$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft File: E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft (raw, json) Hash identifier: xepQ4iBdQ4VAATLrIP2y8O2C+vxluaBFyNhN9e5dXjE= Subject key identifier: 89:9E:FF:BC:8F:36:7B:64:74:0F:79:05:61:FB:8E:0D:94:A1:56:DC Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98 Certificate issuer: /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98 Certificate serial: 35212DDBDCD7C06DCA2B2CD80DC65C7612C8E43F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft Manifest number: 051E Signing time: Sat 06 Sep 2025 00:51:32 +0000 Manifest this update: Sat 06 Sep 2025 00:46:32 +0000 Manifest next update: Tue 09 Sep 2025 11:42:32 +0000 Files and hashes: 1: 3130332e352e35302e302f32342d3234203d3e203538333831.roa (hash: it/SzipXfJLThyc3J7HfzvzUSlGSxUAWhA/O+pawjWg=) 2: 3130332e32302e39312e302f32342d3234203d3e203538333831.roa (hash: euk9OJMoqKJ/PoRjzKpkFgAP821pupDkAT5Pdi0akjA=) 3: E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl (hash: qtlwx9nUXSxMXsB5/ECBXVY8o9/apsHR6bvAxv8UP7k=) 4: 3130332e32302e39302e302f32332d3234203d3e203538333831.roa (hash: 3bTLU0r/kGjXKDq/4CyYvhxk4DKQ0m82aKinCx3VEv4=) 5: 3130332e352e35312e302f32342d3234203d3e203538333831.roa (hash: 8JW2i4QARgl0zJX/bSzH4du3GV59x2527JCrnJKQbAc=) 6: 3136332e35332e3139342e302f32342d3234203d3e203538333831.roa (hash: sWFHDQkTsVJom3rOu9Mf9y3OJpTKgRwn5bDfHA2Pw9Y=) 7: 3130332e352e35302e302f32332d3234203d3e203538333831.roa (hash: n6DP+hj0ytP63iMEg7QfxbSfnpN9qL6B51j5r569ips=) 8: 3130332e32302e39302e302f32342d3234203d3e203538333831.roa (hash: U8zMaSQ7+KDj9JX6Jxw28z4BWL6cFt7T425dsrSW9yo=) 9: 3136332e35332e3139352e302f32342d3234203d3e203538333831.roa (hash: hvbDj3oW0Ulg1k85u9jkPnoGdFUSrxAWB+C8nIEEK6o=) 10: 3136332e35332e3139322e302f32342d3234203d3e203538333831.roa (hash: yZc1iS4QoDixBleI5zCzNqJxlWUKStGiBLindHs1iEI=) 11: 3136332e35332e3139322e302f32322d3234203d3e203538333831.roa (hash: /OfdPYALZiupMxs8iF6+SD24UB/8ZrzibAD0LeJLOAs=) 12: 3136332e35332e3139332e302f32342d3234203d3e203538333831.roa (hash: vA7wUsbitPXQ/g+uEYWZCPKwK0C5BXMnrLidIFEb1Os=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 11:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:21:2d:db:dc:d7:c0:6d:ca:2b:2c:d8:0d:c6:5c:76:12:c8:e4:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98 Validity Not Before: Sep 6 00:46:32 2025 GMT Not After : Sep 9 11:42:32 2025 GMT Subject: CN=899EFFBC8F367B64740F790561FB8E0D94A156DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f8:bf:e6:ab:e7:3b:e6:3b:17:89:19:5c:38: 57:c3:9f:bd:d2:06:80:80:32:bc:b5:a1:fe:c4:47: 00:62:a5:40:a9:a8:db:e5:87:32:95:ea:38:e7:e3: e0:8a:9a:8a:22:49:17:fe:a6:0f:5d:9f:af:71:55: e1:b1:0c:b2:e3:6b:72:d0:f2:0a:be:70:e6:c8:78: 14:e4:0a:4f:57:d0:9c:1f:2a:94:e3:fa:4b:f4:df: 3e:4b:aa:40:81:56:da:f8:d3:31:4c:57:d2:5f:a6: 4c:5a:40:84:eb:57:aa:88:d0:97:82:37:0d:0d:84: 9f:55:bf:25:9a:bc:ac:76:40:5e:02:dd:c7:b8:b9: a2:48:c1:b7:0d:4f:8f:8a:89:b3:25:c6:1e:6d:34: 60:83:95:8b:bc:4c:eb:ac:1c:64:03:32:10:a8:44: bc:e2:c7:de:99:d0:6c:e4:a8:3a:46:34:a2:e4:27: 75:bb:7e:4c:90:8b:a2:53:37:53:1c:1e:68:4a:1e: cf:da:d6:8f:aa:ed:17:4c:fc:7c:1b:26:65:db:47: 5a:49:2e:21:02:ee:83:32:7c:d7:a7:1f:c9:ea:03: 59:05:dd:40:18:2d:40:91:90:d3:a7:97:7d:10:6c: 55:38:fc:5f:77:12:f7:27:63:64:24:9d:e9:cb:bf: fb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9E:FF:BC:8F:36:7B:64:74:0F:79:05:61:FB:8E:0D:94:A1:56:DC X509v3 Authority Key Identifier: keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:a5:a4:2b:49:29:79:40:b0:aa:18:51:1d:10:e1:72:ff:31: 21:48:61:1c:83:02:01:24:d0:6f:8b:d9:8b:54:82:96:43:10: 14:28:6c:0a:7a:52:95:7c:6b:5b:a6:46:72:8d:01:12:83:bd: 64:3e:da:45:07:8d:07:6e:c4:91:60:1a:d0:de:39:c4:ce:56: de:43:08:a2:f3:2e:25:05:e6:ee:15:59:33:a7:7b:0d:3e:89: d1:15:0f:32:e1:fa:19:60:4d:c0:73:3a:b0:e2:ca:0a:52:b2: 76:63:72:f1:47:8c:6a:99:17:e6:4e:5d:75:80:25:31:03:c1: 48:08:64:6c:81:8b:50:56:01:69:d4:82:4a:05:cc:cb:88:ad: 91:4f:c3:29:d6:03:1c:98:64:12:1c:92:d5:5c:1d:63:cb:3c: e1:96:38:51:dd:3b:5e:15:db:0d:f4:1e:e9:34:cc:48:ab:0b: 00:51:d4:99:6a:68:97:3c:7a:7a:d6:5e:81:84:50:c3:de:4f: 57:8e:40:5c:1e:3c:89:d6:4d:d4:c3:86:22:cf:0e:55:13:a0: 30:3a:3f:3a:78:0c:5c:1d:4a:4d:e0:33:f4:4c:6f:12:de:9d: 5a:7b:72:34:85:63:19:8a:a8:9a:4f:00:f9:9a:e3:86:41:bd: 1f:ec:ec:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNSEt29zXwG3KKyzYDcZcdhLI5D8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVBOTA3QzRFQzZEQTZEOTM0MjYxMzI4MENDQUYyNkU5 OERCRUI5ODAeFw0yNTA5MDYwMDQ2MzJaFw0yNTA5MDkxMTQyMzJaMDMxMTAvBgNV BAMTKDg5OUVGRkJDOEYzNjdCNjQ3NDBGNzkwNTYxRkI4RTBEOTRBMTU2REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC++L/mq+c75jsXiRlcOFfDn73S BoCAMry1of7ERwBipUCpqNvlhzKV6jjn4+CKmooiSRf+pg9dn69xVeGxDLLja3LQ 8gq+cObIeBTkCk9X0JwfKpTj+kv03z5LqkCBVtr40zFMV9JfpkxaQITrV6qI0JeC Nw0NhJ9VvyWavKx2QF4C3ce4uaJIwbcNT4+KibMlxh5tNGCDlYu8TOusHGQDMhCo RLzix96Z0GzkqDpGNKLkJ3W7fkyQi6JTN1McHmhKHs/a1o+q7RdM/HwbJmXbR1pJ LiEC7oMyfNenH8nqA1kF3UAYLUCRkNOnl30QbFU4/F93EvcnY2QknenLv/sJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiZ7/vI82e2R0D3kFYfuODZShVtwwHwYDVR0j BBgwFoAU5akHxOxtptk0JhMoDMrybpjb65gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzhkMjc1NS0zODBkLTQ3N2UtYmYyNS0wYWYyOTAyNmJkNzAvMC9FNUE5MDdDNEVD NkRBNkQ5MzQyNjEzMjgwQ0NBRjI2RTk4REJFQjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTVBOTA3QzRFQzZEQTZEOTM0MjYxMzI4MENDQUYyNkU5OERC RUI5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM4ZDI3NTUtMzgwZC00NzdlLWJm MjUtMGFmMjkwMjZiZDcwLzAvRTVBOTA3QzRFQzZEQTZEOTM0MjYxMzI4MENDQUYy NkU5OERCRUI5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSlpCtJKXlAsKoYUR0Q4XL/MSFIYRyDAgEk 0G+L2YtUgpZDEBQobAp6UpV8a1umRnKNARKDvWQ+2kUHjQduxJFgGtDeOcTOVt5D CKLzLiUF5u4VWTOnew0+idEVDzLh+hlgTcBzOrDiygpSsnZjcvFHjGqZF+ZOXXWA JTEDwUgIZGyBi1BWAWnUgkoFzMuIrZFPwynWAxyYZBIcktVcHWPLPOGWOFHdO14V 2w30Huk0zEirCwBR1JlqaJc8enrWXoGEUMPeT1eOQFwePInWTdTDhiLPDlUToDA6 Pzp4DFwdSk3gM/RMbxLenVp7cjSFYxmKqJpPAPma44ZBvR/s7LY= -----END CERTIFICATE-----Generated at Sun Sep 7 15:17:51 2025 by rpki-client