$ rpki-client -vvf repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft File: E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft (raw, json) Hash identifier: LRgDQEIUTeC0VxaJqJWEQhPVKO7an0WSKZ2eehhKEWw= Subject key identifier: C1:03:B5:D5:33:3B:55:4F:2E:0A:A2:05:96:8C:8F:69:67:CD:0A:6F Authority key identifier: E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27 Certificate issuer: /CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27 Certificate serial: 0F6D1383C25FC5C673BA42DDB2C896222FCD8BC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft Manifest number: 01DD Signing time: Mon 03 Nov 2025 07:31:04 +0000 Manifest this update: Mon 03 Nov 2025 07:26:04 +0000 Manifest next update: Thu 06 Nov 2025 16:08:04 +0000 Files and hashes: 1: 3130332e34372e31312e302f32342d3234203d3e203539323733.roa (hash: FYTnb6URKqil9v4UEaprZL6ZdMktcRy6nGXbNBxOe04=) 2: 3130332e34372e31302e302f32332d3233203d3e203539323733.roa (hash: QQ3Rh44LarCBGGxrx2/AHtC6m0nt4l2HW31clE2Q/SY=) 3: E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl (hash: f6j/ZNBXVixLVIP9r7CUdGo6+Hhxf15bYYjrftHO5PM=) 4: 3130332e34372e31302e302f32342d3234203d3e203539323733.roa (hash: R73yUQxsrQ2/QYaOv8BqS7ocOQns71iqOhL/AfjwD0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 16:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:6d:13:83:c2:5f:c5:c6:73:ba:42:dd:b2:c8:96:22:2f:cd:8b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27 Validity Not Before: Nov 3 07:26:04 2025 GMT Not After : Nov 6 16:08:04 2025 GMT Subject: CN=C103B5D5333B554F2E0AA205968C8F6967CD0A6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b2:2d:2d:6d:72:e5:ba:c6:8b:64:24:30:7a: c0:48:68:f5:a5:28:7b:87:2c:b4:42:e6:4d:dd:2d: 50:23:43:81:13:2e:97:f5:29:d6:87:1d:52:0c:7d: e2:d5:e9:c9:ce:d5:0e:3d:5e:3c:f5:96:ab:8a:dc: d8:9e:94:10:80:9b:81:d1:a6:36:2a:5c:32:43:15: 70:2c:6e:74:f8:d5:19:16:40:ff:12:7e:18:6e:8d: 50:60:e2:27:64:db:6d:ec:8f:10:cb:5e:27:a9:44: 1a:7f:c7:c0:96:68:5b:51:06:db:21:38:ba:82:dc: fa:87:70:02:8b:ac:33:1a:3c:e1:a4:e6:75:55:2b: ee:bb:f1:35:01:cd:d1:f0:87:b5:c5:0a:35:1c:a1: 80:ff:41:30:05:64:1f:d2:12:4d:cd:ba:09:db:ee: b4:db:df:b4:a4:c7:30:4c:3b:a8:cc:cc:29:de:a5: 42:ca:2b:27:ae:c1:ae:77:d3:7c:23:f4:b9:cb:4e: e1:88:69:b6:e3:b8:a7:b6:53:08:11:78:49:a6:d2: 08:33:f8:30:db:28:9e:84:88:f4:ef:a6:29:b4:9f: 07:c7:19:55:67:5e:02:3e:ca:09:44:e0:a2:66:63: ad:7c:21:46:1b:cc:93:96:ba:8c:e4:06:59:46:4f: c8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:03:B5:D5:33:3B:55:4F:2E:0A:A2:05:96:8C:8F:69:67:CD:0A:6F X509v3 Authority Key Identifier: keyid:E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:8b:7d:a5:6c:55:a6:0e:88:bd:45:a5:3e:e7:41:bb:ef:4c: 29:02:6f:98:77:16:c0:2c:15:2e:56:6e:7a:92:37:df:b5:91: 7d:58:a0:8c:80:9d:50:b9:a6:64:b5:d7:b0:fc:de:2e:ec:37: 46:ff:ee:de:47:9d:3c:03:8c:ad:05:63:14:ea:d1:ac:2a:92: a4:77:d2:32:60:c1:09:91:18:43:7c:42:f0:07:92:fd:42:3e: 32:a3:ab:97:d3:19:2b:3e:23:cd:0e:1f:bd:1b:9f:45:88:88: 3d:b2:dd:67:e9:12:d1:51:84:39:a5:aa:29:ba:16:70:ac:8f: fa:21:a0:38:11:1d:d3:cf:5e:3b:d8:c1:5b:7e:1e:63:0a:2d: 3c:2a:b0:f6:bf:1a:a1:8d:ce:b8:88:b2:c7:95:8f:66:4a:27: 30:1f:b9:21:f1:72:93:13:53:ad:a4:80:36:86:8b:0d:c3:6c: b2:c4:91:59:e2:de:fd:66:70:0e:52:28:85:3b:9b:fe:b1:2e: 6a:01:04:46:4a:90:15:99:88:dc:f4:bf:06:cb:bc:ef:32:0e: 33:86:85:31:90:36:19:e2:64:db:b7:b6:71:19:0d:63:65:38: 82:17:e9:35:5b:6a:9f:b9:9e:21:dd:85:13:74:a6:b7:b1:e3: 96:47:29:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD20Tg8JfxcZzukLdssiWIi/Ni8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZG QTI5QUIyNzAeFw0yNTExMDMwNzI2MDRaFw0yNTExMDYxNjA4MDRaMDMxMTAvBgNV BAMTKEMxMDNCNUQ1MzMzQjU1NEYyRTBBQTIwNTk2OEM4RjY5NjdDRDBBNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVsi0tbXLlusaLZCQwesBIaPWl KHuHLLRC5k3dLVAjQ4ETLpf1KdaHHVIMfeLV6cnO1Q49Xjz1lquK3NielBCAm4HR pjYqXDJDFXAsbnT41RkWQP8SfhhujVBg4idk223sjxDLXiepRBp/x8CWaFtRBtsh OLqC3PqHcAKLrDMaPOGk5nVVK+678TUBzdHwh7XFCjUcoYD/QTAFZB/SEk3Nugnb 7rTb37SkxzBMO6jMzCnepULKKyeuwa5303wj9LnLTuGIabbjuKe2UwgReEmm0ggz +DDbKJ6EiPTvpim0nwfHGVVnXgI+yglE4KJmY618IUYbzJOWuozkBllGT8hTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwQO11TM7VU8uCqIFloyPaWfNCm8wHwYDVR0j BBgwFoAU6R1R5UqJwN29V/AKE+luNvopqycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWE3MmViOS04ZTUzLTQ0NzItYTM1YS1mZWU4YmYwYWY0NmYvMC9FOTFENTFFNTRB ODlDMEREQkQ1N0YwMEExM0U5NkUzNkZBMjlBQjI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZGQTI5 QUIyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVhNzJlYjktOGU1My00NDcyLWEz NWEtZmVlOGJmMGFmNDZmLzAvRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZF MzZGQTI5QUIyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOLfaVsVaYOiL1FpT7nQbvvTCkCb5h3FsAs FS5WbnqSN9+1kX1YoIyAnVC5pmS117D83i7sN0b/7t5HnTwDjK0FYxTq0awqkqR3 0jJgwQmRGEN8QvAHkv1CPjKjq5fTGSs+I80OH70bn0WIiD2y3WfpEtFRhDmlqim6 FnCsj/ohoDgRHdPPXjvYwVt+HmMKLTwqsPa/GqGNzriIsseVj2ZKJzAfuSHxcpMT U62kgDaGiw3DbLLEkVni3v1mcA5SKIU7m/6xLmoBBEZKkBWZiNz0vwbLvO8yDjOG hTGQNhniZNu3tnEZDWNlOIIX6TVbap+5niHdhRN0prex45ZHKSY= -----END CERTIFICATE-----Generated at Tue Nov 4 16:48:12 2025 by rpki-client