$ rpki-client -vvf repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft File: E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft (raw, json) Hash identifier: Ayd/6lwXe+PlP1C7awuIBR+a7nYjO0kxbMwa3KCvoIA= Subject key identifier: 43:AB:7E:F6:74:F6:25:31:7A:75:47:78:57:C6:33:3D:10:65:AE:73 Authority key identifier: E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2 Certificate issuer: /CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2 Certificate serial: 7708EDD718495CDD3DEF70895F4BC0E7665E442B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft Manifest number: 0128 Signing time: Wed 03 Sep 2025 05:32:22 +0000 Manifest this update: Wed 03 Sep 2025 05:27:22 +0000 Manifest next update: Sat 06 Sep 2025 14:40:22 +0000 Files and hashes: 1: 323030313a6466313a396563303a3a2f34382d3438203d3e20313439383831.roa (hash: 2+QIfySh8c6i8OAm2ZBYIJAC5i/VOgSLnCJgIJXnqcY=) 2: E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl (hash: w2WO1r7hN3puCDth9NfB+9R8A9nD8TtWf/Qrazkl92A=) 3: 3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa (hash: jR3Fixe166OMUTtP8mJKbsDEpASm2BgJ020ziz4iWic=) 4: 3130332e3138392e3232332e302f32342d3234203d3e20313439383831.roa (hash: eTIGvTxcclkAjkS0JQL+QXqxxlU66A6zLv2/rsCM/mo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:08:ed:d7:18:49:5c:dd:3d:ef:70:89:5f:4b:c0:e7:66:5e:44:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2 Validity Not Before: Sep 3 05:27:22 2025 GMT Not After : Sep 6 14:40:22 2025 GMT Subject: CN=43AB7EF674F625317A75477857C6333D1065AE73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:67:dc:6f:67:5a:40:92:ab:91:eb:07:4d:6f: e2:a4:b8:68:74:da:cd:81:72:b9:55:cb:60:d9:99: 81:67:5c:7d:61:a4:d1:11:ef:69:c5:ca:f3:d5:11: c2:15:a9:59:32:e8:ac:2a:06:4a:08:6b:51:63:4f: 74:3f:0e:1f:31:4b:96:ee:7c:72:d0:ef:3b:ef:e0: ab:6b:27:57:9a:d2:1b:56:a1:89:3d:78:59:62:7d: 00:c4:93:03:87:42:07:1f:1d:a5:04:2d:45:46:2c: 2c:ec:59:4d:56:da:82:fc:83:09:f3:1f:80:50:7c: 91:01:a2:47:58:70:77:a4:fd:cc:01:37:a2:3f:a1: 5b:6d:3a:31:58:d4:57:57:fd:a9:d1:9c:be:39:19: dd:cc:e8:f9:f5:72:0f:4e:13:ce:ef:f0:6c:16:b0: 03:fa:6f:a0:42:f4:2e:ea:39:ce:78:6e:96:1c:6e: 89:23:5e:d9:56:65:ed:e2:51:ce:52:ac:ba:ec:3f: 26:60:1c:b0:5c:da:f2:56:d2:ce:82:a2:fb:72:de: 6a:7d:9f:17:f6:0a:85:9c:8c:92:91:99:f8:39:05: 94:5b:41:d8:22:1b:9c:f1:3e:8a:5e:7f:33:d8:c7: a7:d5:f3:6d:e6:92:ec:b8:96:e2:70:d4:fa:09:47: 62:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AB:7E:F6:74:F6:25:31:7A:75:47:78:57:C6:33:3D:10:65:AE:73 X509v3 Authority Key Identifier: keyid:E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:b2:c8:86:90:02:42:5d:60:9d:e6:19:57:23:a8:57:c3:11: 5d:13:22:c1:3a:b6:6e:38:4e:0b:37:84:1c:6c:66:69:b2:2f: af:3d:d2:63:b3:a9:f2:68:72:95:fc:9e:9a:eb:56:99:57:02: 9d:1a:72:ad:f2:bd:37:93:02:58:d0:7b:2a:32:b7:ec:c7:db: 18:6f:93:52:4a:a3:02:30:af:1f:b5:48:09:e3:88:02:5e:60: e9:c3:c1:be:99:76:77:ed:c5:6b:07:24:6b:f2:ca:94:b9:e7: c9:b3:59:f4:ff:15:2d:bd:16:75:53:99:06:a5:d5:47:fc:bd: 0b:9b:28:3a:2c:9c:20:86:05:77:e2:83:20:2d:00:cb:7c:4f: 2a:16:13:9f:91:5a:06:0b:29:b1:45:05:af:04:e4:69:66:b5: 58:a2:42:0a:ac:bc:4c:46:20:f1:11:0c:e2:5c:19:78:d4:2b: e6:ff:23:fe:95:21:4c:bc:a5:80:f1:60:2b:6f:31:f3:5b:ef: 6e:4a:c2:75:86:0d:5b:b2:bb:53:c7:8d:a4:dc:cc:fe:26:46: 4b:04:16:df:5d:d9:2d:16:f6:13:83:d3:c8:44:77:d7:06:b6: 0f:36:92:57:6f:48:21:c1:4f:ae:a0:25:f1:5f:55:be:0c:2f: 57:1a:54:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdwjt1xhJXN0973CJX0vA52ZeRCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFGRTY5QTM0MjE2QzI0RDE4NzBGNUNFRDNBNDMwOTIz NEEwRjFCMjAeFw0yNTA5MDMwNTI3MjJaFw0yNTA5MDYxNDQwMjJaMDMxMTAvBgNV BAMTKDQzQUI3RUY2NzRGNjI1MzE3QTc1NDc3ODU3QzYzMzNEMTA2NUFFNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Z9xvZ1pAkquR6wdNb+KkuGh0 2s2BcrlVy2DZmYFnXH1hpNER72nFyvPVEcIVqVky6KwqBkoIa1FjT3Q/Dh8xS5bu fHLQ7zvv4KtrJ1ea0htWoYk9eFlifQDEkwOHQgcfHaUELUVGLCzsWU1W2oL8gwnz H4BQfJEBokdYcHek/cwBN6I/oVttOjFY1FdX/anRnL45Gd3M6Pn1cg9OE87v8GwW sAP6b6BC9C7qOc54bpYcbokjXtlWZe3iUc5SrLrsPyZgHLBc2vJW0s6Covty3mp9 nxf2CoWcjJKRmfg5BZRbQdgiG5zxPopefzPYx6fV823mkuy4luJw1PoJR2KVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ6t+9nT2JTF6dUd4V8YzPRBlrnMwHwYDVR0j BBgwFoAU4f5po0IWwk0YcPXO06QwkjSg8bIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODhlM2ExNy0xYzkxLTQ3OTMtODNjNC0yMTFkNDIxMGFlYTgvMC9FMUZFNjlBMzQy MTZDMjREMTg3MEY1Q0VEM0E0MzA5MjM0QTBGMUIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFGRTY5QTM0MjE2QzI0RDE4NzBGNUNFRDNBNDMwOTIzNEEw RjFCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg4ZTNhMTctMWM5MS00NzkzLTgz YzQtMjExZDQyMTBhZWE4LzAvRTFGRTY5QTM0MjE2QzI0RDE4NzBGNUNFRDNBNDMw OTIzNEEwRjFCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCyyIaQAkJdYJ3mGVcjqFfDEV0TIsE6tm44 Tgs3hBxsZmmyL6890mOzqfJocpX8nprrVplXAp0acq3yvTeTAljQeyoyt+zH2xhv k1JKowIwrx+1SAnjiAJeYOnDwb6ZdnftxWsHJGvyypS558mzWfT/FS29FnVTmQal 1Uf8vQubKDosnCCGBXfigyAtAMt8TyoWE5+RWgYLKbFFBa8E5GlmtViiQgqsvExG IPERDOJcGXjUK+b/I/6VIUy8pYDxYCtvMfNb725KwnWGDVuyu1PHjaTczP4mRksE Ft9d2S0W9hOD08hEd9cGtg82kldvSCHBT66gJfFfVb4ML1caVOo= -----END CERTIFICATE-----Generated at Fri Sep 5 10:39:39 2025 by rpki-client