$ rpki-client -vvf repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft File: E3928623409C1C10E292F838F8308E11636E6C03.mft (raw, json) Hash identifier: 20g+1eJbY9C7bVfDHbB0otkLpTKvYCdgy7u1vBW/nOY= Subject key identifier: 49:3C:DE:A3:88:8C:8B:AA:72:BE:5C:88:7D:BC:56:AE:57:32:7C:F6 Authority key identifier: E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03 Certificate issuer: /CN=E3928623409C1C10E292F838F8308E11636E6C03 Certificate serial: 618800995A5B72C7DB01740EDE47CDD31E3DFB7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft Manifest number: BB Signing time: Mon 08 Sep 2025 09:12:10 +0000 Manifest this update: Mon 08 Sep 2025 09:07:10 +0000 Manifest next update: Thu 11 Sep 2025 17:48:10 +0000 Files and hashes: 1: E3928623409C1C10E292F838F8308E11636E6C03.crl (hash: Y3f89Fp4vgz+yfnnJocaMCUhp1UmZ7JnxcbG9JXqo7o=) 2: 323030313a6466343a6334303a3a2f34382d3438203d3e20313533303639.roa (hash: yKi1/CgLy/vSnVRFpQJ8qbRC3Gfhckznl3idTXbJhUE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.crl rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 17:48:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:88:00:99:5a:5b:72:c7:db:01:74:0e:de:47:cd:d3:1e:3d:fb:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3928623409C1C10E292F838F8308E11636E6C03 Validity Not Before: Sep 8 09:07:10 2025 GMT Not After : Sep 11 17:48:10 2025 GMT Subject: CN=493CDEA3888C8BAA72BE5C887DBC56AE57327CF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ba:b5:19:9f:41:c1:d7:26:93:82:e1:d8:f3: 07:c3:94:fb:e5:52:5d:af:65:24:d3:a3:ee:42:eb: 1d:b4:c0:d8:51:17:9b:ed:6c:ab:a3:d4:70:b4:8b: e2:74:59:c6:99:a3:b0:89:6b:dc:66:46:72:93:f2: 56:2a:f3:be:87:5f:77:d1:05:7b:b8:fd:8c:cd:b6: 8e:7b:88:e5:93:2d:77:21:4b:31:d1:30:c6:44:cb: 97:dd:cf:b0:bd:60:1c:27:c7:e5:4d:5d:1e:99:9c: 04:a2:75:c0:4e:ce:b3:1e:f0:ef:5f:17:fe:fa:f3: 37:cf:bf:6d:29:6f:20:72:63:b4:d7:01:73:d5:24: 7f:81:14:a7:83:1a:29:6e:29:0f:34:78:48:19:52: 95:d2:7e:a3:09:5d:ba:12:5e:c7:96:00:76:d3:12: 1a:9d:52:96:c8:b7:fe:4f:5a:08:e3:7d:12:91:d9: 84:b0:66:9a:ae:00:dc:2c:21:e8:cc:ea:9f:63:95: d8:ad:d6:33:7d:42:19:d2:d3:a8:a8:5f:52:08:98: be:81:27:6b:3b:8c:84:2f:d4:2d:d1:c8:01:55:78: 4d:8c:54:f8:22:ab:bf:42:c8:99:43:2e:0f:d6:4f: 56:c4:6e:a0:0e:ab:03:6d:42:d0:c2:d1:7b:61:fa: 67:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:3C:DE:A3:88:8C:8B:AA:72:BE:5C:88:7D:BC:56:AE:57:32:7C:F6 X509v3 Authority Key Identifier: keyid:E3:92:86:23:40:9C:1C:10:E2:92:F8:38:F8:30:8E:11:63:6E:6C:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E3928623409C1C10E292F838F8308E11636E6C03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/236561d4-23c8-4c9b-890e-4f2632e52c97/1/E3928623409C1C10E292F838F8308E11636E6C03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:59:48:ed:f3:1a:41:80:56:95:d5:10:40:f7:53:25:99:0f: cf:59:9d:11:8b:8b:ba:c9:41:a3:a6:dc:8b:9b:61:4a:f9:0f: e2:c2:ed:c6:43:18:52:89:b6:5a:e6:72:72:d1:d3:e7:7e:d4: 91:7f:1b:a3:3b:da:c6:7b:97:50:02:0e:97:e9:b0:9e:dc:2d: 56:7a:0c:d4:ed:0e:04:03:a3:93:22:58:c9:04:81:1d:2a:9d: e7:2b:ed:2e:cd:9f:eb:74:62:ed:4d:b6:b6:68:06:f9:e6:dc: c4:6b:dc:39:29:8e:b8:41:52:52:7b:fb:f3:95:fa:c9:eb:91: 32:0d:83:d6:5b:64:a3:91:02:57:c2:80:17:b4:e5:ab:56:72: 08:ca:23:e1:ea:eb:5f:1b:aa:2f:74:fe:1a:84:c2:99:fb:3a: d7:04:3f:01:07:5e:ad:b9:65:b8:7e:87:d6:a4:2a:4b:23:a0: 89:62:bd:89:51:de:a7:57:9f:cb:4f:b9:58:46:8d:0f:10:b7: c5:5d:05:61:b2:44:17:73:34:da:4c:f5:c0:b4:7a:5b:c6:d1: a3:44:4a:8d:ba:d0:09:23:c4:ca:4b:e6:e8:0b:fb:05:16:18: 42:b1:be:1d:c5:59:8e:19:e4:85:e1:11:49:56:f3:ee:93:4c: b7:02:1a:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYYgAmVpbcsfbAXQO3kfN0x49+3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM5Mjg2MjM0MDlDMUMxMEUyOTJGODM4RjgzMDhFMTE2 MzZFNkMwMzAeFw0yNTA5MDgwOTA3MTBaFw0yNTA5MTExNzQ4MTBaMDMxMTAvBgNV BAMTKDQ5M0NERUEzODg4QzhCQUE3MkJFNUM4ODdEQkM1NkFFNTczMjdDRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcurUZn0HB1yaTguHY8wfDlPvl Ul2vZSTTo+5C6x20wNhRF5vtbKuj1HC0i+J0WcaZo7CJa9xmRnKT8lYq876HX3fR BXu4/YzNto57iOWTLXchSzHRMMZEy5fdz7C9YBwnx+VNXR6ZnASidcBOzrMe8O9f F/768zfPv20pbyByY7TXAXPVJH+BFKeDGiluKQ80eEgZUpXSfqMJXboSXseWAHbT EhqdUpbIt/5PWgjjfRKR2YSwZpquANwsIejM6p9jldit1jN9QhnS06ioX1IImL6B J2s7jIQv1C3RyAFVeE2MVPgiq79CyJlDLg/WT1bEbqAOqwNtQtDC0Xth+meLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSTzeo4iMi6pyvlyIfbxWrlcyfPYwHwYDVR0j BBgwFoAU45KGI0CcHBDikvg4+DCOEWNubAMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzY1NjFkNC0yM2M4LTRjOWItODkwZS00ZjI2MzJlNTJjOTcvMS9FMzkyODYyMzQw OUMxQzEwRTI5MkY4MzhGODMwOEUxMTYzNkU2QzAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM5Mjg2MjM0MDlDMUMxMEUyOTJGODM4RjgzMDhFMTE2MzZF NkMwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM2NTYxZDQtMjNjOC00YzliLTg5 MGUtNGYyNjMyZTUyYzk3LzEvRTM5Mjg2MjM0MDlDMUMxMEUyOTJGODM4RjgzMDhF MTE2MzZFNkMwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1ZSO3zGkGAVpXVEED3UyWZD89ZnRGLi7rJ QaOm3IubYUr5D+LC7cZDGFKJtlrmcnLR0+d+1JF/G6M72sZ7l1ACDpfpsJ7cLVZ6 DNTtDgQDo5MiWMkEgR0qnecr7S7Nn+t0Yu1NtrZoBvnm3MRr3DkpjrhBUlJ7+/OV +snrkTINg9ZbZKORAlfCgBe05atWcgjKI+Hq618bqi90/hqEwpn7OtcEPwEHXq25 Zbh+h9akKksjoIlivYlR3qdXn8tPuVhGjQ8Qt8VdBWGyRBdzNNpM9cC0elvG0aNE So260AkjxMpL5ugL+wUWGEKxvh3FWY4Z5IXhEUlW8+6TTLcCGhI= -----END CERTIFICATE-----Generated at Tue Sep 9 14:38:42 2025 by rpki-client