$ rpki-client -vvf repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft File: E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft (raw, json) Hash identifier: SQHpdSVlnZZPqwAJAolC/Gy5SZTxA+KSFTwiH33QoVw= Subject key identifier: 67:F9:5A:86:86:24:9D:C9:26:70:4F:76:D6:46:86:8E:03:4A:F9:3E Authority key identifier: E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9 Certificate issuer: /CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9 Certificate serial: 7FB11262425FC35D9C1D06BF0784DA33406AD1B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft Manifest number: 01E8 Signing time: Sun 07 Sep 2025 12:41:28 +0000 Manifest this update: Sun 07 Sep 2025 12:36:28 +0000 Manifest next update: Wed 10 Sep 2025 12:57:28 +0000 Files and hashes: 1: 3130332e3138392e3234382e302f32342d3234203d3e20313439383838.roa (hash: imfZYd+PwuMIdN7UcBrml21Vlzc4h9f5RzLmotI9hlU=) 2: 3130332e3138392e3234392e302f32342d3234203d3e20313439383838.roa (hash: D0t/YeMSaxANRp7Cjj+UYZjgVfcPEy0eqBQGOyEnZWA=) 3: E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl (hash: q8Sky733EPzBWGfIlT2JCj3nK0/z3kh/nO9JmIFJ/Rk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b1:12:62:42:5f:c3:5d:9c:1d:06:bf:07:84:da:33:40:6a:d1:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9 Validity Not Before: Sep 7 12:36:28 2025 GMT Not After : Sep 10 12:57:28 2025 GMT Subject: CN=67F95A8686249DC926704F76D646868E034AF93E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:db:e5:da:b1:d4:74:99:98:3e:a2:42:d5:ea: 58:77:48:03:b9:f9:2d:cd:8c:d7:4c:1c:2f:9c:e5: bb:81:34:96:d5:95:09:2b:d2:a9:a7:6c:b8:a0:ed: 85:c2:2a:40:9e:07:1c:19:40:64:21:b0:f7:53:04: 78:7b:46:a2:36:d8:a6:b0:a5:e1:35:c5:64:b2:55: cd:82:e5:f5:8d:aa:8f:ef:ad:50:2b:5e:62:08:6f: 71:ae:f5:1c:aa:6f:33:9f:04:47:de:6c:2a:1e:5d: c2:0a:95:52:62:4b:9f:b7:c0:98:fd:fc:b4:a0:ea: 48:4a:f2:30:6e:66:53:23:06:56:4b:5c:ce:01:58: c1:5e:3f:e4:86:11:38:bc:67:b9:ad:0a:4b:e4:dc: 48:96:bb:7f:b5:86:3b:c4:39:13:2d:30:1c:b3:7d: af:d4:89:ab:ab:b4:48:04:93:84:4a:03:66:97:0f: 21:f8:fc:1b:e1:cd:d2:bb:3e:6a:a0:c6:e8:5a:49: 38:f4:86:ca:ec:98:22:b7:b2:cb:75:1f:16:6a:04: c6:b8:96:ee:f2:1a:8f:de:66:37:1a:a8:49:fb:d8: 26:cd:54:5d:1e:b7:4e:8a:94:49:1c:7e:70:68:ad: 78:c8:ce:90:45:8e:33:5b:da:87:a7:ca:fb:a7:81: ae:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F9:5A:86:86:24:9D:C9:26:70:4F:76:D6:46:86:8E:03:4A:F9:3E X509v3 Authority Key Identifier: keyid:E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:14:6b:ef:3e:39:2a:e1:05:4c:9d:9c:a2:62:82:78:e3:ce: f6:75:54:71:82:c7:ae:24:6f:3b:12:62:7c:82:bf:cc:d6:a0: 7c:13:72:b8:75:1b:b2:dc:69:f5:88:8e:18:5a:57:c3:2a:39: 54:68:ee:c9:2a:33:78:70:28:b1:c5:7f:45:1a:f9:a7:05:d4: 01:2c:db:bd:b6:bb:e1:5c:70:7d:57:78:94:f8:5e:51:22:0b: da:4e:b4:70:ea:0c:91:19:d9:8d:f0:13:73:4e:f8:c6:33:85: 49:82:33:e1:5b:2c:20:33:b9:64:2a:08:78:e0:ea:d0:20:0e: 7d:7b:f3:e1:ea:e5:dd:c9:e1:7a:42:bb:14:7f:74:c1:08:48: 17:a7:4c:59:1d:d0:3e:58:61:d7:1c:0f:dc:99:5f:a8:a5:f7: e8:c6:9f:21:aa:2f:45:26:f2:70:92:16:9d:3f:3e:5c:7f:7f: 28:ee:39:f3:d1:6d:e1:96:95:70:9b:4c:e1:5d:2d:9b:3a:56: 2b:c2:5a:ff:3d:fe:70:1e:aa:86:72:7d:bb:0f:a1:f1:c7:df: ce:3d:1d:89:b4:7a:f6:78:a2:c6:06:7a:d8:76:39:ac:d6:cd: 14:ca:51:00:4e:22:72:15:26:93:e8:dc:24:62:0c:ae:62:37: 47:2f:2e:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf7ESYkJfw12cHQa/B4TaM0Bq0bgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VEMjEx QzlGMjFDOTAeFw0yNTA5MDcxMjM2MjhaFw0yNTA5MTAxMjU3MjhaMDMxMTAvBgNV BAMTKDY3Rjk1QTg2ODYyNDlEQzkyNjcwNEY3NkQ2NDY4NjhFMDM0QUY5M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy2+XasdR0mZg+okLV6lh3SAO5 +S3NjNdMHC+c5buBNJbVlQkr0qmnbLig7YXCKkCeBxwZQGQhsPdTBHh7RqI22Kaw peE1xWSyVc2C5fWNqo/vrVArXmIIb3Gu9RyqbzOfBEfebCoeXcIKlVJiS5+3wJj9 /LSg6khK8jBuZlMjBlZLXM4BWMFeP+SGETi8Z7mtCkvk3EiWu3+1hjvEORMtMByz fa/UiaurtEgEk4RKA2aXDyH4/BvhzdK7PmqgxuhaSTj0hsrsmCK3sst1HxZqBMa4 lu7yGo/eZjcaqEn72CbNVF0et06KlEkcfnBorXjIzpBFjjNb2oenyvunga6lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ/lahoYknckmcE921kaGjgNK+T4wHwYDVR0j BBgwFoAU4s2qIjv7bysTlz64A1PtIRyfIckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGY0MTY0ZS03NGU1LTQwZDYtOWEzMC1iMzcyYTRkMmE0NTQvMC9FMkNEQUEyMjNC RkI2RjJCMTM5NzNFQjgwMzUzRUQyMTFDOUYyMUM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VEMjExQzlG MjFDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRmNDE2NGUtNzRlNS00MGQ2LTlh MzAtYjM3MmE0ZDJhNDU0LzAvRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VE MjExQzlGMjFDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYUa+8+OSrhBUydnKJignjjzvZ1VHGCx64k bzsSYnyCv8zWoHwTcrh1G7LcafWIjhhaV8MqOVRo7skqM3hwKLHFf0Ua+acF1AEs 2722u+FccH1XeJT4XlEiC9pOtHDqDJEZ2Y3wE3NO+MYzhUmCM+FbLCAzuWQqCHjg 6tAgDn178+Hq5d3J4XpCuxR/dMEISBenTFkd0D5YYdccD9yZX6il9+jGnyGqL0Um 8nCSFp0/Plx/fyjuOfPRbeGWlXCbTOFdLZs6VivCWv89/nAeqoZyfbsPofHH3849 HYm0evZ4osYGeth2OazWzRTKUQBOInIVJpPo3CRiDK5iN0cvLpA= -----END CERTIFICATE-----Generated at Sun Sep 7 15:14:36 2025 by rpki-client