$ rpki-client -vvf repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.mft File: ED137633BAEE661A0ACBBF277089F107CB59439A.mft (raw, json) Hash identifier: xnWVG4QPWi6c5/zRUl/Hcc3TlhMMMftFeumWBBypdB4= Subject key identifier: 49:84:52:96:5D:9F:99:DA:68:22:27:F9:2D:32:93:BD:BF:91:36:0B Authority key identifier: ED:13:76:33:BA:EE:66:1A:0A:CB:BF:27:70:89:F1:07:CB:59:43:9A Certificate issuer: /CN=ED137633BAEE661A0ACBBF277089F107CB59439A Certificate serial: 2879D80D80C26213F1FC931454568179109022DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED137633BAEE661A0ACBBF277089F107CB59439A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.mft Manifest number: 01C7 Signing time: Sun 02 Nov 2025 12:11:31 +0000 Manifest this update: Sun 02 Nov 2025 12:06:31 +0000 Manifest next update: Wed 05 Nov 2025 17:02:31 +0000 Files and hashes: 1: 3130332e3136322e3130352e302f32342d3234203d3e20313337333136.roa (hash: lA0HvakrheoR+VMWrWjd7ZsfLODkGFiLcqbm8PHhQfs=) 2: ED137633BAEE661A0ACBBF277089F107CB59439A.crl (hash: YPi1V4W/BHK1kCr7BnQAf1T6/lz0AOfmQQjvvh3zvuY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.crl rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED137633BAEE661A0ACBBF277089F107CB59439A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 17:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:79:d8:0d:80:c2:62:13:f1:fc:93:14:54:56:81:79:10:90:22:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED137633BAEE661A0ACBBF277089F107CB59439A Validity Not Before: Nov 2 12:06:31 2025 GMT Not After : Nov 5 17:02:31 2025 GMT Subject: CN=498452965D9F99DA682227F92D3293BDBF91360B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:64:21:fa:95:a4:c4:f0:36:66:f5:80:59:e8: 85:9e:eb:00:d5:f4:78:48:e4:71:11:37:16:7f:3b: f4:a9:32:12:70:a7:2a:72:92:79:c6:04:9f:9a:e3: 09:a7:b1:5f:e3:ec:95:63:2a:81:9e:0f:f3:cf:42: 49:65:99:ff:b8:38:6e:bd:51:86:ef:b6:15:a6:94: a7:fc:5c:62:ba:dd:43:df:99:d2:ef:7e:6f:f2:79: ed:e6:42:2b:e7:05:41:45:0a:65:66:cc:09:fa:6d: 89:53:38:e4:c8:b0:21:a7:7b:3c:34:c3:ee:01:f0: e6:80:89:01:20:2b:84:ab:8f:2b:e3:dc:b6:9e:2a: 4d:0a:35:25:58:ec:df:19:ce:ac:23:ba:92:89:65: 86:23:cf:13:0e:b2:75:63:5e:14:29:d7:3e:aa:47: 78:ae:c8:66:76:9b:54:64:65:29:3b:88:69:2e:03: a4:01:ae:9a:5d:c1:13:34:11:a9:bc:0e:3f:09:3c: 28:74:ed:df:70:df:6a:a7:47:08:49:d2:a3:29:5d: 44:4a:7a:89:51:57:38:0c:b5:d0:bb:90:55:68:da: ef:aa:c2:11:7b:b4:c2:63:eb:2d:b3:77:d9:85:0b: 87:43:4c:82:8d:c7:b2:dc:0a:94:55:2c:c1:97:fc: d5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:84:52:96:5D:9F:99:DA:68:22:27:F9:2D:32:93:BD:BF:91:36:0B X509v3 Authority Key Identifier: keyid:ED:13:76:33:BA:EE:66:1A:0A:CB:BF:27:70:89:F1:07:CB:59:43:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED137633BAEE661A0ACBBF277089F107CB59439A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37224360-245d-4a1a-af36-f9befcdb70b7/0/ED137633BAEE661A0ACBBF277089F107CB59439A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:e6:76:e6:62:e1:ee:6b:02:b1:83:ef:99:5f:4e:80:9b:94: 7e:6a:92:51:94:13:34:19:e7:52:6e:23:0a:0e:2d:d5:96:eb: 2b:4f:58:e5:31:82:c2:dc:4e:7a:fb:e5:cb:0e:c1:73:b5:a8: d9:59:8c:2b:b4:65:0e:3c:ac:de:56:65:fd:18:fc:fb:5c:a8: 4e:c0:91:41:5d:ba:0d:33:a6:89:17:b1:53:9c:be:ac:3a:53: f6:6b:0f:f0:d4:e5:24:e8:bd:90:33:3e:5c:28:14:8a:da:99: b5:3b:8e:1a:dd:33:53:a9:3b:9a:f2:c4:1d:81:e8:e9:78:eb: da:06:4d:d8:a2:26:69:f4:19:04:6d:ce:be:bc:39:65:07:2f: fb:e6:c5:d8:2a:83:ff:20:13:65:d7:7b:d2:23:ca:c7:25:31: 51:0c:eb:7a:07:14:de:9e:b6:96:9f:0d:ef:fe:a8:28:2e:55: 60:39:e7:11:4a:f9:3e:b6:b5:d3:12:39:43:d0:32:c5:67:70: 6b:bc:29:27:5f:5e:06:ec:1d:e4:f7:6c:c3:58:6e:3b:27:83: e6:a8:00:a2:fb:70:5b:6c:76:a6:32:d4:d1:4a:62:d8:69:3d: 3c:33:9d:9a:26:fa:21:2e:45:05:32:50:57:7a:af:62:83:f0: 24:34:91:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKHnYDYDCYhPx/JMUVFaBeRCQIt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQxMzc2MzNCQUVFNjYxQTBBQ0JCRjI3NzA4OUYxMDdD QjU5NDM5QTAeFw0yNTExMDIxMjA2MzFaFw0yNTExMDUxNzAyMzFaMDMxMTAvBgNV BAMTKDQ5ODQ1Mjk2NUQ5Rjk5REE2ODIyMjdGOTJEMzI5M0JEQkY5MTM2MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkZCH6laTE8DZm9YBZ6IWe6wDV 9HhI5HERNxZ/O/SpMhJwpypyknnGBJ+a4wmnsV/j7JVjKoGeD/PPQkllmf+4OG69 UYbvthWmlKf8XGK63UPfmdLvfm/yee3mQivnBUFFCmVmzAn6bYlTOOTIsCGnezw0 w+4B8OaAiQEgK4Srjyvj3LaeKk0KNSVY7N8ZzqwjupKJZYYjzxMOsnVjXhQp1z6q R3iuyGZ2m1RkZSk7iGkuA6QBrppdwRM0Eam8Dj8JPCh07d9w32qnRwhJ0qMpXURK eolRVzgMtdC7kFVo2u+qwhF7tMJj6y2zd9mFC4dDTIKNx7LcCpRVLMGX/NVhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSYRSll2fmdpoIif5LTKTvb+RNgswHwYDVR0j BBgwFoAU7RN2M7ruZhoKy78ncInxB8tZQ5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzIyNDM2MC0yNDVkLTRhMWEtYWYzNi1mOWJlZmNkYjcwYjcvMC9FRDEzNzYzM0JB RUU2NjFBMEFDQkJGMjc3MDg5RjEwN0NCNTk0MzlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQxMzc2MzNCQUVFNjYxQTBBQ0JCRjI3NzA4OUYxMDdDQjU5 NDM5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcyMjQzNjAtMjQ1ZC00YTFhLWFm MzYtZjliZWZjZGI3MGI3LzAvRUQxMzc2MzNCQUVFNjYxQTBBQ0JCRjI3NzA4OUYx MDdDQjU5NDM5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHmduZi4e5rArGD75lfToCblH5qklGUEzQZ 51JuIwoOLdWW6ytPWOUxgsLcTnr75csOwXO1qNlZjCu0ZQ48rN5WZf0Y/PtcqE7A kUFdug0zpokXsVOcvqw6U/ZrD/DU5STovZAzPlwoFIrambU7jhrdM1OpO5ryxB2B 6Ol469oGTdiiJmn0GQRtzr68OWUHL/vmxdgqg/8gE2XXe9IjysclMVEM63oHFN6e tpafDe/+qCguVWA55xFK+T62tdMSOUPQMsVncGu8KSdfXgbsHeT3bMNYbjsng+ao AKL7cFtsdqYy1NFKYthpPTwznZom+iEuRQUyUFd6r2KD8CQ0kXo= -----END CERTIFICATE-----Generated at Tue Nov 4 15:55:08 2025 by rpki-client