$ rpki-client -vvf repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft File: E810D41602DB2D5449939EA97EB71C350841BC5D.mft (raw, json) Hash identifier: ybPR1x8DkubtGqAW0shfK5qcV5xjS870PS+D9CaxP3s= Subject key identifier: A0:14:43:3D:59:5F:AD:81:B3:8C:21:D2:C2:72:5C:96:AF:31:53:DD Authority key identifier: E8:10:D4:16:02:DB:2D:54:49:93:9E:A9:7E:B7:1C:35:08:41:BC:5D Certificate issuer: /CN=E810D41602DB2D5449939EA97EB71C350841BC5D Certificate serial: 3B90E6671D4DBC10B9DEEE17C05559FC642991AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft Manifest number: 021F Signing time: Sun 07 Sep 2025 14:11:03 +0000 Manifest this update: Sun 07 Sep 2025 14:06:03 +0000 Manifest next update: Wed 10 Sep 2025 16:39:03 +0000 Files and hashes: 1: E810D41602DB2D5449939EA97EB71C350841BC5D.crl (hash: g6qkNvbW3g7VV9S0TGPuHmBJhKuJICABPKe2Lym/t4k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.crl rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:90:e6:67:1d:4d:bc:10:b9:de:ee:17:c0:55:59:fc:64:29:91:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E810D41602DB2D5449939EA97EB71C350841BC5D Validity Not Before: Sep 7 14:06:03 2025 GMT Not After : Sep 10 16:39:03 2025 GMT Subject: CN=A014433D595FAD81B38C21D2C2725C96AF3153DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d9:17:3b:30:0b:c1:5d:1f:64:8e:ca:99:d7: ef:d5:71:55:35:a9:9b:e4:31:75:80:50:7a:06:51: e0:98:07:78:b1:1d:d6:c8:88:27:7f:f6:58:cf:fc: 27:3f:35:53:01:ff:5a:74:0d:96:66:18:53:ec:37: 5d:ca:1c:70:0b:2e:e0:ce:d3:c9:cd:16:92:1b:0a: c5:c8:9c:14:d0:3a:d2:c1:2b:3a:d7:b5:dc:25:5c: 14:69:a6:f2:38:b1:f3:ee:57:ed:77:ed:5c:5e:fc: a2:78:97:8c:e3:ae:e3:05:2b:3f:af:76:89:3a:f6: b9:62:8f:42:f8:d8:21:71:15:e0:39:ef:a0:a1:36: 42:31:77:f7:4e:ad:39:e8:95:43:b5:9e:57:b6:ed: 8e:21:82:15:82:47:fd:af:73:cf:fc:3b:7e:97:66: cd:c1:7d:0a:e0:52:e3:c9:b0:33:95:a6:b0:6b:67: 89:90:d8:98:f7:ca:e3:69:10:cc:80:cf:70:0a:1b: d4:a6:71:9a:97:bc:a9:67:ee:24:61:79:51:e9:95: 60:d1:9d:48:5a:af:88:dd:b0:f7:49:38:14:8b:b3: 43:88:08:2e:9e:03:b8:e7:7c:db:d1:be:23:26:f1: a3:ca:a8:c1:e2:ff:c4:5d:59:39:54:a5:0f:db:da: f5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:14:43:3D:59:5F:AD:81:B3:8C:21:D2:C2:72:5C:96:AF:31:53:DD X509v3 Authority Key Identifier: keyid:E8:10:D4:16:02:DB:2D:54:49:93:9E:A9:7E:B7:1C:35:08:41:BC:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:b5:30:17:a4:37:ad:40:0e:20:a0:b1:e1:cc:8d:e5:86:a8: 8a:19:09:bf:08:83:5e:4b:bd:0b:79:f5:69:cc:18:43:fd:b6: 20:fa:18:2a:83:91:82:6e:25:d4:37:14:45:8c:6d:73:02:7b: a8:cc:1b:87:9d:f8:65:bd:45:7e:1f:26:6a:51:9a:cd:65:ad: 8c:2f:d3:8b:5a:df:7b:41:a1:dc:f4:8f:59:fd:1f:aa:a0:04: 9e:2d:ec:7b:7b:03:b1:73:33:80:39:00:c5:0b:b6:5a:08:d7: e5:84:bc:6d:b5:ac:e5:f0:df:d6:fd:76:36:bd:3e:ac:7a:b9: 1d:f4:39:04:46:39:75:23:b5:07:0f:0b:40:b9:c0:17:25:44: 92:07:fa:b5:c3:a4:c0:bb:ff:cf:1a:f2:fd:ce:02:59:8b:a6: d6:8e:31:f9:7b:5e:ae:48:63:16:4a:be:93:32:0b:e2:9a:e6: af:77:79:57:11:93:d8:b3:f0:b8:7a:5c:fe:58:f8:f7:f2:e4: 31:3b:44:2b:35:b2:80:f3:85:26:99:c5:96:d0:46:b2:0f:6f: 79:32:52:d3:40:8d:34:dc:fb:c0:4f:1d:9f:3d:74:ee:30:35: bc:5e:b1:ef:ed:24:05:45:e8:bc:61:60:6d:e4:83:ad:6b:6f: e3:48:d0:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO5DmZx1NvBC53u4XwFVZ/GQpka4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTgxMEQ0MTYwMkRCMkQ1NDQ5OTM5RUE5N0VCNzFDMzUw ODQxQkM1RDAeFw0yNTA5MDcxNDA2MDNaFw0yNTA5MTAxNjM5MDNaMDMxMTAvBgNV BAMTKEEwMTQ0MzNENTk1RkFEODFCMzhDMjFEMkMyNzI1Qzk2QUYzMTUzREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs2Rc7MAvBXR9kjsqZ1+/VcVU1 qZvkMXWAUHoGUeCYB3ixHdbIiCd/9ljP/Cc/NVMB/1p0DZZmGFPsN13KHHALLuDO 08nNFpIbCsXInBTQOtLBKzrXtdwlXBRppvI4sfPuV+137Vxe/KJ4l4zjruMFKz+v dok69rlij0L42CFxFeA576ChNkIxd/dOrTnolUO1nle27Y4hghWCR/2vc8/8O36X Zs3BfQrgUuPJsDOVprBrZ4mQ2Jj3yuNpEMyAz3AKG9SmcZqXvKln7iRheVHplWDR nUhar4jdsPdJOBSLs0OICC6eA7jnfNvRviMm8aPKqMHi/8RdWTlUpQ/b2vVfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoBRDPVlfrYGzjCHSwnJclq8xU90wHwYDVR0j BBgwFoAU6BDUFgLbLVRJk56pfrccNQhBvF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTkwNWI4Zi01YzBhLTQ1NzktYjRmNy0wOTI2N2I1NTg5NjgvMC9FODEwRDQxNjAy REIyRDU0NDk5MzlFQTk3RUI3MUMzNTA4NDFCQzVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTgxMEQ0MTYwMkRCMkQ1NDQ5OTM5RUE5N0VCNzFDMzUwODQx QkM1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk5MDViOGYtNWMwYS00NTc5LWI0 ZjctMDkyNjdiNTU4OTY4LzAvRTgxMEQ0MTYwMkRCMkQ1NDQ5OTM5RUE5N0VCNzFD MzUwODQxQkM1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG61MBekN61ADiCgseHMjeWGqIoZCb8Ig15L vQt59WnMGEP9tiD6GCqDkYJuJdQ3FEWMbXMCe6jMG4ed+GW9RX4fJmpRms1lrYwv 04ta33tBodz0j1n9H6qgBJ4t7Ht7A7FzM4A5AMULtloI1+WEvG21rOXw39b9dja9 Pqx6uR30OQRGOXUjtQcPC0C5wBclRJIH+rXDpMC7/88a8v3OAlmLptaOMfl7Xq5I YxZKvpMyC+Ka5q93eVcRk9iz8Lh6XP5Y+Pfy5DE7RCs1soDzhSaZxZbQRrIPb3ky UtNAjTTc+8BPHZ89dO4wNbxese/tJAVF6LxhYG3kg61rb+NI0FU= -----END CERTIFICATE-----Generated at Sun Sep 7 15:18:40 2025 by rpki-client