$ rpki-client -vvf repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft File: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft (raw, json) Hash identifier: rzTrq/y5nZzKA86Iv4GwD0amtjTV2vu5MmtJT/hbGcQ= Subject key identifier: 59:0B:10:AF:45:BE:F2:5F:3B:48:97:32:54:21:F4:3A:D0:9E:C2:6E Authority key identifier: ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A Certificate issuer: /CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Certificate serial: 27B67C665BF05874B6750D62989150AE1C81C415 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft Manifest number: 0217 Signing time: Mon 03 Nov 2025 11:51:12 +0000 Manifest this update: Mon 03 Nov 2025 11:46:12 +0000 Manifest next update: Thu 06 Nov 2025 11:52:12 +0000 Files and hashes: 1: 3130332e3133352e34382e302f32322d3234203d3e203338333230.roa (hash: /cF+CKjnrx0BGZ8wL/sfXfp5hgNUQBZIeeM9AfAYFsU=) 2: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl (hash: +arvwLVunJ5PQYt6auK0y+3DvkiPuWjhL+3SvUJ5QhE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 11:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:b6:7c:66:5b:f0:58:74:b6:75:0d:62:98:91:50:ae:1c:81:c4:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Validity Not Before: Nov 3 11:46:12 2025 GMT Not After : Nov 6 11:52:12 2025 GMT Subject: CN=590B10AF45BEF25F3B4897325421F43AD09EC26E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:09:54:a5:b0:eb:1c:0d:e1:1f:a1:49:b0:77: a4:79:b7:93:bb:1b:f5:f7:f8:73:0f:9f:be:72:2d: 09:85:ae:0d:96:56:9a:b3:67:e4:8d:0b:89:21:79: db:a3:28:d8:f7:4c:f8:bb:cb:3c:a7:8d:32:75:90: b6:50:65:9b:0e:8d:4d:9f:3e:23:dc:e3:4c:a0:20: 5d:aa:2e:14:b6:9c:ca:f4:90:95:06:d7:20:22:16: 36:6d:d9:13:cd:d4:18:82:5c:48:16:48:bc:42:6c: e4:c8:8c:4d:1d:5f:51:48:67:87:80:27:ea:d1:83: a7:60:8c:15:a5:c4:51:d1:dc:d1:62:42:73:1a:29: 4c:71:ee:68:67:90:de:83:18:74:ef:05:7a:20:86: f9:09:d7:19:93:fc:70:09:61:df:46:5c:a8:8a:2f: 81:52:7c:52:66:1b:15:25:0d:87:a1:40:aa:ad:7b: 6d:61:db:e8:77:b7:a9:57:86:a9:1c:4f:d1:37:f7: e4:d3:08:d4:0b:0c:cf:a9:0c:03:6d:c6:97:46:27: 3f:d3:93:29:8f:18:ff:93:de:2a:3b:49:69:63:06: fa:a9:56:c1:66:3d:e8:a5:6d:16:54:93:42:44:14: f2:ab:3c:f4:54:05:d3:a6:4d:bc:28:cc:29:f1:2b: ed:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0B:10:AF:45:BE:F2:5F:3B:48:97:32:54:21:F4:3A:D0:9E:C2:6E X509v3 Authority Key Identifier: keyid:ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c3:c9:48:c3:c9:c2:7f:c7:9f:3f:33:26:ff:85:f6:52:b5: 0e:62:69:bd:cf:26:e9:c3:e8:8e:3a:df:e7:38:a8:22:0b:59: 05:6c:af:d0:46:6a:c9:b6:e2:15:93:62:45:34:2e:77:aa:c5: 29:3a:fc:63:26:16:99:16:7e:3f:28:6f:fa:84:78:ff:8b:00: c4:ca:eb:80:66:21:30:84:f4:05:84:81:88:f8:79:e2:ee:e2: 2b:40:5e:e5:83:2f:8f:81:15:25:a9:f0:4c:54:54:16:64:90: 3e:4e:23:99:15:71:bc:eb:ff:e2:d5:c4:87:17:8f:38:34:c0: 33:b3:6e:18:d9:2f:31:49:da:ae:16:48:24:b6:a7:f8:4c:ab: 41:02:d9:c1:a6:94:b9:c2:4a:9d:52:aa:4b:16:64:17:3b:c2: 22:3b:3a:05:06:15:20:f3:34:89:ac:11:6b:e8:54:94:af:12: 5f:42:a3:c5:6b:8e:21:4c:1f:0a:db:29:e9:6d:ac:3c:ce:b4: a7:d1:32:4f:d8:52:42:9f:ee:94:be:da:e9:cb:e6:18:26:2b: 88:06:4d:4f:34:2c:5f:71:e8:e8:60:ca:56:c0:24:62:5c:0f: a0:d0:0c:ec:5e:7d:03:e0:8d:e5:af:11:02:b5:2e:99:0f:90: ac:6c:00:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ7Z8ZlvwWHS2dQ1imJFQrhyBxBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RB OTFDQTE1QTAeFw0yNTExMDMxMTQ2MTJaFw0yNTExMDYxMTUyMTJaMDMxMTAvBgNV BAMTKDU5MEIxMEFGNDVCRUYyNUYzQjQ4OTczMjU0MjFGNDNBRDA5RUMyNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4CVSlsOscDeEfoUmwd6R5t5O7 G/X3+HMPn75yLQmFrg2WVpqzZ+SNC4khedujKNj3TPi7yzynjTJ1kLZQZZsOjU2f PiPc40ygIF2qLhS2nMr0kJUG1yAiFjZt2RPN1BiCXEgWSLxCbOTIjE0dX1FIZ4eA J+rRg6dgjBWlxFHR3NFiQnMaKUxx7mhnkN6DGHTvBXoghvkJ1xmT/HAJYd9GXKiK L4FSfFJmGxUlDYehQKqte21h2+h3t6lXhqkcT9E39+TTCNQLDM+pDANtxpdGJz/T kymPGP+T3io7SWljBvqpVsFmPeilbRZUk0JEFPKrPPRUBdOmTbwozCnxK+0VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWQsQr0W+8l87SJcyVCH0OtCewm4wHwYDVR0j BBgwFoAU7TznJkVjrblA6vr0vYfNzakcoVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Y2NjMmFmNC1hNjJkLTQ3MDgtYjY4OC0xODkyNTk0YmE5ODkvMC9FRDNDRTcyNjQ1 NjNBREI5NDBFQUZBRjRCRDg3Q0RDREE5MUNBMTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RBOTFD QTE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGNjYzJhZjQtYTYyZC00NzA4LWI2 ODgtMTg5MjU5NGJhOTg5LzAvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NE Q0RBOTFDQTE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3DyUjDycJ/x58/Myb/hfZStQ5iab3PJunD 6I463+c4qCILWQVsr9BGasm24hWTYkU0LneqxSk6/GMmFpkWfj8ob/qEeP+LAMTK 64BmITCE9AWEgYj4eeLu4itAXuWDL4+BFSWp8ExUVBZkkD5OI5kVcbzr/+LVxIcX jzg0wDOzbhjZLzFJ2q4WSCS2p/hMq0EC2cGmlLnCSp1SqksWZBc7wiI7OgUGFSDz NImsEWvoVJSvEl9Co8VrjiFMHwrbKeltrDzOtKfRMk/YUkKf7pS+2unL5hgmK4gG TU80LF9x6OhgylbAJGJcD6DQDOxefQPgjeWvEQK1LpkPkKxsAD8= -----END CERTIFICATE-----Generated at Tue Nov 4 20:19:48 2025 by rpki-client