$ rpki-client -vvf repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft File: E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft (raw, json) Hash identifier: yBThpSn66cAZ5MPfOVQ23DGr2WKLerlHNiwedFts6jc= Subject key identifier: 9A:E0:6F:B4:13:11:C3:CE:40:92:91:22:9D:B0:BB:1A:94:D9:45:7F Authority key identifier: E1:41:ED:0B:8F:1B:83:AB:AC:98:B8:DB:75:8C:25:18:8C:6E:65:A5 Certificate issuer: /CN=E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5 Certificate serial: 053A5AD4F050CAFE09B23D5DFBB4809BA66C57CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft Manifest number: E7 Signing time: Wed 03 Sep 2025 15:42:07 +0000 Manifest this update: Wed 03 Sep 2025 15:37:07 +0000 Manifest next update: Sat 06 Sep 2025 18:30:07 +0000 Files and hashes: 1: E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl (hash: SMWJNuCt627jPWHgqSs/dB6m+PUUw6Y3SXgZMmSAmtg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 18:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:3a:5a:d4:f0:50:ca:fe:09:b2:3d:5d:fb:b4:80:9b:a6:6c:57:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5 Validity Not Before: Sep 3 15:37:07 2025 GMT Not After : Sep 6 18:30:07 2025 GMT Subject: CN=9AE06FB41311C3CE409291229DB0BB1A94D9457F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:05:60:17:72:af:3e:80:17:e2:78:5f:c4:3a: b0:6c:23:d9:17:4e:ba:7d:bc:d5:f3:06:60:cb:62: 92:44:e7:15:16:f4:1f:52:b0:06:fa:56:97:5b:e5: df:17:7c:19:17:79:2c:93:1d:1a:2c:61:6d:38:4f: 5e:93:98:93:73:01:15:02:81:c5:13:5b:70:c1:d0: 1c:99:db:8a:37:42:1c:ab:d7:a4:2c:69:ba:08:16: 91:f8:98:08:84:9a:4f:7e:53:b6:23:5d:17:a9:bf: 03:96:61:16:ab:c0:f9:64:e1:7a:0a:0d:b6:43:88: bf:37:e8:12:9f:67:e3:54:4c:64:d5:c2:6d:a0:ce: a3:6c:ea:4f:5c:68:cb:d0:52:9b:82:98:7e:b3:dc: 15:d8:69:dc:9e:3d:17:e7:1f:02:a8:23:83:8d:bd: 4a:f8:60:74:90:d9:e7:c8:0a:2a:0a:44:8d:d4:d6: 45:8b:4e:cd:28:00:7b:59:c7:cc:f5:12:d4:e2:68: 33:c8:f8:62:fe:d5:a9:46:03:7d:0d:25:15:db:59: df:1d:7f:bf:dc:de:04:fe:43:7b:bf:e4:ca:a9:bd: 57:ea:68:8a:9b:71:1d:54:e5:43:4d:c0:a7:84:80: 6b:91:c7:b0:15:70:4f:ab:69:fa:11:a7:4d:11:83: 7e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E0:6F:B4:13:11:C3:CE:40:92:91:22:9D:B0:BB:1A:94:D9:45:7F X509v3 Authority Key Identifier: keyid:E1:41:ED:0B:8F:1B:83:AB:AC:98:B8:DB:75:8C:25:18:8C:6E:65:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:7e:81:05:2a:53:ea:9b:c5:9f:a0:5a:a5:9a:c3:29:76:48: ea:18:e1:ee:84:05:77:8b:a2:c4:0e:1d:0c:ca:81:b3:b0:ed: 18:93:07:fe:9c:53:14:83:5d:d6:a2:9e:87:b9:e6:77:04:00: f6:b8:43:86:9d:cc:c9:0b:52:d0:72:d6:31:46:5b:18:bb:d7: 4a:6c:74:be:a7:27:f4:62:03:36:27:fb:a9:7f:20:91:17:34: 0d:6b:6b:75:ef:6e:a8:9a:7c:33:10:59:51:68:37:d3:4e:82: c8:fd:c7:86:c6:f2:0b:6c:26:d4:cf:e2:0c:e3:f3:fe:15:bd: 1a:8e:9d:b7:0c:2f:3a:dc:c0:c6:85:72:6b:da:17:7f:4b:bd: 9c:c0:c8:04:ea:2c:5d:55:77:42:61:29:63:56:99:d2:bb:6b: 01:df:34:71:a0:c8:02:42:2b:8b:37:8e:38:d8:44:8c:ed:82: 3a:69:8c:11:15:c8:37:3a:93:28:1c:70:6d:ec:3e:9e:87:d4: aa:6f:c2:9f:68:4a:95:0c:66:35:46:e9:85:46:0e:e4:03:ed: b6:ab:58:29:b2:4b:a5:2a:3b:a2:de:6e:13:a2:22:4c:f7:e1: 27:78:e1:a1:7a:93:64:6a:76:20:0e:c5:55:a5:7f:7a:92:0f: b0:7e:52:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBTpa1PBQyv4Jsj1d+7SAm6ZsV80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1MTg4 QzZFNjVBNTAeFw0yNTA5MDMxNTM3MDdaFw0yNTA5MDYxODMwMDdaMDMxMTAvBgNV BAMTKDlBRTA2RkI0MTMxMUMzQ0U0MDkyOTEyMjlEQjBCQjFBOTREOTQ1N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3BWAXcq8+gBfieF/EOrBsI9kX Trp9vNXzBmDLYpJE5xUW9B9SsAb6Vpdb5d8XfBkXeSyTHRosYW04T16TmJNzARUC gcUTW3DB0ByZ24o3Qhyr16QsaboIFpH4mAiEmk9+U7YjXRepvwOWYRarwPlk4XoK DbZDiL836BKfZ+NUTGTVwm2gzqNs6k9caMvQUpuCmH6z3BXYadyePRfnHwKoI4ON vUr4YHSQ2efICioKRI3U1kWLTs0oAHtZx8z1EtTiaDPI+GL+1alGA30NJRXbWd8d f7/c3gT+Q3u/5MqpvVfqaIqbcR1U5UNNwKeEgGuRx7AVcE+rafoRp00Rg36PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmuBvtBMRw85AkpEinbC7GpTZRX8wHwYDVR0j BBgwFoAU4UHtC48bg6usmLjbdYwlGIxuZaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzFlNjkzYy0yZmQ3LTRmNGMtYWY2My1mZWU2OTA3NmUwZDEvMC9FMTQxRUQwQjhG MUI4M0FCQUM5OEI4REI3NThDMjUxODhDNkU2NUE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1MTg4QzZF NjVBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMxZTY5M2MtMmZkNy00ZjRjLWFm NjMtZmVlNjkwNzZlMGQxLzAvRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1 MTg4QzZFNjVBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEl+gQUqU+qbxZ+gWqWawyl2SOoY4e6EBXeL osQOHQzKgbOw7RiTB/6cUxSDXdainoe55ncEAPa4Q4adzMkLUtBy1jFGWxi710ps dL6nJ/RiAzYn+6l/IJEXNA1ra3XvbqiafDMQWVFoN9NOgsj9x4bG8gtsJtTP4gzj 8/4VvRqOnbcMLzrcwMaFcmvaF39LvZzAyATqLF1Vd0JhKWNWmdK7awHfNHGgyAJC K4s3jjjYRIztgjppjBEVyDc6kygccG3sPp6H1Kpvwp9oSpUMZjVG6YVGDuQD7bar WCmyS6UqO6LebhOiIkz34Sd44aF6k2RqdiAOxVWlf3qSD7B+UtA= -----END CERTIFICATE-----Generated at Fri Sep 5 10:11:35 2025 by rpki-client