$ rpki-client -vvf repo-rpki.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/ED47540CA812870D4CDBD150F71BACF636BC000E.mft File: ED47540CA812870D4CDBD150F71BACF636BC000E.mft (raw, json) Hash identifier: 9pbhHQtHpXf1/QryjfwabUP5dmeAVUtrnSMZI3DvzLI= Subject key identifier: 3B:D5:1A:F4:69:44:DC:B7:11:A9:66:F3:56:41:D0:8F:DB:D2:33:D7 Authority key identifier: ED:47:54:0C:A8:12:87:0D:4C:DB:D1:50:F7:1B:AC:F6:36:BC:00:0E Certificate issuer: /CN=ED47540CA812870D4CDBD150F71BACF636BC000E Certificate serial: 3D8E745034157350B2AF1C6C04C2794D292CE23F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED47540CA812870D4CDBD150F71BACF636BC000E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/ED47540CA812870D4CDBD150F71BACF636BC000E.mft Manifest number: 0202 Signing time: Sat 06 Sep 2025 23:21:36 +0000 Manifest this update: Sat 06 Sep 2025 23:16:36 +0000 Manifest next update: Wed 10 Sep 2025 00:50:36 +0000 Files and hashes: 1: 3130332e3135392e3131362e302f32332d3234203d3e203338333230.roa (hash: vyZtldMTjMyu3iJ/orgojw8DEr5/d6xlea+iuDJEfRk=) 2: ED47540CA812870D4CDBD150F71BACF636BC000E.crl (hash: NMrrKNJRXSmIVg5oMmDDNP2FZdjLsqWcx/5w/wTJb5s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/ED47540CA812870D4CDBD150F71BACF636BC000E.crl rsync://repo-rpki.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/ED47540CA812870D4CDBD150F71BACF636BC000E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED47540CA812870D4CDBD150F71BACF636BC000E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 00:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:8e:74:50:34:15:73:50:b2:af:1c:6c:04:c2:79:4d:29:2c:e2:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED47540CA812870D4CDBD150F71BACF636BC000E Validity Not Before: Sep 6 23:16:36 2025 GMT Not After : Sep 10 00:50:36 2025 GMT Subject: CN=3BD51AF46944DCB711A966F35641D08FDBD233D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7a:16:39:12:39:69:f6:a7:e4:1a:b9:7e:1c: 10:81:a3:72:17:88:c1:25:88:0f:97:ad:c2:13:b6: 7f:34:6b:f5:01:3a:ae:fc:7d:b3:ce:9d:bb:ba:01: df:97:27:6a:d4:80:98:b4:25:34:d2:f6:3b:f0:58: a1:fc:29:85:45:0a:f4:81:cb:6d:2f:6c:ba:ad:fa: 06:85:73:33:e9:8e:c2:be:28:76:6d:5e:f1:12:3d: d5:3f:1d:f5:8a:61:2e:86:65:e5:e3:0e:0b:76:80: 12:7f:6b:25:c8:87:87:85:3f:48:2e:70:df:bc:28: 37:9e:9e:a4:7b:e6:5b:ab:01:dc:db:2a:7c:ad:bc: 1d:3d:50:cb:3f:91:e4:79:e2:7f:19:03:f5:a9:ac: 37:d0:9b:c5:fb:a9:bb:29:13:c5:a9:48:0d:5f:49: dd:75:d0:6c:68:ca:4d:8b:11:28:e4:ee:fd:4e:1d: 46:78:c8:c3:e9:c8:ed:8e:70:a4:9b:ac:da:fb:ce: 6d:dc:ee:23:2a:b2:18:5b:d8:03:13:f8:ea:55:09: 8e:c2:b7:ab:d1:d2:3c:52:1e:3a:58:fc:ae:05:47: ae:f8:02:5c:96:5e:ee:4a:19:8b:cd:24:b7:f9:d4: 87:93:c0:c0:4d:ac:ee:7b:29:30:a6:93:f1:17:1b: 42:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D5:1A:F4:69:44:DC:B7:11:A9:66:F3:56:41:D0:8F:DB:D2:33:D7 X509v3 Authority Key Identifier: keyid:ED:47:54:0C:A8:12:87:0D:4C:DB:D1:50:F7:1B:AC:F6:36:BC:00:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/ED47540CA812870D4CDBD150F71BACF636BC000E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED47540CA812870D4CDBD150F71BACF636BC000E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/935f15c9-5843-4705-b694-fe5e7ce19808/0/ED47540CA812870D4CDBD150F71BACF636BC000E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:66:54:62:55:84:41:54:9c:69:7b:e6:0a:1d:65:a3:e7:0a: 3f:a8:68:d6:4c:33:5c:97:b3:63:dd:bf:d7:36:17:3f:c1:bb: ee:4f:4e:3c:50:9c:08:93:05:e2:a0:c9:42:a5:ff:0c:88:c0: 92:00:e7:0a:a7:88:b1:b3:79:b9:b5:fe:91:f1:aa:9a:20:5f: bf:1a:c9:01:14:db:c7:16:cc:0b:00:3f:d8:d9:5e:b7:6e:a2: 53:85:79:21:76:aa:49:1b:fe:92:44:7d:2d:f9:d8:4e:df:73: e8:d5:65:79:a6:f7:c9:d4:c9:73:05:81:d3:6b:04:d4:e3:6a: 06:36:64:f2:5c:a1:14:79:3f:a6:d2:be:5a:65:6f:7f:f0:c8: c1:dd:7b:4d:9c:bb:a1:57:8a:0d:cc:57:48:52:37:c5:ae:52: fa:fe:f5:8b:9d:55:42:5d:1e:1e:c7:20:54:43:73:8e:43:6f: 9d:b7:9a:40:cb:8d:de:5d:24:01:28:48:ff:c1:dc:1c:d2:3d: e1:a4:0a:6d:9b:83:94:85:3b:b1:2b:59:99:11:09:39:9c:46: 72:27:74:26:01:fc:a4:25:c4:0a:31:d6:4b:66:47:60:91:ef: 3d:47:9e:ee:19:f3:82:0a:5b:45:d4:6a:bd:0e:c5:1c:a2:1d: 1f:51:bc:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPY50UDQVc1CyrxxsBMJ5TSks4j8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ0NzU0MENBODEyODcwRDRDREJEMTUwRjcxQkFDRjYz NkJDMDAwRTAeFw0yNTA5MDYyMzE2MzZaFw0yNTA5MTAwMDUwMzZaMDMxMTAvBgNV BAMTKDNCRDUxQUY0Njk0NERDQjcxMUE5NjZGMzU2NDFEMDhGREJEMjMzRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ehY5Ejlp9qfkGrl+HBCBo3IX iMEliA+XrcITtn80a/UBOq78fbPOnbu6Ad+XJ2rUgJi0JTTS9jvwWKH8KYVFCvSB y20vbLqt+gaFczPpjsK+KHZtXvESPdU/HfWKYS6GZeXjDgt2gBJ/ayXIh4eFP0gu cN+8KDeenqR75lurAdzbKnytvB09UMs/keR54n8ZA/WprDfQm8X7qbspE8WpSA1f Sd110Gxoyk2LESjk7v1OHUZ4yMPpyO2OcKSbrNr7zm3c7iMqshhb2AMT+OpVCY7C t6vR0jxSHjpY/K4FR674AlyWXu5KGYvNJLf51IeTwMBNrO57KTCmk/EXG0LHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO9Ua9GlE3LcRqWbzVkHQj9vSM9cwHwYDVR0j BBgwFoAU7UdUDKgShw1M29FQ9xus9ja8AA4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzVmMTVjOS01ODQzLTQ3MDUtYjY5NC1mZTVlN2NlMTk4MDgvMC9FRDQ3NTQwQ0E4 MTI4NzBENENEQkQxNTBGNzFCQUNGNjM2QkMwMDBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQ0NzU0MENBODEyODcwRDRDREJEMTUwRjcxQkFDRjYzNkJD MDAwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM1ZjE1YzktNTg0My00NzA1LWI2 OTQtZmU1ZTdjZTE5ODA4LzAvRUQ0NzU0MENBODEyODcwRDRDREJEMTUwRjcxQkFD RjYzNkJDMDAwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBmVGJVhEFUnGl75godZaPnCj+oaNZMM1yX s2Pdv9c2Fz/Bu+5PTjxQnAiTBeKgyUKl/wyIwJIA5wqniLGzebm1/pHxqpogX78a yQEU28cWzAsAP9jZXrduolOFeSF2qkkb/pJEfS352E7fc+jVZXmm98nUyXMFgdNr BNTjagY2ZPJcoRR5P6bSvlplb3/wyMHde02cu6FXig3MV0hSN8WuUvr+9YudVUJd Hh7HIFRDc45Db523mkDLjd5dJAEoSP/B3BzSPeGkCm2bg5SFO7ErWZkRCTmcRnIn dCYB/KQlxAox1ktmR2CR7z1Hnu4Z84IKW0XUar0OxRyiHR9RvJg= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:06 2025 by rpki-client