$ rpki-client -vvf repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft File: E42B0752D5FFAB254C3F0E221499F67420870FEB.mft (raw, json) Hash identifier: p+YMQav1+nOT7JgraVQ8wF5PsiupwdHCEoWVu/vbNuE= Subject key identifier: 15:FB:F0:2E:82:F2:23:99:C1:3B:6B:5D:68:9E:97:26:8E:3A:38:BD Authority key identifier: E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB Certificate issuer: /CN=E42B0752D5FFAB254C3F0E221499F67420870FEB Certificate serial: 5EA6C6104AB90DC62661C6970B9F6E0217C4CCE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft Manifest number: 0489 Signing time: Sat 06 Sep 2025 12:21:15 +0000 Manifest this update: Sat 06 Sep 2025 12:16:15 +0000 Manifest next update: Tue 09 Sep 2025 16:16:15 +0000 Files and hashes: 1: 3230322e35382e3136302e302f32302d3234203d3e203234353236.roa (hash: v44nTeNOx/KqdniK95QY0LHF9vkB+FOSNNbRKZTEdnM=) 2: E42B0752D5FFAB254C3F0E221499F67420870FEB.crl (hash: haz8w7QbyBbpo23uCykyI/UelvzvrOtCOk+E6RPauUY=) 3: 323430323a646130303a3a2f33322d3438203d3e203234353236.roa (hash: KXkQEzDE7eAOGwkwjqYSUBJ2gO8yBncemPnpiy3ztzA=) 4: 3230322e35382e3137362e302f32312d3234203d3e203234353236.roa (hash: hoFhirnLUQz/p84odzqMxw9tsnTuNV/GRFdBFOkjvGI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.crl rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 16:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:a6:c6:10:4a:b9:0d:c6:26:61:c6:97:0b:9f:6e:02:17:c4:cc:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E42B0752D5FFAB254C3F0E221499F67420870FEB Validity Not Before: Sep 6 12:16:15 2025 GMT Not After : Sep 9 16:16:15 2025 GMT Subject: CN=15FBF02E82F22399C13B6B5D689E97268E3A38BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c8:69:32:31:e0:a1:62:7a:47:fc:e3:bd:9b: ff:5a:b1:71:f0:b2:e2:28:96:f1:f1:63:cb:6b:d4: a7:f6:3e:9f:2f:de:25:aa:97:00:1e:cf:30:67:94: 89:17:a2:f1:0a:06:ad:aa:dd:8e:a4:18:b3:62:f7: 6b:f3:39:66:41:95:2e:3f:2e:e9:c1:36:50:97:76: de:49:1d:7a:18:81:b9:ad:25:8f:a3:5a:44:9a:65: b4:1a:b7:0b:9d:cc:62:82:d2:fd:9e:c8:ea:87:06: e4:31:d5:9b:0f:e2:e1:e3:00:f6:17:7c:07:37:02: 6c:aa:1c:44:d4:2b:f5:ee:57:8e:9a:fe:8e:7a:9e: 71:a4:f6:6d:b6:95:35:9d:2d:68:51:bf:dc:16:97: 7e:c3:5a:74:aa:b8:88:fe:a7:bc:da:06:19:4a:99: 85:aa:b0:4b:b3:6a:5c:33:9b:b9:d8:99:73:0f:d3: 3d:54:c4:41:51:70:b4:d1:33:c8:ad:e5:68:bd:c9: bb:15:d5:7d:17:89:d5:d1:d9:ab:21:b3:2d:f4:27: ef:c7:31:e0:50:26:56:62:61:91:8d:18:91:74:ff: 92:6a:02:f3:e6:4c:f0:04:e7:aa:d9:a4:02:c3:c9: 72:2f:8e:a3:27:43:b0:4e:83:e3:4c:fa:38:b8:93: d6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:FB:F0:2E:82:F2:23:99:C1:3B:6B:5D:68:9E:97:26:8E:3A:38:BD X509v3 Authority Key Identifier: keyid:E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:6a:a3:3e:56:b3:f5:11:d2:69:43:47:95:cb:59:46:1a:e8: 6d:11:02:ab:0b:f7:f2:7e:8f:18:12:cc:03:72:32:c9:d2:3f: 21:81:13:85:7e:1d:33:e2:11:c9:2f:d6:49:41:9d:ef:f0:14: 0e:d2:3a:bc:48:ea:cd:25:38:63:5d:3e:6c:b7:42:55:98:8a: cc:a0:80:d3:cf:98:14:d3:87:5a:db:da:52:6e:0e:67:71:c8: a9:e7:59:8d:9e:35:0b:05:2d:bf:b9:3e:58:29:07:ca:f0:2f: ed:29:a4:27:6e:72:0b:ee:b0:a7:63:bd:1c:9e:f3:82:c3:62: 65:81:cc:51:1a:b2:ab:c1:99:01:20:76:22:72:52:9c:d2:22: 5b:28:60:93:77:9d:0d:d6:69:26:9f:11:91:8a:e9:c1:4e:be: 6d:74:68:66:0e:ca:4b:ec:6c:ad:eb:2e:c2:3e:14:08:38:76: e5:8f:d7:29:bf:90:fe:a1:49:ec:88:89:7a:08:a1:d8:cf:96: fe:80:e6:9d:b5:70:04:af:01:30:34:0e:51:43:e2:6a:61:2b: 18:5c:06:7e:42:b1:5a:d8:11:83:3e:d7:ae:fb:ec:e2:0f:b1: 76:24:1a:01:fc:19:da:7f:81:d1:d8:fd:eb:a8:8f:b1:8d:72: bf:ff:4b:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXqbGEEq5DcYmYcaXC59uAhfEzOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2NzQy MDg3MEZFQjAeFw0yNTA5MDYxMjE2MTVaFw0yNTA5MDkxNjE2MTVaMDMxMTAvBgNV BAMTKDE1RkJGMDJFODJGMjIzOTlDMTNCNkI1RDY4OUU5NzI2OEUzQTM4QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSyGkyMeChYnpH/OO9m/9asXHw suIolvHxY8tr1Kf2Pp8v3iWqlwAezzBnlIkXovEKBq2q3Y6kGLNi92vzOWZBlS4/ LunBNlCXdt5JHXoYgbmtJY+jWkSaZbQatwudzGKC0v2eyOqHBuQx1ZsP4uHjAPYX fAc3AmyqHETUK/XuV46a/o56nnGk9m22lTWdLWhRv9wWl37DWnSquIj+p7zaBhlK mYWqsEuzalwzm7nYmXMP0z1UxEFRcLTRM8it5Wi9ybsV1X0XidXR2ashsy30J+/H MeBQJlZiYZGNGJF0/5JqAvPmTPAE56rZpALDyXIvjqMnQ7BOg+NM+ji4k9b/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFfvwLoLyI5nBO2tdaJ6XJo46OL0wHwYDVR0j BBgwFoAU5CsHUtX/qyVMPw4iFJn2dCCHD+swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzUxMjllNC0yMzI4LTQzZDItYTQ1OC05ZDM4Mjk2MTQ4MTUvMC9FNDJCMDc1MkQ1 RkZBQjI1NEMzRjBFMjIxNDk5RjY3NDIwODcwRkVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2NzQyMDg3 MEZFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM1MTI5ZTQtMjMyOC00M2QyLWE0 NTgtOWQzODI5NjE0ODE1LzAvRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2 NzQyMDg3MEZFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9qoz5Ws/UR0mlDR5XLWUYa6G0RAqsL9/J+ jxgSzANyMsnSPyGBE4V+HTPiEckv1klBne/wFA7SOrxI6s0lOGNdPmy3QlWYisyg gNPPmBTTh1rb2lJuDmdxyKnnWY2eNQsFLb+5PlgpB8rwL+0ppCducgvusKdjvRye 84LDYmWBzFEasqvBmQEgdiJyUpzSIlsoYJN3nQ3WaSafEZGK6cFOvm10aGYOykvs bK3rLsI+FAg4duWP1ym/kP6hSeyIiXoIodjPlv6A5p21cASvATA0DlFD4mphKxhc Bn5CsVrYEYM+16777OIPsXYkGgH8Gdp/gdHY/euoj7GNcr//S4E= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:52 2025 by rpki-client