$ rpki-client -vvf repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft File: E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft (raw, json) Hash identifier: A+YG4UUXnCeXMPuUUgkNaKuZQiqGsY32td6u6jhq1Yw= Subject key identifier: C0:FB:96:0B:4E:D4:43:F9:81:01:C8:35:49:98:AA:76:26:E5:FC:3E Authority key identifier: E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1 Certificate issuer: /CN=E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1 Certificate serial: 1882ECD3ECFDB68D24F6F1E415C34310D743351B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft Manifest number: 02A2 Signing time: Tue 04 Nov 2025 15:22:14 +0000 Manifest this update: Tue 04 Nov 2025 15:17:14 +0000 Manifest next update: Fri 07 Nov 2025 23:00:14 +0000 Files and hashes: 1: 3130332e3137382e3137302e302f32342d3234203d3e20313339393532.roa (hash: h1Tx5XQe9PTjaWSuT2kvzlzqF3kndx9Hsu7Upo8uOTc=) 2: 3130332e3137382e3137312e302f32342d3234203d3e20313339393532.roa (hash: qWtnu+D2OJjgUIAZhBWqF4N8kzQJfxmKrFVqp2H/d+E=) 3: E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl (hash: wNOl4qh5mt0+EOe0InAlJdhvtiaa1wB5hLGztFKjGmo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:82:ec:d3:ec:fd:b6:8d:24:f6:f1:e4:15:c3:43:10:d7:43:35:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1 Validity Not Before: Nov 4 15:17:14 2025 GMT Not After : Nov 7 23:00:14 2025 GMT Subject: CN=C0FB960B4ED443F98101C8354998AA7626E5FC3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e4:c1:7d:3e:36:65:8d:36:02:30:02:a7:4f: 41:e5:03:04:49:3b:28:61:02:33:f8:f6:4f:8e:3a: cb:3e:fa:9d:a9:d8:7d:56:6d:42:a9:ca:63:25:aa: b4:48:ed:8c:a9:61:58:31:06:d4:d8:bc:57:4a:ee: c7:75:92:0b:f3:0a:41:03:81:af:a6:56:20:98:be: 66:1d:67:e1:20:a7:30:07:49:ee:29:0c:43:49:74: b2:f1:8e:5d:df:50:df:98:b4:28:27:e7:d1:e8:4a: e5:50:38:82:1d:53:cc:bf:a3:5b:d3:fd:cf:fe:15: a9:a9:e9:62:1a:28:63:8a:ed:1d:0f:c4:f4:f9:af: 9c:80:0e:b7:fd:db:47:26:82:7d:ea:9b:09:24:4f: 7c:70:90:30:c1:f5:58:cf:4a:f7:8c:ad:19:4e:47: ab:bb:af:54:e4:3d:46:dc:dc:2b:b1:65:c5:98:a1: 22:21:4a:10:ae:57:ed:15:6b:c4:ef:22:df:e3:fd: fe:0f:f5:42:fe:25:03:19:9e:1c:15:60:54:4b:e3: ee:2a:d6:0b:54:95:8e:e8:f1:93:4f:1b:b9:51:4f: 30:56:63:99:27:bc:57:84:58:30:73:0c:dd:37:bc: 5f:d5:fc:bb:25:56:93:33:d0:bf:e2:fc:5e:a3:1f: d9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FB:96:0B:4E:D4:43:F9:81:01:C8:35:49:98:AA:76:26:E5:FC:3E X509v3 Authority Key Identifier: keyid:E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:9b:c3:f0:df:a4:84:08:7f:38:20:e6:c2:50:4b:9a:93:86: 22:67:8b:c1:ff:c9:85:b9:82:5e:82:ff:d8:ea:fe:39:20:99: 0d:17:8c:d8:16:d4:38:d7:2b:9d:4e:58:fc:db:d5:ad:77:3e: 04:c3:de:05:b4:9b:36:6e:ca:10:22:d5:21:f6:d0:7d:68:f1: aa:a1:97:96:81:b9:9e:a6:ee:d1:87:ad:20:8f:48:46:cc:ce: f2:a3:85:b1:4e:0b:64:48:32:af:37:97:3c:34:ce:92:3a:1c: c7:a1:a2:19:04:40:ad:5b:ea:24:e0:ae:e4:b5:27:ff:85:24: 51:3f:25:1d:33:3b:3f:4b:5c:66:be:69:20:99:07:60:30:0a: 8a:0b:fe:c8:11:4f:ab:60:a2:75:98:f5:53:0c:d8:27:69:90: 03:d1:23:62:36:51:b2:88:45:e0:90:c0:4e:e2:d2:30:50:90: b4:c7:fd:9c:63:f6:0a:e3:0e:0e:61:35:80:b8:0d:e9:59:2e: 0a:df:37:46:4b:16:98:96:b1:a5:c2:bb:63:1d:9e:80:e8:4f: dc:59:7f:e6:79:81:73:2c:0d:31:20:54:98:35:da:b4:8d:c6: 67:33:dd:7a:24:aa:da:6a:1a:15:8f:2c:46:3d:07:fa:fd:0c: 64:00:ff:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGILs0+z9to0k9vHkFcNDENdDNRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA5RDBFMUQyNjNEQkQ5MTREMEM0RTBDQUE3RTVFNTBE MDIyNDZGMTAeFw0yNTExMDQxNTE3MTRaFw0yNTExMDcyMzAwMTRaMDMxMTAvBgNV BAMTKEMwRkI5NjBCNEVENDQzRjk4MTAxQzgzNTQ5OThBQTc2MjZFNUZDM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV5MF9PjZljTYCMAKnT0HlAwRJ OyhhAjP49k+OOss++p2p2H1WbUKpymMlqrRI7YypYVgxBtTYvFdK7sd1kgvzCkED ga+mViCYvmYdZ+EgpzAHSe4pDENJdLLxjl3fUN+YtCgn59HoSuVQOIIdU8y/o1vT /c/+Famp6WIaKGOK7R0PxPT5r5yADrf920cmgn3qmwkkT3xwkDDB9VjPSveMrRlO R6u7r1TkPUbc3CuxZcWYoSIhShCuV+0Va8TvIt/j/f4P9UL+JQMZnhwVYFRL4+4q 1gtUlY7o8ZNPG7lRTzBWY5knvFeEWDBzDN03vF/V/LslVpMz0L/i/F6jH9kdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwPuWC07UQ/mBAcg1SZiqdibl/D4wHwYDVR0j BBgwFoAU4J0OHSY9vZFNDE4Mqn5eUNAiRvEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzAxZmQ0NC04Y2Q2LTRkOWYtOWJkMS04MzY3YWQ5Y2Q5ZWEvMC9FMDlEMEUxRDI2 M0RCRDkxNEQwQzRFMENBQTdFNUU1MEQwMjI0NkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA5RDBFMUQyNjNEQkQ5MTREMEM0RTBDQUE3RTVFNTBEMDIy NDZGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMwMWZkNDQtOGNkNi00ZDlmLTli ZDEtODM2N2FkOWNkOWVhLzAvRTA5RDBFMUQyNjNEQkQ5MTREMEM0RTBDQUE3RTVF NTBEMDIyNDZGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqbw/DfpIQIfzgg5sJQS5qThiJni8H/yYW5 gl6C/9jq/jkgmQ0XjNgW1DjXK51OWPzb1a13PgTD3gW0mzZuyhAi1SH20H1o8aqh l5aBuZ6m7tGHrSCPSEbMzvKjhbFOC2RIMq83lzw0zpI6HMehohkEQK1b6iTgruS1 J/+FJFE/JR0zOz9LXGa+aSCZB2AwCooL/sgRT6tgonWY9VMM2CdpkAPRI2I2UbKI ReCQwE7i0jBQkLTH/Zxj9grjDg5hNYC4DelZLgrfN0ZLFpiWsaXCu2MdnoDoT9xZ f+Z5gXMsDTEgVJg12rSNxmcz3XokqtpqGhWPLEY9B/r9DGQA/2Y= -----END CERTIFICATE-----Generated at Wed Nov 5 06:16:33 2025 by rpki-client