$ rpki-client -vvf repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft File: E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft (raw, json) Hash identifier: JENnvDiCKGShMD70yLTUSa8IL9Jq/u2mYucPchy64Vk= Subject key identifier: 1D:21:72:94:9E:48:90:0F:AB:41:EE:ED:9F:6E:FF:77:90:A4:43:5B Authority key identifier: E0:7F:0E:8D:E2:57:2D:C7:B8:13:7E:C0:67:9F:42:64:5D:69:5A:54 Certificate issuer: /CN=E07F0E8DE2572DC7B8137EC0679F42645D695A54 Certificate serial: 49C2218E7618D5650E9F83E9ABF497BEF880CD83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft Manifest number: BF Signing time: Sat 06 Sep 2025 06:10:40 +0000 Manifest this update: Sat 06 Sep 2025 06:05:40 +0000 Manifest next update: Tue 09 Sep 2025 15:40:40 +0000 Files and hashes: 1: 323030313a6466333a666434303a3a2f34382d3438203d3e20313532303535.roa (hash: nQLud3Jn262khF6pI+ZrfSTaiFCpRTXR0OL4+TzR7ac=) 2: E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl (hash: FEsPoCio6Nb+BnoviBSPT1lYtkSR03xgMC6oKR+hDaw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 15:40:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c2:21:8e:76:18:d5:65:0e:9f:83:e9:ab:f4:97:be:f8:80:cd:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E07F0E8DE2572DC7B8137EC0679F42645D695A54 Validity Not Before: Sep 6 06:05:40 2025 GMT Not After : Sep 9 15:40:40 2025 GMT Subject: CN=1D2172949E48900FAB41EEED9F6EFF7790A4435B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:71:e4:20:78:30:5a:69:86:ab:5d:bd:cd:12: 91:22:12:ba:a1:c3:56:c4:4f:7e:62:37:ef:fa:01: d0:fd:43:26:66:8a:80:92:d9:82:76:8f:5b:58:c5: a8:5f:6e:90:d0:62:e9:b7:4f:a7:11:27:42:83:00: 8d:45:41:74:43:f8:71:2d:60:82:04:f2:84:4f:76: c3:bb:ef:18:3f:e3:ff:04:0d:79:9a:70:ef:19:8d: 47:cc:38:38:46:c8:74:f7:ff:09:69:e8:fb:ef:80: db:37:b2:ac:d3:7e:bd:18:8a:c7:8f:bd:36:a7:29: 59:33:6b:ac:0a:63:a5:6b:75:98:79:17:c7:a2:65: 6b:c2:8e:39:66:a3:3a:05:04:80:9a:d1:f1:81:06: 08:38:ae:59:22:aa:9a:ce:7e:78:84:ab:14:48:a9: 5d:93:cd:2d:be:20:cd:2a:9c:7b:4b:fb:3c:7f:af: ad:ca:d2:d1:bc:44:4f:10:86:15:5b:72:34:51:58: 93:18:72:24:29:20:52:90:6c:9d:a8:6b:6b:a8:be: 5c:29:7c:17:0f:1c:76:29:bd:46:ea:89:95:66:05: af:b4:f4:de:5f:bc:45:6d:ac:6b:94:8a:83:7c:6c: fd:db:ec:2e:4b:d0:a0:4f:a6:95:05:e3:2b:b0:0d: f8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:21:72:94:9E:48:90:0F:AB:41:EE:ED:9F:6E:FF:77:90:A4:43:5B X509v3 Authority Key Identifier: keyid:E0:7F:0E:8D:E2:57:2D:C7:B8:13:7E:C0:67:9F:42:64:5D:69:5A:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:b9:aa:74:2c:3f:02:38:16:34:c4:7e:08:a4:4f:8d:0d:99: cd:dd:49:72:bb:b2:1d:79:b7:1e:60:2f:28:a3:8a:ff:ec:27: 95:fa:41:46:9d:92:81:f6:f6:b6:7b:3b:2d:0d:09:1f:80:08: 45:ea:60:f8:89:a4:26:63:2a:81:41:a7:d0:96:b7:c0:b6:38: 38:ea:ac:59:49:44:da:9b:39:ca:44:60:1c:34:22:2c:b4:65: 8e:64:3e:09:77:09:79:99:81:68:19:fe:a0:a9:8b:43:16:27: bf:87:66:e0:f7:cc:ba:62:32:9e:b3:11:95:af:95:46:1f:53: 18:ee:d8:cf:c5:41:b9:d4:80:6b:7f:8c:00:51:aa:27:79:1e: 18:e3:63:08:19:72:78:e5:d6:d6:98:c5:1c:eb:20:cd:d2:8c: 4d:df:7e:d7:87:22:3a:dc:31:6f:d0:9d:a1:01:b0:96:78:a5: fa:5e:66:48:db:76:0b:f9:ed:7b:7d:05:bc:77:64:a5:70:4b: 15:f8:d5:11:38:7c:27:34:ac:46:a5:0d:4f:62:07:89:6f:33: 3f:86:a7:cc:05:00:0f:ef:bc:b4:24:83:d3:6d:0b:c5:37:95: d3:d1:20:35:a2:25:2a:21:58:c4:88:cf:05:0e:b0:a1:ba:78: 69:ac:21:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUScIhjnYY1WUOn4Ppq/SXvviAzYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA3RjBFOERFMjU3MkRDN0I4MTM3RUMwNjc5RjQyNjQ1 RDY5NUE1NDAeFw0yNTA5MDYwNjA1NDBaFw0yNTA5MDkxNTQwNDBaMDMxMTAvBgNV BAMTKDFEMjE3Mjk0OUU0ODkwMEZBQjQxRUVFRDlGNkVGRjc3OTBBNDQzNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmceQgeDBaaYarXb3NEpEiErqh w1bET35iN+/6AdD9QyZmioCS2YJ2j1tYxahfbpDQYum3T6cRJ0KDAI1FQXRD+HEt YIIE8oRPdsO77xg/4/8EDXmacO8ZjUfMODhGyHT3/wlp6PvvgNs3sqzTfr0YiseP vTanKVkza6wKY6VrdZh5F8eiZWvCjjlmozoFBICa0fGBBgg4rlkiqprOfniEqxRI qV2TzS2+IM0qnHtL+zx/r63K0tG8RE8QhhVbcjRRWJMYciQpIFKQbJ2oa2uovlwp fBcPHHYpvUbqiZVmBa+09N5fvEVtrGuUioN8bP3b7C5L0KBPppUF4yuwDfgDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHSFylJ5IkA+rQe7tn27/d5CkQ1swHwYDVR0j BBgwFoAU4H8OjeJXLce4E37AZ59CZF1pWlQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGYyODVlZi0zNDUzLTQxNzktYTU1My1mMTk1OTdkZTlkZWQvMC9FMDdGMEU4REUy NTcyREM3QjgxMzdFQzA2NzlGNDI2NDVENjk1QTU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA3RjBFOERFMjU3MkRDN0I4MTM3RUMwNjc5RjQyNjQ1RDY5 NUE1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThmMjg1ZWYtMzQ1My00MTc5LWE1 NTMtZjE5NTk3ZGU5ZGVkLzAvRTA3RjBFOERFMjU3MkRDN0I4MTM3RUMwNjc5RjQy NjQ1RDY5NUE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABW5qnQsPwI4FjTEfgikT40Nmc3dSXK7sh15 tx5gLyijiv/sJ5X6QUadkoH29rZ7Oy0NCR+ACEXqYPiJpCZjKoFBp9CWt8C2ODjq rFlJRNqbOcpEYBw0Iiy0ZY5kPgl3CXmZgWgZ/qCpi0MWJ7+HZuD3zLpiMp6zEZWv lUYfUxju2M/FQbnUgGt/jABRqid5HhjjYwgZcnjl1taYxRzrIM3SjE3ffteHIjrc MW/QnaEBsJZ4pfpeZkjbdgv57Xt9Bbx3ZKVwSxX41RE4fCc0rEalDU9iB4lvMz+G p8wFAA/vvLQkg9NtC8U3ldPRIDWiJSohWMSIzwUOsKG6eGmsIRc= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:47 2025 by rpki-client