$ rpki-client -vvf repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft File: E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft (raw, json) Hash identifier: lOChkthf6zfqAnp/sherovMa+2nr4olewb+UuLl9zjQ= Subject key identifier: 8B:E9:91:04:84:F5:77:18:56:2E:F6:9D:05:22:D6:D4:2B:6E:08:99 Authority key identifier: E9:C6:90:C5:1E:9B:F1:B5:97:83:32:FD:5B:A9:4A:85:01:92:F5:4C Certificate issuer: /CN=E9C690C51E9BF1B5978332FD5BA94A850192F54C Certificate serial: 4AB611183099C2514D289D935410D13A0E90C8A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft Manifest number: B8 Signing time: Sun 07 Sep 2025 20:50:43 +0000 Manifest this update: Sun 07 Sep 2025 20:45:43 +0000 Manifest next update: Wed 10 Sep 2025 22:41:43 +0000 Files and hashes: 1: 3136302e32352e3234322e302f32332d3234203d3e20313432333437.roa (hash: qYeddWCUDVszc7mZTW90CbBoRIOyBoY1LaUrZanAxXQ=) 2: E9C690C51E9BF1B5978332FD5BA94A850192F54C.crl (hash: tWL0lR9HNqLY4KuIO+g6WTmo8w9ibOztIKEjMbEtZeQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.crl rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 22:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:b6:11:18:30:99:c2:51:4d:28:9d:93:54:10:d1:3a:0e:90:c8:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9C690C51E9BF1B5978332FD5BA94A850192F54C Validity Not Before: Sep 7 20:45:43 2025 GMT Not After : Sep 10 22:41:43 2025 GMT Subject: CN=8BE9910484F57718562EF69D0522D6D42B6E0899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bb:61:28:46:33:6b:57:5e:c2:3a:db:5c:88: 41:a7:03:e5:b1:78:c9:b1:77:05:c2:a9:0f:f6:46: 76:6f:60:a5:43:86:9c:5c:40:21:0a:c3:49:f4:66: 11:a2:74:d2:44:65:44:22:8e:90:b4:64:5c:32:a8: 8c:65:0e:82:85:45:5d:6c:49:ac:bd:50:c3:c9:eb: b3:5d:77:29:80:c6:1d:a7:c5:b8:aa:60:c1:17:2e: c4:5b:b0:ff:91:b3:a0:62:25:4b:1d:77:0b:f2:7c: c9:2d:54:d1:80:a9:b2:92:10:a7:45:c4:f1:7d:fd: 9a:e7:c7:62:ed:ba:1d:8e:1d:16:73:09:5b:58:6b: 4f:a6:19:8a:89:7f:6a:34:22:6e:fb:c2:26:90:c6: 9b:e7:e1:44:74:39:21:be:da:80:f1:89:83:12:f1: 19:db:46:97:b8:d9:cc:0f:13:4c:fa:1d:9a:1a:1c: 11:1a:e6:6c:bd:af:4e:6d:b5:d6:36:7b:1e:4e:33: 32:00:05:d4:c1:2d:9b:36:f9:ca:f6:02:c6:06:f2: 84:93:2c:8d:5f:a7:87:6a:5f:60:6a:11:39:08:17: 4a:6d:98:8f:38:d8:2c:5f:44:de:e9:43:6c:ff:dd: ad:c2:4b:56:ac:bc:41:95:59:5f:aa:c7:bb:05:7d: d5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E9:91:04:84:F5:77:18:56:2E:F6:9D:05:22:D6:D4:2B:6E:08:99 X509v3 Authority Key Identifier: keyid:E9:C6:90:C5:1E:9B:F1:B5:97:83:32:FD:5B:A9:4A:85:01:92:F5:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:d3:52:d6:1e:70:39:1c:98:1d:f2:b4:f7:cf:02:d0:7e:69: 12:e9:bf:8c:bb:5b:30:8e:ff:d5:63:f4:6f:4b:45:85:60:5d: 7e:08:14:45:24:a1:dd:b7:02:91:a0:70:ab:da:55:51:20:de: f6:7b:3d:3d:b0:a8:f6:c4:e2:f4:ea:28:95:a2:39:5e:d6:c8: 2e:f5:41:46:94:4d:22:df:90:87:1d:c3:40:cb:d6:21:83:21: 6f:42:99:16:14:39:48:db:5d:57:a5:18:e8:df:49:af:af:b0: 0f:2f:a3:ab:1e:b1:13:41:14:61:bb:8d:c8:b5:c0:69:ae:06: b1:1b:f3:10:ff:fa:8a:30:5c:23:72:55:13:58:2f:f9:60:35: 2e:f3:82:ff:22:ad:13:94:3d:7e:ba:84:c6:d8:13:a9:7c:f8: 5b:f2:dc:79:9e:80:4e:4f:8c:99:73:f4:9c:91:4c:47:a0:68: f8:2c:a1:57:82:1b:eb:c2:bb:1c:89:27:4c:da:9d:6f:b6:11: f5:3f:1d:de:b9:cb:1c:b5:9e:6a:d3:cd:3f:65:6e:dd:2d:34: b4:c5:c2:92:1d:2a:fc:f9:6b:91:ca:01:c6:48:c4:ac:59:d0: 0d:e7:94:e4:9d:06:81:bd:dd:5e:3c:23:cc:58:ca:db:4a:3c: 97:82:4c:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSrYRGDCZwlFNKJ2TVBDROg6QyKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlDNjkwQzUxRTlCRjFCNTk3ODMzMkZENUJBOTRBODUw MTkyRjU0QzAeFw0yNTA5MDcyMDQ1NDNaFw0yNTA5MTAyMjQxNDNaMDMxMTAvBgNV BAMTKDhCRTk5MTA0ODRGNTc3MTg1NjJFRjY5RDA1MjJENkQ0MkI2RTA4OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHu2EoRjNrV17COttciEGnA+Wx eMmxdwXCqQ/2RnZvYKVDhpxcQCEKw0n0ZhGidNJEZUQijpC0ZFwyqIxlDoKFRV1s Say9UMPJ67NddymAxh2nxbiqYMEXLsRbsP+Rs6BiJUsddwvyfMktVNGAqbKSEKdF xPF9/Zrnx2Ltuh2OHRZzCVtYa0+mGYqJf2o0Im77wiaQxpvn4UR0OSG+2oDxiYMS 8RnbRpe42cwPE0z6HZoaHBEa5my9r05ttdY2ex5OMzIABdTBLZs2+cr2AsYG8oST LI1fp4dqX2BqETkIF0ptmI842CxfRN7pQ2z/3a3CS1asvEGVWV+qx7sFfdX1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi+mRBIT1dxhWLvadBSLW1CtuCJkwHwYDVR0j BBgwFoAU6caQxR6b8bWXgzL9W6lKhQGS9UwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDUzODhmNC0xMDdiLTQ0YTktOWQ4Zi0xNjAzZmVjZmRlZTkvMC9FOUM2OTBDNTFF OUJGMUI1OTc4MzMyRkQ1QkE5NEE4NTAxOTJGNTRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTlDNjkwQzUxRTlCRjFCNTk3ODMzMkZENUJBOTRBODUwMTky RjU0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA1Mzg4ZjQtMTA3Yi00NGE5LTlk OGYtMTYwM2ZlY2ZkZWU5LzAvRTlDNjkwQzUxRTlCRjFCNTk3ODMzMkZENUJBOTRB ODUwMTkyRjU0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbTUtYecDkcmB3ytPfPAtB+aRLpv4y7WzCO /9Vj9G9LRYVgXX4IFEUkod23ApGgcKvaVVEg3vZ7PT2wqPbE4vTqKJWiOV7WyC71 QUaUTSLfkIcdw0DL1iGDIW9CmRYUOUjbXVelGOjfSa+vsA8vo6sesRNBFGG7jci1 wGmuBrEb8xD/+oowXCNyVRNYL/lgNS7zgv8irROUPX66hMbYE6l8+Fvy3HmegE5P jJlz9JyRTEegaPgsoVeCG+vCuxyJJ0zanW+2EfU/Hd65yxy1nmrTzT9lbt0tNLTF wpIdKvz5a5HKAcZIxKxZ0A3nlOSdBoG93V48I8xYyttKPJeCTN0= -----END CERTIFICATE-----Generated at Mon Sep 8 08:20:08 2025 by rpki-client