$ rpki-client -vvf repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft File: E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft (raw, json) Hash identifier: SLg3Atvml2Ebjaj0f4p3LkYOPe7BqavHTCRBICVh4OQ= Subject key identifier: 66:A0:4A:EB:40:3C:62:AD:73:B0:50:B6:3F:BE:A2:87:71:59:3A:DC Authority key identifier: E5:11:E1:48:06:15:E7:AF:C9:15:B8:E0:43:0D:70:CA:0B:31:D0:F0 Certificate issuer: /CN=E511E1480615E7AFC915B8E0430D70CA0B31D0F0 Certificate serial: 45D7BAAC1F099E192CDF7E125D24EB4A7EF3C8EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft Manifest number: 0502 Signing time: Thu 04 Sep 2025 08:50:38 +0000 Manifest this update: Thu 04 Sep 2025 08:45:38 +0000 Manifest next update: Sun 07 Sep 2025 14:52:38 +0000 Files and hashes: 1: E511E1480615E7AFC915B8E0430D70CA0B31D0F0.crl (hash: +fiSvFdPdvcFlj9K1N235YSJY2zPthCx+izJcgYpQuQ=) 2: 3130332e35312e34342e302f32322d3234203d3e20313333383139.roa (hash: SXrkhdImUQOOYfFjSDTXHsQonvkd7MTnrISJrdKtg94=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.crl rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 14:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:d7:ba:ac:1f:09:9e:19:2c:df:7e:12:5d:24:eb:4a:7e:f3:c8:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E511E1480615E7AFC915B8E0430D70CA0B31D0F0 Validity Not Before: Sep 4 08:45:38 2025 GMT Not After : Sep 7 14:52:38 2025 GMT Subject: CN=66A04AEB403C62AD73B050B63FBEA28771593ADC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b5:ca:97:f0:0b:b2:3e:e7:f3:e3:7b:00:61: a5:e3:10:42:c6:a7:9b:bb:10:ba:ef:55:5d:a3:d5: b3:13:66:6e:38:46:bb:4d:4c:db:14:d8:db:f4:de: a2:ef:d7:53:87:4e:5b:06:e8:b7:4a:a9:e3:c3:b4: 0f:b5:f7:87:a7:94:7a:50:26:44:0b:5d:60:9c:cc: c7:7b:6e:cf:75:eb:3e:dc:64:f5:1a:6f:0f:6e:8e: a7:47:da:89:1d:88:ec:f4:af:c8:52:bf:40:85:88: 01:74:65:c4:72:54:6c:80:37:4c:28:fd:30:c4:da: c8:90:8d:d4:ec:a7:a2:30:3b:cb:91:90:7c:66:57: 41:b1:69:48:6d:fe:87:b2:28:30:6b:5c:46:7d:a1: b0:c0:59:69:1f:55:c1:b7:57:d4:bb:15:88:6a:c1: e1:ca:34:2d:19:c0:a1:03:56:70:a3:d1:57:9d:45: 50:59:8a:fa:38:5c:4c:f8:91:9c:09:e0:93:5e:55: 66:89:36:37:95:ea:d3:74:c9:7b:1d:59:6d:f5:26: d9:42:6f:78:c3:67:da:71:94:c0:a7:b1:0e:37:2b: 2c:ef:ab:4d:f8:c9:cd:6a:1d:27:3e:da:4c:32:3b: 19:77:43:03:81:ae:02:79:af:fe:6f:76:10:e3:4d: a7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A0:4A:EB:40:3C:62:AD:73:B0:50:B6:3F:BE:A2:87:71:59:3A:DC X509v3 Authority Key Identifier: keyid:E5:11:E1:48:06:15:E7:AF:C9:15:B8:E0:43:0D:70:CA:0B:31:D0:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:a8:19:fb:49:b4:d9:90:e8:17:54:22:c7:e0:ae:19:f0:20: 52:a1:c4:f5:67:16:91:ee:02:3e:c9:b7:70:2d:6b:6e:43:43: 0c:f1:25:0f:e2:03:88:42:95:ea:90:4a:93:df:71:0a:24:a9: 7e:71:41:b1:c9:d1:d0:9b:48:6f:89:fa:e0:b4:5d:4e:4c:af: 40:76:8a:c7:4b:71:90:c5:76:6f:f5:36:7d:d1:3a:be:e1:c9: c9:be:05:2e:d1:e3:2a:7a:fe:c5:24:16:37:df:dc:80:fc:06: a4:e6:13:5f:e2:77:c6:93:fd:13:27:42:aa:e4:3b:32:e1:8f: c1:6d:57:65:3b:00:cc:75:96:00:3c:e5:96:25:2d:bd:53:c7: bd:d8:3a:e9:74:8c:ba:e4:16:41:82:9a:c7:3c:0f:ad:fd:07: 8c:68:35:b8:0a:c3:96:0c:f6:0f:a5:bd:1a:9c:6b:26:76:6e: b0:c4:06:c2:d2:bf:8b:d7:47:ad:c9:4f:cc:90:f4:3d:5d:27: 2e:d4:ab:49:cd:cc:a7:79:9e:2a:8c:3b:7f:89:a9:e6:70:d8: ca:e2:94:99:f3:86:1c:db:b7:97:29:4d:ef:0b:c5:c2:d7:b1: 4a:62:a1:7c:18:48:f0:a5:28:fd:a7:7f:9e:aa:3c:8c:b6:69: 9a:6d:0b:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURde6rB8Jnhks334SXSTrSn7zyOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUxMUUxNDgwNjE1RTdBRkM5MTVCOEUwNDMwRDcwQ0Ew QjMxRDBGMDAeFw0yNTA5MDQwODQ1MzhaFw0yNTA5MDcxNDUyMzhaMDMxMTAvBgNV BAMTKDY2QTA0QUVCNDAzQzYyQUQ3M0IwNTBCNjNGQkVBMjg3NzE1OTNBREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2tcqX8AuyPufz43sAYaXjEELG p5u7ELrvVV2j1bMTZm44RrtNTNsU2Nv03qLv11OHTlsG6LdKqePDtA+194enlHpQ JkQLXWCczMd7bs916z7cZPUabw9ujqdH2okdiOz0r8hSv0CFiAF0ZcRyVGyAN0wo /TDE2siQjdTsp6IwO8uRkHxmV0GxaUht/oeyKDBrXEZ9obDAWWkfVcG3V9S7FYhq weHKNC0ZwKEDVnCj0VedRVBZivo4XEz4kZwJ4JNeVWaJNjeV6tN0yXsdWW31JtlC b3jDZ9pxlMCnsQ43Kyzvq034yc1qHSc+2kwyOxl3QwOBrgJ5r/5vdhDjTadrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZqBK60A8Yq1zsFC2P76ih3FZOtwwHwYDVR0j BBgwFoAU5RHhSAYV56/JFbjgQw1wygsx0PAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2NjNWZmYS01ZjYyLTQ0ZTUtOGZlMi1lZTg3NTBmMjIyMWQvMC9FNTExRTE0ODA2 MTVFN0FGQzkxNUI4RTA0MzBENzBDQTBCMzFEMEYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTUxMUUxNDgwNjE1RTdBRkM5MTVCOEUwNDMwRDcwQ0EwQjMx RDBGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdjYzVmZmEtNWY2Mi00NGU1LThm ZTItZWU4NzUwZjIyMjFkLzAvRTUxMUUxNDgwNjE1RTdBRkM5MTVCOEUwNDMwRDcw Q0EwQjMxRDBGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKoGftJtNmQ6BdUIsfgrhnwIFKhxPVnFpHu Aj7Jt3Ata25DQwzxJQ/iA4hCleqQSpPfcQokqX5xQbHJ0dCbSG+J+uC0XU5Mr0B2 isdLcZDFdm/1Nn3ROr7hycm+BS7R4yp6/sUkFjff3ID8BqTmE1/id8aT/RMnQqrk OzLhj8FtV2U7AMx1lgA85ZYlLb1Tx73YOul0jLrkFkGCmsc8D639B4xoNbgKw5YM 9g+lvRqcayZ2brDEBsLSv4vXR63JT8yQ9D1dJy7Uq0nNzKd5niqMO3+JqeZw2Mri lJnzhhzbt5cpTe8LxcLXsUpioXwYSPClKP2nf56qPIy2aZptC9Y= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:50 2025 by rpki-client