$ rpki-client -vvf repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft File: E74A2346929DE84143E5DF0DD921764C285B01A2.mft (raw, json) Hash identifier: feiZxBRJMTt8SbhZOn/y2EBwFE8dRfHVhn/GR9UKiak= Subject key identifier: 6E:C1:EA:4B:3D:5C:59:68:A1:46:56:41:52:6F:80:9F:94:53:AA:08 Authority key identifier: E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2 Certificate issuer: /CN=E74A2346929DE84143E5DF0DD921764C285B01A2 Certificate serial: 617DA7DAE8BB98152D6826B8A9391F21D64F9B77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft Manifest number: B3 Signing time: Sat 06 Sep 2025 21:41:15 +0000 Manifest this update: Sat 06 Sep 2025 21:36:15 +0000 Manifest next update: Wed 10 Sep 2025 08:21:15 +0000 Files and hashes: 1: E74A2346929DE84143E5DF0DD921764C285B01A2.crl (hash: kDB/m3dkFzUu3cgm4uABjK5bLSk4p8rF0ej+AOaGcPk=) 2: 3130332e3131302e3130302e302f32332d3233203d3e20313530393337.roa (hash: QWlvcWw+MqtfsyLo2e2j057MAyn4Zw7MQ10D6boTyYA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 08:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:7d:a7:da:e8:bb:98:15:2d:68:26:b8:a9:39:1f:21:d6:4f:9b:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E74A2346929DE84143E5DF0DD921764C285B01A2 Validity Not Before: Sep 6 21:36:15 2025 GMT Not After : Sep 10 08:21:15 2025 GMT Subject: CN=6EC1EA4B3D5C5968A1465641526F809F9453AA08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:57:d1:34:e4:e5:36:af:ce:9f:6a:0b:3c:16: b7:93:a2:07:fc:63:ac:f3:48:ac:2c:dd:52:49:db: ab:3b:a0:4b:5d:f1:52:8d:30:12:86:66:c4:43:23: 99:30:7b:3b:05:e8:7d:95:30:de:b7:49:f0:dc:cc: 1f:8d:3b:42:2a:05:81:53:7d:b4:04:c9:d9:9b:df: 23:a9:17:3d:89:12:65:86:60:58:ab:72:1f:1f:b2: a7:22:25:7a:f6:12:6d:7d:ff:af:2f:43:eb:9d:29: ca:cc:0a:08:d0:20:d1:16:bb:ba:bd:d1:a1:7f:1e: 14:bd:a5:96:d3:ff:62:49:32:05:d2:7a:7c:a5:60: 85:44:27:fd:55:5e:34:ac:96:d7:11:be:1a:a5:c6: 67:a4:5a:d8:c6:cf:2a:87:b6:78:aa:94:1c:46:8e: 9d:71:53:db:2b:16:c4:27:84:10:1f:58:3a:7f:85: 05:2f:92:c2:94:73:e5:3a:e3:c4:e9:74:b4:2f:af: b1:6d:65:8b:fa:f2:48:63:86:93:04:49:75:93:37: 2e:56:ec:c4:0f:66:3d:86:0a:6e:1e:ff:75:fa:85: 93:0d:b4:39:27:c2:16:16:bf:63:17:6a:e1:02:b3: 77:83:bf:f3:75:07:f0:8b:35:b3:d0:4a:1b:ed:b7: 36:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C1:EA:4B:3D:5C:59:68:A1:46:56:41:52:6F:80:9F:94:53:AA:08 X509v3 Authority Key Identifier: keyid:E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:d5:f3:96:9a:ee:41:6d:59:9a:2d:28:14:b6:25:ea:4f:fd: 7d:76:7f:4d:f4:d9:c2:3c:c7:11:eb:5c:8b:f7:6d:51:56:63: a0:9d:aa:4e:98:7d:40:29:f1:0b:6f:30:ee:62:5e:0a:b6:d8: 4a:62:4f:71:b7:95:d7:45:f3:df:79:c5:e4:97:c5:ff:6d:f2: 51:21:d8:e1:b2:52:b2:92:67:2f:89:af:83:d0:70:4a:55:2b: c5:65:84:43:1e:24:b4:48:7d:cd:3e:a2:0b:d4:17:1b:c3:15: 90:f5:91:70:0d:2a:a6:30:e1:e0:99:dd:11:91:72:e2:c0:db: 93:a1:58:0b:ad:b2:da:c7:7b:16:d8:a5:93:65:d1:d0:cd:11: 25:bb:2a:27:94:a4:dc:9a:40:1b:8a:ac:f8:24:f7:0c:2b:41: 9d:ef:ef:c7:27:a3:e1:60:1b:e2:0b:c0:1b:7f:2f:c1:53:ba: 16:45:02:20:e0:6e:e4:f7:75:48:3f:09:df:a6:ce:61:06:26: 5a:a0:52:d8:71:e9:04:d4:ad:22:61:14:84:c2:19:be:2d:58: ba:f2:3c:d2:f9:46:87:fc:fa:e7:14:c0:03:61:23:55:69:48: 04:30:a9:da:ac:66:58:da:36:f2:de:af:0c:d8:a4:9a:16:6d: 13:dd:dc:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYX2n2ui7mBUtaCa4qTkfIdZPm3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2NEMy ODVCMDFBMjAeFw0yNTA5MDYyMTM2MTVaFw0yNTA5MTAwODIxMTVaMDMxMTAvBgNV BAMTKDZFQzFFQTRCM0Q1QzU5NjhBMTQ2NTY0MTUyNkY4MDlGOTQ1M0FBMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWV9E05OU2r86fags8FreTogf8 Y6zzSKws3VJJ26s7oEtd8VKNMBKGZsRDI5kwezsF6H2VMN63SfDczB+NO0IqBYFT fbQEydmb3yOpFz2JEmWGYFirch8fsqciJXr2Em19/68vQ+udKcrMCgjQINEWu7q9 0aF/HhS9pZbT/2JJMgXSenylYIVEJ/1VXjSsltcRvhqlxmekWtjGzyqHtniqlBxG jp1xU9srFsQnhBAfWDp/hQUvksKUc+U648TpdLQvr7FtZYv68khjhpMESXWTNy5W 7MQPZj2GCm4e/3X6hZMNtDknwhYWv2MXauECs3eDv/N1B/CLNbPQShvttzbzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbsHqSz1cWWihRlZBUm+An5RTqggwHwYDVR0j BBgwFoAU50ojRpKd6EFD5d8N2SF2TChbAaIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2RlNTAzNS04NGUxLTQ0YzYtOWNmOS00ZWEwYmJhYTA5M2YvMC9FNzRBMjM0Njky OURFODQxNDNFNURGMEREOTIxNzY0QzI4NUIwMUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2NEMyODVC MDFBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNkZTUwMzUtODRlMS00NGM2LTlj ZjktNGVhMGJiYWEwOTNmLzAvRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2 NEMyODVCMDFBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLV85aa7kFtWZotKBS2JepP/X12f0302cI8 xxHrXIv3bVFWY6Cdqk6YfUAp8QtvMO5iXgq22EpiT3G3lddF8995xeSXxf9t8lEh 2OGyUrKSZy+Jr4PQcEpVK8VlhEMeJLRIfc0+ogvUFxvDFZD1kXANKqYw4eCZ3RGR cuLA25OhWAutstrHexbYpZNl0dDNESW7KieUpNyaQBuKrPgk9wwrQZ3v78cno+Fg G+ILwBt/L8FTuhZFAiDgbuT3dUg/Cd+mzmEGJlqgUthx6QTUrSJhFITCGb4tWLry PNL5Rof8+ucUwANhI1VpSAQwqdqsZljaNvLerwzYpJoWbRPd3PM= -----END CERTIFICATE-----Generated at Tue Sep 9 04:58:11 2025 by rpki-client