$ rpki-client -vvf repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft File: E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft (raw, json) Hash identifier: qgOZXhbKxkJqh2JsQTjejRDMePrx0QtFtfizHGU05+0= Subject key identifier: DE:5E:8B:3F:05:1C:D1:A3:FB:A7:8E:19:6F:09:AD:22:E9:46:AC:74 Authority key identifier: E8:DA:87:F3:4A:55:0D:00:47:EE:C0:39:A2:0C:84:41:F0:66:EC:5B Certificate issuer: /CN=E8DA87F34A550D0047EEC039A20C8441F066EC5B Certificate serial: 47028733D1B65999A882073DE265AF29907384E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft Manifest number: 0325 Signing time: Mon 03 Nov 2025 12:00:37 +0000 Manifest this update: Mon 03 Nov 2025 11:55:37 +0000 Manifest next update: Thu 06 Nov 2025 19:19:37 +0000 Files and hashes: 1: E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl (hash: 9r61hb1uJVrAgX9QRFxvK/6pzTvwIkmMKreyuaAKKHA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 19:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:02:87:33:d1:b6:59:99:a8:82:07:3d:e2:65:af:29:90:73:84:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8DA87F34A550D0047EEC039A20C8441F066EC5B Validity Not Before: Nov 3 11:55:37 2025 GMT Not After : Nov 6 19:19:37 2025 GMT Subject: CN=DE5E8B3F051CD1A3FBA78E196F09AD22E946AC74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a6:00:1c:89:0f:74:28:73:58:8c:e1:ee:9d: b3:02:3f:0b:d1:89:1a:27:57:4c:28:72:0f:e8:f6: e7:25:df:5f:57:be:96:0a:b5:b6:3a:15:20:93:86: 09:5b:a9:9f:c4:43:ef:ff:cb:2e:9c:87:ac:fd:19: 50:c1:61:e5:80:29:10:92:fb:0a:9c:d2:20:00:12: 3b:c0:13:f8:c7:f6:ff:ca:e9:58:d9:68:79:cc:2b: 24:c5:5e:20:99:66:0b:6a:8d:25:98:fc:df:69:4e: 46:6f:1f:ba:e7:2f:f3:c1:c4:f0:91:7d:59:88:3c: 22:05:ed:9f:69:81:6b:7b:ee:c8:9f:c0:40:96:4c: 02:35:60:06:d7:17:cd:11:34:eb:8d:04:6b:a9:fc: 96:d7:fa:a5:49:a9:c8:8a:ec:99:ca:18:e0:22:3a: 94:10:a1:f2:ab:b0:62:3b:95:3a:16:73:bf:4d:a1: a2:66:a3:56:e0:7e:90:9c:ec:f6:3c:8b:c2:e9:f1: f9:c4:61:a4:43:f7:f9:3b:47:20:1b:4a:95:fe:89: b1:87:13:67:aa:a0:44:c2:8b:0e:64:7f:f7:c6:35: a0:97:66:c7:53:e3:4e:b6:55:f3:8f:89:d7:4d:69: 36:af:8b:2e:37:d6:ba:9a:66:9c:98:4d:af:1a:7b: 6c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5E:8B:3F:05:1C:D1:A3:FB:A7:8E:19:6F:09:AD:22:E9:46:AC:74 X509v3 Authority Key Identifier: keyid:E8:DA:87:F3:4A:55:0D:00:47:EE:C0:39:A2:0C:84:41:F0:66:EC:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:e3:c5:46:7f:5b:47:cd:ba:ba:9c:ba:d7:53:0b:b5:0e:b9: 0a:07:82:b5:06:a9:3a:3f:d2:cd:40:87:a2:bc:ec:86:c4:0c: 0e:e3:1c:8b:47:5d:32:94:60:b5:61:d7:5b:13:97:b0:96:23: 1b:f2:63:30:34:26:9a:1e:11:d0:6d:3b:fc:c4:50:87:e7:c8: b1:7b:d0:36:26:0a:61:7a:59:b3:73:45:ff:5a:42:33:de:92: a3:84:91:8f:0a:07:66:a5:a5:2b:29:ed:33:8f:d1:e7:99:8d: 16:52:ed:2b:93:0c:54:d2:a7:cb:43:51:81:cd:59:a6:fb:03: 8d:a6:cc:64:3d:4d:14:1f:dd:03:b1:d0:80:88:a6:c9:fc:de: 26:21:ff:3b:1d:88:47:2d:ea:81:f8:ba:d7:d9:47:5f:c2:a6: 7c:11:e7:58:20:06:a7:3c:87:32:25:4e:d6:96:d6:6e:73:70: cf:90:6f:a3:9a:5e:b6:d0:b5:42:f5:ca:e5:70:2d:62:e8:d1: 2d:61:9f:29:54:08:0d:04:03:60:be:5a:ff:0f:29:8d:6e:94: 99:32:59:57:42:e0:c1:b3:1e:93:a5:cd:65:37:c4:31:c9:dc: b1:9c:d6:43:29:39:9e:50:e4:f1:48:59:05:da:34:bd:20:b6: 39:20:03:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURwKHM9G2WZmoggc94mWvKZBzhOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0NDFG MDY2RUM1QjAeFw0yNTExMDMxMTU1MzdaFw0yNTExMDYxOTE5MzdaMDMxMTAvBgNV BAMTKERFNUU4QjNGMDUxQ0QxQTNGQkE3OEUxOTZGMDlBRDIyRTk0NkFDNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdpgAciQ90KHNYjOHunbMCPwvR iRonV0wocg/o9ucl319XvpYKtbY6FSCThglbqZ/EQ+//yy6ch6z9GVDBYeWAKRCS +wqc0iAAEjvAE/jH9v/K6VjZaHnMKyTFXiCZZgtqjSWY/N9pTkZvH7rnL/PBxPCR fVmIPCIF7Z9pgWt77sifwECWTAI1YAbXF80RNOuNBGup/JbX+qVJqciK7JnKGOAi OpQQofKrsGI7lToWc79NoaJmo1bgfpCc7PY8i8Lp8fnEYaRD9/k7RyAbSpX+ibGH E2eqoETCiw5kf/fGNaCXZsdT4062VfOPiddNaTaviy431rqaZpyYTa8ae2zhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3l6LPwUc0aP7p44ZbwmtIulGrHQwHwYDVR0j BBgwFoAU6NqH80pVDQBH7sA5ogyEQfBm7FswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTQ2NzZjZC1kZTM5LTQ2OGEtYWQyNS02NzVlMWI5MTBmYWMvMC9FOERBODdGMzRB NTUwRDAwNDdFRUMwMzlBMjBDODQ0MUYwNjZFQzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0NDFGMDY2 RUM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE0Njc2Y2QtZGUzOS00NjhhLWFk MjUtNjc1ZTFiOTEwZmFjLzAvRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0 NDFGMDY2RUM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjjxUZ/W0fNurqcutdTC7UOuQoHgrUGqTo/ 0s1Ah6K87IbEDA7jHItHXTKUYLVh11sTl7CWIxvyYzA0JpoeEdBtO/zEUIfnyLF7 0DYmCmF6WbNzRf9aQjPekqOEkY8KB2alpSsp7TOP0eeZjRZS7SuTDFTSp8tDUYHN Wab7A42mzGQ9TRQf3QOx0ICIpsn83iYh/zsdiEct6oH4utfZR1/CpnwR51ggBqc8 hzIlTtaW1m5zcM+Qb6OaXrbQtUL1yuVwLWLo0S1hnylUCA0EA2C+Wv8PKY1ulJky WVdC4MGzHpOlzWU3xDHJ3LGc1kMpOZ5Q5PFIWQXaNL0gtjkgA+c= -----END CERTIFICATE-----Generated at Tue Nov 4 08:21:13 2025 by rpki-client