$ rpki-client -vvf repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft File: EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft (raw, json) Hash identifier: ALF4UZ77t1dpFex15Z2f6J+t0mk36p9E/YXBvQ2GnLk= Subject key identifier: EC:1F:A6:77:06:8D:84:A7:BF:E3:F6:F5:85:A8:3E:77:86:89:A8:64 Authority key identifier: EE:CC:4A:44:F0:95:94:EB:71:1E:A1:F6:F3:4B:95:8D:19:A3:B4:FD Certificate issuer: /CN=EECC4A44F09594EB711EA1F6F34B958D19A3B4FD Certificate serial: 24E06530AF0577389CE01D0DD3E24264E22113BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft Manifest number: 01B4 Signing time: Tue 04 Nov 2025 21:21:23 +0000 Manifest this update: Tue 04 Nov 2025 21:16:23 +0000 Manifest next update: Fri 07 Nov 2025 23:14:23 +0000 Files and hashes: 1: EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.crl (hash: Xs9QtxAtFqBvmqqERHIjyDcPVAKfxTAK3D2+mAlFfy4=) 2: 3130332e3230342e31352e302f32342d3234203d3e20313530393230.roa (hash: 84mIKFs557T9blcI7/exXdbBapxr7Cu4g0VLqBjO/cg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.crl rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e0:65:30:af:05:77:38:9c:e0:1d:0d:d3:e2:42:64:e2:21:13:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EECC4A44F09594EB711EA1F6F34B958D19A3B4FD Validity Not Before: Nov 4 21:16:23 2025 GMT Not After : Nov 7 23:14:23 2025 GMT Subject: CN=EC1FA677068D84A7BFE3F6F585A83E778689A864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:73:19:eb:ba:57:69:c0:4b:8e:bd:ac:4d:c9: 4e:93:70:f7:33:57:b9:9a:6b:2d:73:dd:96:62:51: 30:15:95:77:4a:ef:ae:ef:94:8a:ae:3c:85:5a:57: bd:e1:31:e2:da:12:08:f9:a0:65:93:39:cf:eb:17: 62:0f:f8:1a:d8:9f:f9:10:0e:e4:70:ac:66:f8:25: c8:2f:2d:3f:72:f2:72:b3:61:04:a2:f5:bf:59:ff: c5:89:95:86:37:8f:63:b8:3b:9d:a6:c6:00:c9:cd: 7b:d5:9d:01:28:bc:cc:c1:54:59:0e:c7:39:2d:48: 8c:31:5b:97:4d:20:e3:c7:dd:1d:e5:99:6a:81:68: 2e:f1:a1:0f:c0:e7:2d:d5:80:40:fd:ce:4b:9e:06: 91:32:2a:cd:19:77:3a:14:95:16:8c:49:18:c7:30: 53:5d:3b:35:61:3f:81:6d:3b:45:4b:3b:01:8f:4f: 32:6f:f4:bc:b8:61:fd:b4:72:ce:57:07:a1:18:4c: 61:e1:17:be:05:f2:89:ae:e2:d3:96:be:43:ff:2d: 4f:86:be:81:6b:0f:6c:8a:48:b3:af:f8:77:a3:23: 93:cf:42:67:fd:50:bd:f5:54:fe:69:33:24:76:b8: ca:8a:df:da:27:6d:de:86:08:e9:71:c0:d9:ab:cc: c7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:1F:A6:77:06:8D:84:A7:BF:E3:F6:F5:85:A8:3E:77:86:89:A8:64 X509v3 Authority Key Identifier: keyid:EE:CC:4A:44:F0:95:94:EB:71:1E:A1:F6:F3:4B:95:8D:19:A3:B4:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:66:e6:e3:a3:98:26:5f:6d:68:a1:b8:e0:c6:fd:cd:94:ce: fc:c2:a5:6a:56:ff:bf:5d:5c:47:c9:d6:66:26:c6:f5:1c:ad: 09:5e:45:53:8b:1f:24:d2:9d:ed:f6:42:62:0b:40:fc:75:af: 7f:3c:db:9a:7b:c8:c8:ba:6b:ec:22:a6:23:61:64:1e:10:4b: 8c:6c:d1:8f:3c:2c:d8:0b:f7:99:28:ab:c7:2a:c1:fb:bc:a0: 65:dd:09:76:8a:c0:29:d6:d1:75:9a:45:34:d7:5a:f1:b8:c3: d6:24:91:ab:5b:cb:f1:de:2f:3b:7a:b3:4d:81:86:d0:03:48: 08:30:d4:6b:1c:ae:fa:ae:70:61:66:78:08:9a:12:08:a5:97: d5:83:13:61:91:7b:ec:3f:c3:18:ed:eb:e7:a2:0c:42:3a:9f: 47:a3:b4:23:af:a5:2d:ab:63:85:18:65:f5:70:3f:41:13:9e: f6:06:a6:59:01:fa:ae:b0:c5:54:e4:65:39:f0:46:53:9b:2c: 9c:20:2d:33:e7:23:00:73:59:a7:02:ec:ce:54:84:2e:5f:ee: a8:59:53:18:e7:c6:3d:60:52:8e:c6:13:19:9b:9b:ae:c3:f4: 8b:82:c2:69:b5:25:d7:09:ea:6b:90:dd:e3:c9:37:49:c0:b7: e9:21:0e:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJOBlMK8Fdzic4B0N0+JCZOIhE70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVDQzRBNDRGMDk1OTRFQjcxMUVBMUY2RjM0Qjk1OEQx OUEzQjRGRDAeFw0yNTExMDQyMTE2MjNaFw0yNTExMDcyMzE0MjNaMDMxMTAvBgNV BAMTKEVDMUZBNjc3MDY4RDg0QTdCRkUzRjZGNTg1QTgzRTc3ODY4OUE4NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdcxnruldpwEuOvaxNyU6TcPcz V7maay1z3ZZiUTAVlXdK767vlIquPIVaV73hMeLaEgj5oGWTOc/rF2IP+BrYn/kQ DuRwrGb4JcgvLT9y8nKzYQSi9b9Z/8WJlYY3j2O4O52mxgDJzXvVnQEovMzBVFkO xzktSIwxW5dNIOPH3R3lmWqBaC7xoQ/A5y3VgED9zkueBpEyKs0ZdzoUlRaMSRjH MFNdOzVhP4FtO0VLOwGPTzJv9Ly4Yf20cs5XB6EYTGHhF74F8omu4tOWvkP/LU+G voFrD2yKSLOv+HejI5PPQmf9UL31VP5pMyR2uMqK39onbd6GCOlxwNmrzMdbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7B+mdwaNhKe/4/b1hag+d4aJqGQwHwYDVR0j BBgwFoAU7sxKRPCVlOtxHqH280uVjRmjtP0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWZjOTk2Zi03MmNhLTRkNmItYTBlNy1mZjViYzQyYjA1ODkvMC9FRUNDNEE0NEYw OTU5NEVCNzExRUExRjZGMzRCOTU4RDE5QTNCNEZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUVDQzRBNDRGMDk1OTRFQjcxMUVBMUY2RjM0Qjk1OEQxOUEz QjRGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjlmYzk5NmYtNzJjYS00ZDZiLWEw ZTctZmY1YmM0MmIwNTg5LzAvRUVDQzRBNDRGMDk1OTRFQjcxMUVBMUY2RjM0Qjk1 OEQxOUEzQjRGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxm5uOjmCZfbWihuODG/c2UzvzCpWpW/79d XEfJ1mYmxvUcrQleRVOLHyTSne32QmILQPx1r38825p7yMi6a+wipiNhZB4QS4xs 0Y88LNgL95koq8cqwfu8oGXdCXaKwCnW0XWaRTTXWvG4w9Ykkatby/HeLzt6s02B htADSAgw1GscrvqucGFmeAiaEgill9WDE2GRe+w/wxjt6+eiDEI6n0ejtCOvpS2r Y4UYZfVwP0ETnvYGplkB+q6wxVTkZTnwRlObLJwgLTPnIwBzWacC7M5UhC5f7qhZ Uxjnxj1gUo7GExmbm67D9IuCwmm1JdcJ6muQ3ePJN0nAt+khDnY= -----END CERTIFICATE-----Generated at Tue Nov 4 23:09:29 2025 by rpki-client