$ rpki-client -vvf repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft File: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft (raw, json) Hash identifier: u5ILtDdT/nTT76cMK6eOCYK4mC5MAWKC5JSfhcyf+ao= Subject key identifier: CE:2F:CE:D1:FF:5D:38:D0:7A:F8:3B:64:59:B0:8F:8E:8B:63:BD:BB Authority key identifier: E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 Certificate issuer: /CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Certificate serial: 4DE5C70C90D89AA384919FEBF347DC25E2E9B5A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft Manifest number: 0355 Signing time: Thu 04 Sep 2025 04:21:50 +0000 Manifest this update: Thu 04 Sep 2025 04:16:50 +0000 Manifest next update: Sun 07 Sep 2025 13:54:50 +0000 Files and hashes: 1: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl (hash: qglE4xD/Vmqqk6MnhWiJED/1H4LjtCw0mKi2cC0NWi0=) 2: 3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa (hash: Wwvtox4pnVKWLsRl/E/cxu7UuLzmLQJxzxgchSEOlMg=) 3: 3130332e3136342e3233312e302f32342d3234203d3e20313431393133.roa (hash: NK0HZEK3BAxoXUs/T9BsQ+3NHYIYmmtIH82zUm/fzDk=) 4: 3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa (hash: zTY/Xpdv3MSQoDsOl/9obTqa4WAjpeiNnIpy7In5lOI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 13:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e5:c7:0c:90:d8:9a:a3:84:91:9f:eb:f3:47:dc:25:e2:e9:b5:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Validity Not Before: Sep 4 04:16:50 2025 GMT Not After : Sep 7 13:54:50 2025 GMT Subject: CN=CE2FCED1FF5D38D07AF83B6459B08F8E8B63BDBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1a:e2:35:21:62:02:d9:3a:66:70:c4:97:b1: de:72:e9:b8:d1:e0:c2:4c:7a:00:30:7e:8a:3b:e5: 86:d4:e5:41:c0:06:27:8e:1c:12:5e:ad:37:56:a1: f1:bb:88:65:d6:4a:5f:1a:99:bd:17:11:b3:d1:cd: d8:09:2e:72:bb:2c:cd:52:94:45:dd:ee:4e:fe:b4: b6:87:70:bb:e7:ff:f9:ca:3f:e6:9a:e4:b9:24:1b: 32:53:0d:ea:0f:0e:7b:4f:e7:0f:f5:49:5d:b1:c0: 6d:43:00:e3:41:bc:62:c6:64:a5:b0:b7:70:71:39: 4a:1b:08:2d:41:30:a0:e1:69:0d:7e:27:e5:67:a9: cb:d7:a3:ad:f2:bc:d6:23:8b:fc:d7:38:82:f6:03: 49:f5:a2:a1:dd:43:67:c6:7a:c2:dd:fe:3f:1c:a6: 2b:7b:b1:8c:d5:90:8c:aa:1a:1f:fc:9b:66:ce:20: ad:55:71:5b:95:a4:2b:ef:11:e9:7f:39:07:f4:72: a4:10:a3:4e:a9:e3:83:f0:08:02:84:21:ea:79:b9: fd:7f:94:12:f1:d7:0d:b4:b0:f4:63:cd:9d:bc:cb: c5:cd:a1:b1:7d:cf:d8:3f:0b:b3:86:56:eb:ee:00: b8:71:4c:a8:39:85:44:e2:b9:15:7b:ba:3d:10:ea: 45:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2F:CE:D1:FF:5D:38:D0:7A:F8:3B:64:59:B0:8F:8E:8B:63:BD:BB X509v3 Authority Key Identifier: keyid:E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:07:32:b5:fb:5e:34:a0:57:a3:24:8e:b7:8b:29:e4:ec:1f: 45:fd:75:c5:3d:0d:3a:aa:d9:6e:49:84:ac:95:cf:cf:57:86: 9e:ab:10:09:0a:19:82:68:14:02:54:14:6a:14:ea:27:43:1d: 2c:b3:b0:d9:24:1a:bc:76:0f:df:e7:f1:f7:76:63:0f:73:3b: ad:db:9c:96:b1:f1:4c:57:81:3c:8c:09:b8:b5:11:2d:b8:eb: 2f:d5:da:a8:a0:4a:77:79:c2:c1:68:2c:de:35:37:d2:7b:42: dc:aa:8e:22:27:2d:4c:d5:0f:f3:97:3d:7c:98:61:f7:df:91: d8:31:d1:ef:72:71:97:26:09:bb:20:94:98:fc:12:81:21:8e: 31:fd:b3:c1:56:de:8f:5a:0b:4d:b8:15:7f:80:cc:98:47:86: f4:43:cc:23:b5:76:37:bf:56:c5:13:4c:21:4d:10:8f:b7:32: 75:9c:a4:74:f8:73:15:25:dd:18:e9:c0:7e:88:de:21:20:ce: e1:6f:e5:21:73:a6:1a:b1:4b:44:97:b8:25:04:62:bd:0b:73: 6d:b8:49:94:5e:d7:0f:1d:15:12:61:ef:cb:bf:e0:ed:6f:98: 6e:c8:2d:e0:cd:d4:0d:3b:9f:81:0e:b3:13:e8:c2:c2:70:7d: e3:9e:53:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTeXHDJDYmqOEkZ/r80fcJeLptaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIz MzNFQkI1ODAeFw0yNTA5MDQwNDE2NTBaFw0yNTA5MDcxMzU0NTBaMDMxMTAvBgNV BAMTKENFMkZDRUQxRkY1RDM4RDA3QUY4M0I2NDU5QjA4RjhFOEI2M0JEQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIGuI1IWIC2TpmcMSXsd5y6bjR 4MJMegAwfoo75YbU5UHABieOHBJerTdWofG7iGXWSl8amb0XEbPRzdgJLnK7LM1S lEXd7k7+tLaHcLvn//nKP+aa5LkkGzJTDeoPDntP5w/1SV2xwG1DAONBvGLGZKWw t3BxOUobCC1BMKDhaQ1+J+VnqcvXo63yvNYji/zXOIL2A0n1oqHdQ2fGesLd/j8c pit7sYzVkIyqGh/8m2bOIK1VcVuVpCvvEel/OQf0cqQQo06p44PwCAKEIep5uf1/ lBLx1w20sPRjzZ28y8XNobF9z9g/C7OGVuvuALhxTKg5hUTiuRV7uj0Q6kUhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzi/O0f9dONB6+DtkWbCPjotjvbswHwYDVR0j BBgwFoAU5yMdGj4FG9kD24bX3gB3wjM+u1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTE3OTRhYS0zMjkxLTQ4M2ItYWMwYi03YmM3YjFhNjdjYzYvMC9FNzIzMUQxQTNF MDUxQkQ5MDNEQjg2RDdERTAwNzdDMjMzM0VCQjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIzMzNF QkI1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWExNzk0YWEtMzI5MS00ODNiLWFj MGItN2JjN2IxYTY3Y2M2LzAvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3 QzIzMzNFQkI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABoHMrX7XjSgV6MkjreLKeTsH0X9dcU9DTqq 2W5JhKyVz89Xhp6rEAkKGYJoFAJUFGoU6idDHSyzsNkkGrx2D9/n8fd2Yw9zO63b nJax8UxXgTyMCbi1ES246y/V2qigSnd5wsFoLN41N9J7QtyqjiInLUzVD/OXPXyY Yfffkdgx0e9ycZcmCbsglJj8EoEhjjH9s8FW3o9aC024FX+AzJhHhvRDzCO1dje/ VsUTTCFNEI+3MnWcpHT4cxUl3RjpwH6I3iEgzuFv5SFzphqxS0SXuCUEYr0Lc224 SZRe1w8dFRJh78u/4O1vmG7ILeDN1A07n4EOsxPowsJwfeOeU9o= -----END CERTIFICATE-----Generated at Fri Sep 5 10:39:39 2025 by rpki-client