclT6evPxHLcfsMZ IosItWSUaPi6Dr3K61TQgryCEE7DmjhtqHcfRm1U5srxbXljE+51KbJXLqH7XORq jS0wWAKe4uvgnayDI/3tMwbi+8ngE1fS2djdu1xGlvrI2Mptz6W3ZbGQVLH/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoDnzVHuNHiaXtwM+zz+6bK0LTXUwHwYDVR0j BBgwFoAU59y7XpEsVqvInLvI+kK15j0VKvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDM1OGIwMC0zMWNkLTQxYTMtOTUzNi1kYmIxOTNlN2Y0ZDAvMC9FN0RDQkI1RTkx MkM1NkFCQzg5Q0JCQzhGQTQyQjVFNjNEMTUyQUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdEQ0JCNUU5MTJDNTZBQkM4OUNCQkM4RkE0MkI1RTYzRDE1 MkFGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQzNThiMDAtMzFjZC00MWEzLTk1 MzYtZGJiMTkzZTdmNGQwLzAvRTdEQ0JCNUU5MTJDNTZBQkM4OUNCQkM4RkE0MkI1 RTYzRDE1MkFGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8lyRlT2LEKyaUI81f0AETwXX2YPcd3vxTZ Xgtu9FFyhcHwLVl2te0ctZT0LwR7hEqL6H3/dSbfsFLmmMBjl6F+yNs/lM1BBf9L 1HhNI97gVFADV7T20TD6tX6ET9fdTmDq4kjWtidlKmfkQDE9K8OYZEK19kjracwi R0EcF48OPVHtbqMc/wJ0500Astb2cuQ+Z38hFN1cE/HW1dWLseNazKeO3sxRclAV cs00IfbG1uAEZkfYaBa05/STuIqfULGRh7/qF4BM9oMfNtX1C1OtIi04yxwjdPP8 ZtBA81b/VMmKCow36KKxmdHYLVcWJnRJrXx0+O7aOzIR7n3sv5U= -----END CERTIFICATE-----Generated at Sun Sep 7 13:55:58 2025 by rpki-client