$ rpki-client -vvf repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft File: E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft (raw, json) Hash identifier: MbZ9Ey4f7o55Go7bq+DjWM7B1l7Lz47v+h33hTKPjWY= Subject key identifier: D4:8F:1C:01:F1:79:95:36:A0:C3:6E:F2:D6:9D:07:07:19:DF:AA:10 Authority key identifier: E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D Certificate issuer: /CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D Certificate serial: 1AF7D3CCD0B98F9466037CCD92E6B6C97A04DF0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft Manifest number: 03AB Signing time: Tue 04 Nov 2025 08:50:40 +0000 Manifest this update: Tue 04 Nov 2025 08:45:40 +0000 Manifest next update: Fri 07 Nov 2025 12:31:40 +0000 Files and hashes: 1: 323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa (hash: goKqtOANx7qYkuYC16JMyOMD7wMXtPJ41zk+xa8C7PI=) 2: 3130332e33312e3230342e302f32332d3234203d3e203435373138.roa (hash: VoMnlv1vt+phfoqqSj3NlhfZbmojrA8l7T65WTVbYMM=) 3: 3130332e33312e3230362e302f32342d3234203d3e203435373138.roa (hash: w1mWD70iTqDZcL+qWJT3UxUlTEt3Oeyv9uC8w3hj0HU=) 4: 3130332e3139382e39332e302f32342d3234203d3e203435373138.roa (hash: wa+1RTscgoKKgYWFX2arn9cWcToBF6A/kXjZvyHLVV8=) 5: E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl (hash: FfZgNeO7HkqcH85J24x080Rm5iFID8g0EeJTXO9lrnc=) 6: 3230332e37392e32392e302f32342d3234203d3e203435373138.roa (hash: ILlvOWLN9Xs8cUbwHU8Z2NUUNxyuB2q6+J4DPU9EvmQ=) 7: 3131372e3130332e36342e302f32322d3234203d3e203435373138.roa (hash: dcaXEHmtpvgdp2B+61+9NSsaEhu3dJ+pR5a99XJxHq0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 12:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f7:d3:cc:d0:b9:8f:94:66:03:7c:cd:92:e6:b6:c9:7a:04:df:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D Validity Not Before: Nov 4 08:45:40 2025 GMT Not After : Nov 7 12:31:40 2025 GMT Subject: CN=D48F1C01F1799536A0C36EF2D69D070719DFAA10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:65:6a:4c:0b:ed:5a:b5:b2:e8:3f:91:4e:1e: 84:e1:8e:a8:0f:0b:44:cb:65:04:bd:6e:22:ed:39: 2e:36:c8:8b:03:bb:db:bd:0a:47:b0:18:b0:14:17: db:84:78:41:86:4f:b4:98:02:95:b1:08:7e:2d:b0: 26:93:f3:01:c4:54:ce:53:04:45:ca:1c:05:5c:ed: f4:0d:0e:30:64:3b:9d:7b:4d:c5:4e:94:95:eb:a8: cc:78:79:5a:f8:db:0f:a8:7b:dc:6b:80:96:e7:14: a4:96:a7:7a:3e:5d:26:13:d1:5b:dd:a4:04:17:bf: b8:4f:c5:70:69:f2:56:5d:4d:b2:ab:d6:38:26:61: f4:48:c9:3e:66:6a:e5:39:f6:91:67:53:c0:0d:99: 5b:2f:d5:a3:d5:24:75:71:e9:66:b4:c8:a2:66:06: 98:53:74:10:2c:69:d0:a8:f9:ad:b9:99:a6:37:08: c9:5b:d0:e2:2c:c0:14:bf:1d:0b:32:10:69:15:65: c2:bc:26:72:6b:13:1b:bc:02:1a:01:8e:82:1b:c1: 2a:ba:85:9c:97:35:4e:be:ae:63:57:6c:46:d2:c0: d6:8c:d7:83:78:8e:96:2f:da:79:d3:52:e1:64:16: 79:58:ef:e6:89:4e:93:51:81:0b:33:8d:90:69:48: 09:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8F:1C:01:F1:79:95:36:A0:C3:6E:F2:D6:9D:07:07:19:DF:AA:10 X509v3 Authority Key Identifier: keyid:E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:58:07:10:c6:6b:0f:a0:56:11:01:84:f0:d1:bb:a4:a0:c1: ee:fd:49:da:15:40:9f:c5:ae:41:5a:55:b4:82:04:c5:5c:18: 57:4f:f5:4e:f7:b8:81:29:b7:29:17:19:f2:ac:f5:dd:c4:6e: d4:dc:5b:42:04:44:49:46:32:f7:19:3e:ad:e2:22:dd:ed:cf: 5c:40:1a:89:d0:ab:75:05:98:7f:f4:9d:3d:73:a3:e1:1f:25: 0a:1f:72:2e:4c:32:e4:6c:6a:34:de:0e:e4:fb:1b:ee:12:b4: 8f:fa:e5:b5:0b:d3:26:29:98:b9:c0:20:85:74:09:d2:bc:1f: 67:34:24:c8:4c:4d:1a:41:57:eb:8e:a4:9e:bd:35:2a:ff:68: c9:bf:6f:6e:77:da:62:cd:f2:88:9b:94:67:3c:c6:22:28:67: 21:9e:a3:66:31:92:60:aa:2e:9f:0c:b5:c9:9f:83:97:e4:d5: 3f:0e:7e:80:67:3d:e9:f9:e4:fd:a2:0d:56:bd:29:b5:77:8f: d2:a5:87:6d:9a:ea:9e:af:1d:5b:2a:32:1f:2c:b3:32:9e:8b: 5a:ae:f2:df:3c:68:e5:c8:19:22:fa:33:32:f8:96:2d:c2:31: 6b:d2:02:21:f2:8d:20:f8:2a:0e:9b:b2:35:b0:0f:ef:ef:9e: 6f:79:5b:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGvfTzNC5j5RmA3zNkua2yXoE3w0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0MkIz QkQzMUQxRDAeFw0yNTExMDQwODQ1NDBaFw0yNTExMDcxMjMxNDBaMDMxMTAvBgNV BAMTKEQ0OEYxQzAxRjE3OTk1MzZBMEMzNkVGMkQ2OUQwNzA3MTlERkFBMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAZWpMC+1atbLoP5FOHoThjqgP C0TLZQS9biLtOS42yIsDu9u9CkewGLAUF9uEeEGGT7SYApWxCH4tsCaT8wHEVM5T BEXKHAVc7fQNDjBkO517TcVOlJXrqMx4eVr42w+oe9xrgJbnFKSWp3o+XSYT0Vvd pAQXv7hPxXBp8lZdTbKr1jgmYfRIyT5mauU59pFnU8ANmVsv1aPVJHVx6Wa0yKJm BphTdBAsadCo+a25maY3CMlb0OIswBS/HQsyEGkVZcK8JnJrExu8AhoBjoIbwSq6 hZyXNU6+rmNXbEbSwNaM14N4jpYv2nnTUuFkFnlY7+aJTpNRgQszjZBpSAkbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1I8cAfF5lTagw27y1p0HBxnfqhAwHwYDVR0j BBgwFoAU5HWosBi65YRI3eVdlIdEKzvTHR0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDQ5YzIxMC1mMzY1LTQzMmYtYTdjYS0wYjVlYjg2YjAxYzYvMC9FNDc1QThCMDE4 QkFFNTg0NDhEREU1NUQ5NDg3NDQyQjNCRDMxRDFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0MkIzQkQz MUQxRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA0OWMyMTAtZjM2NS00MzJmLWE3 Y2EtMGI1ZWI4NmIwMWM2LzAvRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0 MkIzQkQzMUQxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZYBxDGaw+gVhEBhPDRu6Sgwe79SdoVQJ/F rkFaVbSCBMVcGFdP9U73uIEptykXGfKs9d3EbtTcW0IERElGMvcZPq3iIt3tz1xA GonQq3UFmH/0nT1zo+EfJQofci5MMuRsajTeDuT7G+4StI/65bUL0yYpmLnAIIV0 CdK8H2c0JMhMTRpBV+uOpJ69NSr/aMm/b2532mLN8oiblGc8xiIoZyGeo2YxkmCq Lp8Mtcmfg5fk1T8OfoBnPen55P2iDVa9KbV3j9Klh22a6p6vHVsqMh8sszKei1qu 8t88aOXIGSL6MzL4li3CMWvSAiHyjSD4Kg6bsjWwD+/vnm95W9w= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:08 2025 by rpki-client