$ rpki-client -vvf repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft File: E025EB5354ADB573B451D02820EA68FD4CAE920A.mft (raw, json) Hash identifier: Tc9q/ielexwn68/tI4gc42ssVmYpqvgUCIT2OzZ9CvE= Subject key identifier: 80:94:D0:2C:DC:7C:D9:5A:AD:83:B5:F0:F0:3D:48:46:03:A5:98:B6 Authority key identifier: E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A Certificate issuer: /CN=E025EB5354ADB573B451D02820EA68FD4CAE920A Certificate serial: 0A2A732E2834DF13CCF03DAE699FEED89428C5C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft Manifest number: 0166 Signing time: Sun 07 Sep 2025 04:50:41 +0000 Manifest this update: Sun 07 Sep 2025 04:45:41 +0000 Manifest next update: Wed 10 Sep 2025 06:34:41 +0000 Files and hashes: 1: E025EB5354ADB573B451D02820EA68FD4CAE920A.crl (hash: giqHQdKyISRyner2DAZ/GBgWBkr/e5sE4XYRFx+KmTU=) 2: 3130332e3233302e38312e302f32342d3234203d3e20313530393631.roa (hash: BRyZcy7P9c9jO1spuL0mDoDN9aAC7pRi+y0OjtQk3Qc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 06:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:2a:73:2e:28:34:df:13:cc:f0:3d:ae:69:9f:ee:d8:94:28:c5:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E025EB5354ADB573B451D02820EA68FD4CAE920A Validity Not Before: Sep 7 04:45:41 2025 GMT Not After : Sep 10 06:34:41 2025 GMT Subject: CN=8094D02CDC7CD95AAD83B5F0F03D484603A598B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ce:0c:53:65:e1:f5:b7:0c:64:52:24:b5:bc: 55:54:d3:8d:e2:91:e9:26:b6:ac:a3:b4:c8:8a:9f: cd:5d:73:dc:4a:a6:32:87:5d:c4:e7:b9:2a:09:e2: ed:fd:29:77:44:7d:1d:9e:dd:b4:07:e9:7a:b4:c0: ca:5b:e7:e1:bb:65:fe:dd:47:db:54:5e:81:46:1a: 94:6e:db:6a:1c:1b:05:82:04:7b:66:e8:1b:b2:c6: f2:93:78:2a:59:87:c8:6b:c8:67:54:5b:12:41:a9: 17:ab:e9:36:c4:96:00:f7:19:c9:5e:e7:f8:79:48: 7e:61:73:f6:c6:3e:f3:9b:70:ce:82:7d:b8:13:9f: d9:48:35:0f:d4:eb:ac:fc:bd:ab:cd:e4:0b:d1:87: a5:31:c7:cb:35:6a:70:d1:8d:83:09:d3:1f:c5:34: da:c2:fe:68:65:ab:78:85:61:17:10:a0:09:c2:b3: dd:ae:67:dc:51:4e:ac:05:63:b5:97:10:c0:85:46: a2:1d:3b:8b:fb:33:af:b7:39:e3:d8:d9:ef:fa:21: b8:40:40:2f:74:d4:62:b4:94:84:78:eb:26:12:a0: 47:3b:dc:6b:76:10:d8:f9:6d:3c:51:8d:8d:bd:95: 11:08:b1:a7:80:6b:f8:4d:cf:c2:4a:c6:bd:dd:f1: f5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:94:D0:2C:DC:7C:D9:5A:AD:83:B5:F0:F0:3D:48:46:03:A5:98:B6 X509v3 Authority Key Identifier: keyid:E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:67:c9:b9:2e:df:b0:02:4e:c5:c6:4f:bd:17:5a:79:13:3c: ee:bf:74:7b:f4:0a:ef:2b:55:87:a6:69:2f:e3:ac:12:ed:bf: d0:5d:e0:3f:a8:0f:05:98:68:c3:3a:cd:3a:c7:19:90:6a:5b: 4b:bc:21:ca:db:7b:6a:82:2a:60:5a:ea:60:f4:0a:77:c8:46: c4:91:3b:98:c3:c4:c8:0f:e6:a3:b3:0d:7f:3d:4e:5f:8d:9b: 65:06:20:bd:68:63:ac:1d:6e:96:b6:c2:3f:fb:3c:66:92:71: 75:7a:b5:37:18:40:56:b8:18:9f:c5:3c:f5:b6:c1:41:66:4e: 88:0f:67:8a:bf:f4:f3:28:50:94:de:6f:ca:dc:a0:26:39:d1: c6:7f:78:7a:0b:41:34:ac:7e:98:ef:ca:28:91:68:39:59:fc: 99:68:cb:f5:a5:a6:0c:98:41:db:1f:3e:f4:21:cf:d7:32:80: 49:c3:e1:df:24:80:0a:a2:e5:ba:1e:b7:2e:0b:9a:6c:0d:04: e4:94:0d:a7:2e:a5:30:7e:a1:47:6e:96:08:b0:6c:f8:3d:76: 3c:41:bb:e3:ac:a7:15:8d:d5:e8:3f:8b:75:78:8e:d4:fd:3f: 05:e0:57:44:0d:b8:c8:22:a9:53:19:0f:03:9a:30:91:79:bd: ac:7a:83:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCipzLig03xPM8D2uaZ/u2JQoxcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4RkQ0 Q0FFOTIwQTAeFw0yNTA5MDcwNDQ1NDFaFw0yNTA5MTAwNjM0NDFaMDMxMTAvBgNV BAMTKDgwOTREMDJDREM3Q0Q5NUFBRDgzQjVGMEYwM0Q0ODQ2MDNBNTk4QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzzgxTZeH1twxkUiS1vFVU043i kekmtqyjtMiKn81dc9xKpjKHXcTnuSoJ4u39KXdEfR2e3bQH6Xq0wMpb5+G7Zf7d R9tUXoFGGpRu22ocGwWCBHtm6BuyxvKTeCpZh8hryGdUWxJBqRer6TbElgD3Gcle 5/h5SH5hc/bGPvObcM6CfbgTn9lINQ/U66z8vavN5AvRh6Uxx8s1anDRjYMJ0x/F NNrC/mhlq3iFYRcQoAnCs92uZ9xRTqwFY7WXEMCFRqIdO4v7M6+3OePY2e/6IbhA QC901GK0lIR46yYSoEc73Gt2ENj5bTxRjY29lREIsaeAa/hNz8JKxr3d8fWNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgJTQLNx82Vqtg7Xw8D1IRgOlmLYwHwYDVR0j BBgwFoAU4CXrU1SttXO0UdAoIOpo/UyukgowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTRhMmE0MS0yODM4LTQzNjktOTk3Yi00Mjk5ZjE3ZWVlOTAvMC9FMDI1RUI1MzU0 QURCNTczQjQ1MUQwMjgyMEVBNjhGRDRDQUU5MjBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4RkQ0Q0FF OTIwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE0YTJhNDEtMjgzOC00MzY5LTk5 N2ItNDI5OWYxN2VlZTkwLzAvRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4 RkQ0Q0FFOTIwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJnybku37ACTsXGT70XWnkTPO6/dHv0Cu8r VYemaS/jrBLtv9Bd4D+oDwWYaMM6zTrHGZBqW0u8Icrbe2qCKmBa6mD0CnfIRsSR O5jDxMgP5qOzDX89Tl+Nm2UGIL1oY6wdbpa2wj/7PGaScXV6tTcYQFa4GJ/FPPW2 wUFmTogPZ4q/9PMoUJTeb8rcoCY50cZ/eHoLQTSsfpjvyiiRaDlZ/Jloy/WlpgyY QdsfPvQhz9cygEnD4d8kgAqi5boety4LmmwNBOSUDacupTB+oUdulgiwbPg9djxB u+OspxWN1eg/i3V4jtT9PwXgV0QNuMgiqVMZDwOaMJF5vax6g8U= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:41 2025 by rpki-client