$ rpki-client -vvf repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft File: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft (raw, json) Hash identifier: RBuqMfXo5udtD0eamfjWyf8XltpJZiu7Ni9LalXZiu4= Subject key identifier: 76:68:BB:0D:B0:D1:AA:7A:AF:2C:0E:C2:37:80:BD:AB:6E:49:7E:01 Authority key identifier: E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70 Certificate issuer: /CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70 Certificate serial: 3FB3F329DC8E932C512AD4155DD52189F9B284B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft Manifest number: 0228 Signing time: Fri 05 Sep 2025 21:00:57 +0000 Manifest this update: Fri 05 Sep 2025 20:55:57 +0000 Manifest next update: Tue 09 Sep 2025 08:37:57 +0000 Files and hashes: 1: E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl (hash: eMkhbXxe0kCvPLaU+GXG6MSspsNIuGJZjid8M3XoR6Q=) 2: 3130332e3138362e302e302f32332d3234203d3e20313336303532.roa (hash: YlWhhG5+SXJ+RtEZrRBNLk9BnFzp5Av7c11ptEycGe4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 08:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b3:f3:29:dc:8e:93:2c:51:2a:d4:15:5d:d5:21:89:f9:b2:84:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70 Validity Not Before: Sep 5 20:55:57 2025 GMT Not After : Sep 9 08:37:57 2025 GMT Subject: CN=7668BB0DB0D1AA7AAF2C0EC23780BDAB6E497E01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:45:6a:ad:40:ff:58:bc:c2:ae:c2:4f:04:7d: 0d:cc:e4:4d:b8:62:eb:5b:5e:69:dd:82:5a:b0:bf: ca:31:d9:13:29:c6:b2:2c:ff:f2:dc:50:b8:f8:99: 21:89:30:b8:b1:d9:27:98:4b:47:57:fe:e9:e1:79: 50:75:a2:94:e2:35:03:2e:af:a2:ac:2c:52:12:91: b4:ea:4b:fe:5b:75:48:26:e9:71:67:1a:29:89:3c: 07:2d:ed:4f:0d:84:8a:ea:d2:91:97:eb:38:b3:d7: 24:47:69:de:84:84:82:fb:e4:53:68:43:45:4a:64: b0:a2:85:9f:e2:1e:09:db:b1:9d:f6:18:16:08:b0: f2:74:82:01:d2:3d:78:e9:d1:13:13:46:2a:40:0a: c1:70:f0:53:c6:f9:dd:57:ab:b9:84:76:0f:16:b7: 9f:c3:49:1f:6c:96:e6:35:39:e1:84:9b:b4:64:6c: a5:9f:cf:00:dc:2a:60:c9:52:0f:ed:9f:26:91:6b: c1:59:b2:3d:50:a9:8a:f1:80:4c:a8:ba:ac:07:a7: 0f:ec:b9:59:08:bc:89:00:db:da:3c:1e:ef:ca:5c: 5a:79:4c:8f:73:7e:4b:c1:7c:f7:5b:53:ec:bc:9a: 8c:be:63:8c:29:37:2f:dd:e4:f2:7d:77:5c:fa:c5: 22:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:68:BB:0D:B0:D1:AA:7A:AF:2C:0E:C2:37:80:BD:AB:6E:49:7E:01 X509v3 Authority Key Identifier: keyid:E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:9c:80:17:75:1a:3d:fa:d2:f6:e0:e6:94:29:77:c4:63:43: 23:56:bc:40:ac:6f:69:9f:d9:55:81:df:72:61:d1:e2:11:4c: 1e:e0:7a:4d:17:3b:42:90:67:da:5c:b7:2b:f1:60:a3:6e:dc: 48:73:f2:4e:16:0e:bd:42:fd:7c:1b:96:e7:51:df:42:47:9b: 1a:e1:39:c9:af:d8:9f:9c:f5:26:f4:36:27:b6:65:b7:8e:3b: 2a:a0:e9:ec:86:8a:57:c5:2a:ef:97:4c:34:32:45:af:54:77: a0:f4:6b:ef:d7:91:be:d3:14:3a:45:34:dd:9d:62:ab:b5:5d: 0a:d1:64:72:97:6d:de:0d:e6:30:2b:43:bc:17:4b:c0:85:49: c8:08:57:4d:58:54:3e:30:15:4f:3e:bc:d7:94:61:86:ec:06: c6:20:9a:1b:76:8d:ec:5f:af:7e:f8:e4:c3:56:eb:b9:9c:a3: 25:de:82:22:33:a6:05:62:f6:0a:f8:b3:54:d7:e5:13:d7:07: ea:69:70:c0:7c:3d:11:b9:85:8a:38:7d:8a:18:82:1b:9f:33: 3d:b0:1c:c0:01:1d:e7:0c:19:a4:20:ba:13:d2:b2:0e:11:56: ee:67:0b:bc:c1:ba:49:41:9d:93:2c:1a:f9:ff:5f:7c:e3:36: 44:ba:ef:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP7PzKdyOkyxRKtQVXdUhifmyhLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0Ex QURBNUQ3MDAeFw0yNTA5MDUyMDU1NTdaFw0yNTA5MDkwODM3NTdaMDMxMTAvBgNV BAMTKDc2NjhCQjBEQjBEMUFBN0FBRjJDMEVDMjM3ODBCREFCNkU0OTdFMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyRWqtQP9YvMKuwk8EfQ3M5E24 YutbXmndglqwv8ox2RMpxrIs//LcULj4mSGJMLix2SeYS0dX/unheVB1opTiNQMu r6KsLFISkbTqS/5bdUgm6XFnGimJPAct7U8NhIrq0pGX6ziz1yRHad6EhIL75FNo Q0VKZLCihZ/iHgnbsZ32GBYIsPJ0ggHSPXjp0RMTRipACsFw8FPG+d1Xq7mEdg8W t5/DSR9sluY1OeGEm7RkbKWfzwDcKmDJUg/tnyaRa8FZsj1QqYrxgEyouqwHpw/s uVkIvIkA29o8Hu/KXFp5TI9zfkvBfPdbU+y8moy+Y4wpNy/d5PJ9d1z6xSJnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdmi7DbDRqnqvLA7CN4C9q25JfgEwHwYDVR0j BBgwFoAU4JZ1Se8y2J6f8WOPzxg0ehraXXAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzdhNmRkOC1hODQzLTQ2OTgtYTVmMy0zZWVjNDY4ZDE0YTQvMC9FMDk2NzU0OUVG MzJEODlFOUZGMTYzOEZDRjE4MzQ3QTFBREE1RDcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0ExQURB NUQ3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM3YTZkZDgtYTg0My00Njk4LWE1 ZjMtM2VlYzQ2OGQxNGE0LzAvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0 N0ExQURBNUQ3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGicgBd1Gj360vbg5pQpd8RjQyNWvECsb2mf 2VWB33Jh0eIRTB7gek0XO0KQZ9pctyvxYKNu3Ehz8k4WDr1C/XwbludR30JHmxrh Ocmv2J+c9Sb0Nie2ZbeOOyqg6eyGilfFKu+XTDQyRa9Ud6D0a+/Xkb7TFDpFNN2d Yqu1XQrRZHKXbd4N5jArQ7wXS8CFScgIV01YVD4wFU8+vNeUYYbsBsYgmht2jexf r3745MNW67mcoyXegiIzpgVi9gr4s1TX5RPXB+ppcMB8PRG5hYo4fYoYghufMz2w HMABHecMGaQguhPSsg4RVu5nC7zBuklBnZMsGvn/X3zjNkS67/M= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:45 2025 by rpki-client