$ rpki-client -vvf repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.mft File: E377371E82C6C53C7A5796B49B085190AFB64B4C.mft (raw, json) Hash identifier: OKERS9eNiSu7jfCbMLy+VQeGnayRwISLJcB5rS2F7Qk= Subject key identifier: BA:64:F1:8F:57:49:D0:D9:35:EF:7A:9F:35:45:27:B1:FF:D8:BE:CC Authority key identifier: E3:77:37:1E:82:C6:C5:3C:7A:57:96:B4:9B:08:51:90:AF:B6:4B:4C Certificate issuer: /CN=E377371E82C6C53C7A5796B49B085190AFB64B4C Certificate serial: 03DBBA6FED1B9DFEBE19D1EE4E370DA09AD4D106 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E377371E82C6C53C7A5796B49B085190AFB64B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.mft Manifest number: 019B Signing time: Sat 06 Sep 2025 22:31:42 +0000 Manifest this update: Sat 06 Sep 2025 22:26:42 +0000 Manifest next update: Wed 10 Sep 2025 08:34:42 +0000 Files and hashes: 1: E377371E82C6C53C7A5796B49B085190AFB64B4C.crl (hash: e1T4sJbo7aab7NvychOi0JA5FOwVp9EtiGVFZkf934Y=) 2: 3130332e38392e3234332e302f32342d3234203d3e20313530393133.roa (hash: otr3kFi0uUngcjSenFt7w7igUVSs51cTPJ2XyknCg2A=) 3: 3130332e38392e3234322e302f32342d3234203d3e20313530393133.roa (hash: Wq0HxmVMzepldSWl2tLo0jkVOCM3LQ2XSCQDbU6pmew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.crl rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E377371E82C6C53C7A5796B49B085190AFB64B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 08:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:db:ba:6f:ed:1b:9d:fe:be:19:d1:ee:4e:37:0d:a0:9a:d4:d1:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E377371E82C6C53C7A5796B49B085190AFB64B4C Validity Not Before: Sep 6 22:26:42 2025 GMT Not After : Sep 10 08:34:42 2025 GMT Subject: CN=BA64F18F5749D0D935EF7A9F354527B1FFD8BECC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c4:11:c5:05:45:fc:8e:74:a5:e5:86:e2:6b: 5b:09:6d:44:66:19:21:84:93:06:3b:f0:d6:3d:55: d4:97:da:80:68:c0:69:19:4c:c1:eb:76:ad:d4:74: da:75:d3:7e:bc:b6:dc:bf:55:19:13:0d:08:46:e3: 71:8b:84:27:5a:99:4e:c5:ab:cb:67:7a:8d:6a:a6: 30:3f:88:2a:43:c8:6f:d7:59:42:8b:3c:b2:3e:55: 99:1f:2c:e4:47:48:11:25:4e:bb:85:86:af:5f:b3: b3:33:cc:67:22:a6:7a:24:e8:b0:ba:6d:17:40:6e: e9:ec:e2:38:57:99:90:a1:02:98:d2:ce:ab:a3:da: 81:dd:e1:72:0e:5b:96:95:e1:0a:7c:f5:be:da:31: f2:1f:18:d4:8c:1a:5e:46:04:4d:ee:4d:16:03:df: 5f:9d:00:b5:95:8f:9b:3a:cd:1b:44:f3:89:ba:78: b2:eb:51:8d:35:ef:0e:62:a2:6e:c2:64:d6:70:74: d2:44:10:1f:2b:3e:af:3d:72:c7:08:78:23:d4:db: c0:03:af:ce:6a:61:44:d5:88:17:5c:c2:ec:4f:c4: 1e:63:31:52:6e:74:33:81:99:f2:65:fa:72:07:aa: e7:7c:f1:65:ca:f2:0d:0e:c3:59:d2:e6:da:1e:41: 87:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:64:F1:8F:57:49:D0:D9:35:EF:7A:9F:35:45:27:B1:FF:D8:BE:CC X509v3 Authority Key Identifier: keyid:E3:77:37:1E:82:C6:C5:3C:7A:57:96:B4:9B:08:51:90:AF:B6:4B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E377371E82C6C53C7A5796B49B085190AFB64B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:92:7c:ea:fb:f4:50:a3:be:57:fa:eb:19:b6:31:6d:87:89: ff:26:12:28:d9:20:6a:71:02:db:d0:27:0c:9e:d5:3b:50:e1: d9:1a:58:ff:9d:e0:b7:b1:e6:f1:38:9e:df:1e:73:ca:8a:6c: 02:5e:29:13:20:f5:74:ed:06:ab:ae:e1:6d:18:b0:63:12:48: d6:78:62:83:a3:d3:c3:ca:dd:2d:12:59:c0:64:51:e4:66:bc: 7d:9f:bc:93:95:cd:f1:40:85:cd:05:29:25:a5:fa:16:cd:f1: 46:10:ab:9e:1a:59:9c:dc:cd:24:eb:13:f3:b2:b8:33:8d:bb: ee:ad:be:cf:06:10:2f:9a:7a:2c:dd:0d:9d:6d:ce:a9:ea:83: 6d:24:ae:2f:69:1f:f0:a2:6c:69:1b:fa:ca:12:91:15:45:c2: 69:05:a4:5a:f8:9b:fd:76:7d:3e:4c:e3:a5:41:2f:78:4a:4f: b3:a5:1c:4f:79:22:a0:95:13:fa:6e:b4:b9:a9:aa:04:d1:11: f8:6a:05:21:28:f7:36:5a:31:7a:de:21:86:bf:08:81:fe:86: 18:28:83:04:cb:be:dd:cd:6a:6b:5c:ba:74:0b:fc:a4:7d:47: 4e:0f:93:08:ad:c9:95:51:c2:74:a0:e3:1d:a5:d1:e4:d8:ca: 87:33:a6:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA9u6b+0bnf6+GdHuTjcNoJrU0QYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM3NzM3MUU4MkM2QzUzQzdBNTc5NkI0OUIwODUxOTBB RkI2NEI0QzAeFw0yNTA5MDYyMjI2NDJaFw0yNTA5MTAwODM0NDJaMDMxMTAvBgNV BAMTKEJBNjRGMThGNTc0OUQwRDkzNUVGN0E5RjM1NDUyN0IxRkZEOEJFQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDExBHFBUX8jnSl5Ybia1sJbURm GSGEkwY78NY9VdSX2oBowGkZTMHrdq3UdNp10368tty/VRkTDQhG43GLhCdamU7F q8tneo1qpjA/iCpDyG/XWUKLPLI+VZkfLORHSBElTruFhq9fs7MzzGcipnok6LC6 bRdAbuns4jhXmZChApjSzquj2oHd4XIOW5aV4Qp89b7aMfIfGNSMGl5GBE3uTRYD 31+dALWVj5s6zRtE84m6eLLrUY017w5iom7CZNZwdNJEEB8rPq89cscIeCPU28AD r85qYUTViBdcwuxPxB5jMVJudDOBmfJl+nIHqud88WXK8g0Ow1nS5toeQYctAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUumTxj1dJ0Nk173qfNUUnsf/YvswwHwYDVR0j BBgwFoAU43c3HoLGxTx6V5a0mwhRkK+2S0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTMzMDg3Ni03ZTY4LTQ3MDctYTUzZC05MmJiZmRiMmYyM2MvMC9FMzc3MzcxRTgy QzZDNTNDN0E1Nzk2QjQ5QjA4NTE5MEFGQjY0QjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM3NzM3MUU4MkM2QzUzQzdBNTc5NkI0OUIwODUxOTBBRkI2 NEI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGUzMzA4NzYtN2U2OC00NzA3LWE1 M2QtOTJiYmZkYjJmMjNjLzAvRTM3NzM3MUU4MkM2QzUzQzdBNTc5NkI0OUIwODUx OTBBRkI2NEI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGSfOr79FCjvlf66xm2MW2Hif8mEijZIGpx AtvQJwye1TtQ4dkaWP+d4Lex5vE4nt8ec8qKbAJeKRMg9XTtBquu4W0YsGMSSNZ4 YoOj08PK3S0SWcBkUeRmvH2fvJOVzfFAhc0FKSWl+hbN8UYQq54aWZzczSTrE/Oy uDONu+6tvs8GEC+aeizdDZ1tzqnqg20kri9pH/CibGkb+soSkRVFwmkFpFr4m/12 fT5M46VBL3hKT7OlHE95IqCVE/putLmpqgTREfhqBSEo9zZaMXreIYa/CIH+hhgo gwTLvt3NamtcunQL/KR9R04PkwityZVRwnSg4x2l0eTYyoczps8= -----END CERTIFICATE-----Generated at Sun Sep 7 13:56:39 2025 by rpki-client