$ rpki-client -vvf repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft File: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft (raw, json) Hash identifier: QCx3XvhKRe2uvIAj8ZHxZvVj8DJs4ydCeagSKi/lqDo= Subject key identifier: 52:BE:DB:04:5B:4C:55:F2:12:D8:66:D2:D2:61:A5:8E:D2:D2:99:8B Authority key identifier: E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE Certificate issuer: /CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE Certificate serial: 6F7CD918D6E06D43F6277A197C19634AC493BF06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft Manifest number: 0227 Signing time: Fri 05 Sep 2025 02:10:52 +0000 Manifest this update: Fri 05 Sep 2025 02:05:52 +0000 Manifest next update: Mon 08 Sep 2025 12:29:52 +0000 Files and hashes: 1: 3130332e3137322e3139342e302f32332d3233203d3e20313437303735.roa (hash: PyDXoIlT1NIef5VwI6vIhfIo1ytHrmrJtk3n+sEFsT0=) 2: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl (hash: v5NDyNrDSpCh49p3RCSDNxlwtkXtRqy76N4IOrHLEjw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 12:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:7c:d9:18:d6:e0:6d:43:f6:27:7a:19:7c:19:63:4a:c4:93:bf:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE Validity Not Before: Sep 5 02:05:52 2025 GMT Not After : Sep 8 12:29:52 2025 GMT Subject: CN=52BEDB045B4C55F212D866D2D261A58ED2D2998B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e0:f5:42:df:3b:d7:d3:b5:ae:8e:99:28:5a: 6b:a2:37:df:08:4b:e4:e6:2b:f4:6e:7f:45:65:88: c1:e3:f7:7e:97:e5:9c:cc:fa:da:79:93:e0:46:3e: 0a:d2:72:6a:b2:48:06:24:44:7e:36:70:ba:78:7f: 58:17:7a:fb:7f:47:7e:94:35:6b:2c:40:52:c0:5c: 87:e0:ae:9c:b4:97:5a:3e:ab:6b:d4:3f:c4:3a:1b: 21:b3:51:a8:1a:f3:26:3d:7e:4d:b1:6f:9d:c2:da: 9e:23:d0:48:67:f4:7c:ee:af:77:0c:72:f9:33:45: 85:1a:95:5b:4f:79:c6:55:ea:55:a7:b4:20:0f:ce: a8:f4:ea:c7:00:b9:4e:18:7d:e1:8c:14:70:fd:b5: 44:a6:12:88:9d:cc:b9:6e:3a:48:ee:b1:1d:3a:2e: 09:9a:a1:f3:68:f9:9f:09:e9:31:aa:39:6f:a0:d9: ee:f9:03:bc:78:20:1f:5a:ff:a8:95:f9:5e:2a:51: 0f:c9:56:77:cc:67:40:16:62:6e:c2:c1:40:be:25: 7a:4e:dc:83:91:90:6a:0d:29:16:10:40:be:70:2f: 2b:01:03:14:9e:d5:cf:47:1a:fc:bd:09:0b:52:45: b5:68:94:f7:b0:0a:d3:57:70:bb:db:13:e6:c9:63: 3d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BE:DB:04:5B:4C:55:F2:12:D8:66:D2:D2:61:A5:8E:D2:D2:99:8B X509v3 Authority Key Identifier: keyid:E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:f6:a7:91:d7:40:80:22:cc:7e:3a:47:c6:93:24:c9:89:b3: 50:67:25:31:c7:05:f9:58:95:84:b3:d4:2e:b4:2c:d2:6a:85: 8c:01:01:00:f3:62:e9:42:cb:5b:a9:9c:ec:cd:fc:60:85:5d: 8f:72:16:4d:3d:25:45:50:98:6c:7d:cb:00:09:ae:69:0f:41: 34:7e:3e:ad:c6:10:50:a6:4c:c5:b7:b3:4f:a1:73:4a:61:75: 42:58:01:17:09:19:5a:38:67:c9:09:6b:3f:07:19:c2:3b:55: 47:87:d2:17:e0:33:9c:02:83:85:a0:c5:97:85:22:a8:e7:8f: 37:a9:5e:97:69:12:a2:7c:7c:9d:b9:d2:18:ef:1e:49:a5:03: 1b:8c:7d:b8:bd:e5:12:62:bc:55:0a:37:8a:2e:f5:89:08:0d: 94:b5:28:3a:20:b4:8e:47:64:42:d2:4f:3d:49:c9:b2:14:86: 40:a9:30:be:da:e0:65:5a:55:37:d9:5f:04:85:81:f6:96:7e: 24:48:98:95:df:26:83:1b:69:e0:49:d1:c2:fc:50:a2:84:38: 4f:7e:ed:95:e1:cc:cb:7a:43:42:f5:5c:0c:78:7f:07:64:4b: 02:49:53:b7:45:61:94:29:57:ff:68:f2:5a:73:98:86:0d:4b: 56:00:bd:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb3zZGNbgbUP2J3oZfBljSsSTvwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3 QjJBRTRCRTAeFw0yNTA5MDUwMjA1NTJaFw0yNTA5MDgxMjI5NTJaMDMxMTAvBgNV BAMTKDUyQkVEQjA0NUI0QzU1RjIxMkQ4NjZEMkQyNjFBNThFRDJEMjk5OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp4PVC3zvX07WujpkoWmuiN98I S+TmK/Ruf0VliMHj936X5ZzM+tp5k+BGPgrScmqySAYkRH42cLp4f1gXevt/R36U NWssQFLAXIfgrpy0l1o+q2vUP8Q6GyGzUaga8yY9fk2xb53C2p4j0Ehn9Hzur3cM cvkzRYUalVtPecZV6lWntCAPzqj06scAuU4YfeGMFHD9tUSmEoidzLluOkjusR06 LgmaofNo+Z8J6TGqOW+g2e75A7x4IB9a/6iV+V4qUQ/JVnfMZ0AWYm7CwUC+JXpO 3IORkGoNKRYQQL5wLysBAxSe1c9HGvy9CQtSRbVolPewCtNXcLvbE+bJYz2vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUr7bBFtMVfIS2GbS0mGljtLSmYswHwYDVR0j BBgwFoAU5IY04db7LooGpIgltNfuxHsq5L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2VjMmNiNi0zNWFkLTQxMDEtOTgyZS0yZTM0ZDU2NmVmZGEvMC9FNDg2MzRFMUQ2 RkIyRThBMDZBNDg4MjVCNEQ3RUVDNDdCMkFFNEJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3QjJB RTRCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNlYzJjYjYtMzVhZC00MTAxLTk4 MmUtMmUzNGQ1NjZlZmRhLzAvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VF QzQ3QjJBRTRCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJD2p5HXQIAizH46R8aTJMmJs1BnJTHHBflY lYSz1C60LNJqhYwBAQDzYulCy1upnOzN/GCFXY9yFk09JUVQmGx9ywAJrmkPQTR+ Pq3GEFCmTMW3s0+hc0phdUJYARcJGVo4Z8kJaz8HGcI7VUeH0hfgM5wCg4WgxZeF IqjnjzepXpdpEqJ8fJ250hjvHkmlAxuMfbi95RJivFUKN4ou9YkIDZS1KDogtI5H ZELSTz1JybIUhkCpML7a4GVaVTfZXwSFgfaWfiRImJXfJoMbaeBJ0cL8UKKEOE9+ 7ZXhzMt6Q0L1XAx4fwdkSwJJU7dFYZQpV/9o8lpzmIYNS1YAvVQ= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:05 2025 by rpki-client