$ rpki-client -vvf repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft File: 8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft (raw, json) Hash identifier: 8ytyXOhQitb1p/s4G9bKO3uml+yFS7gN5dq5oC36rjQ= Subject key identifier: E9:2C:A6:C7:0A:AB:D2:BB:9D:69:5E:A6:8E:9E:29:DB:61:33:E5:02 Authority key identifier: 89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11 Certificate issuer: /CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11 Certificate serial: 016299DA82191962EA87F02EF5BCBEC69BAB89F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft Manifest number: CE Signing time: Fri 05 Sep 2025 15:10:00 +0000 Manifest this update: Fri 05 Sep 2025 15:05:00 +0000 Manifest next update: Tue 09 Sep 2025 02:16:00 +0000 Files and hashes: 1: 8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl (hash: EUnu4rVDPcBmcvaUuSgsrVe1oV7BDwC84n4nfvgJeh0=) 2: 3130332e32392e3137302e302f32342d3234203d3e203536323631.roa (hash: AbfmsPIM39RXP9giC5KqkIRrkD9RG/QaxNfAq/KCmcs=) 3: 3130332e32392e3137312e302f32342d3234203d3e203538333738.roa (hash: VGUNPT+EvshoEIe2DkaARFh/LWXkGNwN7useeVXqqQc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 02:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:62:99:da:82:19:19:62:ea:87:f0:2e:f5:bc:be:c6:9b:ab:89:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11 Validity Not Before: Sep 5 15:05:00 2025 GMT Not After : Sep 9 02:16:00 2025 GMT Subject: CN=E92CA6C70AABD2BB9D695EA68E9E29DB6133E502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ae:08:3a:72:de:19:4c:b2:b6:55:60:55:a6: fb:13:9c:33:69:7d:c2:41:df:e1:a1:78:ac:2e:b6: b8:8c:58:d3:b2:19:18:79:1a:39:16:01:e3:99:40: c5:90:0e:ee:3c:3d:2a:53:18:ef:0d:e0:6b:8f:fc: 8b:22:70:2c:75:ae:a2:ac:f1:9b:c9:66:50:95:cf: 63:79:62:ad:ce:90:9d:9a:10:b9:c5:97:25:e0:2d: 68:fa:04:36:b0:56:55:23:5b:b6:35:4f:a0:0c:5a: ae:09:9e:6d:4c:54:d0:1c:7c:d6:6f:5a:ba:72:d7: 39:9d:a1:38:fb:9b:7e:c6:e6:12:c0:ab:bb:08:03: 5a:33:d4:f6:ee:6a:37:46:53:ba:4f:6b:74:3c:62: 02:17:9e:94:96:96:9a:6d:aa:6d:af:67:a9:12:e4: a1:64:55:b1:c3:df:6e:b3:bf:8c:fe:2d:ab:1e:b9: 94:2e:1d:d3:1a:db:61:39:e2:ab:3d:42:b7:d6:fa: 74:24:7a:56:c2:ad:62:1e:62:6a:29:f6:7c:40:65: 8c:bf:ff:5c:21:76:78:a5:08:af:6a:81:98:e0:f7: 8b:1a:ae:9f:18:63:23:5e:7d:77:eb:df:fc:f0:20: 00:ab:93:d8:15:dc:56:42:c0:ad:af:1c:f7:8d:a6: be:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2C:A6:C7:0A:AB:D2:BB:9D:69:5E:A6:8E:9E:29:DB:61:33:E5:02 X509v3 Authority Key Identifier: keyid:89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:76:cb:f6:55:27:a5:52:0c:45:99:10:a3:e7:b0:0f:69:15: e5:4e:bf:9f:4d:66:04:49:00:12:98:b1:d4:1a:76:13:46:3f: d7:40:06:44:d4:88:3e:4f:e1:f5:d2:95:63:01:9f:a8:7d:8b: 37:8a:80:0b:23:f1:96:77:97:df:b2:b1:91:04:cb:42:81:e8: f4:ae:6d:23:51:58:a3:f3:52:2b:51:bd:50:58:8b:30:89:09: 18:b7:49:87:d4:64:b8:54:53:f4:e6:5d:54:f0:ac:f9:24:3f: 78:8f:fa:55:16:56:38:8e:36:5c:81:19:1d:c8:78:ee:93:ed: 1a:cc:3d:02:fb:d8:ce:db:a6:42:07:f3:64:b9:42:e1:0b:53: 14:95:ec:a2:3c:2d:3a:b3:e0:de:cb:e8:bc:b9:44:5f:1a:90: 1e:2a:b1:bb:c3:81:99:25:11:a1:9c:31:0b:15:bf:95:de:e4: 5d:f2:f1:a6:a6:f9:2c:37:25:61:c0:0c:bb:52:1e:8c:1a:9a: 88:a6:05:e0:5b:c1:e3:28:66:b8:77:ba:be:0f:ef:4c:e0:69: e5:8f:db:a3:40:97:70:15:21:73:e5:60:05:77:fd:c8:7c:68: a0:9a:b5:c4:d8:90:e8:51:e2:a8:17:ed:31:58:3a:84:2b:9e: 7e:d4:ba:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAWKZ2oIZGWLqh/Au9by+xpurifYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFENEQx RUUzQkIxMTAeFw0yNTA5MDUxNTA1MDBaFw0yNTA5MDkwMjE2MDBaMDMxMTAvBgNV BAMTKEU5MkNBNkM3MEFBQkQyQkI5RDY5NUVBNjhFOUUyOURCNjEzM0U1MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzrgg6ct4ZTLK2VWBVpvsTnDNp fcJB3+GheKwutriMWNOyGRh5GjkWAeOZQMWQDu48PSpTGO8N4GuP/IsicCx1rqKs 8ZvJZlCVz2N5Yq3OkJ2aELnFlyXgLWj6BDawVlUjW7Y1T6AMWq4Jnm1MVNAcfNZv Wrpy1zmdoTj7m37G5hLAq7sIA1oz1PbuajdGU7pPa3Q8YgIXnpSWlpptqm2vZ6kS 5KFkVbHD326zv4z+LaseuZQuHdMa22E54qs9QrfW+nQkelbCrWIeYmop9nxAZYy/ /1whdnilCK9qgZjg94sarp8YYyNefXfr3/zwIACrk9gV3FZCwK2vHPeNpr5hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Symxwqr0rudaV6mjp4p22Ez5QIwHwYDVR0j BBgwFoAUiTLiX1TEsQ4q5bceONKtTR7juxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzgwOTM4NC05YjFjLTRmNWEtYWE2Yi05ZGUzYjUyYTljMDUvMC84OTMyRTI1RjU0 QzRCMTBFMkFFNUI3MUUzOEQyQUQ0RDFFRTNCQjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFENEQxRUUz QkIxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4MDkzODQtOWIxYy00ZjVhLWFh NmItOWRlM2I1MmE5YzA1LzAvODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFE NEQxRUUzQkIxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHh2y/ZVJ6VSDEWZEKPnsA9pFeVOv59NZgRJ ABKYsdQadhNGP9dABkTUiD5P4fXSlWMBn6h9izeKgAsj8ZZ3l9+ysZEEy0KB6PSu bSNRWKPzUitRvVBYizCJCRi3SYfUZLhUU/TmXVTwrPkkP3iP+lUWVjiONlyBGR3I eO6T7RrMPQL72M7bpkIH82S5QuELUxSV7KI8LTqz4N7L6Ly5RF8akB4qsbvDgZkl EaGcMQsVv5Xe5F3y8aam+Sw3JWHADLtSHowamoimBeBbweMoZrh3ur4P70zgaeWP 26NAl3AVIXPlYAV3/ch8aKCatcTYkOhR4qgX7TFYOoQrnn7Uunk= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:09 2025 by rpki-client