$ rpki-client -vvf repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft File: E89C93F089A07D03B5794B0C02239EF67E1D721C.mft (raw, json) Hash identifier: FjF90xJo2eZkRGaz3b1RfdAYsdWNwjmvHLZGGhHSUQs= Subject key identifier: E4:8B:0A:5E:0A:42:24:AC:1F:38:0F:F1:A6:7D:E3:72:41:DC:DA:54 Authority key identifier: E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C Certificate issuer: /CN=E89C93F089A07D03B5794B0C02239EF67E1D721C Certificate serial: 43FF4369ABBE98C67802A831912F8740EAE20D81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft Manifest number: A7 Signing time: Mon 03 Nov 2025 21:51:58 +0000 Manifest this update: Mon 03 Nov 2025 21:46:58 +0000 Manifest next update: Fri 07 Nov 2025 02:59:58 +0000 Files and hashes: 1: 3130332e37342e3136342e302f32342d3234203d3e203436303334.roa (hash: qP5p1JtLajQU4tMkK8i4H4Q7vMTKK0pWmbujRAH0CW4=) 2: 3230322e37302e3133362e302f32342d3234203d3e203436303334.roa (hash: /rrVT8+7vMAShEA29/a83w5natJXQZ8dbakSMPveJCo=) 3: 3130332e37342e3134332e302f32342d3234203d3e203436303334.roa (hash: D1j1lCivRx4MpFMf1wJtpmY2c2+VbcHJ9Y4DtgTsc+k=) 4: E89C93F089A07D03B5794B0C02239EF67E1D721C.crl (hash: JLsp4UvZv53WUgNpmXIoLpBihKcP2oomqEPYLAm6RnU=) 5: 3130332e35332e32302e302f32342d3234203d3e203436303334.roa (hash: R0jNeZREOH7PdH08cIX9FXJ07BU9g/y14/QiKIW3zDQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 02:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ff:43:69:ab:be:98:c6:78:02:a8:31:91:2f:87:40:ea:e2:0d:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E89C93F089A07D03B5794B0C02239EF67E1D721C Validity Not Before: Nov 3 21:46:58 2025 GMT Not After : Nov 7 02:59:58 2025 GMT Subject: CN=E48B0A5E0A4224AC1F380FF1A67DE37241DCDA54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:83:50:3a:79:40:51:d7:ff:30:de:a0:e0:fc: 2f:0b:65:7a:5d:1c:10:e4:5b:b0:8e:e2:56:dc:22: cc:06:4f:b0:73:36:d1:52:8b:14:e9:b2:97:e3:b7: 76:ee:a6:e6:b6:20:11:52:26:48:26:39:52:c5:06: 31:53:f9:f4:2d:ee:55:1d:7d:c6:88:20:14:70:6c: 10:06:84:54:2e:a8:74:77:3d:7b:a5:98:45:74:8f: 4f:03:28:ad:04:2a:32:70:62:bc:d5:32:72:61:3c: 94:b6:36:e0:b7:83:0c:13:b7:4c:96:6b:43:e1:79: 10:0b:96:5a:c0:e7:a5:0e:23:79:da:6b:7c:c8:da: 28:70:0e:a6:17:6a:6a:33:9a:54:8c:06:62:63:2e: ea:69:ea:20:73:91:a6:04:fc:55:c1:14:d5:0f:e9: 1a:6a:6d:a9:2d:71:f7:c3:9c:6b:34:ec:ce:c3:9c: ca:7f:31:51:7a:85:bc:e8:7c:6c:ad:89:fd:c7:47: ac:2d:85:95:a6:26:20:35:21:85:c0:d1:71:4a:03: 70:b0:c7:bc:4a:9b:8e:56:7b:5c:c9:d4:73:0b:cd: b9:6c:86:02:49:ed:0f:e0:e5:f2:40:b1:ec:d7:3d: aa:23:a4:91:c3:ca:7a:44:16:15:6d:b0:cd:ed:09: 37:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8B:0A:5E:0A:42:24:AC:1F:38:0F:F1:A6:7D:E3:72:41:DC:DA:54 X509v3 Authority Key Identifier: keyid:E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:30:2b:8b:08:1f:23:bc:ba:5c:ac:3a:11:e5:aa:21:3c:1c: d0:47:fc:7b:0e:03:8c:da:d9:dc:ed:a3:78:c8:62:23:88:21: 9c:5d:03:28:10:ef:3b:29:23:86:28:5f:b5:f0:ab:f3:22:34: 68:72:11:32:c1:4a:0d:f0:fe:cc:45:e3:5e:e9:97:4b:85:0b: 20:fc:3b:da:3d:6d:92:62:eb:02:67:20:da:62:ed:32:43:f2: 3f:32:b6:9c:70:a9:be:69:97:1c:b6:e3:6b:54:79:6b:2b:18: 96:a8:44:8f:cd:26:53:1b:30:65:0a:72:a6:26:e5:b5:fc:45: d9:1d:bc:0a:97:87:53:e0:02:45:94:d2:38:d1:4d:85:d5:32: 19:ba:49:b7:4c:ea:3f:cb:72:04:66:c1:9e:fe:7b:ff:ef:29: ee:11:26:97:61:db:e4:95:c3:c6:61:ba:64:81:5b:f2:22:85: dd:55:49:57:5f:c2:1d:43:87:5e:10:4f:57:cc:4d:51:c5:fd: 7d:3e:8a:69:34:52:e3:ec:b5:d4:74:2a:5e:d1:81:fb:a2:fb: b5:b8:7b:69:e5:ac:fb:1f:3e:9a:86:be:4e:f8:30:b9:51:7a: 57:a5:78:e6:36:8d:5c:1e:b2:1f:54:ad:c7:51:c4:6f:27:55: 79:b8:30:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ/9Daau+mMZ4AqgxkS+HQOriDYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3 RTFENzIxQzAeFw0yNTExMDMyMTQ2NThaFw0yNTExMDcwMjU5NThaMDMxMTAvBgNV BAMTKEU0OEIwQTVFMEE0MjI0QUMxRjM4MEZGMUE2N0RFMzcyNDFEQ0RBNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrg1A6eUBR1/8w3qDg/C8LZXpd HBDkW7CO4lbcIswGT7BzNtFSixTpspfjt3bupua2IBFSJkgmOVLFBjFT+fQt7lUd fcaIIBRwbBAGhFQuqHR3PXulmEV0j08DKK0EKjJwYrzVMnJhPJS2NuC3gwwTt0yW a0PheRALllrA56UOI3naa3zI2ihwDqYXamozmlSMBmJjLupp6iBzkaYE/FXBFNUP 6RpqbaktcffDnGs07M7DnMp/MVF6hbzofGytif3HR6wthZWmJiA1IYXA0XFKA3Cw x7xKm45We1zJ1HMLzblshgJJ7Q/g5fJAsezXPaojpJHDynpEFhVtsM3tCTeDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5IsKXgpCJKwfOA/xpn3jckHc2lQwHwYDVR0j BBgwFoAU6JyT8ImgfQO1eUsMAiOe9n4dchwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Zjg4NTFlNS1lZTViLTQxZTEtOWFiYy00NDI2NTFkMjcyOTQvMC9FODlDOTNGMDg5 QTA3RDAzQjU3OTRCMEMwMjIzOUVGNjdFMUQ3MjFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3RTFE NzIxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY4ODUxZTUtZWU1Yi00MWUxLTlh YmMtNDQyNjUxZDI3Mjk0LzAvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlF RjY3RTFENzIxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYwK4sIHyO8ulysOhHlqiE8HNBH/HsOA4za 2dzto3jIYiOIIZxdAygQ7zspI4YoX7Xwq/MiNGhyETLBSg3w/sxF417pl0uFCyD8 O9o9bZJi6wJnINpi7TJD8j8ytpxwqb5plxy242tUeWsrGJaoRI/NJlMbMGUKcqYm 5bX8RdkdvAqXh1PgAkWU0jjRTYXVMhm6SbdM6j/LcgRmwZ7+e//vKe4RJpdh2+SV w8ZhumSBW/Iihd1VSVdfwh1Dh14QT1fMTVHF/X0+imk0UuPstdR0Kl7Rgfui+7W4 e2nlrPsfPpqGvk74MLlReleleOY2jVwesh9UrcdRxG8nVXm4MAc= -----END CERTIFICATE-----Generated at Tue Nov 4 12:48:13 2025 by rpki-client