$ rpki-client -vvf repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft File: EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft (raw, json) Hash identifier: kp7nDSo2mMnmx9KeLvmJ3UR40jB2OqxZLMbR4r02Lzk= Subject key identifier: 52:A1:49:76:61:8A:6C:A8:9B:BF:1E:67:F0:B6:C4:D4:4C:6E:64:5B Authority key identifier: EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 Certificate issuer: /CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Certificate serial: 6C77A89C975E9ABE20566D7A740B37483D0934F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft Manifest number: 01C9 Signing time: Mon 03 Nov 2025 22:00:02 +0000 Manifest this update: Mon 03 Nov 2025 21:55:02 +0000 Manifest next update: Fri 07 Nov 2025 01:15:02 +0000 Files and hashes: 1: 3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa (hash: XXDfIIYOEglBKxR32q76DP0xk41MtlD2sFhZIbxce4A=) 2: EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl (hash: E2gn0CEhvnzjZ4WrtrydH3kAvAhefFwjhUeYl+mzWwo=) 3: 3130332e3137392e38322e302f32342d3234203d3e20313338303832.roa (hash: GfoRbCqzzEwM+JaSR+jL9jpyyrybmpGlShF5wsNuV5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 01:15:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:77:a8:9c:97:5e:9a:be:20:56:6d:7a:74:0b:37:48:3d:09:34:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Validity Not Before: Nov 3 21:55:02 2025 GMT Not After : Nov 7 01:15:02 2025 GMT Subject: CN=52A14976618A6CA89BBF1E67F0B6C4D44C6E645B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ed:bc:d5:b4:06:79:ee:7d:45:cd:23:10:a4: cb:92:cc:ff:2c:9e:0c:6d:44:fe:be:9a:cb:49:29: 2b:4c:2d:55:9c:eb:a5:13:c1:5a:c3:cf:80:1d:2b: 95:99:c3:de:05:01:35:1d:57:1a:78:87:c0:6d:84: 0e:a1:9e:e9:92:7d:76:b5:28:15:13:35:ee:0e:87: bb:cf:3a:fc:bf:fe:85:58:0b:6c:a9:8d:d1:78:cc: 9d:aa:79:42:57:63:5f:d1:06:ac:11:4c:fc:a3:c9: 99:4e:72:91:67:92:45:0c:d6:54:0e:60:7e:9b:59: ee:05:0a:59:fb:27:13:6a:40:ed:ad:64:e9:1d:c4: fa:fc:fb:39:3b:cf:a6:4a:c5:a3:26:9b:ee:4c:35: 31:b9:18:12:e8:33:e1:76:4f:62:c0:a1:55:4d:e7: 1e:9d:28:44:e9:07:91:a5:cb:5f:e9:7f:24:52:73: d9:50:1f:6a:8d:59:06:85:14:a0:70:c4:95:24:1d: 6a:ef:8d:6f:f5:a9:47:16:a3:c8:ab:fe:99:e7:61: 6e:4d:d0:06:bc:cf:7f:23:2b:41:5e:4d:50:cc:04: 4a:46:83:60:63:26:29:37:26:00:09:fb:26:9a:0c: e6:6c:c6:f8:b4:17:33:c5:77:4a:e3:32:a9:27:88: 66:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A1:49:76:61:8A:6C:A8:9B:BF:1E:67:F0:B6:C4:D4:4C:6E:64:5B X509v3 Authority Key Identifier: keyid:EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:a3:03:ef:9f:1a:c5:ed:a9:ee:53:c4:ba:6a:1c:73:78:a3: 65:cd:ab:23:61:b4:16:d8:e0:a3:24:e0:da:d1:36:64:9c:af: 5d:8b:23:92:48:ab:eb:9b:7d:2f:73:8d:b4:8e:23:56:8a:d1: ae:49:aa:da:aa:a6:55:09:cd:42:81:79:24:03:df:90:cf:76: e4:14:7c:4d:1c:f7:70:61:42:ff:5a:e3:26:34:4c:91:61:30: 9b:9f:e7:2f:5a:40:72:3b:30:41:98:e2:ea:42:48:b7:bb:ca: 3d:68:46:16:f7:31:e3:1a:bb:71:fa:42:e6:4c:bb:f6:5d:7e: f5:23:52:76:4f:f2:08:30:6a:12:b6:73:03:c9:83:c5:82:a1: 5b:d5:45:f8:80:0f:f1:a3:1c:bd:5b:8d:28:2b:99:7d:e8:db: 66:cf:1e:3f:de:2a:23:f7:7d:7e:fa:d3:b8:2e:02:1a:6d:19: 08:97:66:73:ca:d9:6f:af:9c:b5:c7:62:36:f3:78:e9:19:c0: 7f:4b:a1:65:76:b5:10:a3:83:63:c6:c1:7d:73:bb:85:be:10: 9c:fe:25:98:c9:bd:a7:f7:cd:4c:80:bc:0c:05:8b:1d:a6:13: d5:2d:25:17:e2:32:84:c6:e7:6d:60:f9:8c:22:06:9f:a3:ce: 4f:39:09:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbHeonJdemr4gVm16dAs3SD0JNPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQx QTVEMDUyMDAeFw0yNTExMDMyMTU1MDJaFw0yNTExMDcwMTE1MDJaMDMxMTAvBgNV BAMTKDUyQTE0OTc2NjE4QTZDQTg5QkJGMUU2N0YwQjZDNEQ0NEM2RTY0NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE7bzVtAZ57n1FzSMQpMuSzP8s ngxtRP6+mstJKStMLVWc66UTwVrDz4AdK5WZw94FATUdVxp4h8BthA6hnumSfXa1 KBUTNe4Oh7vPOvy//oVYC2ypjdF4zJ2qeUJXY1/RBqwRTPyjyZlOcpFnkkUM1lQO YH6bWe4FCln7JxNqQO2tZOkdxPr8+zk7z6ZKxaMmm+5MNTG5GBLoM+F2T2LAoVVN 5x6dKETpB5Gly1/pfyRSc9lQH2qNWQaFFKBwxJUkHWrvjW/1qUcWo8ir/pnnYW5N 0Aa8z38jK0FeTVDMBEpGg2BjJik3JgAJ+yaaDOZsxvi0FzPFd0rjMqkniGYJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUqFJdmGKbKibvx5n8LbE1ExuZFswHwYDVR0j BBgwFoAU6gHJFRHF40fHwR6kZJsPBBpdBSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Y2QyNGU4Mi1mMzA2LTQ0MDAtYjAwYS1kNTliNDFlMjg2YmIvMC9FQTAxQzkxNTEx QzVFMzQ3QzdDMTFFQTQ2NDlCMEYwNDFBNUQwNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQxQTVE MDUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGNkMjRlODItZjMwNi00NDAwLWIw MGEtZDU5YjQxZTI4NmJiLzAvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBG MDQxQTVEMDUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIijA++fGsXtqe5TxLpqHHN4o2XNqyNhtBbY 4KMk4NrRNmScr12LI5JIq+ubfS9zjbSOI1aK0a5JqtqqplUJzUKBeSQD35DPduQU fE0c93BhQv9a4yY0TJFhMJuf5y9aQHI7MEGY4upCSLe7yj1oRhb3MeMau3H6QuZM u/ZdfvUjUnZP8ggwahK2cwPJg8WCoVvVRfiAD/GjHL1bjSgrmX3o22bPHj/eKiP3 fX7607guAhptGQiXZnPK2W+vnLXHYjbzeOkZwH9LoWV2tRCjg2PGwX1zu4W+EJz+ JZjJvaf3zUyAvAwFix2mE9UtJRfiMoTG521g+YwiBp+jzk85Ceg= -----END CERTIFICATE-----Generated at Tue Nov 4 23:13:55 2025 by rpki-client