$ rpki-client -vvf repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft File: E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft (raw, json) Hash identifier: 8VXILy6eagTBRqNnPSQv5QdEZXt0gx84bixHjSY/3HU= Subject key identifier: EE:78:AF:0E:B7:14:13:DC:27:A8:17:1C:73:09:C8:71:BE:2A:E0:A0 Authority key identifier: E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F Certificate issuer: /CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F Certificate serial: 3DCEF9FBBF529987D279207DB17DD29A5D46C60E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft Manifest number: D3 Signing time: Fri 29 Aug 2025 11:01:10 +0000 Manifest this update: Fri 29 Aug 2025 10:56:10 +0000 Manifest next update: Mon 01 Sep 2025 19:55:10 +0000 Files and hashes: 1: 3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa (hash: fkNU7FdVjKHsjFj1YpiV+gYURzvDFsZYzfTu/zHhcfE=) 2: E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl (hash: ln7KL01KNJcNceyQilegsZNg/aNaRa6umKt9LoOSh/o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 19:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ce:f9:fb:bf:52:99:87:d2:79:20:7d:b1:7d:d2:9a:5d:46:c6:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F Validity Not Before: Aug 29 10:56:10 2025 GMT Not After : Sep 1 19:55:10 2025 GMT Subject: CN=EE78AF0EB71413DC27A8171C7309C871BE2AE0A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:72:aa:f7:84:c9:9c:f4:13:64:e2:25:1f:74: 59:11:08:57:92:e6:8f:56:2d:70:ec:ab:c1:90:2d: 62:85:02:fc:af:86:9a:d3:f2:af:b3:8f:ea:61:23: 7a:0f:fb:d4:19:bf:22:96:aa:ee:f0:5d:b0:06:09: b3:c9:88:e0:bf:19:37:65:e0:2a:c5:63:16:92:9d: c9:88:1f:62:42:77:6a:3d:a3:a8:f8:54:7e:21:12: a5:46:de:a6:09:b7:f9:ec:fa:61:79:13:36:9e:9a: 58:a6:da:4a:e0:84:b9:8f:32:06:8c:1d:ca:27:ba: a8:7d:24:c8:a8:b0:78:15:fc:ac:18:78:3b:1a:ef: 31:66:c3:0d:09:d5:d7:52:61:e3:be:f4:36:ad:c7: 9e:3f:d6:0f:c1:75:f3:fd:71:88:b3:54:ca:a1:79: 72:78:66:dd:89:fe:04:f8:a5:87:39:91:4d:41:0f: c6:ae:10:f5:ec:a7:59:c4:06:f2:a3:cb:34:33:09: eb:1f:ed:b5:9b:7e:b3:7c:a3:a1:0b:8d:12:77:b1: 05:d4:78:b9:04:5b:31:f3:d2:8e:d7:97:23:2e:93: 9e:87:0b:6d:8b:21:28:c3:e0:c7:3b:f9:63:75:35: 12:29:79:37:87:72:c1:dc:7a:e1:c5:f9:16:d8:39: 0a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:78:AF:0E:B7:14:13:DC:27:A8:17:1C:73:09:C8:71:BE:2A:E0:A0 X509v3 Authority Key Identifier: keyid:E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:22:2f:44:b5:ee:e6:33:70:d8:90:cb:30:44:58:d5:1c:5d: 3d:28:7d:d0:21:73:64:1c:64:98:e5:cd:29:01:65:1f:99:fc: 58:29:3a:48:74:b4:24:f0:5d:83:8d:f9:26:d8:cd:7e:bb:5a: 1b:1b:70:43:0b:c2:c7:4a:6d:c4:4f:61:fe:6a:2b:1c:de:2d: 17:44:53:67:0c:0b:76:ea:00:e5:44:f7:bf:35:5e:e8:26:81: d3:76:98:a8:2d:aa:a6:3c:5a:ad:e3:b7:44:8e:7a:28:ac:89: 2e:a9:e6:ac:cf:c5:8c:2d:86:74:d2:a3:dd:d6:26:9d:cd:e8: 57:89:e5:47:da:1c:d1:fa:47:1f:17:bc:c7:94:c6:c4:86:c1: 6d:91:21:ad:76:aa:f5:f6:1f:e7:99:6e:0d:e4:40:3e:b3:64: 45:46:af:ee:02:60:7a:ad:f2:7d:98:45:99:4e:c4:58:cd:90: 7a:22:6f:26:c0:99:71:35:54:0a:47:e5:81:ca:65:3b:9c:1f: 6c:35:54:2d:51:3d:b0:fd:ad:48:ac:16:b2:6a:3f:8d:31:2f: 9e:bf:eb:39:64:58:2d:73:75:8a:2a:ec:ce:ba:1c:f1:9e:03: dc:d9:e4:d9:c1:e7:3f:96:3f:3b:ed:0a:71:90:39:87:46:ea: 58:e7:1f:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPc75+79SmYfSeSB9sX3Sml1Gxg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJFMDhD QzJGNUM3RjAeFw0yNTA4MjkxMDU2MTBaFw0yNTA5MDExOTU1MTBaMDMxMTAvBgNV BAMTKEVFNzhBRjBFQjcxNDEzREMyN0E4MTcxQzczMDlDODcxQkUyQUUwQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmcqr3hMmc9BNk4iUfdFkRCFeS 5o9WLXDsq8GQLWKFAvyvhprT8q+zj+phI3oP+9QZvyKWqu7wXbAGCbPJiOC/GTdl 4CrFYxaSncmIH2JCd2o9o6j4VH4hEqVG3qYJt/ns+mF5Ezaemlim2krghLmPMgaM Hconuqh9JMiosHgV/KwYeDsa7zFmww0J1ddSYeO+9Datx54/1g/BdfP9cYizVMqh eXJ4Zt2J/gT4pYc5kU1BD8auEPXsp1nEBvKjyzQzCesf7bWbfrN8o6ELjRJ3sQXU eLkEWzHz0o7XlyMuk56HC22LISjD4Mc7+WN1NRIpeTeHcsHceuHF+RbYOQqfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7nivDrcUE9wnqBcccwnIcb4q4KAwHwYDVR0j BBgwFoAU6QK/TPydmX42qeGjL6ouCMwvXH8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmI0NjZjNi0zNzQzLTQ5NWYtYjFhOC0yNjA3Y2M5OTU3M2YvMC9FOTAyQkY0Q0ZD OUQ5OTdFMzZBOUUxQTMyRkFBMkUwOENDMkY1QzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJFMDhDQzJG NUM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZiNDY2YzYtMzc0My00OTVmLWIx YTgtMjYwN2NjOTk1NzNmLzAvRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJF MDhDQzJGNUM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFoiL0S17uYzcNiQyzBEWNUcXT0ofdAhc2Qc ZJjlzSkBZR+Z/FgpOkh0tCTwXYON+SbYzX67WhsbcEMLwsdKbcRPYf5qKxzeLRdE U2cMC3bqAOVE9781XugmgdN2mKgtqqY8Wq3jt0SOeiisiS6p5qzPxYwthnTSo93W Jp3N6FeJ5UfaHNH6Rx8XvMeUxsSGwW2RIa12qvX2H+eZbg3kQD6zZEVGr+4CYHqt 8n2YRZlOxFjNkHoibybAmXE1VApH5YHKZTucH2w1VC1RPbD9rUisFrJqP40xL56/ 6zlkWC1zdYoq7M66HPGeA9zZ5NnB5z+WPzvtCnGQOYdG6ljnHwA= -----END CERTIFICATE-----Generated at Sat Aug 30 23:27:06 2025 by rpki-client