$ rpki-client -vvf repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft File: EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft (raw, json) Hash identifier: a3HsW1EPCOlmM1DExcoI6FJVc2jiUpNSZVRxwjSp98M= Subject key identifier: BC:DB:79:A7:EF:02:5D:EE:28:25:AF:EE:04:52:93:A8:58:42:8C:4C Authority key identifier: ED:BD:84:5A:95:97:FE:C4:AD:90:03:0F:90:18:E4:B8:B6:3F:CC:77 Certificate issuer: /CN=EDBD845A9597FEC4AD90030F9018E4B8B63FCC77 Certificate serial: 6E0C431D79A5A97E08DC6AE8FF013C984995DFCB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft Manifest number: 0524 Signing time: Mon 03 Nov 2025 06:01:55 +0000 Manifest this update: Mon 03 Nov 2025 05:56:55 +0000 Manifest next update: Thu 06 Nov 2025 08:56:55 +0000 Files and hashes: 1: 3130332e37312e3235352e302f32342d3234203d3e20313335343731.roa (hash: gIKkIGkZm7OxQ7k8KYXU1OguRf76El1DoB7NPk29hSo=) 2: 3130332e3133372e33372e302f32342d3234203d3e20313335343731.roa (hash: mC7pHV7NYsbpeeW0ZP+ibU3Ewbq2p4OfCkZ3LiVxhX4=) 3: EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl (hash: G8OPS192UEIwtv53r8UgpxfqBLK5cLB5Aac72xrF0KU=) 4: 323030313a6466343a6530303a3a2f34382d3438203d3e20313335343731.roa (hash: PpwdW1Sh67VcI29Rs6SsVeiTKG/TdkizTmZ0n4tpRMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 08:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:0c:43:1d:79:a5:a9:7e:08:dc:6a:e8:ff:01:3c:98:49:95:df:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDBD845A9597FEC4AD90030F9018E4B8B63FCC77 Validity Not Before: Nov 3 05:56:55 2025 GMT Not After : Nov 6 08:56:55 2025 GMT Subject: CN=BCDB79A7EF025DEE2825AFEE045293A858428C4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:99:fd:d7:74:73:3a:60:0e:a4:7b:e5:f5:29: f1:eb:bf:46:d3:09:e8:7d:42:a8:ee:33:3a:7f:97: 40:a2:57:f0:9f:37:8f:7f:36:9f:b6:4d:a7:86:97: d0:cd:8b:b1:a5:84:57:5a:d1:1c:98:98:1e:ef:56: 72:10:b3:19:c6:60:20:d7:fb:25:fc:b2:bb:7c:6a: 82:9d:77:cf:66:c9:52:56:ca:62:27:d2:31:3e:08: 13:9b:a9:66:c1:26:cb:e4:c9:a4:eb:02:7f:7e:c6: 3f:59:18:6c:29:19:7b:39:e4:0a:40:5f:cd:0d:71: 82:45:99:37:d7:cc:00:a6:70:77:1e:27:b9:7e:92: 5d:7f:3e:f6:1f:b4:a3:8f:5f:28:76:b8:79:f8:64: c8:65:67:d5:cf:de:8b:20:d5:a0:a0:03:13:38:aa: 79:2f:f0:26:ec:f8:5a:a3:83:8d:88:74:be:b0:1d: 4b:06:73:44:37:4f:2f:6d:a9:1d:9e:79:84:d2:fb: 2f:8e:8e:74:d3:cc:30:46:97:60:ce:a6:5d:ea:c8: 56:4d:0b:30:d0:82:a3:ea:0d:56:b2:9f:79:f4:e5: 13:6b:6d:13:01:ae:59:14:71:30:00:db:04:cf:89: ce:0e:b5:50:3c:ea:17:96:ab:3c:86:66:80:63:16: 33:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DB:79:A7:EF:02:5D:EE:28:25:AF:EE:04:52:93:A8:58:42:8C:4C X509v3 Authority Key Identifier: keyid:ED:BD:84:5A:95:97:FE:C4:AD:90:03:0F:90:18:E4:B8:B6:3F:CC:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:96:3e:e3:ec:93:ac:e3:04:ac:47:88:f4:ad:05:7e:8f:af: 29:0b:80:50:b3:a7:a5:fa:3d:ab:88:01:ab:5f:55:c3:8f:78: a2:ce:1b:6b:db:59:9b:12:37:bd:60:e0:f1:a4:67:a1:a3:2f: 16:6f:d6:ea:0a:0e:35:73:94:15:c4:42:9f:6d:57:95:02:dc: 07:45:fa:e0:42:98:d2:11:2c:dd:f7:14:81:3c:b6:4a:ed:a0: 69:43:83:27:90:30:42:af:91:41:57:4a:91:3f:30:43:84:b5: af:35:62:8f:ba:05:60:5b:71:73:7d:e3:64:09:c1:e0:81:6e: 6a:12:05:24:e3:81:dc:09:f2:1d:00:3e:49:c7:ba:94:1d:fe: 1d:7b:19:78:f6:46:f0:d8:3a:f3:30:b4:7a:cb:3c:c4:6f:40: 5e:df:2b:8f:0f:43:0c:4f:d6:8a:8a:fd:14:63:3b:ce:27:e8: ec:d6:3a:8b:eb:5a:55:08:f9:c5:1b:b2:ea:aa:77:51:dc:2e: b9:50:5e:d8:37:7c:dc:a9:78:5c:05:e1:84:ff:e9:46:cf:4e: fe:80:d8:26:e4:44:25:16:97:e2:f4:fd:21:87:3c:2b:3a:ad: b1:ba:b8:f7:9f:5b:0f:3c:91:1b:00:a9:47:7f:62:8e:6b:c9: 23:b9:91:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbgxDHXmlqX4I3Gro/wE8mEmV38swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURCRDg0NUE5NTk3RkVDNEFEOTAwMzBGOTAxOEU0QjhC NjNGQ0M3NzAeFw0yNTExMDMwNTU2NTVaFw0yNTExMDYwODU2NTVaMDMxMTAvBgNV BAMTKEJDREI3OUE3RUYwMjVERUUyODI1QUZFRTA0NTI5M0E4NTg0MjhDNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMmf3XdHM6YA6ke+X1KfHrv0bT Ceh9QqjuMzp/l0CiV/CfN49/Np+2TaeGl9DNi7GlhFda0RyYmB7vVnIQsxnGYCDX +yX8srt8aoKdd89myVJWymIn0jE+CBObqWbBJsvkyaTrAn9+xj9ZGGwpGXs55ApA X80NcYJFmTfXzACmcHceJ7l+kl1/PvYftKOPXyh2uHn4ZMhlZ9XP3osg1aCgAxM4 qnkv8Cbs+Fqjg42IdL6wHUsGc0Q3Ty9tqR2eeYTS+y+OjnTTzDBGl2DOpl3qyFZN CzDQgqPqDVayn3n05RNrbRMBrlkUcTAA2wTPic4OtVA86heWqzyGZoBjFjMtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvNt5p+8CXe4oJa/uBFKTqFhCjEwwHwYDVR0j BBgwFoAU7b2EWpWX/sStkAMPkBjkuLY/zHcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjMwMjgxMC01NjRjLTQ1YjctOGE3Mi1lZjZiOGY2MzA5YzAvMC9FREJEODQ1QTk1 OTdGRUM0QUQ5MDAzMEY5MDE4RTRCOEI2M0ZDQzc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRURCRDg0NUE5NTk3RkVDNEFEOTAwMzBGOTAxOEU0QjhCNjNG Q0M3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDYzMDI4MTAtNTY0Yy00NWI3LThh NzItZWY2YjhmNjMwOWMwLzAvRURCRDg0NUE5NTk3RkVDNEFEOTAwMzBGOTAxOEU0 QjhCNjNGQ0M3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmWPuPsk6zjBKxHiPStBX6PrykLgFCzp6X6 PauIAatfVcOPeKLOG2vbWZsSN71g4PGkZ6GjLxZv1uoKDjVzlBXEQp9tV5UC3AdF +uBCmNIRLN33FIE8tkrtoGlDgyeQMEKvkUFXSpE/MEOEta81Yo+6BWBbcXN942QJ weCBbmoSBSTjgdwJ8h0APknHupQd/h17GXj2RvDYOvMwtHrLPMRvQF7fK48PQwxP 1oqK/RRjO84n6OzWOovrWlUI+cUbsuqqd1HcLrlQXtg3fNypeFwF4YT/6UbPTv6A 2CbkRCUWl+L0/SGHPCs6rbG6uPefWw88kRsAqUd/Yo5rySO5ke8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:08:16 2025 by rpki-client