$ rpki-client -vvf repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft File: E420F134FA1A6BA70588424BD4E862EE6C50C188.mft (raw, json) Hash identifier: OGfd7qpX13VE1psxweKw8sakMmFaf70PVDtDBtvytt0= Subject key identifier: C8:52:FA:8B:A1:C9:34:A2:E5:26:2F:B1:AC:DC:27:18:FD:0C:C7:5D Authority key identifier: E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88 Certificate issuer: /CN=E420F134FA1A6BA70588424BD4E862EE6C50C188 Certificate serial: 714EC05BF160C0168BAA82C379F62F2330A4D8D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft Manifest number: 051D Signing time: Tue 04 Nov 2025 05:21:16 +0000 Manifest this update: Tue 04 Nov 2025 05:16:16 +0000 Manifest next update: Fri 07 Nov 2025 12:30:16 +0000 Files and hashes: 1: 323430323a636438303a3a2f33322d3438203d3e203633383835.roa (hash: MDl2DN2os7/fU39oaMG8yA+MKomCGHMu/9vzlZ9xU2U=) 2: 3130332e3139342e3137322e302f32322d3234203d3e203633383835.roa (hash: nIcaXDvKx2+XVxNFuL8CckiCEV48hFgqOSdn9qzzkF4=) 3: E420F134FA1A6BA70588424BD4E862EE6C50C188.crl (hash: 0Hdvf3dwK7cKCEOLlH0jnxzPLKuwqCDtt3dd6TgUEGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 12:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:4e:c0:5b:f1:60:c0:16:8b:aa:82:c3:79:f6:2f:23:30:a4:d8:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E420F134FA1A6BA70588424BD4E862EE6C50C188 Validity Not Before: Nov 4 05:16:16 2025 GMT Not After : Nov 7 12:30:16 2025 GMT Subject: CN=C852FA8BA1C934A2E5262FB1ACDC2718FD0CC75D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:aa:19:bd:ff:61:3a:c0:d1:63:3c:75:63:2c: 9b:f0:85:2f:93:10:44:97:27:a4:21:17:6a:a8:b1: 9e:b6:30:c4:23:6f:48:90:33:2a:02:79:2f:b8:4f: 12:13:e4:5b:ab:38:83:87:0d:30:ea:f5:be:ef:a7: dc:51:74:c1:de:dc:5e:74:c8:8c:56:ee:ef:c7:b0: 6f:ca:a7:98:a2:c9:96:3d:f7:9c:84:1c:0d:0e:4e: ff:41:4f:6b:47:31:67:fb:7e:1d:a1:4a:92:4b:81: 9f:c6:2f:e3:59:70:61:07:ec:67:35:42:78:9f:d4: 2c:c8:c6:c6:88:8e:42:7a:42:ab:f6:ac:73:cf:a8: 53:3f:3d:d6:93:3e:57:29:2e:bf:5f:10:af:6a:9f: c2:a2:2e:7b:0b:c3:68:3e:e3:62:a0:e6:c1:69:48: a7:1a:ce:12:cd:ee:ce:1f:44:c3:be:13:0e:56:8c: b8:95:f6:d5:18:d8:b9:3e:a6:b9:f5:35:f3:ee:43: 4c:bd:50:62:7c:c5:6e:40:1e:64:c7:0a:06:d3:d9: 29:aa:be:df:30:19:fa:e3:9b:66:b4:c3:d2:b0:9f: ef:62:e0:0b:bd:2d:ec:d8:12:85:74:4d:7c:8d:c3: 12:94:8d:90:84:93:84:cb:f7:04:8c:bd:af:c4:39: e1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:52:FA:8B:A1:C9:34:A2:E5:26:2F:B1:AC:DC:27:18:FD:0C:C7:5D X509v3 Authority Key Identifier: keyid:E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:29:88:8c:da:2c:9d:62:03:18:68:fa:42:cc:b6:24:09:50: d2:59:c9:61:4a:9c:8b:a4:a3:df:e1:7f:37:1f:0d:ef:da:ef: 8f:42:68:aa:61:95:f1:9a:63:dd:21:1c:3c:66:71:39:9c:d8: b9:b6:4e:f2:db:a4:38:e2:5e:40:f0:9e:65:0c:33:7f:87:d0: 65:9f:c6:53:2f:5d:24:3f:ef:c9:66:49:5b:8c:d4:3e:05:df: f8:4b:59:04:cd:cf:cc:13:ea:57:73:16:4e:3f:b1:eb:a2:7b: fa:2a:89:c8:ce:9e:88:d4:04:60:87:71:8e:f4:a1:4c:17:38: 28:19:9b:7d:1e:fc:7a:38:69:d2:5e:ea:ce:5d:5f:5d:9a:5c: d8:3a:6c:cb:d0:a8:75:6a:22:00:7b:c3:b1:44:03:a9:1e:7c: 6a:48:fc:ae:70:34:54:98:6e:7e:1f:9b:d0:9e:c5:e1:32:0d: 50:c9:8f:0b:2b:f1:f9:4c:64:20:a9:52:43:45:82:bc:4a:32: 78:d1:89:32:19:da:e1:ae:9c:71:7d:fa:8e:e4:e3:69:8b:19: b8:23:1c:8a:76:17:1a:fd:3f:42:ed:a1:3f:00:41:8f:49:e4: 07:23:5a:25:67:19:57:f8:3d:0a:e4:32:b2:b4:0b:f4:f9:1e: 5c:9a:70:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcU7AW/FgwBaLqoLDefYvIzCk2NcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYyRUU2 QzUwQzE4ODAeFw0yNTExMDQwNTE2MTZaFw0yNTExMDcxMjMwMTZaMDMxMTAvBgNV BAMTKEM4NTJGQThCQTFDOTM0QTJFNTI2MkZCMUFDREMyNzE4RkQwQ0M3NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrqhm9/2E6wNFjPHVjLJvwhS+T EESXJ6QhF2qosZ62MMQjb0iQMyoCeS+4TxIT5FurOIOHDTDq9b7vp9xRdMHe3F50 yIxW7u/HsG/Kp5iiyZY995yEHA0OTv9BT2tHMWf7fh2hSpJLgZ/GL+NZcGEH7Gc1 Qnif1CzIxsaIjkJ6Qqv2rHPPqFM/PdaTPlcpLr9fEK9qn8KiLnsLw2g+42Kg5sFp SKcazhLN7s4fRMO+Ew5WjLiV9tUY2Lk+prn1NfPuQ0y9UGJ8xW5AHmTHCgbT2Smq vt8wGfrjm2a0w9Kwn+9i4Au9LezYEoV0TXyNwxKUjZCEk4TL9wSMva/EOeErAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyFL6i6HJNKLlJi+xrNwnGP0Mx10wHwYDVR0j BBgwFoAU5CDxNPoaa6cFiEJL1Ohi7mxQwYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZmUzNWZhYS1lZDJiLTQyNzEtYjQ4Yy00ZWEyMWMzMDkzNTIvMC9FNDIwRjEzNEZB MUE2QkE3MDU4ODQyNEJENEU4NjJFRTZDNTBDMTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYyRUU2QzUw QzE4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZlMzVmYWEtZWQyYi00MjcxLWI0 OGMtNGVhMjFjMzA5MzUyLzAvRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYy RUU2QzUwQzE4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEpiIzaLJ1iAxho+kLMtiQJUNJZyWFKnIuk o9/hfzcfDe/a749CaKphlfGaY90hHDxmcTmc2Lm2TvLbpDjiXkDwnmUMM3+H0GWf xlMvXSQ/78lmSVuM1D4F3/hLWQTNz8wT6ldzFk4/seuie/oqicjOnojUBGCHcY70 oUwXOCgZm30e/Ho4adJe6s5dX12aXNg6bMvQqHVqIgB7w7FEA6kefGpI/K5wNFSY bn4fm9CexeEyDVDJjwsr8flMZCCpUkNFgrxKMnjRiTIZ2uGunHF9+o7k42mLGbgj HIp2Fxr9P0LtoT8AQY9J5AcjWiVnGVf4PQrkMrK0C/T5HlyacC8= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:34 2025 by rpki-client