$ rpki-client -vvf repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft File: E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft (raw, json) Hash identifier: uAcfS8Y6n0G/H7DhyKVV3SgMkm0AFkR1EHDBglaKLOo= Subject key identifier: 6D:28:D2:B1:70:63:28:D6:BA:9C:B9:C2:4E:0B:CE:CF:E7:34:46:13 Authority key identifier: E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27 Certificate issuer: /CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27 Certificate serial: 30205B25B0FD2B93C655BBB4DA0340ECF813256F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft Manifest number: 01C1 Signing time: Fri 05 Sep 2025 16:51:03 +0000 Manifest this update: Fri 05 Sep 2025 16:46:03 +0000 Manifest next update: Mon 08 Sep 2025 21:49:03 +0000 Files and hashes: 1: E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl (hash: gtAAmF4vBK8XwB6v7ZnhzXlVZ02+8yPfJtXjKtIGdW0=) 2: 3130332e34372e31312e302f32342d3234203d3e203539323733.roa (hash: HBlBl4qnEWmFIIHkU9MPENaLHFOkHGNLtTU92POPS9Q=) 3: 3130332e34372e31302e302f32332d3233203d3e203539323733.roa (hash: rlKPT6Sw2+EZPDLUv/m04ksSr2kbhw7VmVT/BAYmQMM=) 4: 3130332e34372e31302e302f32342d3234203d3e203539323733.roa (hash: dFHjmVg8iByyDE0AoUz/kaQtWk08pnPg8xzNojTvhm0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 21:49:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:20:5b:25:b0:fd:2b:93:c6:55:bb:b4:da:03:40:ec:f8:13:25:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27 Validity Not Before: Sep 5 16:46:03 2025 GMT Not After : Sep 8 21:49:03 2025 GMT Subject: CN=6D28D2B1706328D6BA9CB9C24E0BCECFE7344613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7b:95:08:2c:41:88:f4:5c:9c:b6:42:29:94: 91:a8:5c:28:b1:97:56:56:39:43:a6:c7:11:7a:c4: e7:34:89:3f:70:09:56:66:81:d8:69:29:ef:2c:dc: 12:af:e5:7a:19:1e:58:93:20:58:01:dd:7e:a4:08: 00:25:a1:31:e0:e8:0d:17:ce:09:25:45:07:05:1d: 59:e6:99:28:65:ba:5a:51:95:be:2d:4e:4b:e1:06: 5d:27:17:f8:79:cf:a3:e1:83:ac:8a:98:93:2a:52: ed:07:e6:cc:43:f9:40:44:78:60:14:7c:c9:da:15: 41:72:ae:a2:c9:52:74:34:d6:1e:15:09:26:a6:03: fd:dc:66:d0:f8:cb:ec:6c:16:40:2d:b9:63:9e:5f: 44:65:b2:72:7e:e7:ba:76:fc:9a:6c:23:95:e7:a2: 9f:7f:b9:7d:06:38:ea:64:0c:8f:21:33:a0:5f:a3: 06:a3:6a:5b:3e:f7:66:76:04:16:97:21:71:84:5a: f4:e4:3d:e2:7f:37:51:cb:12:43:b1:88:08:59:2f: cb:52:e0:34:2d:cc:4f:76:93:c6:77:23:43:af:66: c7:0c:cc:0c:72:24:d7:ed:14:24:95:81:5d:b6:a5: 8b:73:6e:3a:e7:c8:27:10:45:c4:62:6c:69:82:db: ef:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:28:D2:B1:70:63:28:D6:BA:9C:B9:C2:4E:0B:CE:CF:E7:34:46:13 X509v3 Authority Key Identifier: keyid:E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:26:8c:eb:48:81:3a:79:b1:a3:45:c3:00:fa:d9:5f:ff:d9: 53:d5:0e:0f:7b:9e:40:74:e6:ff:f0:71:7b:4b:7d:53:e4:7f: 99:42:fd:5e:16:d6:cb:27:a7:02:80:96:93:25:52:42:1d:86: 4d:ad:d6:ca:de:af:27:5b:b2:d9:6b:d0:79:c4:24:3d:6e:65: 50:c0:7f:e0:0f:6f:6d:89:92:90:e3:9e:e0:46:dc:53:18:b7: 68:ea:08:ca:b1:46:5f:82:bb:e6:ce:fc:75:79:61:2c:b1:a7: 00:a7:06:bb:10:06:14:37:ab:d7:dd:54:63:84:6a:e9:c9:f9: 37:df:69:1b:5d:cf:7a:41:48:fd:bf:d6:a5:2f:53:04:4b:0a: a0:7a:d7:d9:cd:36:64:90:09:4d:cc:73:3c:af:20:d9:99:59: 82:52:76:00:a7:be:bc:50:d1:c4:fd:2e:da:19:a1:e0:41:60: 0c:f1:77:93:cb:d4:ef:86:68:8d:55:7c:20:94:82:80:3d:e5: 9c:38:59:8c:74:d2:31:c6:21:74:9c:d8:f9:68:cf:88:35:ff: 75:0d:f9:49:98:d5:5a:e4:3a:e7:5f:9b:1d:e8:b9:89:a4:08: b9:4b:3b:86:7a:d6:96:44:b6:99:2f:01:6c:7a:d9:4f:79:24: ae:1e:3d:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMCBbJbD9K5PGVbu02gNA7PgTJW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZG QTI5QUIyNzAeFw0yNTA5MDUxNjQ2MDNaFw0yNTA5MDgyMTQ5MDNaMDMxMTAvBgNV BAMTKDZEMjhEMkIxNzA2MzI4RDZCQTlDQjlDMjRFMEJDRUNGRTczNDQ2MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYe5UILEGI9FyctkIplJGoXCix l1ZWOUOmxxF6xOc0iT9wCVZmgdhpKe8s3BKv5XoZHliTIFgB3X6kCAAloTHg6A0X zgklRQcFHVnmmShlulpRlb4tTkvhBl0nF/h5z6Phg6yKmJMqUu0H5sxD+UBEeGAU fMnaFUFyrqLJUnQ01h4VCSamA/3cZtD4y+xsFkAtuWOeX0RlsnJ+57p2/JpsI5Xn op9/uX0GOOpkDI8hM6Bfowajals+92Z2BBaXIXGEWvTkPeJ/N1HLEkOxiAhZL8tS 4DQtzE92k8Z3I0OvZscMzAxyJNftFCSVgV22pYtzbjrnyCcQRcRibGmC2++dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbSjSsXBjKNa6nLnCTgvOz+c0RhMwHwYDVR0j BBgwFoAU6R1R5UqJwN29V/AKE+luNvopqycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWE3MmViOS04ZTUzLTQ0NzItYTM1YS1mZWU4YmYwYWY0NmYvMC9FOTFENTFFNTRB ODlDMEREQkQ1N0YwMEExM0U5NkUzNkZBMjlBQjI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZGQTI5 QUIyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVhNzJlYjktOGU1My00NDcyLWEz NWEtZmVlOGJmMGFmNDZmLzAvRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZF MzZGQTI5QUIyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwmjOtIgTp5saNFwwD62V//2VPVDg97nkB0 5v/wcXtLfVPkf5lC/V4W1ssnpwKAlpMlUkIdhk2t1srerydbstlr0HnEJD1uZVDA f+APb22JkpDjnuBG3FMYt2jqCMqxRl+Cu+bO/HV5YSyxpwCnBrsQBhQ3q9fdVGOE aunJ+TffaRtdz3pBSP2/1qUvUwRLCqB619nNNmSQCU3MczyvINmZWYJSdgCnvrxQ 0cT9LtoZoeBBYAzxd5PL1O+GaI1VfCCUgoA95Zw4WYx00jHGIXSc2Ploz4g1/3UN +UmY1VrkOudfmx3ouYmkCLlLO4Z61pZEtpkvAWx62U95JK4ePYE= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:13 2025 by rpki-client