$ rpki-client -vvf repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft File: E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft (raw, json) Hash identifier: FFvon08NVs/8auuBiqTkECpOgf18+99iDExoFVmxnfE= Subject key identifier: C3:80:37:09:86:B9:D6:ED:16:FA:CB:2F:E3:C9:33:C9:ED:56:7F:62 Authority key identifier: E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77 Certificate issuer: /CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977 Certificate serial: 54946DD60E22E3E2960B0BE61AFA1292FFAC566D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft Manifest number: 0502 Signing time: Fri 05 Sep 2025 12:11:11 +0000 Manifest this update: Fri 05 Sep 2025 12:06:11 +0000 Manifest next update: Mon 08 Sep 2025 14:28:11 +0000 Files and hashes: 1: 3130332e3135332e322e302f32342d3234203d3e20313430333839.roa (hash: GxaX4eV/kFPfj8NmbOkhswC/G4Bnl9v3vVSuFyouusY=) 2: 3130332e3135332e322e302f32332d3233203d3e20313430333839.roa (hash: A1pg6GpZFjYyhGEeCVl6G4t4Mmj6bG3hF/2pgiRzD7c=) 3: 3130332e3135332e332e302f32342d3234203d3e20313430333839.roa (hash: Od61s2CG7Pl8XbUZdUJwcwOoJ91FfP8RQCV9emNwZ0s=) 4: E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl (hash: NPtp3t/1p7Q5dIUGe2jOX+sEWgis5PVBO1CQVDIAVRg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 14:28:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:94:6d:d6:0e:22:e3:e2:96:0b:0b:e6:1a:fa:12:92:ff:ac:56:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977 Validity Not Before: Sep 5 12:06:11 2025 GMT Not After : Sep 8 14:28:11 2025 GMT Subject: CN=C380370986B9D6ED16FACB2FE3C933C9ED567F62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5f:42:f1:0d:55:c8:3a:d1:38:60:41:5a:17: 2b:69:40:f7:ee:9f:7f:41:82:04:51:ed:ca:25:34: e6:ee:60:57:13:de:38:52:5c:8b:b6:dc:d6:4d:a3: e6:26:6d:32:02:72:5c:c1:0b:af:9d:8b:e9:f8:36: 98:f5:2e:86:79:86:2f:52:7c:15:67:61:98:b0:b8: de:2b:85:e6:7a:c9:4a:22:2b:47:5f:b4:15:5b:d2: bc:47:4d:55:14:e0:3d:45:be:99:3c:58:79:a7:aa: fd:cc:86:77:4b:5f:3f:9e:22:8b:61:6f:15:26:6c: 33:94:74:fb:59:21:a5:0f:c2:2c:46:3d:e9:b7:43: 52:1b:53:12:a4:19:30:d1:59:0c:2e:09:36:41:dd: 46:f1:2f:8d:c1:8c:5f:35:5d:23:09:42:64:70:91: c6:33:6a:b6:87:e3:0b:4a:03:08:e8:c2:6d:96:17: 6c:4a:77:29:45:83:f1:67:ae:59:e4:c6:81:cc:2a: 3d:36:5f:07:d4:f3:01:13:45:c9:7c:55:ab:35:89: 9d:c1:b8:78:49:87:f5:8d:ad:7c:14:e4:48:07:40: 03:78:65:7b:a6:fe:5c:f8:68:a8:d2:df:da:41:91: c0:80:5b:c9:10:92:59:45:86:e0:35:c0:23:a0:d1: 0b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:80:37:09:86:B9:D6:ED:16:FA:CB:2F:E3:C9:33:C9:ED:56:7F:62 X509v3 Authority Key Identifier: keyid:E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:b0:bf:b4:02:1b:8f:8d:a8:64:ed:6a:f7:77:2c:e7:f3:03: 5c:a6:3c:0a:aa:45:3e:f8:f4:07:25:94:c7:27:fd:ea:43:bf: aa:33:ae:0e:60:47:b0:c1:8f:50:73:15:69:b6:06:4a:8e:fc: 46:d1:cc:32:b5:93:3c:d1:8c:d2:03:c7:35:35:1a:bb:56:1b: c3:e2:ce:ab:2e:2b:0e:2a:ac:d9:61:5e:cf:10:34:b8:b2:b6: 2e:80:4e:47:a9:85:e4:92:39:7d:f9:01:09:e5:2c:cb:1e:af: 03:ff:0d:f4:06:8d:24:fb:12:cc:81:bd:b3:47:88:f7:89:82: e8:19:cc:d9:08:d9:3a:37:34:53:2a:e8:85:07:26:e8:8b:8d: ac:3a:1b:f6:17:c1:d5:fe:4b:c6:6e:3d:97:67:63:7a:47:ee: aa:99:74:34:a3:40:51:a2:17:3b:65:f8:d7:2c:c8:73:e4:1b: fe:d8:a8:09:27:9a:10:26:11:49:98:fe:60:4d:66:45:1f:c8: 0e:9a:de:b8:60:38:7b:76:26:60:a6:ff:8d:00:fc:ba:8e:90: 67:4d:87:6f:23:92:65:be:f9:04:a3:56:12:72:71:28:f7:4a: 4a:8c:11:3e:18:f4:c8:2b:c1:40:68:cd:a9:22:57:a9:1c:c8: 46:da:aa:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVJRt1g4i4+KWCwvmGvoSkv+sVm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIxQ0ZE ODBDRjk3NzAeFw0yNTA5MDUxMjA2MTFaFw0yNTA5MDgxNDI4MTFaMDMxMTAvBgNV BAMTKEMzODAzNzA5ODZCOUQ2RUQxNkZBQ0IyRkUzQzkzM0M5RUQ1NjdGNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuX0LxDVXIOtE4YEFaFytpQPfu n39BggRR7colNObuYFcT3jhSXIu23NZNo+YmbTICclzBC6+di+n4Npj1LoZ5hi9S fBVnYZiwuN4rheZ6yUoiK0dftBVb0rxHTVUU4D1Fvpk8WHmnqv3MhndLXz+eIoth bxUmbDOUdPtZIaUPwixGPem3Q1IbUxKkGTDRWQwuCTZB3UbxL43BjF81XSMJQmRw kcYzaraH4wtKAwjowm2WF2xKdylFg/FnrlnkxoHMKj02XwfU8wETRcl8Vas1iZ3B uHhJh/WNrXwU5EgHQAN4ZXum/lz4aKjS39pBkcCAW8kQkllFhuA1wCOg0QsNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw4A3CYa51u0W+ssv48kzye1Wf2IwHwYDVR0j BBgwFoAU4ia0+oQtzmw4ZEnxT4whz9gM+XcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmMxYWI3MS05MWQwLTRmMGItYmIyOS1jYmI3ZDM1ZTc0YmEvMC9FMjI2QjRGQTg0 MkRDRTZDMzg2NDQ5RjE0RjhDMjFDRkQ4MENGOTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIxQ0ZEODBD Rjk3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWJjMWFiNzEtOTFkMC00ZjBiLWJi MjktY2JiN2QzNWU3NGJhLzAvRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0OUYxNEY4QzIx Q0ZEODBDRjk3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADawv7QCG4+NqGTtavd3LOfzA1ymPAqqRT74 9AcllMcn/epDv6ozrg5gR7DBj1BzFWm2BkqO/EbRzDK1kzzRjNIDxzU1GrtWG8Pi zqsuKw4qrNlhXs8QNLiyti6ATkepheSSOX35AQnlLMserwP/DfQGjST7EsyBvbNH iPeJgugZzNkI2To3NFMq6IUHJuiLjaw6G/YXwdX+S8ZuPZdnY3pH7qqZdDSjQFGi Fztl+NcsyHPkG/7YqAknmhAmEUmY/mBNZkUfyA6a3rhgOHt2JmCm/40A/LqOkGdN h28jkmW++QSjVhJycSj3SkqMET4Y9MgrwUBozakiV6kcyEbaqjY= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:12 2025 by rpki-client