$ rpki-client -vvf repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft File: E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft (raw, json) Hash identifier: ekBn0PMFc3BkWGIC5SIfdxRj6zWZuru1sefoL8KHVBM= Subject key identifier: 28:FA:C9:8E:35:53:D0:AF:EC:D2:AB:ED:26:5D:F6:D9:27:36:A8:E3 Authority key identifier: E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D Certificate issuer: /CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D Certificate serial: 2608BCB8545DFB296AD086DCD287B50412CDA5E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft Manifest number: 0391 Signing time: Sat 06 Sep 2025 20:40:40 +0000 Manifest this update: Sat 06 Sep 2025 20:35:40 +0000 Manifest next update: Tue 09 Sep 2025 23:23:40 +0000 Files and hashes: 1: 323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa (hash: goKqtOANx7qYkuYC16JMyOMD7wMXtPJ41zk+xa8C7PI=) 2: 3130332e33312e3230362e302f32342d3234203d3e203435373138.roa (hash: w1mWD70iTqDZcL+qWJT3UxUlTEt3Oeyv9uC8w3hj0HU=) 3: 3130332e3139382e39332e302f32342d3234203d3e203435373138.roa (hash: wa+1RTscgoKKgYWFX2arn9cWcToBF6A/kXjZvyHLVV8=) 4: 3131372e3130332e36342e302f32322d3234203d3e203435373138.roa (hash: dcaXEHmtpvgdp2B+61+9NSsaEhu3dJ+pR5a99XJxHq0=) 5: E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl (hash: 9p5Nqn6llYZBcJS3blb/IijfzcDBzt8YhT3FPaVxm2o=) 6: 3130332e33312e3230342e302f32332d3234203d3e203435373138.roa (hash: VoMnlv1vt+phfoqqSj3NlhfZbmojrA8l7T65WTVbYMM=) 7: 3230332e37392e32392e302f32342d3234203d3e203435373138.roa (hash: ILlvOWLN9Xs8cUbwHU8Z2NUUNxyuB2q6+J4DPU9EvmQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 23:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:08:bc:b8:54:5d:fb:29:6a:d0:86:dc:d2:87:b5:04:12:cd:a5:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D Validity Not Before: Sep 6 20:35:40 2025 GMT Not After : Sep 9 23:23:40 2025 GMT Subject: CN=28FAC98E3553D0AFECD2ABED265DF6D92736A8E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:06:9a:79:29:9e:1a:df:39:0f:36:d4:7e:14: 79:a4:0e:b2:5b:20:a6:c1:af:a3:aa:92:60:9f:ef: 8d:fe:44:4d:c6:0a:9c:2f:8e:4d:c4:0a:0e:39:36: c8:dc:59:42:e9:43:fc:b8:6e:e2:8f:9c:ce:75:84: 37:0c:a4:34:50:8a:00:8a:74:8c:12:50:57:17:4b: 45:fd:1a:63:9d:49:ea:1c:44:dd:b5:45:1f:11:a1: ca:fe:e1:0f:1f:14:db:15:a0:1a:b7:cb:ae:31:17: 4d:7f:a1:05:34:05:c7:2f:1e:ba:0d:ef:a3:ab:ab: ec:f3:4e:3b:7b:1d:44:6a:9f:fa:5a:61:86:70:c3: 5f:34:4a:02:a1:c5:1a:79:30:56:38:ef:a6:1b:b0: fa:24:72:0b:79:80:31:1f:15:06:10:83:d3:b9:97: c5:79:d4:61:b8:50:26:25:b7:94:c0:76:d4:f3:5b: 7b:c5:1e:13:4b:ff:fa:7f:d0:64:29:ec:2b:a5:fe: 52:27:77:0d:2b:1c:05:d4:c1:83:f9:a3:67:e5:de: 5f:93:bd:fe:2c:2d:92:28:31:46:0a:b6:65:35:97: 9d:20:ea:28:fc:23:7e:cb:4c:d2:98:9b:72:1d:c8: d7:fc:b3:cf:19:b8:bf:92:2c:71:04:f7:08:7a:77: 57:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FA:C9:8E:35:53:D0:AF:EC:D2:AB:ED:26:5D:F6:D9:27:36:A8:E3 X509v3 Authority Key Identifier: keyid:E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:cb:f2:14:e2:e6:2b:27:e5:b1:a5:38:f7:df:35:2c:7b:6f: 9c:92:9a:89:0e:19:ea:29:c7:31:f4:ab:10:f4:bd:42:c7:58: ba:ef:03:1f:5b:b3:76:19:32:91:73:ce:31:84:79:6b:be:21: db:91:d7:ba:8f:fa:7e:5c:86:86:41:f3:6e:fa:e7:47:a9:d9: 6e:fb:85:13:6e:1b:f1:0b:ef:84:75:78:e9:34:3c:f5:ea:b7: 4d:b1:4d:8f:18:e6:13:52:ad:4c:72:d8:63:bb:0d:b5:48:5a: b0:a9:a2:b7:e4:6a:17:2e:e3:33:0e:3c:19:f1:35:5d:26:2f: da:f0:72:46:e7:e8:76:d1:48:f0:de:52:05:65:35:07:c0:32: e5:64:3f:2e:21:70:09:5a:c2:da:10:43:0a:3c:c0:a9:c9:27: 38:a4:93:d8:6c:e8:a8:c7:e9:8c:ae:22:94:01:ac:4e:f1:8c: 4d:d7:42:3f:36:07:c2:72:4f:8e:d1:12:f6:76:58:1d:51:a8: a9:b5:c1:8f:3f:b9:23:60:55:6d:0a:f0:45:8d:e4:9e:6e:fd: a7:be:50:a1:7d:bf:8e:a8:96:3a:81:be:a7:9f:25:4c:35:f4: 24:11:9c:e2:51:94:6c:cc:4c:52:20:2f:5a:99:6c:41:5b:0d: 61:ce:50:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJgi8uFRd+ylq0Ibc0oe1BBLNpeEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0MkIz QkQzMUQxRDAeFw0yNTA5MDYyMDM1NDBaFw0yNTA5MDkyMzIzNDBaMDMxMTAvBgNV BAMTKDI4RkFDOThFMzU1M0QwQUZFQ0QyQUJFRDI2NURGNkQ5MjczNkE4RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Bpp5KZ4a3zkPNtR+FHmkDrJb IKbBr6OqkmCf743+RE3GCpwvjk3ECg45NsjcWULpQ/y4buKPnM51hDcMpDRQigCK dIwSUFcXS0X9GmOdSeocRN21RR8Rocr+4Q8fFNsVoBq3y64xF01/oQU0BccvHroN 76Orq+zzTjt7HURqn/paYYZww180SgKhxRp5MFY476YbsPokcgt5gDEfFQYQg9O5 l8V51GG4UCYlt5TAdtTzW3vFHhNL//p/0GQp7Cul/lIndw0rHAXUwYP5o2fl3l+T vf4sLZIoMUYKtmU1l50g6ij8I37LTNKYm3IdyNf8s88ZuL+SLHEE9wh6d1fBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKPrJjjVT0K/s0qvtJl322Sc2qOMwHwYDVR0j BBgwFoAU5HWosBi65YRI3eVdlIdEKzvTHR0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDQ5YzIxMC1mMzY1LTQzMmYtYTdjYS0wYjVlYjg2YjAxYzYvMC9FNDc1QThCMDE4 QkFFNTg0NDhEREU1NUQ5NDg3NDQyQjNCRDMxRDFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0MkIzQkQz MUQxRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA0OWMyMTAtZjM2NS00MzJmLWE3 Y2EtMGI1ZWI4NmIwMWM2LzAvRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0 MkIzQkQzMUQxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHL8hTi5isn5bGlOPffNSx7b5ySmokOGeop xzH0qxD0vULHWLrvAx9bs3YZMpFzzjGEeWu+IduR17qP+n5choZB827650ep2W77 hRNuG/EL74R1eOk0PPXqt02xTY8Y5hNSrUxy2GO7DbVIWrCporfkahcu4zMOPBnx NV0mL9rwckbn6HbRSPDeUgVlNQfAMuVkPy4hcAlawtoQQwo8wKnJJzikk9hs6KjH 6YyuIpQBrE7xjE3XQj82B8JyT47REvZ2WB1RqKm1wY8/uSNgVW0K8EWN5J5u/ae+ UKF9v46oljqBvqefJUw19CQRnOJRlGzMTFIgL1qZbEFbDWHOUNY= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:44 2025 by rpki-client