$ rpki-client -vvf repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft File: E4C33FFA425046D044E7F503AC8065468BAF739E.mft (raw, json) Hash identifier: Mg0vXdiatfPalEfp8RcrKzHyl+12x2V1UPIp52qFQho= Subject key identifier: 72:83:61:54:EE:7C:20:0A:65:DC:05:C1:CF:B1:43:73:88:69:C7:9E Authority key identifier: E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E Certificate issuer: /CN=E4C33FFA425046D044E7F503AC8065468BAF739E Certificate serial: 22A6190AB32E316F26BE3AD0BB2154EA9B998430 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft Manifest number: 01BB Signing time: Sat 06 Sep 2025 19:22:10 +0000 Manifest this update: Sat 06 Sep 2025 19:17:10 +0000 Manifest next update: Tue 09 Sep 2025 20:51:10 +0000 Files and hashes: 1: 3130332e39392e32372e302f32342d3234203d3e20313530323739.roa (hash: 4oIhooNcjswOY06c5BLFSgUgdzWhNc2IjQmbzeqQDiU=) 2: E4C33FFA425046D044E7F503AC8065468BAF739E.crl (hash: 6IBNoULpF1N374u6BUIl80GqHAe1+aSWcdkkhsDNh48=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.crl rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 20:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:a6:19:0a:b3:2e:31:6f:26:be:3a:d0:bb:21:54:ea:9b:99:84:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4C33FFA425046D044E7F503AC8065468BAF739E Validity Not Before: Sep 6 19:17:10 2025 GMT Not After : Sep 9 20:51:10 2025 GMT Subject: CN=72836154EE7C200A65DC05C1CFB143738869C79E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:18:2f:0e:f8:ca:fe:05:cb:cd:c9:38:04:e4: e7:be:ca:79:b1:58:17:26:a9:98:75:5e:76:fc:b2: 50:95:f1:3f:8c:2a:59:05:2e:f7:b1:cf:bd:c6:8e: e6:de:ea:91:4a:86:74:80:5b:bd:bc:85:08:87:44: 5d:61:1a:93:b1:de:76:6e:5b:a0:6a:e0:bc:54:11: 79:ac:78:bc:12:d9:2a:4f:a1:b8:1b:e2:8e:87:14: 08:a4:1a:7b:80:e1:e3:62:87:d8:af:63:60:71:cb: 84:d7:38:c6:59:6f:bd:9a:26:c2:6a:95:a6:cd:b5: 93:f5:cd:32:f0:f2:71:7d:d7:0f:07:7c:98:75:2b: 64:5a:52:31:60:28:20:58:af:90:67:10:e7:91:d5: 93:49:55:79:0e:ba:9c:8a:6f:db:b3:40:e9:5a:64: 23:0c:c8:f6:35:87:7f:77:1f:7d:d2:ee:0e:17:21: 59:bf:b2:bc:6e:69:12:31:76:26:8e:3b:3d:21:99: 73:63:4e:e8:43:85:a2:dc:dd:a3:1f:84:7f:d9:8a: 99:c8:2c:bb:29:ff:35:e7:5a:f0:3c:53:ce:dc:b1: 64:a5:41:25:38:05:cc:3f:90:08:31:fa:3a:2c:02: 7d:4f:16:02:60:dd:8e:74:74:e3:05:07:27:a8:30: 64:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:83:61:54:EE:7C:20:0A:65:DC:05:C1:CF:B1:43:73:88:69:C7:9E X509v3 Authority Key Identifier: keyid:E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:dd:80:94:de:06:36:96:7a:cf:5e:e3:27:9a:d3:67:88:37: 30:52:22:9b:fc:e6:48:7b:b2:c8:1c:fb:f7:31:52:15:6c:36: 14:a2:8a:eb:2a:60:88:ed:bd:d1:d3:27:dd:3d:21:e9:ff:4c: 6e:01:fa:55:e1:40:d2:c4:72:f2:4b:9b:c7:b2:f6:a7:47:29: f0:f9:5d:66:15:10:fc:8b:6f:02:5b:e1:80:98:04:25:8f:58: 18:a0:78:56:73:10:35:bf:60:53:70:ad:c9:57:83:74:fd:36: 7a:22:d7:86:40:6b:bd:a6:83:74:bf:f1:73:5e:89:cd:84:cb: 57:b4:51:09:93:07:e1:ca:c0:03:b5:b4:0a:a1:13:c3:d8:8c: 6d:91:1a:f4:0d:a9:98:7a:7d:c4:1b:9a:ff:d2:3e:85:1b:34: 04:98:1e:6f:45:d4:11:7a:38:ab:39:6a:72:93:b3:a0:1b:91: 22:d2:0a:18:5c:af:6c:3e:c0:0e:43:e6:3e:e9:b3:66:b8:c6: f5:2b:8b:89:c5:ab:a4:65:ae:29:22:03:aa:59:05:0e:b9:b7: 49:1c:5d:6a:d9:08:b8:2a:35:f0:e3:c9:c8:73:70:df:f9:bd: c8:4c:f0:6f:fc:a3:20:26:88:c8:99:f3:97:69:86:4e:e1:e0: 37:09:0b:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIqYZCrMuMW8mvjrQuyFU6puZhDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1NDY4 QkFGNzM5RTAeFw0yNTA5MDYxOTE3MTBaFw0yNTA5MDkyMDUxMTBaMDMxMTAvBgNV BAMTKDcyODM2MTU0RUU3QzIwMEE2NURDMDVDMUNGQjE0MzczODg2OUM3OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHGC8O+Mr+BcvNyTgE5Oe+ynmx WBcmqZh1Xnb8slCV8T+MKlkFLvexz73Gjube6pFKhnSAW728hQiHRF1hGpOx3nZu W6Bq4LxUEXmseLwS2SpPobgb4o6HFAikGnuA4eNih9ivY2Bxy4TXOMZZb72aJsJq labNtZP1zTLw8nF91w8HfJh1K2RaUjFgKCBYr5BnEOeR1ZNJVXkOupyKb9uzQOla ZCMMyPY1h393H33S7g4XIVm/srxuaRIxdiaOOz0hmXNjTuhDhaLc3aMfhH/ZipnI LLsp/zXnWvA8U87csWSlQSU4Bcw/kAgx+josAn1PFgJg3Y50dOMFByeoMGQtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcoNhVO58IApl3AXBz7FDc4hpx54wHwYDVR0j BBgwFoAU5MM/+kJQRtBE5/UDrIBlRouvc54wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDk3NmUyNi05NTEzLTQ4ZmYtOWY3Zi1lYTNmZGNmM2UyZTgvMC9FNEMzM0ZGQTQy NTA0NkQwNDRFN0Y1MDNBQzgwNjU0NjhCQUY3MzlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1NDY4QkFG NzM5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA5NzZlMjYtOTUxMy00OGZmLTlm N2YtZWEzZmRjZjNlMmU4LzAvRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1 NDY4QkFGNzM5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/dgJTeBjaWes9e4yea02eINzBSIpv85kh7 ssgc+/cxUhVsNhSiiusqYIjtvdHTJ909Ien/TG4B+lXhQNLEcvJLm8ey9qdHKfD5 XWYVEPyLbwJb4YCYBCWPWBigeFZzEDW/YFNwrclXg3T9Nnoi14ZAa72mg3S/8XNe ic2Ey1e0UQmTB+HKwAO1tAqhE8PYjG2RGvQNqZh6fcQbmv/SPoUbNASYHm9F1BF6 OKs5anKTs6AbkSLSChhcr2w+wA5D5j7ps2a4xvUri4nFq6RlrikiA6pZBQ65t0kc XWrZCLgqNfDjychzcN/5vchM8G/8oyAmiMiZ85dphk7h4DcJC/0= -----END CERTIFICATE-----Generated at Sun Sep 7 14:05:26 2025 by rpki-client