$ rpki-client -vvf repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft File: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft (raw, json) Hash identifier: 7SrIt8STDDW1F4FrzIkwKhL+3iCup0wr5VsH/sMEUk8= Subject key identifier: 6C:A2:4A:BE:C0:8B:66:DC:C5:C9:C8:08:E1:DB:00:E3:24:5E:28:E8 Authority key identifier: E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F Certificate issuer: /CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Certificate serial: 5543C93747D6091AA0250549D4CD7AED0E2B9886 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft Manifest number: E7 Signing time: Sat 06 Sep 2025 23:51:50 +0000 Manifest this update: Sat 06 Sep 2025 23:46:50 +0000 Manifest next update: Wed 10 Sep 2025 08:05:50 +0000 Files and hashes: 1: 3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa (hash: PEcDYL2YEDwvOwIh2isXFSsdo3mWol6RplkSJ7kPOGI=) 2: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl (hash: +4kox/ql9MaNqCEMmytCiPYVftMDSQ6Ch8DBB/uGvnc=) 3: 3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (hash: 0+ulOJPEXxfRU9rDzPOyAhCIeStaBB8o7bfVtpS93+A=) 4: 323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa (hash: k742tyOIX18+4IlFbV4FgY2xaEXxztUec+tXVFs15vs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 08:05:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:43:c9:37:47:d6:09:1a:a0:25:05:49:d4:cd:7a:ed:0e:2b:98:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Validity Not Before: Sep 6 23:46:50 2025 GMT Not After : Sep 10 08:05:50 2025 GMT Subject: CN=6CA24ABEC08B66DCC5C9C808E1DB00E3245E28E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b7:f4:a8:7e:5e:7a:b7:62:19:b7:b4:05:59: 83:dd:cd:08:ca:91:ca:d4:93:d0:12:3b:9b:d6:28: 5b:0e:1f:1a:da:ec:6e:bf:57:16:35:5b:10:0e:8b: 9b:8a:5d:63:4c:14:f4:17:dc:a2:02:6e:6e:db:27: 62:e1:e2:25:8f:f0:48:ee:db:16:d7:a8:d0:b4:12: 9b:9b:2b:34:37:e0:a9:28:19:8f:90:fb:e4:a4:d1: ce:9b:97:f1:34:4d:39:c7:40:0b:94:e1:ca:5c:6d: c2:fa:8c:f5:39:25:b5:7a:d1:29:aa:84:ad:74:b7: 49:8a:19:1c:c0:eb:c3:35:8a:13:e8:a9:a0:31:2c: 61:72:6c:9a:f6:aa:1b:85:a5:f2:5e:ed:e8:14:67: 2e:93:3d:9b:f4:ac:2c:dd:6f:36:5f:fb:f1:0a:08: a6:3e:c3:7b:f7:8f:48:fc:c5:09:15:ec:bd:54:f2: db:fc:0a:b1:7b:9c:08:53:77:4b:0d:c6:7a:bb:32: 91:2e:99:4e:6b:76:27:b7:29:1c:54:66:81:f6:76: e4:74:11:37:59:a9:f2:92:13:88:40:50:81:19:19: 50:fc:42:dc:12:b7:35:4c:16:7f:91:34:9e:7b:48: 2d:29:93:74:35:80:dc:93:6b:10:ba:f9:4d:e4:6c: 44:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A2:4A:BE:C0:8B:66:DC:C5:C9:C8:08:E1:DB:00:E3:24:5E:28:E8 X509v3 Authority Key Identifier: keyid:E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:1b:1d:b8:81:f3:b3:bb:c0:3f:ba:33:2c:74:99:bb:45:76: f9:ff:3a:f5:75:06:1b:ce:1d:f7:47:7c:9e:94:76:fe:f2:fb: f8:e0:2a:46:d4:9e:82:63:7e:37:ed:a1:2e:ef:ad:d8:88:d1: 56:60:dc:fb:98:3c:63:58:82:0c:64:71:65:01:f1:cc:25:f4: ee:1a:49:77:34:c4:1a:a4:25:11:3d:74:4d:45:92:fa:28:28: 2a:e8:9b:e5:66:60:24:d8:bd:d4:ec:c5:f1:29:24:57:d1:4c: c7:95:07:dc:34:bd:b6:25:d7:3c:c7:05:3f:9d:73:bf:dc:55: d2:35:1b:a8:74:f8:a9:59:d7:ec:20:e1:34:d2:67:00:32:da: 33:63:5d:68:bf:4d:3c:a3:ce:28:c5:57:a5:02:26:a2:e6:e1: 4f:01:0d:96:4a:96:fd:3f:a2:b8:96:6c:4a:9e:b3:c2:c1:b5: d8:a8:5a:b9:f1:df:cb:d6:fe:86:88:da:48:a0:fb:5c:b4:30: 0c:f3:17:63:62:f8:76:78:bd:5a:a2:3e:84:c4:33:6c:49:a7: 94:a7:7a:dd:25:e0:2f:85:d3:6f:fb:2e:a3:e3:1e:08:ff:5a: 71:57:13:3e:ad:a8:bb:37:e5:d0:0c:0c:e2:81:41:5b:fc:ef: a8:9f:59:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVUPJN0fWCRqgJQVJ1M167Q4rmIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0Iy REJCRUQwRjAeFw0yNTA5MDYyMzQ2NTBaFw0yNTA5MTAwODA1NTBaMDMxMTAvBgNV BAMTKDZDQTI0QUJFQzA4QjY2RENDNUM5QzgwOEUxREIwMEUzMjQ1RTI4RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPt/Sofl56t2IZt7QFWYPdzQjK kcrUk9ASO5vWKFsOHxra7G6/VxY1WxAOi5uKXWNMFPQX3KICbm7bJ2Lh4iWP8Eju 2xbXqNC0EpubKzQ34KkoGY+Q++Sk0c6bl/E0TTnHQAuU4cpcbcL6jPU5JbV60Smq hK10t0mKGRzA68M1ihPoqaAxLGFybJr2qhuFpfJe7egUZy6TPZv0rCzdbzZf+/EK CKY+w3v3j0j8xQkV7L1U8tv8CrF7nAhTd0sNxnq7MpEumU5rdie3KRxUZoH2duR0 ETdZqfKSE4hAUIEZGVD8QtwStzVMFn+RNJ57SC0pk3Q1gNyTaxC6+U3kbESXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbKJKvsCLZtzFycgI4dsA4yReKOgwHwYDVR0j BBgwFoAU5M7BHyRL8Nq+wTb4Of1Tey277Q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmYzZjVkOS1jZmI4LTQxMjMtYTJiMS1iMGI1Mjk5ZjljNmUvMC9FNENFQzExRjI0 NEJGMERBQkVDMTM2RjgzOUZENTM3QjJEQkJFRDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0IyREJC RUQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJmM2Y1ZDktY2ZiOC00MTIzLWEy YjEtYjBiNTI5OWY5YzZlLzAvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUz N0IyREJCRUQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKAbHbiB87O7wD+6Myx0mbtFdvn/OvV1BhvO HfdHfJ6Udv7y+/jgKkbUnoJjfjftoS7vrdiI0VZg3PuYPGNYggxkcWUB8cwl9O4a SXc0xBqkJRE9dE1FkvooKCrom+VmYCTYvdTsxfEpJFfRTMeVB9w0vbYl1zzHBT+d c7/cVdI1G6h0+KlZ1+wg4TTSZwAy2jNjXWi/TTyjzijFV6UCJqLm4U8BDZZKlv0/ oriWbEqes8LBtdioWrnx38vW/oaI2kig+1y0MAzzF2Ni+HZ4vVqiPoTEM2xJp5Sn et0l4C+F02/7LqPjHgj/WnFXEz6tqLs35dAMDOKBQVv876ifWWk= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:48 2025 by rpki-client