$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft File: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft (raw, json) Hash identifier: 48s6a1OudKuyKE/0LGNZrXY+OK4EAhk7OmNglZxkf04= Subject key identifier: FB:B5:BD:35:7D:96:1A:EF:86:0C:92:19:36:14:A3:B7:7B:77:BC:A0 Authority key identifier: E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F Certificate issuer: /CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F Certificate serial: 6D28E8500F41212165033823E092F03D147BD4CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft Manifest number: 01A3 Signing time: Sat 06 Sep 2025 08:00:50 +0000 Manifest this update: Sat 06 Sep 2025 07:55:50 +0000 Manifest next update: Tue 09 Sep 2025 09:17:50 +0000 Files and hashes: 1: 3130332e3137322e3234322e302f32342d3234203d3e20313437303836.roa (hash: BUZVEiAJYJLqmtOMsKiwoKkvjDG5Aqhzz5fYoIUA7O8=) 2: 3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa (hash: L7eyl2XZ6A1jGQ7W7TcXIFdLoB9CiiJsysljc4+PR9I=) 3: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl (hash: H7NwgVrEWMNcYRmL1/V/xmg8fvG/uHclscMTcmi5z7c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 09:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:28:e8:50:0f:41:21:21:65:03:38:23:e0:92:f0:3d:14:7b:d4:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F Validity Not Before: Sep 6 07:55:50 2025 GMT Not After : Sep 9 09:17:50 2025 GMT Subject: CN=FBB5BD357D961AEF860C92193614A3B77B77BCA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ac:6d:e5:68:f5:0d:d2:24:30:d9:77:f9:d3: a6:eb:a6:7b:72:06:a8:ff:85:9f:62:01:f3:e4:59: 82:b8:6e:dc:22:e9:0d:01:e5:65:8e:60:bf:ce:00: 0b:c3:4c:ac:4e:f5:a8:25:28:5c:b5:c0:5c:42:10: 7d:9d:d5:ec:ec:7d:8d:b7:0a:c8:e4:2d:04:13:bd: c8:35:04:b2:b2:c3:1e:7f:79:51:af:a9:de:60:93: 05:e9:99:26:da:18:fc:da:21:b7:35:cb:e8:b9:a5: bd:03:77:ee:da:59:a7:f9:10:0f:40:51:00:23:8a: c1:09:b9:31:85:17:dc:14:33:f6:9a:9b:69:76:fd: 40:58:e7:6d:38:cd:e5:31:e6:c5:c1:4f:76:60:30: 83:ed:70:94:46:4c:a8:e6:3d:cf:ae:70:1b:06:b5: 5b:68:1d:a6:4b:1b:c5:7a:65:3c:2e:f2:9e:8d:88: 87:cd:c6:3f:e0:62:1e:60:c4:ea:df:78:d7:48:55: 81:15:ab:04:b6:ef:76:c2:e0:78:e5:49:5e:47:42: f1:0b:ea:dd:9e:ec:58:08:2a:20:d2:e8:a1:c6:6a: a8:d0:4a:11:20:df:cd:ce:59:18:7a:90:b2:d4:15: 28:23:7d:da:1d:b2:31:ab:9d:e4:6d:cd:df:b1:d3: 72:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B5:BD:35:7D:96:1A:EF:86:0C:92:19:36:14:A3:B7:7B:77:BC:A0 X509v3 Authority Key Identifier: keyid:E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c3:8a:57:c8:13:57:9c:46:10:08:02:89:87:70:b5:ff:84: 01:e5:9e:e8:9b:15:1c:64:45:5a:bf:8e:87:0f:e8:35:ac:9d: 65:a6:23:e2:c3:9a:89:b9:e5:d5:73:90:51:3f:70:77:70:13: 4a:1b:35:d8:c5:e3:b7:b9:a4:dd:25:00:a0:cb:dd:85:0e:4f: c4:72:b2:85:58:5a:a5:5d:19:4a:62:23:5a:5d:f9:f8:97:59: b5:17:d8:58:b1:a1:ca:c1:50:05:e9:a3:bc:85:64:52:b3:0b: 94:20:9a:fc:be:0b:46:a5:51:14:fc:8d:3f:f0:68:ad:9d:1b: 80:80:99:c2:d7:fb:22:85:51:ee:9d:3d:9f:eb:b9:f9:94:7e: 8d:ec:ca:c7:24:c4:6e:7d:0f:23:59:ac:b1:33:7b:1e:91:6c: 25:c4:ba:81:c9:7d:f7:4e:01:0d:fd:ad:03:56:42:bb:e1:b0: 5c:96:4a:a3:61:82:b4:1d:7d:d2:14:67:1e:f8:98:08:19:a6: 4e:23:2a:0d:90:36:ec:1d:60:d2:fc:b5:ae:51:86:b2:91:95: 54:f9:9e:78:b4:ae:64:21:c2:67:70:83:5d:aa:0f:8b:bf:64: 5f:2f:a3:de:d3:2c:71:5d:a2:e9:28:f2:c6:72:ce:84:3a:75: 58:74:e7:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbSjoUA9BISFlAzgj4JLwPRR71M4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJBMDNG QUY1NzU2RjAeFw0yNTA5MDYwNzU1NTBaFw0yNTA5MDkwOTE3NTBaMDMxMTAvBgNV BAMTKEZCQjVCRDM1N0Q5NjFBRUY4NjBDOTIxOTM2MTRBM0I3N0I3N0JDQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDurG3laPUN0iQw2Xf506brpnty Bqj/hZ9iAfPkWYK4btwi6Q0B5WWOYL/OAAvDTKxO9aglKFy1wFxCEH2d1ezsfY23 CsjkLQQTvcg1BLKywx5/eVGvqd5gkwXpmSbaGPzaIbc1y+i5pb0Dd+7aWaf5EA9A UQAjisEJuTGFF9wUM/aam2l2/UBY5204zeUx5sXBT3ZgMIPtcJRGTKjmPc+ucBsG tVtoHaZLG8V6ZTwu8p6NiIfNxj/gYh5gxOrfeNdIVYEVqwS273bC4HjlSV5HQvEL 6t2e7FgIKiDS6KHGaqjQShEg383OWRh6kLLUFSgjfdodsjGrneRtzd+x03LdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+7W9NX2WGu+GDJIZNhSjt3t3vKAwHwYDVR0j BBgwFoAU4q7sffiXqdbk8NHRxDEqA/r1dW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjZkOGY5Ny1jODA2LTQ3OTktODVlMC04Y2NmMThkYmJiMzEvMC9FMkFFRUM3REY4 OTdBOUQ2RTRGMEQxRDFDNDMxMkEwM0ZBRjU3NTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJBMDNGQUY1 NzU2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2ZDhmOTctYzgwNi00Nzk5LTg1 ZTAtOGNjZjE4ZGJiYjMxLzAvRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJB MDNGQUY1NzU2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/DilfIE1ecRhAIAomHcLX/hAHlnuibFRxk RVq/jocP6DWsnWWmI+LDmom55dVzkFE/cHdwE0obNdjF47e5pN0lAKDL3YUOT8Ry soVYWqVdGUpiI1pd+fiXWbUX2FixocrBUAXpo7yFZFKzC5Qgmvy+C0alURT8jT/w aK2dG4CAmcLX+yKFUe6dPZ/rufmUfo3sysckxG59DyNZrLEzex6RbCXEuoHJffdO AQ39rQNWQrvhsFyWSqNhgrQdfdIUZx74mAgZpk4jKg2QNuwdYNL8ta5RhrKRlVT5 nni0rmQhwmdwg12qD4u/ZF8vo97TLHFdouko8sZyzoQ6dVh054k= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:46 2025 by rpki-client