$ rpki-client -vvf repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft File: E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft (raw, json) Hash identifier: UswMMyXYZ3Im9ce+LTpKCmwD6lLwdmJi+BvA6GWSNvI= Subject key identifier: 96:41:ED:66:91:6A:89:D7:B6:BE:38:54:D8:CF:9E:B5:9E:55:60:61 Authority key identifier: E9:FC:7A:F3:FF:BA:00:98:63:D1:04:ED:E1:B4:5D:A0:59:25:35:E6 Certificate issuer: /CN=E9FC7AF3FFBA009863D104EDE1B45DA0592535E6 Certificate serial: 40493A28A8DF8E57B2409F07FB73C6F466058BD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft Manifest number: 022B Signing time: Sun 07 Sep 2025 01:02:18 +0000 Manifest this update: Sun 07 Sep 2025 00:57:18 +0000 Manifest next update: Wed 10 Sep 2025 10:53:18 +0000 Files and hashes: 1: E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl (hash: ame0/J1K+3JGQ6KBoOgDtQoz3MlhvzUuTAHxLuLNx9M=) 2: 3130332e3137352e3233362e302f32332d3234203d3e20313437313231.roa (hash: LFOqzDAyDWWdrBcQS4m60ydnXXk+fQv19GMLbDiq/ow=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:49:3a:28:a8:df:8e:57:b2:40:9f:07:fb:73:c6:f4:66:05:8b:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9FC7AF3FFBA009863D104EDE1B45DA0592535E6 Validity Not Before: Sep 7 00:57:18 2025 GMT Not After : Sep 10 10:53:18 2025 GMT Subject: CN=9641ED66916A89D7B6BE3854D8CF9EB59E556061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0c:8b:15:c1:76:4c:65:01:38:89:11:b1:ee: 21:12:e0:b2:91:3d:71:94:70:d2:45:16:d0:c8:d0: 1d:22:23:9f:5a:d1:f8:e6:20:ca:63:c6:93:28:03: e9:d0:29:82:ee:a7:fa:85:4e:b2:63:b1:18:9c:83: 09:ae:32:95:e3:8e:56:85:a2:a4:ba:0c:6c:63:42: eb:4a:63:de:02:e4:f4:2b:96:9f:7f:d1:79:2d:4b: 4f:4b:54:fa:2e:29:60:31:cb:df:74:7e:6d:2b:0b: a8:e1:7f:d7:e5:ba:1f:f8:0b:bb:3c:ae:6b:f8:11: 07:0d:ca:f8:80:2a:e1:56:04:f4:bd:03:14:a8:5d: b0:73:66:80:c7:e5:01:73:0d:bc:33:3e:31:89:7b: b8:65:60:f0:af:fb:4c:01:ee:0e:08:3f:af:ec:62: be:7a:c1:37:1c:98:f3:97:77:4b:59:9f:fc:8d:7b: a9:19:25:d3:71:f2:ca:c3:ca:42:99:24:6b:61:86: 69:c4:9b:f3:b2:e5:e1:eb:49:9d:d5:1a:80:64:42: 23:2a:cc:ca:e7:53:c4:99:79:3f:c2:4d:99:8b:29: b5:fe:cc:3a:eb:8a:f4:95:81:95:7f:5a:68:9b:e9: 14:9f:78:ff:db:4c:1d:7a:37:96:fa:14:09:d7:6d: 1f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:41:ED:66:91:6A:89:D7:B6:BE:38:54:D8:CF:9E:B5:9E:55:60:61 X509v3 Authority Key Identifier: keyid:E9:FC:7A:F3:FF:BA:00:98:63:D1:04:ED:E1:B4:5D:A0:59:25:35:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:7c:ef:53:0b:2a:74:fd:b9:7a:83:d5:f6:f7:37:0e:be:c0: e6:fe:a6:6a:2d:2c:ee:62:31:14:5c:63:56:c5:ce:07:a0:a1: 00:0f:be:38:dd:d3:7d:f7:0c:88:cf:50:c7:64:b2:77:86:fa: 1b:77:c9:ed:41:7e:8f:20:ee:c5:79:3d:2f:cb:37:b1:a8:9b: db:2f:7f:5c:be:f5:97:d7:4a:d0:26:5d:0f:1a:ef:66:95:06: b1:55:23:c5:dc:c0:ae:e9:c7:fd:6b:a4:85:d4:a8:3b:d9:bf: 14:27:31:0d:ae:41:a3:82:d4:84:f3:25:53:17:4b:ad:da:a1: d4:e4:1f:42:82:17:49:0c:23:9d:3a:15:36:25:8d:61:18:17: cb:bf:4f:2d:4c:ae:53:0a:07:bd:ea:35:d3:ce:ee:6c:e8:9f: 95:a6:64:c7:24:d9:27:6e:2e:51:ea:b8:b6:a9:b7:62:47:bc: 45:c8:a8:c3:ba:ba:a7:66:1a:d7:41:cf:9d:68:63:9d:98:bd: 86:12:50:45:16:ee:e4:ff:58:0a:06:8d:e5:6d:4b:50:a1:fd: d3:ce:31:94:2c:7b:8c:d6:7a:32:58:a0:46:09:fe:8d:f8:63: 95:4e:f6:93:2e:f3:0c:d4:6b:8e:5e:38:85:ce:4e:ba:ce:28: bf:eb:2c:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQEk6KKjfjleyQJ8H+3PG9GYFi9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVEQTA1 OTI1MzVFNjAeFw0yNTA5MDcwMDU3MThaFw0yNTA5MTAxMDUzMThaMDMxMTAvBgNV BAMTKDk2NDFFRDY2OTE2QTg5RDdCNkJFMzg1NEQ4Q0Y5RUI1OUU1NTYwNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQDIsVwXZMZQE4iRGx7iES4LKR PXGUcNJFFtDI0B0iI59a0fjmIMpjxpMoA+nQKYLup/qFTrJjsRicgwmuMpXjjlaF oqS6DGxjQutKY94C5PQrlp9/0XktS09LVPouKWAxy990fm0rC6jhf9fluh/4C7s8 rmv4EQcNyviAKuFWBPS9AxSoXbBzZoDH5QFzDbwzPjGJe7hlYPCv+0wB7g4IP6/s Yr56wTccmPOXd0tZn/yNe6kZJdNx8srDykKZJGthhmnEm/Oy5eHrSZ3VGoBkQiMq zMrnU8SZeT/CTZmLKbX+zDrrivSVgZV/Wmib6RSfeP/bTB16N5b6FAnXbR/VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlkHtZpFqide2vjhU2M+etZ5VYGEwHwYDVR0j BBgwFoAU6fx68/+6AJhj0QTt4bRdoFklNeYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YjRjNzBhMS01MDM2LTQ1MGItYjkzNi01MDg0Zjc4ZjgxZWYvMC9FOUZDN0FGM0ZG QkEwMDk4NjNEMTA0RURFMUI0NURBMDU5MjUzNUU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVEQTA1OTI1 MzVFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmI0YzcwYTEtNTAzNi00NTBiLWI5 MzYtNTA4NGY3OGY4MWVmLzAvRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVE QTA1OTI1MzVFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEd871MLKnT9uXqD1fb3Nw6+wOb+pmotLO5i MRRcY1bFzgegoQAPvjjd0333DIjPUMdksneG+ht3ye1Bfo8g7sV5PS/LN7Gom9sv f1y+9ZfXStAmXQ8a72aVBrFVI8XcwK7px/1rpIXUqDvZvxQnMQ2uQaOC1ITzJVMX S63aodTkH0KCF0kMI506FTYljWEYF8u/Ty1MrlMKB73qNdPO7mzon5WmZMck2Sdu LlHquLapt2JHvEXIqMO6uqdmGtdBz51oY52YvYYSUEUW7uT/WAoGjeVtS1Ch/dPO MZQse4zWejJYoEYJ/o34Y5VO9pMu8wzUa45eOIXOTrrOKL/rLKU= -----END CERTIFICATE-----Generated at Sun Sep 7 15:29:11 2025 by rpki-client