$ rpki-client -vvf repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft File: E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft (raw, json) Hash identifier: /uOBrgSbwTXR1D+Tgfyz5V+mUzHCmDu12FrWpV+cn3Q= Subject key identifier: C8:F4:FE:85:29:2D:F9:72:08:E7:CB:1E:96:53:F8:2F:48:B1:6F:60 Authority key identifier: E4:C5:17:8B:DB:BD:EF:7B:7D:D4:1B:AF:58:EB:3D:25:B2:13:27:71 Certificate issuer: /CN=E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771 Certificate serial: 067FD5265B1CFB1CA036ED4636E47365612319FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft Manifest number: 01F7 Signing time: Sun 02 Nov 2025 16:51:20 +0000 Manifest this update: Sun 02 Nov 2025 16:46:20 +0000 Manifest next update: Wed 05 Nov 2025 19:29:20 +0000 Files and hashes: 1: 3130332e36362e33362e302f32342d3234203d3e20313530323233.roa (hash: ajl2EFm0qBhjAXALIOJlI8I7dBianNhiyu03BfEHE4I=) 2: E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.crl (hash: dJfvxKGPZRO8UTRy7/reOnPr124UDUMl265zkQ1Dewk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.crl rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 19:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:7f:d5:26:5b:1c:fb:1c:a0:36:ed:46:36:e4:73:65:61:23:19:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771 Validity Not Before: Nov 2 16:46:20 2025 GMT Not After : Nov 5 19:29:20 2025 GMT Subject: CN=C8F4FE85292DF97208E7CB1E9653F82F48B16F60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:84:70:3c:09:47:c8:c1:0d:92:6b:40:1c:c3: e1:96:ec:80:8e:a0:45:9d:b6:74:84:17:b3:39:a5: 52:e8:86:bd:b5:46:e0:c0:34:4b:0a:70:94:19:73: 82:e3:76:09:70:86:0b:9d:24:e9:49:3d:eb:41:96: b5:07:1b:40:22:01:bd:ab:d3:ce:66:a4:6e:83:a8: 09:8a:65:73:cd:43:09:b8:28:33:69:13:79:06:ea: 1f:78:2f:88:d2:68:3d:65:dd:62:ad:09:53:c8:a6: 42:87:45:44:50:0f:a6:d6:84:66:9a:f8:94:07:e8: 71:5a:73:5e:e5:04:a7:1d:fa:b5:08:e7:b1:c9:56: 59:43:c4:b6:ce:cb:ef:37:96:fe:82:ca:e7:9a:0b: 7a:52:2b:93:0d:97:c7:98:df:11:b0:99:b8:16:aa: 96:63:ad:8e:7c:47:50:18:f9:b9:dc:32:7b:21:2d: 17:ad:4a:2e:0e:55:a6:ea:df:1c:cf:8e:11:f4:1a: 82:7e:15:8f:42:3b:83:6e:01:0c:a9:d2:47:75:8a: fc:cb:85:c3:db:cb:59:1b:74:db:03:5c:c8:d6:66: 7a:4b:44:89:0c:52:15:5b:a8:ef:27:db:d8:11:7b: 96:45:f9:1d:71:d4:aa:a7:67:59:92:e0:b1:52:9c: 7d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F4:FE:85:29:2D:F9:72:08:E7:CB:1E:96:53:F8:2F:48:B1:6F:60 X509v3 Authority Key Identifier: keyid:E4:C5:17:8B:DB:BD:EF:7B:7D:D4:1B:AF:58:EB:3D:25:B2:13:27:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:05:ac:4f:00:19:71:92:f0:4e:82:8e:2d:6c:e2:5f:7d:8e: 81:2f:14:7a:22:ed:5d:29:6c:0f:26:02:88:5d:07:fe:09:43: 0c:0d:03:60:c7:2c:5a:35:6d:37:ef:71:34:1d:ff:f6:ba:51: 7d:15:75:92:a5:ae:b2:b3:9d:cb:9c:4b:b8:f3:d2:16:01:44: 3d:c4:bd:41:3c:cf:0e:71:00:b9:bd:bb:8f:00:6c:7f:0e:81: ea:74:74:ac:1f:ef:b9:0b:0c:92:7b:4e:52:0d:a2:79:a4:5e: 2d:83:fc:e0:29:85:9b:93:cd:63:db:69:e7:81:4f:8c:ce:6d: 6d:a6:9e:78:93:c0:c6:30:09:69:2e:3a:8b:93:cf:3f:e5:81: 98:35:fb:15:ab:61:9c:7e:a6:77:af:3c:54:4c:ea:26:68:1f: a1:fb:eb:32:6f:33:fa:4d:3d:28:21:10:fd:5e:ee:83:e9:2c: 6d:0b:e6:3b:fb:f8:53:d2:c2:8b:18:65:16:af:42:cb:06:d3: f1:c7:d0:c8:d1:7a:5b:f7:cd:8d:bf:7b:2a:fa:fb:1d:29:19: 28:e6:df:20:a3:92:16:44:aa:45:63:44:91:6e:ea:e9:35:6f: 72:c7:5c:73:71:37:ab:bb:2a:6d:1f:5f:30:e5:53:32:c5:b5: 07:88:f1:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBn/VJlsc+xygNu1GNuRzZWEjGfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDNTE3OEJEQkJERUY3QjdERDQxQkFGNThFQjNEMjVC MjEzMjc3MTAeFw0yNTExMDIxNjQ2MjBaFw0yNTExMDUxOTI5MjBaMDMxMTAvBgNV BAMTKEM4RjRGRTg1MjkyREY5NzIwOEU3Q0IxRTk2NTNGODJGNDhCMTZGNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjhHA8CUfIwQ2Sa0Acw+GW7ICO oEWdtnSEF7M5pVLohr21RuDANEsKcJQZc4LjdglwhgudJOlJPetBlrUHG0AiAb2r 085mpG6DqAmKZXPNQwm4KDNpE3kG6h94L4jSaD1l3WKtCVPIpkKHRURQD6bWhGaa +JQH6HFac17lBKcd+rUI57HJVllDxLbOy+83lv6CyueaC3pSK5MNl8eY3xGwmbgW qpZjrY58R1AY+bncMnshLRetSi4OVabq3xzPjhH0GoJ+FY9CO4NuAQyp0kd1ivzL hcPby1kbdNsDXMjWZnpLRIkMUhVbqO8n29gRe5ZF+R1x1KqnZ1mS4LFSnH3LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyPT+hSkt+XII58sellP4L0ixb2AwHwYDVR0j BBgwFoAU5MUXi9u973t91BuvWOs9JbITJ3EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmRiZDc4NS02YmNhLTQ5M2ItOGE2NS0zYjUyNzcwMDdmZWQvMC9FNEM1MTc4QkRC QkRFRjdCN0RENDFCQUY1OEVCM0QyNUIyMTMyNzcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDNTE3OEJEQkJERUY3QjdERDQxQkFGNThFQjNEMjVCMjEz Mjc3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJkYmQ3ODUtNmJjYS00OTNiLThh NjUtM2I1Mjc3MDA3ZmVkLzAvRTRDNTE3OEJEQkJERUY3QjdERDQxQkFGNThFQjNE MjVCMjEzMjc3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4FrE8AGXGS8E6Cji1s4l99joEvFHoi7V0p bA8mAohdB/4JQwwNA2DHLFo1bTfvcTQd//a6UX0VdZKlrrKzncucS7jz0hYBRD3E vUE8zw5xALm9u48AbH8Ogep0dKwf77kLDJJ7TlINonmkXi2D/OAphZuTzWPbaeeB T4zObW2mnniTwMYwCWkuOouTzz/lgZg1+xWrYZx+pnevPFRM6iZoH6H76zJvM/pN PSghEP1e7oPpLG0L5jv7+FPSwosYZRavQssG0/HH0MjRelv3zY2/eyr6+x0pGSjm 3yCjkhZEqkVjRJFu6uk1b3LHXHNxN6u7Km0fXzDlUzLFtQeI8T8= -----END CERTIFICATE-----Generated at Tue Nov 4 01:59:10 2025 by rpki-client