$ rpki-client -vvf repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.mft File: EC1B9BE63137230F6756E222019318C640EBE42E.mft (raw, json) Hash identifier: Vaz3oToItuUevlQEpr5YGsPcf1jzSvEhI+qxGLpSj6s= Subject key identifier: 44:75:24:FA:D6:DC:4F:1B:B6:46:1E:15:08:8D:09:F7:4E:D3:3C:44 Authority key identifier: EC:1B:9B:E6:31:37:23:0F:67:56:E2:22:01:93:18:C6:40:EB:E4:2E Certificate issuer: /CN=EC1B9BE63137230F6756E222019318C640EBE42E Certificate serial: 7C3D7A51F83A56C6772227113B9D2091960151A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EC1B9BE63137230F6756E222019318C640EBE42E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.mft Manifest number: 0116 Signing time: Mon 03 Nov 2025 15:21:38 +0000 Manifest this update: Mon 03 Nov 2025 15:16:38 +0000 Manifest next update: Fri 07 Nov 2025 01:58:38 +0000 Files and hashes: 1: EC1B9BE63137230F6756E222019318C640EBE42E.crl (hash: l07xMTj4dZIMOxwPDT3YO/ZxcOhYWGew8y9TAunbdTg=) 2: 3135372e31352e3136362e302f32342d3234203d3e20313532333832.roa (hash: 5wOzKGDtK4zeM+14oVf5CebWsbPEoKuI00n5y47Z804=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.crl rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EC1B9BE63137230F6756E222019318C640EBE42E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 01:58:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:3d:7a:51:f8:3a:56:c6:77:22:27:11:3b:9d:20:91:96:01:51:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC1B9BE63137230F6756E222019318C640EBE42E Validity Not Before: Nov 3 15:16:38 2025 GMT Not After : Nov 7 01:58:38 2025 GMT Subject: CN=447524FAD6DC4F1BB6461E15088D09F74ED33C44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e8:3e:54:a8:3a:83:56:24:5a:15:e0:43:0b: 99:1e:47:31:42:26:76:d5:44:57:9c:90:c1:ec:43: 4c:93:65:d3:70:23:fa:b2:be:95:6b:f6:5d:6a:de: 75:45:90:37:ea:f6:a9:ca:ef:cb:34:dc:05:9e:70: ea:cc:62:9d:2a:f6:4a:25:72:b6:5d:06:1e:74:3f: 85:43:b8:f1:8c:2e:fb:2a:b4:9d:5e:9b:92:89:61: 2f:7c:6f:91:00:58:9e:b9:b4:81:68:24:a8:e6:8a: c1:4b:76:0b:b3:a9:92:f9:d9:9c:6c:bd:fe:d7:fd: 53:7b:9b:b4:25:8a:e0:92:70:63:8b:99:4c:63:ee: 36:a5:2f:eb:16:12:e2:0f:ee:11:36:9f:61:fe:01: ea:c0:ea:18:df:58:ba:12:71:93:d1:cd:19:4e:9c: 58:37:63:d7:58:33:b6:9e:c7:56:1a:d0:41:07:97: 10:12:f9:71:e2:6d:88:30:d6:16:a6:94:48:1d:f0: d2:33:49:e2:ff:ad:58:53:f8:17:08:db:8b:bc:ed: 21:2f:67:d7:67:fa:dd:77:5a:a6:68:19:b3:52:b5: 59:21:6a:d2:c7:d7:23:21:8f:37:10:0f:83:2c:b3: 11:fc:dc:90:f0:c1:5e:f5:8f:f0:f3:14:9e:75:41: 40:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:75:24:FA:D6:DC:4F:1B:B6:46:1E:15:08:8D:09:F7:4E:D3:3C:44 X509v3 Authority Key Identifier: keyid:EC:1B:9B:E6:31:37:23:0F:67:56:E2:22:01:93:18:C6:40:EB:E4:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EC1B9BE63137230F6756E222019318C640EBE42E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/453ac667-4d9e-48d7-afd6-82e98fa76c1e/0/EC1B9BE63137230F6756E222019318C640EBE42E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e8:3b:9d:9f:69:11:17:40:84:0b:68:43:8b:45:00:46:95: e5:7e:d4:55:ab:20:f0:90:a3:5f:a4:32:4d:fc:27:79:73:12: 28:ab:fb:55:3c:fd:9a:a4:07:a8:4b:fa:b3:0d:1b:30:d0:5f: e8:9f:e8:d2:11:dd:36:f5:5f:b9:45:c8:c3:80:b7:5b:aa:e1: 1c:3e:86:c5:1c:22:ab:c8:3e:59:f6:24:27:df:c9:8b:5b:03: 5f:24:c6:d4:ee:ad:7c:44:40:dc:78:11:55:27:e1:dc:61:8e: 71:03:6d:7e:e1:91:0d:1e:b7:64:53:a4:e3:b6:5d:bf:42:34: fe:7b:e1:16:57:4b:30:f6:46:9e:71:50:7a:e8:fc:51:7d:d3: a9:7d:9e:7f:1c:0b:55:b6:25:92:6e:ef:59:88:87:28:13:e2: f1:1f:e7:3f:3a:ca:e1:2f:16:ea:87:10:6a:13:1c:a3:b0:65: e6:84:a7:17:45:8e:86:65:47:18:b0:72:11:72:02:aa:06:b7: f0:a2:d4:d1:f9:64:dc:2d:62:7b:b1:44:9b:d1:4f:b1:45:3f: bc:f0:4e:0d:52:8f:7c:86:77:23:8c:12:6e:1c:59:ed:4a:25: 85:f2:6f:b2:1d:9c:a3:e4:73:f3:a3:0e:47:33:ab:30:6e:79: e7:fb:1a:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfD16Ufg6VsZ3IicRO50gkZYBUacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMxQjlCRTYzMTM3MjMwRjY3NTZFMjIyMDE5MzE4QzY0 MEVCRTQyRTAeFw0yNTExMDMxNTE2MzhaFw0yNTExMDcwMTU4MzhaMDMxMTAvBgNV BAMTKDQ0NzUyNEZBRDZEQzRGMUJCNjQ2MUUxNTA4OEQwOUY3NEVEMzNDNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx6D5UqDqDViRaFeBDC5keRzFC JnbVRFeckMHsQ0yTZdNwI/qyvpVr9l1q3nVFkDfq9qnK78s03AWecOrMYp0q9kol crZdBh50P4VDuPGMLvsqtJ1em5KJYS98b5EAWJ65tIFoJKjmisFLdguzqZL52Zxs vf7X/VN7m7QliuCScGOLmUxj7jalL+sWEuIP7hE2n2H+AerA6hjfWLoScZPRzRlO nFg3Y9dYM7aex1Ya0EEHlxAS+XHibYgw1hamlEgd8NIzSeL/rVhT+BcI24u87SEv Z9dn+t13WqZoGbNStVkhatLH1yMhjzcQD4MssxH83JDwwV71j/DzFJ51QUDTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURHUk+tbcTxu2Rh4VCI0J907TPEQwHwYDVR0j BBgwFoAU7Bub5jE3Iw9nVuIiAZMYxkDr5C4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NTNhYzY2Ny00ZDllLTQ4ZDctYWZkNi04MmU5OGZhNzZjMWUvMC9FQzFCOUJFNjMx MzcyMzBGNjc1NkUyMjIwMTkzMThDNjQwRUJFNDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUMxQjlCRTYzMTM3MjMwRjY3NTZFMjIyMDE5MzE4QzY0MEVC RTQyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUzYWM2NjctNGQ5ZS00OGQ3LWFm ZDYtODJlOThmYTc2YzFlLzAvRUMxQjlCRTYzMTM3MjMwRjY3NTZFMjIyMDE5MzE4 QzY0MEVCRTQyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvoO52faREXQIQLaEOLRQBGleV+1FWrIPCQ o1+kMk38J3lzEiir+1U8/ZqkB6hL+rMNGzDQX+if6NIR3Tb1X7lFyMOAt1uq4Rw+ hsUcIqvIPln2JCffyYtbA18kxtTurXxEQNx4EVUn4dxhjnEDbX7hkQ0et2RTpOO2 Xb9CNP574RZXSzD2Rp5xUHro/FF906l9nn8cC1W2JZJu71mIhygT4vEf5z86yuEv FuqHEGoTHKOwZeaEpxdFjoZlRxiwchFyAqoGt/Ci1NH5ZNwtYnuxRJvRT7FFP7zw Tg1Sj3yGdyOMEm4cWe1KJYXyb7IdnKPkc/OjDkczqzBueef7Gv4= -----END CERTIFICATE-----Generated at Wed Nov 5 01:03:57 2025 by rpki-client