$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft File: E94D4099064713F1C3A5E211E817CFC2A40E6370.mft (raw, json) Hash identifier: CG4vTCOa0gLAFQnuMVoXTjeIq0XB0nSFKDhvympyg1w= Subject key identifier: 85:0C:E4:1F:14:80:AE:47:EF:3E:44:1D:59:D3:D7:4E:67:86:2B:CA Authority key identifier: E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 Certificate issuer: /CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Certificate serial: 46A328A1AFF80686799EF30AF4329AFC461A6C91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft Manifest number: 01BD Signing time: Mon 08 Sep 2025 07:31:26 +0000 Manifest this update: Mon 08 Sep 2025 07:26:26 +0000 Manifest next update: Thu 11 Sep 2025 12:01:26 +0000 Files and hashes: 1: 3130332e3136342e31342e302f32332d3234203d3e20313532303537.roa (hash: Qa9xNMpYcP+9pVUvEHAtgK4Z1jgnm3adWlqql9bkWPc=) 2: 34392e302e32342e302f32332d3234203d3e203137393935.roa (hash: Qay85z2tBE2gSsJ1As2R1DyRPFo67yuecJZbDwWzf5g=) 3: 3131302e39322e37322e302f32332d3234203d3e203137393935.roa (hash: 3oRl4FLRpqbW8xFTv+6cj6QVd2OEB0Ox6NTFkqNqehI=) 4: E94D4099064713F1C3A5E211E817CFC2A40E6370.crl (hash: PzPs/yXc3VMh51IYzCN29VMwyVe34mlZvmAblRyUYYo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:a3:28:a1:af:f8:06:86:79:9e:f3:0a:f4:32:9a:fc:46:1a:6c:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Validity Not Before: Sep 8 07:26:26 2025 GMT Not After : Sep 11 12:01:26 2025 GMT Subject: CN=850CE41F1480AE47EF3E441D59D3D74E67862BCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ff:7a:87:a2:7a:52:87:de:23:9a:dc:0c:08: cb:96:c7:d4:5e:84:e3:11:1a:d8:13:ae:e3:14:e6: 03:32:1c:1a:db:b2:97:b3:63:b5:2e:e6:73:95:6e: f2:32:ee:5f:9d:3e:2d:6b:62:0d:21:8c:a0:86:18: 5e:bd:8e:78:cb:9b:6a:93:ba:21:66:91:ea:49:08: f4:e8:a8:c5:55:8e:76:c0:d8:46:75:a3:eb:f5:79: 26:56:48:b9:df:d8:54:12:6f:ed:89:78:a3:d2:d8: 79:72:22:3c:d3:19:12:00:d9:35:36:30:f5:c4:27: 13:d9:45:3e:35:b6:96:ee:99:a3:a0:75:9a:da:86: bf:f6:ee:c2:35:78:83:5f:ff:56:b3:fc:93:87:f9: 87:27:70:14:be:43:d4:82:3b:41:6a:8c:cb:96:2a: 72:ed:12:ef:0a:70:42:f0:be:a0:76:19:bc:0b:ea: 83:04:ad:eb:dc:f3:48:f9:f5:3a:db:e5:5c:3d:dc: 82:e2:2e:4f:a2:57:fe:46:70:35:ae:ae:51:d7:40: be:9f:79:f0:f8:10:96:61:4b:41:0e:b7:8c:c2:84: 2f:59:d9:18:84:82:cf:a2:2d:14:a3:e9:54:e2:98: 84:4a:7c:ca:fd:4a:e2:2c:d4:3d:fa:fe:ef:c3:13: bc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0C:E4:1F:14:80:AE:47:EF:3E:44:1D:59:D3:D7:4E:67:86:2B:CA X509v3 Authority Key Identifier: keyid:E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:fc:03:d9:8c:81:6a:ea:50:62:e3:a0:70:74:71:2d:b8:62: 66:1d:e2:67:e3:fb:a4:8b:63:ff:32:c3:e7:ce:a3:47:69:c2: 2e:41:db:b6:1d:f0:f6:69:47:2e:af:00:7c:e9:f6:0f:72:d0: 98:fa:8d:db:60:a0:60:f9:61:57:7f:a0:79:74:ca:90:8b:9f: e2:1e:f7:60:95:5d:51:c3:54:db:72:57:3b:4f:f7:88:0d:96: 73:21:85:08:3a:c9:e8:b7:ac:1f:22:04:69:7b:a4:29:b1:4f: 2b:56:df:5e:a5:5c:d0:e4:b6:a3:74:44:6a:1a:6b:54:bd:cf: b1:93:0b:45:cc:77:f1:8c:99:8e:96:bd:e8:ef:c6:42:56:ec: e5:ba:58:86:93:49:57:76:49:21:34:92:24:0c:2e:d4:36:e3: 25:04:76:51:f4:1d:20:5a:1f:4e:ae:a8:9e:a1:d4:4e:b6:bb: 3e:28:64:69:04:a8:5d:f6:ef:56:79:07:8a:38:89:0e:7a:fb: ed:fd:15:a9:1e:5d:24:54:79:47:a3:5e:d9:b0:ff:5f:ea:01: aa:76:10:19:6f:72:cd:2f:cc:6e:30:c5:37:6f:0e:69:ca:de: 61:da:19:19:29:c3:d4:16:ac:ca:35:47:e0:0e:fe:0f:80:1d: f9:30:77:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURqMooa/4BoZ5nvMK9DKa/EYabJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJB NDBFNjM3MDAeFw0yNTA5MDgwNzI2MjZaFw0yNTA5MTExMjAxMjZaMDMxMTAvBgNV BAMTKDg1MENFNDFGMTQ4MEFFNDdFRjNFNDQxRDU5RDNENzRFNjc4NjJCQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8/3qHonpSh94jmtwMCMuWx9Re hOMRGtgTruMU5gMyHBrbspezY7Uu5nOVbvIy7l+dPi1rYg0hjKCGGF69jnjLm2qT uiFmkepJCPToqMVVjnbA2EZ1o+v1eSZWSLnf2FQSb+2JeKPS2HlyIjzTGRIA2TU2 MPXEJxPZRT41tpbumaOgdZrahr/27sI1eINf/1az/JOH+YcncBS+Q9SCO0FqjMuW KnLtEu8KcELwvqB2GbwL6oMErevc80j59Trb5Vw93ILiLk+iV/5GcDWurlHXQL6f efD4EJZhS0EOt4zChC9Z2RiEgs+iLRSj6VTimIRKfMr9SuIs1D36/u/DE7wRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhQzkHxSArkfvPkQdWdPXTmeGK8owHwYDVR0j BBgwFoAU6U1AmQZHE/HDpeIR6BfPwqQOY3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhZTgyZi01MzdlLTQ2MjYtYmU5ZS0zMzM5NGEyZGM5NjkvMC9FOTRENDA5OTA2 NDcxM0YxQzNBNUUyMTFFODE3Q0ZDMkE0MEU2MzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NGQzJBNDBF NjM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3YWU4MmYtNTM3ZS00NjI2LWJl OWUtMzMzOTRhMmRjOTY5LzAvRTk0RDQwOTkwNjQ3MTNGMUMzQTVFMjExRTgxN0NG QzJBNDBFNjM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKn8A9mMgWrqUGLjoHB0cS24YmYd4mfj+6SL Y/8yw+fOo0dpwi5B27Yd8PZpRy6vAHzp9g9y0Jj6jdtgoGD5YVd/oHl0ypCLn+Ie 92CVXVHDVNtyVztP94gNlnMhhQg6yei3rB8iBGl7pCmxTytW316lXNDktqN0RGoa a1S9z7GTC0XMd/GMmY6WvejvxkJW7OW6WIaTSVd2SSE0kiQMLtQ24yUEdlH0HSBa H06uqJ6h1E62uz4oZGkEqF3271Z5B4o4iQ56++39FakeXSRUeUejXtmw/1/qAap2 EBlvcs0vzG4wxTdvDmnK3mHaGRkpw9QWrMo1R+AO/g+AHfkwd7E= -----END CERTIFICATE-----Generated at Tue Sep 9 01:11:21 2025 by rpki-client