$ rpki-client -vvf repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.mft File: E4B72563B465301EE966885E5BE212EE92B97305.mft (raw, json) Hash identifier: 9UjSK5ZA62PdBAn8z6ERQZ0A2s+UZ+aOtT76clcShlI= Subject key identifier: 25:C2:3A:2D:1C:D3:45:2D:DC:16:D7:23:C5:DA:D8:3A:3D:5B:63:FC Authority key identifier: E4:B7:25:63:B4:65:30:1E:E9:66:88:5E:5B:E2:12:EE:92:B9:73:05 Certificate issuer: /CN=E4B72563B465301EE966885E5BE212EE92B97305 Certificate serial: 68DBC011FFB2E3971208974ADDE3FC187F4BFD78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4B72563B465301EE966885E5BE212EE92B97305.cer Subject info access: rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.mft Manifest number: 0249 Signing time: Mon 03 Nov 2025 01:21:58 +0000 Manifest this update: Mon 03 Nov 2025 01:16:58 +0000 Manifest next update: Thu 06 Nov 2025 11:58:58 +0000 Files and hashes: 1: E4B72563B465301EE966885E5BE212EE92B97305.crl (hash: YuPBOIfIUwcWSkD2pTbu4VKQY6UHH/qT6a5eTJZKi+4=) 2: 3130332e31312e32322e302f32332d3234203d3e203538333930.roa (hash: LYswcn8qPihQgugQgV3QSAqvaMoaJ8Ak/kLhePchypk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.crl rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4B72563B465301EE966885E5BE212EE92B97305.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 11:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:db:c0:11:ff:b2:e3:97:12:08:97:4a:dd:e3:fc:18:7f:4b:fd:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4B72563B465301EE966885E5BE212EE92B97305 Validity Not Before: Nov 3 01:16:58 2025 GMT Not After : Nov 6 11:58:58 2025 GMT Subject: CN=25C23A2D1CD3452DDC16D723C5DAD83A3D5B63FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7c:d7:70:d5:19:f8:e2:ef:da:ef:73:17:dc: f4:d4:5b:0c:69:7d:9d:0c:6a:ac:35:6d:1b:8f:ad: d5:3b:89:ab:24:66:56:bf:0c:d0:7f:74:fc:51:3d: e7:bf:ff:06:53:b5:ed:1a:2c:0d:ce:db:b5:6e:d1: 49:5d:6e:81:11:a7:92:83:1e:6d:a1:e8:67:c4:17: ec:ab:a4:38:0a:85:2f:03:ef:df:18:e3:af:42:3e: 1f:0b:33:70:c8:4d:f0:14:cd:b5:aa:0c:c2:a0:e0: d0:0b:b6:89:2b:f4:e7:11:38:a9:7b:bf:c9:14:94: f3:44:46:8e:22:ef:88:49:28:b1:2f:c8:b4:60:5c: bf:58:f8:12:bb:b2:d5:66:68:93:37:d9:43:85:28: 82:74:5c:dc:41:f1:79:fc:d1:ea:2c:f7:86:6e:bd: 31:92:05:e7:f6:b4:3f:32:c5:20:3a:e2:b9:46:fc: 5b:65:4b:42:73:b8:7e:47:c7:a8:b7:03:b1:51:9d: ac:d8:bc:1f:df:cb:bf:13:25:eb:d8:43:5a:b5:a7: 67:73:af:ba:3e:a8:f9:31:ea:24:e6:68:0b:4c:2e: 33:8b:84:1a:ff:a9:8e:54:c7:26:7f:78:97:5f:ba: 20:31:0f:18:f0:8d:2c:a3:07:f1:2b:c0:cc:6c:2d: 83:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C2:3A:2D:1C:D3:45:2D:DC:16:D7:23:C5:DA:D8:3A:3D:5B:63:FC X509v3 Authority Key Identifier: keyid:E4:B7:25:63:B4:65:30:1E:E9:66:88:5E:5B:E2:12:EE:92:B9:73:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4B72563B465301EE966885E5BE212EE92B97305.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:99:22:fd:5d:84:24:d7:c0:d6:df:e4:e1:4f:cf:d5:3e:9e: 39:ef:0d:02:0d:87:85:30:c1:e4:ac:e3:e9:59:88:70:fd:fd: e8:ad:9b:ce:f5:68:8f:f8:89:fd:c7:52:a9:85:13:13:5f:4b: 30:9e:51:ad:a6:02:5d:eb:de:bd:ad:e3:47:05:35:e7:c9:14: cf:c4:1c:e2:d1:e7:48:a5:c6:80:68:50:36:62:47:57:dd:93: 5a:b2:27:e1:24:9f:96:fc:ff:30:19:02:ed:74:5f:82:c8:72: ca:b4:9d:34:6a:db:cd:12:88:be:94:66:3d:50:93:46:cf:14: af:81:7d:dc:aa:fa:83:22:b6:b8:9c:c1:3f:98:89:f0:e8:18: 8a:02:42:c8:44:e0:58:3c:24:2d:94:50:81:d1:ab:7e:6d:67: 96:67:2e:d9:9a:c4:d6:cf:17:82:29:5f:4a:61:5d:34:04:97: ea:e5:39:fd:ad:dc:6f:04:e4:b3:57:2e:25:ad:c2:ce:b8:9d: bb:f4:cd:a6:ad:9c:35:d8:1b:83:06:aa:31:f8:b3:b1:5e:fd: a1:6e:e6:92:d6:4f:b9:94:3b:90:9b:27:15:df:9f:fb:52:4f: 08:ee:c7:bc:11:f0:1d:5b:b6:4c:a7:df:66:c6:a3:9c:78:3d: dc:cf:aa:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaNvAEf+y45cSCJdK3eP8GH9L/XgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRCNzI1NjNCNDY1MzAxRUU5NjY4ODVFNUJFMjEyRUU5 MkI5NzMwNTAeFw0yNTExMDMwMTE2NThaFw0yNTExMDYxMTU4NThaMDMxMTAvBgNV BAMTKDI1QzIzQTJEMUNEMzQ1MkREQzE2RDcyM0M1REFEODNBM0Q1QjYzRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsfNdw1Rn44u/a73MX3PTUWwxp fZ0Maqw1bRuPrdU7iaskZla/DNB/dPxRPee//wZTte0aLA3O27Vu0UldboERp5KD Hm2h6GfEF+yrpDgKhS8D798Y469CPh8LM3DITfAUzbWqDMKg4NALtokr9OcROKl7 v8kUlPNERo4i74hJKLEvyLRgXL9Y+BK7stVmaJM32UOFKIJ0XNxB8Xn80eos94Zu vTGSBef2tD8yxSA64rlG/FtlS0JzuH5Hx6i3A7FRnazYvB/fy78TJevYQ1q1p2dz r7o+qPkx6iTmaAtMLjOLhBr/qY5UxyZ/eJdfuiAxDxjwjSyjB/ErwMxsLYPHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJcI6LRzTRS3cFtcjxdrYOj1bY/wwHwYDVR0j BBgwFoAU5LclY7RlMB7pZoheW+IS7pK5cwUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODdhZGU5Zi02Yjc5LTQ3MjMtOTk0OS05NmRlN2U0MWRiNzAvMC9FNEI3MjU2M0I0 NjUzMDFFRTk2Njg4NUU1QkUyMTJFRTkyQjk3MzA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRCNzI1NjNCNDY1MzAxRUU5NjY4ODVFNUJFMjEyRUU5MkI5 NzMwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg3YWRlOWYtNmI3OS00NzIzLTk5 NDktOTZkZTdlNDFkYjcwLzAvRTRCNzI1NjNCNDY1MzAxRUU5NjY4ODVFNUJFMjEy RUU5MkI5NzMwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCZIv1dhCTXwNbf5OFPz9U+njnvDQINh4Uw weSs4+lZiHD9/eitm871aI/4if3HUqmFExNfSzCeUa2mAl3r3r2t40cFNefJFM/E HOLR50ilxoBoUDZiR1fdk1qyJ+Ekn5b8/zAZAu10X4LIcsq0nTRq280SiL6UZj1Q k0bPFK+Bfdyq+oMitricwT+YifDoGIoCQshE4Fg8JC2UUIHRq35tZ5ZnLtmaxNbP F4IpX0phXTQEl+rlOf2t3G8E5LNXLiWtws64nbv0zaatnDXYG4MGqjH4s7Fe/aFu 5pLWT7mUO5CbJxXfn/tSTwjux7wR8B1btkyn32bGo5x4PdzPqgE= -----END CERTIFICATE-----Generated at Tue Nov 4 18:53:43 2025 by rpki-client