$ rpki-client -vvf repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft File: 1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft (raw, json) Hash identifier: 2F1av7Ak25tEPSHYV7CTl3ACbF597xoYfVC/MzStzLI= Subject key identifier: B7:5D:B3:38:6B:E5:71:18:59:D1:6A:63:C5:76:EB:65:C2:8F:38:36 Authority key identifier: 1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9 Certificate issuer: /CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9 Certificate serial: 413B45AF95C0FC1A61367C583A470C08965AD5A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft Manifest number: 0182 Signing time: Wed 03 Sep 2025 16:11:40 +0000 Manifest this update: Wed 03 Sep 2025 16:06:40 +0000 Manifest next update: Sun 07 Sep 2025 03:18:40 +0000 Files and hashes: 1: 3130332e3136352e3235322e302f32342d3234203d3e20313531353231.roa (hash: ea9xX+sjo0TrPI9LqLlWLLsF36pbdmxUxQfCCeXAHFc=) 2: 1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl (hash: 01PAp4TxVJezC0NEnbuGTWhGdMgJRmxRSR/CvxJgL+U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 03:18:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:3b:45:af:95:c0:fc:1a:61:36:7c:58:3a:47:0c:08:96:5a:d5:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9 Validity Not Before: Sep 3 16:06:40 2025 GMT Not After : Sep 7 03:18:40 2025 GMT Subject: CN=B75DB3386BE5711859D16A63C576EB65C28F3836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:89:5c:cf:75:d8:c3:3e:b7:92:e9:da:4b:02: 11:09:84:63:a6:dc:b5:c6:3e:0b:9e:32:7e:13:b2: 01:02:8f:45:ae:3d:55:10:84:cc:88:61:32:d9:5a: f0:8b:c6:35:9f:66:53:c5:a6:0c:13:28:e2:e5:01: 4f:6f:bc:6e:ba:dd:ad:15:df:2a:1b:10:43:f6:5f: c0:9a:49:bd:2e:e3:e1:14:cc:7a:87:1f:ac:4f:48: b6:cd:4c:c3:9a:a8:e5:58:14:e8:69:16:1a:03:1a: 55:5a:f7:e2:bd:60:4d:20:34:4a:3f:8b:e4:b7:86: 75:a6:ec:4a:a1:10:e5:22:6c:73:ca:95:bc:92:4e: 6b:d4:a1:d9:33:59:32:9b:22:54:b6:ff:45:be:99: 19:ff:7e:39:82:41:05:4f:f4:62:a6:65:85:c6:4d: 42:36:ff:4a:39:60:eb:33:91:2c:20:2a:4b:44:87: c1:84:09:0f:99:51:e2:d5:fa:68:bb:07:be:0e:89: 4d:c5:d0:eb:95:a9:3e:e9:34:5b:3f:84:01:19:11: a9:03:77:f7:07:eb:eb:20:c2:81:c2:f0:90:99:76: 1f:32:ec:64:40:67:5a:63:b9:2e:68:a5:9e:3e:2d: 81:cf:f5:5b:e5:0d:b8:bd:6b:36:e4:41:52:f5:44: 6b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5D:B3:38:6B:E5:71:18:59:D1:6A:63:C5:76:EB:65:C2:8F:38:36 X509v3 Authority Key Identifier: keyid:1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:8f:1f:65:2a:5c:92:05:a4:ae:b4:c3:88:60:9f:91:4d:c4: 70:ae:a2:cf:b7:22:6c:80:3f:38:9e:db:d7:c7:02:0c:a6:ba: 28:6c:d3:97:ba:f1:ae:51:9c:da:f0:c0:34:6e:e3:37:c1:4f: 1f:88:a9:c3:fe:d5:c6:a2:9a:29:d8:95:fb:5e:1b:33:22:f7: 42:2c:2e:11:25:46:20:91:f3:45:20:78:60:51:10:6d:87:ff: 23:59:7d:64:b4:32:77:bf:a6:be:9a:3f:3e:29:91:c0:14:a8: 52:92:a5:29:19:b5:31:f4:89:c3:a0:e4:de:d9:ab:6c:7b:dc: 4b:d6:4e:f6:6c:56:4b:a8:8e:3b:3c:3b:db:d5:39:5f:18:ac: 71:e2:92:ee:ca:ba:49:fc:ed:97:01:31:a6:88:0c:dc:be:64: 6e:1a:43:5d:e5:99:97:7c:29:da:3d:4c:68:a5:29:c1:0d:d2: df:1b:6e:84:f3:4e:c6:5e:3f:2e:39:24:01:8e:46:a5:e2:ad: fd:5f:05:96:49:f9:e4:b5:9e:27:df:07:d4:8d:ae:52:6d:da: 87:76:0d:d6:8a:2a:8f:c0:aa:7c:d4:2a:9c:fa:b6:87:0c:a4: aa:ca:d2:b9:81:19:a8:bd:fc:f3:19:17:56:ad:4e:5b:2c:1d: b5:b4:54:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQTtFr5XA/BphNnxYOkcMCJZa1acwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVBNTU2 QzE0RThFOTAeFw0yNTA5MDMxNjA2NDBaFw0yNTA5MDcwMzE4NDBaMDMxMTAvBgNV BAMTKEI3NURCMzM4NkJFNTcxMTg1OUQxNkE2M0M1NzZFQjY1QzI4RjM4MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDciVzPddjDPreS6dpLAhEJhGOm 3LXGPgueMn4TsgECj0WuPVUQhMyIYTLZWvCLxjWfZlPFpgwTKOLlAU9vvG663a0V 3yobEEP2X8CaSb0u4+EUzHqHH6xPSLbNTMOaqOVYFOhpFhoDGlVa9+K9YE0gNEo/ i+S3hnWm7EqhEOUibHPKlbySTmvUodkzWTKbIlS2/0W+mRn/fjmCQQVP9GKmZYXG TUI2/0o5YOszkSwgKktEh8GECQ+ZUeLV+mi7B74OiU3F0OuVqT7pNFs/hAEZEakD d/cH6+sgwoHC8JCZdh8y7GRAZ1pjuS5opZ4+LYHP9VvlDbi9azbkQVL1RGszAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt12zOGvlcRhZ0WpjxXbrZcKPODYwHwYDVR0j BBgwFoAUHo6FO9Cw7IssAguXWyBaVWwU6OkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTBiZGNjNS00Y2Q5LTQ2YjAtOWQ3Yi1kMjMxYTllNTdiNTAvMC8xRThFODUzQkQw QjBFQzhCMkMwMjBCOTc1QjIwNUE1NTZDMTRFOEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVBNTU2QzE0 RThFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWEwYmRjYzUtNGNkOS00NmIwLTlk N2ItZDIzMWE5ZTU3YjUwLzAvMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVB NTU2QzE0RThFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMWPH2UqXJIFpK60w4hgn5FNxHCuos+3ImyA Pzie29fHAgymuihs05e68a5RnNrwwDRu4zfBTx+IqcP+1caiminYlfteGzMi90Is LhElRiCR80UgeGBREG2H/yNZfWS0Mne/pr6aPz4pkcAUqFKSpSkZtTH0icOg5N7Z q2x73EvWTvZsVkuojjs8O9vVOV8YrHHiku7Kukn87ZcBMaaIDNy+ZG4aQ13lmZd8 Kdo9TGilKcEN0t8bboTzTsZePy45JAGORqXirf1fBZZJ+eS1niffB9SNrlJt2od2 DdaKKo/AqnzUKpz6tocMpKrK0rmBGai9/PMZF1atTlssHbW0VL0= -----END CERTIFICATE-----Generated at Fri Sep 5 10:39:36 2025 by rpki-client