$ rpki-client -vvf repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft File: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft (raw, json) Hash identifier: YQwfILQ8I6C3QmyrvBXLuOfgugXUU8Hv7OItkxCaZQ8= Subject key identifier: F8:DA:D9:92:D2:3A:1A:91:90:49:12:EE:01:74:E3:6F:B3:66:98:E3 Authority key identifier: E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE Certificate issuer: /CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Certificate serial: 70B5FB2602AE9F4E6B5F93323E68F2403FCA046C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft Manifest number: E2 Signing time: Sat 06 Sep 2025 06:42:05 +0000 Manifest this update: Sat 06 Sep 2025 06:37:05 +0000 Manifest next update: Tue 09 Sep 2025 16:55:05 +0000 Files and hashes: 1: 3130332e36302e38382e302f32332d3233203d3e20313531353732.roa (hash: ZC6TgLNk0lzol6BMmLGccC1JZhUEJfXYzEcHnys8G1o=) 2: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl (hash: zQSLSpHjVd7n9H2AVUmBnuSw0tL5FQdjfph17T2zugk=) 3: 3130332e36302e38392e302f32342d3234203d3e20313531353732.roa (hash: Enf4GZpiw8yRCRJ559txgbwn9cUloBn5l+xZd4CiSI4=) 4: 3130332e36302e38382e302f32342d3234203d3e20313531353732.roa (hash: k2+2S8JNGrIJgA3B1fWsPdcHVnZQhwJAO8DfE0j/qJE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 16:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b5:fb:26:02:ae:9f:4e:6b:5f:93:32:3e:68:f2:40:3f:ca:04:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Validity Not Before: Sep 6 06:37:05 2025 GMT Not After : Sep 9 16:55:05 2025 GMT Subject: CN=F8DAD992D23A1A91904912EE0174E36FB36698E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:38:e1:68:a3:fd:9b:2c:09:91:dc:66:61:19: 25:d1:7d:51:8d:ea:0a:f9:76:7f:b6:ec:e8:f2:55: db:4e:3b:3a:a7:e8:95:83:d5:22:47:a0:37:bd:5c: 09:e7:46:82:4b:9a:7e:47:dc:fd:fe:91:2b:3d:6a: 33:22:5d:fc:3e:0e:9e:74:77:8c:e4:11:04:b6:c2: db:1a:1c:68:af:b7:36:bd:7c:a5:70:51:53:4a:ce: ce:7a:c3:53:09:c7:21:d1:f0:0c:dc:d0:52:be:34: 95:47:85:96:a5:cc:c4:27:2b:15:27:10:2e:b2:59: 4f:41:9d:4b:05:4c:16:22:c7:30:5d:c5:57:d6:59: ff:28:ab:d2:0e:fa:78:29:ce:f3:cf:3f:90:a1:33: 61:eb:55:5c:1e:45:3e:dc:d8:9e:e3:6e:50:5e:77: 9a:83:11:de:38:19:6f:03:eb:f4:21:cd:18:69:70: 0b:1f:66:20:3d:30:ba:43:04:29:f5:b2:dc:be:2a: c2:70:8d:3e:62:2b:7e:d6:dc:63:3f:cd:bf:0c:98: 49:51:f2:5c:26:e5:63:aa:37:5d:95:56:8a:ac:ad: 73:88:53:f5:e4:35:87:41:d6:3e:e9:d4:63:44:37: cb:84:5d:ac:d8:ba:1e:b2:d3:60:dc:7f:5f:9a:33: f8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DA:D9:92:D2:3A:1A:91:90:49:12:EE:01:74:E3:6F:B3:66:98:E3 X509v3 Authority Key Identifier: keyid:E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:67:bc:31:57:36:df:79:d8:c9:43:b6:be:da:dc:5f:a4:64: c5:40:64:a2:5e:ae:b0:87:5b:93:0e:9c:4b:ef:60:f4:5a:05: 42:a5:31:37:21:38:0c:67:dd:61:de:da:d8:f1:f1:73:14:c5: 6a:a6:b3:17:3f:f4:3b:8b:ad:27:6c:c3:41:6f:63:5e:43:bb: f1:31:62:5a:c3:9d:61:54:16:1b:32:54:6b:09:4d:0e:e1:64: 8d:71:03:a8:30:60:80:9e:3b:da:9e:78:df:ed:6e:a0:ac:21: d7:ca:2b:a5:46:da:9f:e4:10:c5:be:c1:3f:1f:b8:27:c5:f5: 1b:23:22:48:02:6e:84:b4:0c:8e:d7:d0:ff:03:94:0d:2c:0d: ec:29:1b:46:fa:cf:36:84:41:95:86:1f:93:a3:69:58:8d:07: 71:dd:90:2c:bd:3c:c0:7f:59:13:23:bc:27:4a:4c:12:fb:f9: 81:6d:e8:62:8e:3b:25:f7:99:64:3b:9e:15:c2:7d:be:a1:49: 55:6f:fa:2f:71:27:08:57:ac:2e:db:ad:ee:98:e5:21:ce:e7: 66:aa:b2:b1:0d:f4:2e:54:9a:7b:08:00:e8:01:6d:67:f1:bf: 66:dd:d7:c8:46:6e:e5:5a:cb:6f:89:40:f3:b7:e2:ae:b6:ca: 9c:dd:3f:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcLX7JgKun05rX5MyPmjyQD/KBGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZF ODIxMkRERTAeFw0yNTA5MDYwNjM3MDVaFw0yNTA5MDkxNjU1MDVaMDMxMTAvBgNV BAMTKEY4REFEOTkyRDIzQTFBOTE5MDQ5MTJFRTAxNzRFMzZGQjM2Njk4RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzOOFoo/2bLAmR3GZhGSXRfVGN 6gr5dn+27OjyVdtOOzqn6JWD1SJHoDe9XAnnRoJLmn5H3P3+kSs9ajMiXfw+Dp50 d4zkEQS2wtsaHGivtza9fKVwUVNKzs56w1MJxyHR8Azc0FK+NJVHhZalzMQnKxUn EC6yWU9BnUsFTBYixzBdxVfWWf8oq9IO+ngpzvPPP5ChM2HrVVweRT7c2J7jblBe d5qDEd44GW8D6/QhzRhpcAsfZiA9MLpDBCn1sty+KsJwjT5iK37W3GM/zb8MmElR 8lwm5WOqN12VVoqsrXOIU/XkNYdB1j7p1GNEN8uEXazYuh6y02Dcf1+aM/gNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+NrZktI6GpGQSRLuAXTjb7NmmOMwHwYDVR0j BBgwFoAU58nk5cjqmJ8P99b+bb1qT+ghLd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzExYWE0Ni1mMjhlLTRjNTUtYjliYS03ZDViZGM5NWI0ZjYvMC9FN0M5RTRFNUM4 RUE5ODlGMEZGN0Q2RkU2REJENkE0RkU4MjEyRERFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZFODIx MkRERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxMWFhNDYtZjI4ZS00YzU1LWI5 YmEtN2Q1YmRjOTViNGY2LzAvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZB NEZFODIxMkRERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL9nvDFXNt952MlDtr7a3F+kZMVAZKJerrCH W5MOnEvvYPRaBUKlMTchOAxn3WHe2tjx8XMUxWqmsxc/9DuLrSdsw0FvY15Du/Ex YlrDnWFUFhsyVGsJTQ7hZI1xA6gwYICeO9qeeN/tbqCsIdfKK6VG2p/kEMW+wT8f uCfF9RsjIkgCboS0DI7X0P8DlA0sDewpG0b6zzaEQZWGH5OjaViNB3HdkCy9PMB/ WRMjvCdKTBL7+YFt6GKOOyX3mWQ7nhXCfb6hSVVv+i9xJwhXrC7bre6Y5SHO52aq srEN9C5UmnsIAOgBbWfxv2bd18hGbuVay2+JQPO34q62ypzdP+M= -----END CERTIFICATE-----Generated at Sun Sep 7 14:05:19 2025 by rpki-client