$ rpki-client -vvf repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft File: E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft (raw, json) Hash identifier: VQaITJsogSW5bxG1XBAsTY4bjpz6icEtBOwYAvu2ALQ= Subject key identifier: 78:C1:5E:5A:7C:92:D6:40:C8:71:86:DC:96:25:23:B8:0B:A6:5C:D4 Authority key identifier: E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81 Certificate issuer: /CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81 Certificate serial: 11BCB28FE49A2E7A20B690EA97EB3239CBAEC301 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft Manifest number: 0224 Signing time: Fri 05 Sep 2025 16:51:39 +0000 Manifest this update: Fri 05 Sep 2025 16:46:39 +0000 Manifest next update: Mon 08 Sep 2025 20:43:39 +0000 Files and hashes: 1: E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl (hash: gheI3G/9+jMe5OAW+xbvNL1qC+Ay4gtM2Xf4mPz+g/w=) 2: 3130332e3135362e37342e302f32332d3234203d3e20313431303832.roa (hash: +uanKrOlJ1inyxGrMVmi+UClp9vCCzs4JkeBJaqGWYc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 20:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:bc:b2:8f:e4:9a:2e:7a:20:b6:90:ea:97:eb:32:39:cb:ae:c3:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81 Validity Not Before: Sep 5 16:46:39 2025 GMT Not After : Sep 8 20:43:39 2025 GMT Subject: CN=78C15E5A7C92D640C87186DC962523B80BA65CD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fd:4a:11:20:53:ce:f4:e2:4b:f4:d6:36:56: e1:3b:cc:5e:8c:ac:6a:98:4d:47:d0:3c:d3:e7:fc: 15:af:78:c7:18:8c:cd:6d:5e:14:16:6d:1c:1a:85: 3c:9f:ef:8a:e5:cc:b8:93:73:cb:24:cf:7d:7c:30: 9b:9f:69:6d:d8:a7:34:38:4f:2b:20:c2:8f:60:7e: f8:a9:e9:9b:e1:93:21:6e:e9:52:48:b8:2e:f8:81: fd:15:25:e4:3a:f3:4d:13:57:df:bb:7e:a2:a6:cc: 7f:d4:06:4e:ba:be:02:da:f8:55:3e:6e:03:9f:da: 37:68:bf:d5:d8:c0:1d:46:f1:e5:91:2c:bb:7c:28: 76:4c:00:05:8c:c1:97:54:7c:7b:49:b5:3f:8a:ec: 82:b8:bf:a0:f6:a2:43:11:88:ee:07:33:98:84:53: 45:75:9b:cb:6e:da:9f:89:f0:19:e7:cb:8a:b6:56: 28:13:7c:05:f1:71:5d:ba:67:88:15:c5:f2:16:1e: ff:14:fa:55:e3:0c:4d:be:f7:79:1e:e4:a8:e8:8c: 6d:29:a3:61:7c:c1:e9:09:ac:21:20:25:c4:1c:b6: d5:fe:b8:80:f1:34:3c:57:b7:a0:de:3d:f1:f1:22: 19:ca:d7:da:9d:60:e6:ff:a0:af:c6:5c:b8:85:68: 21:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C1:5E:5A:7C:92:D6:40:C8:71:86:DC:96:25:23:B8:0B:A6:5C:D4 X509v3 Authority Key Identifier: keyid:E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:03:d7:5d:16:bd:7b:de:0e:38:eb:54:c0:82:57:c2:66:96: bb:c8:2b:c6:25:77:bf:61:92:15:85:77:73:f4:1b:bb:6a:0c: 26:17:92:1d:13:ee:66:38:36:08:dc:f9:00:13:41:00:b1:52: 26:cc:da:96:1f:8d:32:0b:c9:dc:05:44:13:6a:ef:22:d8:05: 40:5f:3e:55:66:c0:ae:b9:7d:df:94:d1:62:21:a5:3a:ea:81: 5c:62:9d:89:0d:cb:b9:29:d7:38:d4:49:87:fb:0c:1e:c9:2e: 69:e6:63:20:96:dd:87:8f:46:42:f4:06:1c:0b:77:4f:a7:7f: 42:9b:72:18:56:97:3a:91:0c:aa:7d:14:01:01:fe:99:76:62: e1:ba:fd:8e:70:87:65:68:ef:09:0d:d7:5f:63:04:cd:93:f0: d6:46:f5:ab:3f:9f:37:16:97:6c:7a:98:4d:44:8c:0f:14:23: 9c:3f:05:e3:ee:fb:50:26:96:6c:99:f8:2a:7c:ee:f0:42:1f: 7f:50:2f:87:bc:24:d3:6a:a8:34:fe:a6:1d:38:26:f2:40:40: 5a:7c:8e:e8:cf:9f:28:03:fd:14:ab:d4:62:ad:9c:2f:8d:74: 4a:c0:a7:b0:33:35:28:0f:be:8d:85:5a:54:27:da:e1:41:5f: 0b:18:cf:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEbyyj+SaLnogtpDql+syOcuuwwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4NzY3 QjQxMUE4MTAeFw0yNTA5MDUxNjQ2MzlaFw0yNTA5MDgyMDQzMzlaMDMxMTAvBgNV BAMTKDc4QzE1RTVBN0M5MkQ2NDBDODcxODZEQzk2MjUyM0I4MEJBNjVDRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf/UoRIFPO9OJL9NY2VuE7zF6M rGqYTUfQPNPn/BWveMcYjM1tXhQWbRwahTyf74rlzLiTc8skz318MJufaW3YpzQ4 Tysgwo9gfvip6ZvhkyFu6VJIuC74gf0VJeQ6800TV9+7fqKmzH/UBk66vgLa+FU+ bgOf2jdov9XYwB1G8eWRLLt8KHZMAAWMwZdUfHtJtT+K7IK4v6D2okMRiO4HM5iE U0V1m8tu2p+J8Bnny4q2VigTfAXxcV26Z4gVxfIWHv8U+lXjDE2+93ke5KjojG0p o2F8wekJrCEgJcQcttX+uIDxNDxXt6DePfHxIhnK19qdYOb/oK/GXLiFaCFPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeMFeWnyS1kDIcYbcliUjuAumXNQwHwYDVR0j BBgwFoAU4APoULd8dvDgJPHabvvYdntBGoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDAxMDJkMC03MTRmLTRiNTItOWJlNS1kZWQxNmVkZmU0YTIvMC9FMDAzRTg1MEI3 N0M3NkYwRTAyNEYxREE2RUZCRDg3NjdCNDExQTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4NzY3QjQx MUE4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjAwMTAyZDAtNzE0Zi00YjUyLTli ZTUtZGVkMTZlZGZlNGEyLzAvRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4 NzY3QjQxMUE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADED110WvXveDjjrVMCCV8JmlrvIK8Yld79h khWFd3P0G7tqDCYXkh0T7mY4Ngjc+QATQQCxUibM2pYfjTILydwFRBNq7yLYBUBf PlVmwK65fd+U0WIhpTrqgVxinYkNy7kp1zjUSYf7DB7JLmnmYyCW3YePRkL0BhwL d0+nf0KbchhWlzqRDKp9FAEB/pl2YuG6/Y5wh2Vo7wkN119jBM2T8NZG9as/nzcW l2x6mE1EjA8UI5w/BePu+1AmlmyZ+Cp87vBCH39QL4e8JNNqqDT+ph04JvJAQFp8 jujPnygD/RSr1GKtnC+NdErAp7AzNSgPvo2FWlQn2uFBXwsYz1A= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:48 2025 by rpki-client