$ rpki-client -vvf repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft File: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft (raw, json) Hash identifier: eESc/aEj2jlB1sRhcGd88RP41+pZj9ujs6dTNZQwZy4= Subject key identifier: 7A:25:AD:34:74:47:6E:4C:1D:C9:95:F5:9C:AB:A2:36:66:65:2D:01 Authority key identifier: E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE Certificate issuer: /CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Certificate serial: 5CD41A174B4B8BFC6C4CB5784DD2DA59A319299A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft Manifest number: FC Signing time: Tue 04 Nov 2025 01:32:07 +0000 Manifest this update: Tue 04 Nov 2025 01:27:07 +0000 Manifest next update: Fri 07 Nov 2025 09:09:07 +0000 Files and hashes: 1: 3130332e36302e38392e302f32342d3234203d3e20313531353732.roa (hash: Enf4GZpiw8yRCRJ559txgbwn9cUloBn5l+xZd4CiSI4=) 2: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl (hash: IeIXRhqx300/adtvt224MtT30HmB++rZCNLi5y9WecQ=) 3: 3130332e36302e38382e302f32332d3233203d3e20313531353732.roa (hash: ZC6TgLNk0lzol6BMmLGccC1JZhUEJfXYzEcHnys8G1o=) 4: 3130332e36302e38382e302f32342d3234203d3e20313531353732.roa (hash: k2+2S8JNGrIJgA3B1fWsPdcHVnZQhwJAO8DfE0j/qJE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:d4:1a:17:4b:4b:8b:fc:6c:4c:b5:78:4d:d2:da:59:a3:19:29:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Validity Not Before: Nov 4 01:27:07 2025 GMT Not After : Nov 7 09:09:07 2025 GMT Subject: CN=7A25AD3474476E4C1DC995F59CABA23666652D01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:08:f2:02:d4:6e:3b:4c:00:91:b4:72:13:e1: b6:8e:0b:fe:c6:af:5c:9d:51:87:b7:96:a4:ec:59: 4e:1d:8d:fa:75:85:00:32:f2:ad:06:67:e9:19:15: 84:0a:fc:2b:e2:51:68:4e:8c:1a:5a:ad:7d:bb:82: c9:2c:5f:a0:6d:de:16:7b:b0:bf:7f:b7:04:c2:ba: b9:89:2b:36:c3:29:f9:49:0e:98:28:f1:dc:43:eb: eb:8a:e6:de:69:8a:89:e1:39:e8:b3:ea:a9:0a:20: b9:c4:81:58:c7:9c:71:99:44:ce:ec:e7:dd:29:ad: 75:13:e7:0a:95:c9:85:89:7a:fe:6b:12:bf:33:eb: 0b:2b:e3:07:e9:89:99:5f:b3:d5:90:9d:73:61:a8: 7a:9b:7c:ec:c6:c7:b9:d1:6c:34:4e:47:fe:70:fa: 66:ea:5a:e0:72:62:d2:f4:08:f6:bd:d7:18:f8:6f: 0d:e6:2c:19:2b:48:3c:97:76:16:f9:85:e6:b7:2e: 0b:ef:70:ef:b1:dd:82:78:21:1e:d4:97:57:5b:78: fa:6d:3b:71:78:19:34:4b:b6:87:59:0f:ba:47:87: e0:47:a8:88:76:d5:58:92:ff:1a:9d:45:27:ea:d1: 5e:34:e7:bb:64:d6:98:72:c4:78:3e:d4:00:ff:79: 32:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:25:AD:34:74:47:6E:4C:1D:C9:95:F5:9C:AB:A2:36:66:65:2D:01 X509v3 Authority Key Identifier: keyid:E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:17:f7:ff:7f:8d:bb:49:3e:1b:fd:03:f8:0d:46:10:fc:e0: c2:24:3a:d4:fe:5e:0e:2d:87:4f:42:ab:d4:d4:25:7a:a3:88: 7a:72:db:dc:d0:1e:02:ec:5b:1e:06:c5:96:09:d5:e5:58:68: 65:bd:db:de:b2:f7:97:35:b3:28:48:18:9e:9d:88:93:df:af: 6e:06:4c:69:87:fc:0e:79:29:55:5b:74:ef:a9:db:36:6a:ad: f4:60:b1:84:80:ca:6c:29:c4:ee:44:14:99:5a:3c:2e:69:eb: f3:f8:f5:39:15:8f:33:a6:af:36:1f:72:ba:c8:4f:b1:4e:97: c2:83:5f:93:22:49:e6:9f:99:2c:5d:e8:4c:18:1d:c9:f2:d5: 28:e8:dc:2e:fb:03:52:76:03:9a:68:50:1c:35:64:6b:8a:1b: 54:1c:42:f6:9d:89:36:2e:4c:c8:cf:81:88:17:d8:1e:3f:26: 77:b6:2e:06:04:92:07:00:5f:16:e0:ea:e3:c2:b4:b3:38:1a: 11:96:d3:28:7d:5c:f3:ed:df:84:0c:3e:be:20:34:4f:d0:05: 28:82:6c:79:7c:d8:5f:12:f3:07:7b:93:94:8a:fb:39:47:71: 84:ed:c7:ef:f1:87:e8:54:29:b2:9e:6b:57:f9:e0:1b:38:9a: 7e:1f:65:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXNQaF0tLi/xsTLV4TdLaWaMZKZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZF ODIxMkRERTAeFw0yNTExMDQwMTI3MDdaFw0yNTExMDcwOTA5MDdaMDMxMTAvBgNV BAMTKDdBMjVBRDM0NzQ0NzZFNEMxREM5OTVGNTlDQUJBMjM2NjY2NTJEMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxCPIC1G47TACRtHIT4baOC/7G r1ydUYe3lqTsWU4djfp1hQAy8q0GZ+kZFYQK/CviUWhOjBparX27gsksX6Bt3hZ7 sL9/twTCurmJKzbDKflJDpgo8dxD6+uK5t5pionhOeiz6qkKILnEgVjHnHGZRM7s 590prXUT5wqVyYWJev5rEr8z6wsr4wfpiZlfs9WQnXNhqHqbfOzGx7nRbDROR/5w +mbqWuByYtL0CPa91xj4bw3mLBkrSDyXdhb5hea3LgvvcO+x3YJ4IR7Ul1dbePpt O3F4GTRLtodZD7pHh+BHqIh21ViS/xqdRSfq0V4057tk1phyxHg+1AD/eTJ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeiWtNHRHbkwdyZX1nKuiNmZlLQEwHwYDVR0j BBgwFoAU58nk5cjqmJ8P99b+bb1qT+ghLd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzExYWE0Ni1mMjhlLTRjNTUtYjliYS03ZDViZGM5NWI0ZjYvMC9FN0M5RTRFNUM4 RUE5ODlGMEZGN0Q2RkU2REJENkE0RkU4MjEyRERFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZFODIx MkRERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxMWFhNDYtZjI4ZS00YzU1LWI5 YmEtN2Q1YmRjOTViNGY2LzAvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZB NEZFODIxMkRERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJcX9/9/jbtJPhv9A/gNRhD84MIkOtT+Xg4t h09Cq9TUJXqjiHpy29zQHgLsWx4GxZYJ1eVYaGW9296y95c1syhIGJ6diJPfr24G TGmH/A55KVVbdO+p2zZqrfRgsYSAymwpxO5EFJlaPC5p6/P49TkVjzOmrzYfcrrI T7FOl8KDX5MiSeafmSxd6EwYHcny1Sjo3C77A1J2A5poUBw1ZGuKG1QcQvadiTYu TMjPgYgX2B4/Jne2LgYEkgcAXxbg6uPCtLM4GhGW0yh9XPPt34QMPr4gNE/QBSiC bHl82F8S8wd7k5SK+zlHcYTtx+/xh+hUKbKea1f54Bs4mn4fZaI= -----END CERTIFICATE-----Generated at Wed Nov 5 22:51:37 2025 by rpki-client