$ rpki-client -vvf repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft File: ED4F41D4EBE684D523406475FAB471CE1B24E360.mft (raw, json) Hash identifier: QUILy5/VhTXcp1Hew0Zp47cxiIk0h5BdMmpgZTJvAwM= Subject key identifier: 90:F6:2B:D4:71:39:2D:C8:46:FA:67:B6:E7:14:37:2C:F2:EA:C3:17 Authority key identifier: ED:4F:41:D4:EB:E6:84:D5:23:40:64:75:FA:B4:71:CE:1B:24:E3:60 Certificate issuer: /CN=ED4F41D4EBE684D523406475FAB471CE1B24E360 Certificate serial: 58F2AB17042AFEEB55FE72A7F8A75CC58DA02794 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft Manifest number: 01AA Signing time: Sun 07 Sep 2025 06:40:40 +0000 Manifest this update: Sun 07 Sep 2025 06:35:40 +0000 Manifest next update: Wed 10 Sep 2025 08:34:40 +0000 Files and hashes: 1: ED4F41D4EBE684D523406475FAB471CE1B24E360.crl (hash: y6u/ZtlCkvdYr5w9XYFd7nxPLMl/UNPGuSoSP0H2Uik=) 2: 3130332e3137352e3135362e302f32332d3234203d3e20313437313230.roa (hash: emsQJdjbYtT0renX4ejysE/MpgZNsldWDGyL3wTvHwk=) 3: 3130332e3137352e3135372e302f32342d3234203d3e20313437313230.roa (hash: PclkaQEExnEq6Plp0ETJpHDW+UGjqsl26yjUnKIcI7k=) 4: 3130332e3137352e3135362e302f32342d3234203d3e20313437313230.roa (hash: Q0ltxebzKzXnkre7xssfVtSgnahJ7bWNS1vKESygj8c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.crl rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 08:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:f2:ab:17:04:2a:fe:eb:55:fe:72:a7:f8:a7:5c:c5:8d:a0:27:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED4F41D4EBE684D523406475FAB471CE1B24E360 Validity Not Before: Sep 7 06:35:40 2025 GMT Not After : Sep 10 08:34:40 2025 GMT Subject: CN=90F62BD471392DC846FA67B6E714372CF2EAC317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:67:50:79:db:2c:3e:8b:62:84:d0:66:44:a5: 8a:71:2c:d6:57:b6:7f:d9:90:53:7b:9f:b2:20:62: 9e:87:2d:7f:cd:a9:cf:50:42:67:61:60:87:f6:56: 19:cf:f4:47:f6:42:d7:40:06:80:9f:2e:73:cb:04: 81:5f:60:ee:53:8f:87:72:0f:c0:86:9d:75:c9:cb: 14:15:94:54:29:81:5d:3a:60:44:81:de:df:19:fd: 80:f3:ad:c9:94:c4:c8:c3:d7:85:19:32:51:47:b1: 19:c1:c5:fc:4e:e1:4f:c7:dd:e7:6c:23:d1:b6:e1: e5:9a:e7:75:ac:89:b2:d4:3f:e8:15:72:82:dd:3c: e2:df:a8:cf:69:b4:26:14:db:28:41:d4:8e:c1:bb: a7:59:af:fc:89:6d:b5:e1:56:dc:47:41:ce:0a:b2: cf:8b:5b:14:69:85:c2:2b:9e:f5:75:a6:22:14:b5: 5c:d6:b3:fc:64:df:a4:1b:e6:da:2b:dc:6b:0a:2e: 61:a9:54:23:39:0d:38:fb:67:13:aa:be:b4:78:15: 11:8e:72:69:2c:b1:45:17:b0:b7:09:99:a6:59:e9: 5f:8e:e1:c8:0c:85:b5:a9:fe:31:48:d5:e3:b7:98: bd:48:a7:2d:96:17:4f:f7:cc:04:3e:75:e8:78:40: e3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F6:2B:D4:71:39:2D:C8:46:FA:67:B6:E7:14:37:2C:F2:EA:C3:17 X509v3 Authority Key Identifier: keyid:ED:4F:41:D4:EB:E6:84:D5:23:40:64:75:FA:B4:71:CE:1B:24:E3:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:c8:93:72:71:cc:bc:8c:68:0b:d7:6c:78:1b:be:dc:6c:83: cd:9e:94:23:d8:f5:ff:31:e1:d6:7b:4f:c7:04:e6:94:fd:70: aa:9a:5e:9b:b6:1d:fa:3e:db:c8:4e:27:3e:20:ee:6b:6a:b2: 39:a2:83:44:f6:49:0f:43:63:00:ed:92:73:f2:7b:c6:91:82: a8:9c:f0:e9:4d:51:51:c0:d9:16:29:a5:fb:9f:37:7c:49:ab: 28:c2:84:df:76:af:83:85:09:8b:0b:f8:93:a7:a1:cd:f5:c3: cd:0d:75:8d:c0:8b:f1:2c:d8:e5:0f:6d:40:2f:77:84:bf:65: 3d:a3:bd:ce:b2:74:06:4e:07:06:f9:63:61:cf:9e:bb:52:83: 7b:40:8f:03:d4:9f:60:2d:00:80:d1:96:f2:21:ee:91:41:14: eb:d4:a1:cd:8b:f6:28:78:95:0b:2c:95:9d:68:2b:d8:8f:8c: 2a:b5:32:4b:36:7f:5d:63:9a:ec:03:ff:f9:b5:16:23:17:ea: 77:21:f0:45:09:9d:88:e4:15:84:28:e3:a3:d2:f6:df:bd:40: a3:d2:ae:3d:73:94:d9:32:c6:e1:31:fd:95:42:68:f7:53:08: d8:f3:22:b7:09:9d:85:38:25:cd:60:4b:c9:08:e2:e9:93:1c: e8:f0:ad:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWPKrFwQq/utV/nKn+KdcxY2gJ5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ0RjQxRDRFQkU2ODRENTIzNDA2NDc1RkFCNDcxQ0Ux QjI0RTM2MDAeFw0yNTA5MDcwNjM1NDBaFw0yNTA5MTAwODM0NDBaMDMxMTAvBgNV BAMTKDkwRjYyQkQ0NzEzOTJEQzg0NkZBNjdCNkU3MTQzNzJDRjJFQUMzMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvZ1B52yw+i2KE0GZEpYpxLNZX tn/ZkFN7n7IgYp6HLX/Nqc9QQmdhYIf2VhnP9Ef2QtdABoCfLnPLBIFfYO5Tj4dy D8CGnXXJyxQVlFQpgV06YESB3t8Z/YDzrcmUxMjD14UZMlFHsRnBxfxO4U/H3eds I9G24eWa53WsibLUP+gVcoLdPOLfqM9ptCYU2yhB1I7Bu6dZr/yJbbXhVtxHQc4K ss+LWxRphcIrnvV1piIUtVzWs/xk36Qb5tor3GsKLmGpVCM5DTj7ZxOqvrR4FRGO cmkssUUXsLcJmaZZ6V+O4cgMhbWp/jFI1eO3mL1Ipy2WF0/3zAQ+deh4QOOZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkPYr1HE5LchG+me25xQ3LPLqwxcwHwYDVR0j BBgwFoAU7U9B1OvmhNUjQGR1+rRxzhsk42AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmVlN2E1Zi01MTIxLTQxODEtYTYzNS0xMjFiNmU2OWFkNTkvMC9FRDRGNDFENEVC RTY4NEQ1MjM0MDY0NzVGQUI0NzFDRTFCMjRFMzYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQ0RjQxRDRFQkU2ODRENTIzNDA2NDc1RkFCNDcxQ0UxQjI0 RTM2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZlZTdhNWYtNTEyMS00MTgxLWE2 MzUtMTIxYjZlNjlhZDU5LzAvRUQ0RjQxRDRFQkU2ODRENTIzNDA2NDc1RkFCNDcx Q0UxQjI0RTM2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABjIk3JxzLyMaAvXbHgbvtxsg82elCPY9f8x 4dZ7T8cE5pT9cKqaXpu2Hfo+28hOJz4g7mtqsjmig0T2SQ9DYwDtknPye8aRgqic 8OlNUVHA2RYppfufN3xJqyjChN92r4OFCYsL+JOnoc31w80NdY3Ai/Es2OUPbUAv d4S/ZT2jvc6ydAZOBwb5Y2HPnrtSg3tAjwPUn2AtAIDRlvIh7pFBFOvUoc2L9ih4 lQsslZ1oK9iPjCq1Mks2f11jmuwD//m1FiMX6nch8EUJnYjkFYQo46PS9t+9QKPS rj1zlNkyxuEx/ZVCaPdTCNjzIrcJnYU4Jc1gS8kI4umTHOjwreE= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:15 2025 by rpki-client