$ rpki-client -vvf repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft File: E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft (raw, json) Hash identifier: d8rkTZuJdQuDqS+VuAgphlK5dSkBkMFRUh322I5M3TA= Subject key identifier: B4:C5:41:58:D9:CC:6F:62:39:43:CC:CA:BF:58:A3:D5:98:53:03:51 Authority key identifier: E4:81:3B:FD:9F:D2:7C:9C:A2:2A:77:0F:5D:84:6B:50:FC:78:3A:3C Certificate issuer: /CN=E4813BFD9FD27C9CA22A770F5D846B50FC783A3C Certificate serial: 25F86E3D23D0AA697662E61078AA478ACDCA5E3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft Manifest number: 01C4 Signing time: Sat 06 Sep 2025 20:40:44 +0000 Manifest this update: Sat 06 Sep 2025 20:35:44 +0000 Manifest next update: Tue 09 Sep 2025 23:24:44 +0000 Files and hashes: 1: E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl (hash: c8o/EOb3jK36RdWWNxs9Miq8j6o/Cp/e/R3tTKimMNE=) 2: 3130332e3134372e37342e302f32332d3234203d3e203137373639.roa (hash: l7e04tx4Mr56W+sGrraQme0eR5MHoJterHz1neaHXyk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 23:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f8:6e:3d:23:d0:aa:69:76:62:e6:10:78:aa:47:8a:cd:ca:5e:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4813BFD9FD27C9CA22A770F5D846B50FC783A3C Validity Not Before: Sep 6 20:35:44 2025 GMT Not After : Sep 9 23:24:44 2025 GMT Subject: CN=B4C54158D9CC6F623943CCCABF58A3D598530351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:57:07:8e:fd:7c:38:71:be:54:72:c3:88:65: 39:29:01:91:98:9a:ce:ab:8b:cf:16:b8:b0:29:a8: d1:37:d6:69:0d:db:04:2f:dd:61:cc:b1:00:10:d8: 90:c2:5d:2e:9c:76:c8:17:31:d2:bb:92:16:1c:b5: e8:09:c7:3c:71:61:03:82:d0:da:06:c4:84:ea:9e: 5d:24:f0:7d:99:ab:de:24:92:8e:49:e1:fd:90:7e: 26:0d:7d:16:f1:72:eb:ed:4e:f3:04:7c:01:54:1f: b9:29:09:6f:b3:74:9a:e5:1a:12:36:79:8d:68:a6: aa:ba:f2:9a:9a:3d:29:bb:12:24:7f:90:e8:07:83: 1c:5f:2e:aa:99:7a:e5:05:13:ea:2a:d6:8a:0d:82: 5a:16:5c:69:29:d5:48:cf:70:03:3a:0d:dc:9d:c9: 9a:d1:4c:57:1e:53:bb:3e:df:2b:6d:aa:55:dd:f3: 0d:d5:dd:db:2a:17:83:7f:f0:c9:23:8d:f5:2c:73: c2:29:17:1c:56:d8:df:27:fb:d2:91:a8:d4:22:33: 7d:fa:43:d4:6e:b1:cd:91:51:c5:c8:aa:b8:89:d4: 39:ca:b3:06:d0:c8:21:a6:60:bd:33:9f:9d:6e:c9: 0b:c3:ce:19:b6:c8:d9:a6:25:af:24:d3:ed:3d:94: 5f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C5:41:58:D9:CC:6F:62:39:43:CC:CA:BF:58:A3:D5:98:53:03:51 X509v3 Authority Key Identifier: keyid:E4:81:3B:FD:9F:D2:7C:9C:A2:2A:77:0F:5D:84:6B:50:FC:78:3A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:68:16:68:a6:83:2b:ca:a0:3e:9b:28:c3:ed:fc:ac:d0:d1: 96:a0:6d:1d:e9:8d:7a:4d:f3:d7:82:42:b6:39:6a:ec:ab:da: 0c:62:eb:68:2e:73:07:be:7f:bf:37:7e:e2:69:15:c4:78:dd: 5d:f7:78:8d:28:e9:2b:c5:ed:3f:7f:ca:96:fe:06:de:47:2e: 9e:f3:63:f1:2a:e7:5f:be:ff:d6:39:87:d9:2a:0b:a1:9a:b7: 8f:67:d0:43:d1:20:7a:6d:d8:ad:08:a0:9d:b1:34:fd:fe:6f: 06:22:1c:e1:94:cc:2d:70:f1:77:aa:ec:ed:f4:8d:78:c1:e9: 81:42:62:be:67:ae:02:2b:30:f0:12:62:7e:a1:7c:74:54:fb: 52:e2:6d:f6:00:7f:cd:4f:b7:bd:ac:0a:bf:05:f1:03:eb:6e: 18:ac:35:1f:4b:69:78:53:9c:6e:02:8d:35:a4:cc:70:75:c9: a3:be:af:89:90:99:5a:d0:d1:9b:f0:c5:d8:62:c3:d6:0a:47: 26:5c:8e:21:01:ce:fe:cd:62:ce:31:0d:42:0b:45:79:f9:ea: 3a:f4:94:bf:36:e9:91:65:95:d7:61:7c:e5:a8:a0:e4:5a:13: ae:45:28:b8:eb:75:ec:92:2e:dd:d7:1c:cb:d1:c4:33:6c:a1: 92:ee:f8:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJfhuPSPQqml2YuYQeKpHis3KXjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3NzBGNUQ4NDZCNTBG Qzc4M0EzQzAeFw0yNTA5MDYyMDM1NDRaFw0yNTA5MDkyMzI0NDRaMDMxMTAvBgNV BAMTKEI0QzU0MTU4RDlDQzZGNjIzOTQzQ0NDQUJGNThBM0Q1OTg1MzAzNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBVweO/Xw4cb5UcsOIZTkpAZGY ms6ri88WuLApqNE31mkN2wQv3WHMsQAQ2JDCXS6cdsgXMdK7khYctegJxzxxYQOC 0NoGxITqnl0k8H2Zq94kko5J4f2QfiYNfRbxcuvtTvMEfAFUH7kpCW+zdJrlGhI2 eY1opqq68pqaPSm7EiR/kOgHgxxfLqqZeuUFE+oq1ooNgloWXGkp1UjPcAM6Ddyd yZrRTFceU7s+3yttqlXd8w3V3dsqF4N/8MkjjfUsc8IpFxxW2N8n+9KRqNQiM336 Q9Rusc2RUcXIqriJ1DnKswbQyCGmYL0zn51uyQvDzhm2yNmmJa8k0+09lF+vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtMVBWNnMb2I5Q8zKv1ij1ZhTA1EwHwYDVR0j BBgwFoAU5IE7/Z/SfJyiKncPXYRrUPx4OjwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzI5MDdkMy1iZTI0LTRkYTgtOTZiYi1mMTIyOGZjOTkyMDUvMC9FNDgxM0JGRDlG RDI3QzlDQTIyQTc3MEY1RDg0NkI1MEZDNzgzQTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3NzBGNUQ4NDZCNTBGQzc4 M0EzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjcyOTA3ZDMtYmUyNC00ZGE4LTk2 YmItZjEyMjhmYzk5MjA1LzAvRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3NzBGNUQ4NDZC NTBGQzc4M0EzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtoFmimgyvKoD6bKMPt/KzQ0ZagbR3pjXpN 89eCQrY5auyr2gxi62gucwe+f783fuJpFcR43V33eI0o6SvF7T9/ypb+Bt5HLp7z Y/Eq51++/9Y5h9kqC6Gat49n0EPRIHpt2K0IoJ2xNP3+bwYiHOGUzC1w8Xeq7O30 jXjB6YFCYr5nrgIrMPASYn6hfHRU+1LibfYAf81Pt72sCr8F8QPrbhisNR9LaXhT nG4CjTWkzHB1yaO+r4mQmVrQ0Zvwxdhiw9YKRyZcjiEBzv7NYs4xDUILRXn56jr0 lL826ZFllddhfOWooORaE65FKLjrdeySLt3XHMvRxDNsoZLu+OE= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:06 2025 by rpki-client