$ rpki-client -vvf repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft File: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft (raw, json) Hash identifier: YlyBiJpUXp+nTSC9QQh4+sRQ7RYFpg00WGcY6U54TCY= Subject key identifier: C3:53:7D:5C:18:7E:64:07:27:B4:89:46:F5:52:B7:45:E0:35:07:86 Authority key identifier: EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE Certificate issuer: /CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Certificate serial: 65C1D54A39EC1E1904773A85695412716DD20221 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft Manifest number: 012A Signing time: Sun 07 Sep 2025 11:11:35 +0000 Manifest this update: Sun 07 Sep 2025 11:06:35 +0000 Manifest next update: Wed 10 Sep 2025 11:22:35 +0000 Files and hashes: 1: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl (hash: S5ZTx5AUNLOlf+Vtj0bPCmz+pVjUFuEG2k2ouoenXQw=) 2: 3130332e35332e32382e302f32332d3234203d3e20313339393535.roa (hash: XmUhlDLdTlUEJxqMyV5d8izbXv0SLIMUNSTUR2SbfXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:c1:d5:4a:39:ec:1e:19:04:77:3a:85:69:54:12:71:6d:d2:02:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Validity Not Before: Sep 7 11:06:35 2025 GMT Not After : Sep 10 11:22:35 2025 GMT Subject: CN=C3537D5C187E640727B48946F552B745E0350786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a9:6a:13:92:27:db:ea:7a:0d:97:f1:19:52: d5:07:d7:f5:be:d0:bf:49:6c:a1:b4:4f:8c:36:a7: 08:99:f5:ac:c9:10:56:f5:d1:9c:d1:97:28:5b:80: be:c6:48:31:8c:46:9a:70:a6:3b:91:be:d2:da:76: 87:97:4f:d9:24:32:5f:ed:11:c0:46:b3:87:d0:a7: 8f:f6:c1:65:e0:3e:7c:b2:11:fc:88:92:24:92:d5: 3d:8f:88:80:83:18:8a:74:b7:1b:84:00:23:02:2b: e2:60:e0:5e:59:83:32:d3:54:e3:da:ca:8b:5d:5d: 88:9c:d3:b3:2e:25:bb:78:46:9a:27:e3:9a:60:66: b0:2a:b6:06:86:8b:d2:56:5a:a5:07:71:db:9f:0f: 9d:42:aa:a0:6f:c5:85:55:7e:8e:33:e6:00:9d:70: 7b:43:f1:ac:68:63:26:62:2c:df:b2:33:4f:46:cd: 1e:91:4d:17:cb:26:56:fd:21:a7:ba:6f:cc:f1:de: 9e:08:fb:3b:19:16:af:71:3a:6a:c3:97:65:f0:58: b5:65:a8:1b:b4:dd:41:1b:57:5d:11:43:83:6a:8f: 2f:04:16:a1:57:3b:80:ee:9b:ea:e3:24:4d:7c:20: d5:28:bd:de:18:ff:a1:30:1d:b6:cc:0c:75:db:ef: e8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:53:7D:5C:18:7E:64:07:27:B4:89:46:F5:52:B7:45:E0:35:07:86 X509v3 Authority Key Identifier: keyid:EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:8b:d1:3b:82:9d:79:a9:ef:da:4a:13:6d:c6:30:8f:7b:df: 85:32:03:ee:85:d8:77:87:e2:a7:e2:fa:f0:20:b3:56:36:a7: 32:7c:88:46:54:a4:4f:09:2d:06:b3:88:1d:56:d0:68:5b:a6: 5a:d0:3f:22:5c:28:43:26:39:18:1a:20:0e:a4:72:95:ae:0d: 76:e6:62:49:2a:3b:f2:05:8f:5a:b8:57:f8:dd:83:77:58:6b: be:0e:27:63:0c:d1:b4:06:47:fb:6f:8f:fd:ad:e1:e3:a5:8c: 25:a1:9e:4c:7d:88:bb:ff:d2:13:b9:c0:e4:a3:79:de:8f:77: a5:c6:0a:a8:5c:a3:45:82:e9:f0:31:e4:e4:28:1a:76:32:16: a0:f1:e2:08:cc:2e:88:ac:6d:7a:32:70:73:02:68:15:ca:27: 24:97:c8:f4:ae:19:31:75:19:27:26:a1:c1:eb:82:12:db:af: fa:44:e7:9c:90:a2:4e:4a:43:f0:ab:d4:3f:99:9f:90:e2:6b: 43:3a:e8:d3:41:fa:10:fc:83:9d:90:13:76:fe:95:66:34:e2: 03:80:3c:66:ec:ab:97:15:f1:5a:a6:85:93:6a:9c:94:ea:4c: 9b:52:9e:2d:5e:6e:73:43:29:8f:f2:a9:30:d1:ac:4d:57:b3: 36:f4:98:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZcHVSjnsHhkEdzqFaVQScW3SAiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0 NUYyOUVERTAeFw0yNTA5MDcxMTA2MzVaFw0yNTA5MTAxMTIyMzVaMDMxMTAvBgNV BAMTKEMzNTM3RDVDMTg3RTY0MDcyN0I0ODk0NkY1NTJCNzQ1RTAzNTA3ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDqWoTkifb6noNl/EZUtUH1/W+ 0L9JbKG0T4w2pwiZ9azJEFb10ZzRlyhbgL7GSDGMRppwpjuRvtLadoeXT9kkMl/t EcBGs4fQp4/2wWXgPnyyEfyIkiSS1T2PiICDGIp0txuEACMCK+Jg4F5ZgzLTVOPa yotdXYic07MuJbt4Rpon45pgZrAqtgaGi9JWWqUHcdufD51CqqBvxYVVfo4z5gCd cHtD8axoYyZiLN+yM09GzR6RTRfLJlb9Iae6b8zx3p4I+zsZFq9xOmrDl2XwWLVl qBu03UEbV10RQ4Nqjy8EFqFXO4Dum+rjJE18INUovd4Y/6EwHbbMDHXb7+gdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw1N9XBh+ZAcntIlG9VK3ReA1B4YwHwYDVR0j BBgwFoAU7JqrkQBwU+Y84X+Y10/9iUXynt4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmI0M2VjOC1mNTgyLTQwMjUtOGYzNi0zY2VhNTM5ZDBiMDkvMC9FQzlBQUI5MTAw NzA1M0U2M0NFMTdGOThENzRGRkQ4OTQ1RjI5RURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0NUYy OUVERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJiNDNlYzgtZjU4Mi00MDI1LThm MzYtM2NlYTUzOWQwYjA5LzAvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZE ODk0NUYyOUVERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL6L0TuCnXmp79pKE23GMI9734UyA+6F2HeH 4qfi+vAgs1Y2pzJ8iEZUpE8JLQaziB1W0GhbplrQPyJcKEMmORgaIA6kcpWuDXbm YkkqO/IFj1q4V/jdg3dYa74OJ2MM0bQGR/tvj/2t4eOljCWhnkx9iLv/0hO5wOSj ed6Pd6XGCqhco0WC6fAx5OQoGnYyFqDx4gjMLoisbXoycHMCaBXKJySXyPSuGTF1 GScmocHrghLbr/pE55yQok5KQ/Cr1D+Zn5Dia0M66NNB+hD8g52QE3b+lWY04gOA PGbsq5cV8VqmhZNqnJTqTJtSni1ebnNDKY/yqTDRrE1Xszb0mHQ= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:43 2025 by rpki-client