$ rpki-client -vvf repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft File: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft (raw, json) Hash identifier: VTe5LwU9hy9aQo5OGdtoHwbqbhssQLa/kaHgr/AMoUE= Subject key identifier: 5E:23:01:E5:60:4E:C8:18:DA:4B:94:FF:58:C0:8F:59:24:92:74:DC Authority key identifier: EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE Certificate issuer: /CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Certificate serial: 59F0DDC0E3F37D4EF0875947E8D285E9B320C0D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft Manifest number: 0144 Signing time: Tue 04 Nov 2025 04:11:33 +0000 Manifest this update: Tue 04 Nov 2025 04:06:33 +0000 Manifest next update: Fri 07 Nov 2025 08:33:33 +0000 Files and hashes: 1: 3130332e35332e32382e302f32332d3234203d3e20313339393535.roa (hash: XmUhlDLdTlUEJxqMyV5d8izbXv0SLIMUNSTUR2SbfXQ=) 2: EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl (hash: XsHhtVond47Amgw0P6PeLDvvHv+ICtwk560LIr+r07E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:33:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f0:dd:c0:e3:f3:7d:4e:f0:87:59:47:e8:d2:85:e9:b3:20:c0:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE Validity Not Before: Nov 4 04:06:33 2025 GMT Not After : Nov 7 08:33:33 2025 GMT Subject: CN=5E2301E5604EC818DA4B94FF58C08F59249274DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:04:25:59:90:46:79:c7:a4:f5:2b:e7:93:6f: 85:60:58:9b:54:ce:ad:0d:08:3e:e5:b6:4c:df:98: d9:8d:db:0c:a9:1f:f9:1d:94:04:bb:a5:de:a5:c1: 59:e3:57:4b:63:98:04:bd:ee:67:5b:4d:71:88:06: f5:d2:39:ca:ef:22:49:04:07:cd:3c:a0:0b:b6:83: 0d:77:5f:ed:94:56:e3:1e:2e:c8:b2:30:7b:2f:61: 28:52:c4:82:44:51:c7:52:44:99:54:22:a8:b1:20: 6f:4d:e9:51:20:74:ce:b1:8d:3f:43:d6:8b:a6:d2: 05:6d:72:f7:b2:07:6a:df:bc:b8:05:61:02:1b:b2: a1:03:d9:a9:26:83:44:ae:e8:ba:b0:cf:a7:59:05: 4b:7c:bf:74:f0:84:25:69:9b:3b:de:68:a8:c0:68: b9:15:e6:1a:2e:59:d5:db:18:48:ea:07:fe:d7:6f: ef:6d:a5:c6:28:c3:50:6a:46:52:1c:96:84:a1:81: 1c:eb:58:cc:b9:3e:b7:6e:d1:60:e6:f4:c0:fd:4c: d2:ed:b6:63:b7:3d:ad:e8:e1:a4:5e:4f:4f:19:bf: 7e:b2:5a:c9:ee:e7:db:0c:42:85:97:51:12:39:68: df:32:3b:f9:b4:c0:c6:3e:55:c2:64:ef:18:87:ce: 3f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:23:01:E5:60:4E:C8:18:DA:4B:94:FF:58:C0:8F:59:24:92:74:DC X509v3 Authority Key Identifier: keyid:EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:e2:5f:a4:0c:af:29:a7:9c:fe:dc:b5:47:96:28:ef:9b:37: cf:a7:61:2b:e0:4f:93:da:6a:6d:db:3d:9d:93:98:88:7f:c0: 25:b7:d6:f3:7e:bc:de:33:eb:cd:06:68:66:63:4b:a7:b8:66: 24:96:2d:2a:78:07:43:ca:3e:8a:49:b4:8a:b1:18:ba:6f:a2: db:2f:83:88:91:9b:3f:6a:1a:74:95:43:75:31:72:00:f1:9a: 73:d8:7f:4e:07:14:4d:f3:60:e9:01:e3:77:f3:6e:ad:b3:8d: 29:c8:36:9c:0e:9c:bd:b9:41:83:f2:42:46:cb:ec:98:4f:8b: 00:8f:fd:cc:6c:e6:4c:4c:a6:44:27:06:68:de:c5:d5:e8:e3: b3:ef:40:12:8c:15:42:d0:a2:e9:f1:31:f4:4c:af:20:7f:81: c5:f8:2d:dd:e7:30:ca:b5:eb:2f:6e:30:55:a5:fd:40:fe:fa: 0d:08:5c:39:4f:6d:3b:b6:65:99:58:87:87:70:cd:50:f0:48: f4:75:f6:2c:10:ca:b5:c7:16:89:92:02:d7:a8:0f:90:b9:42: c3:c5:16:b8:35:fe:ac:5a:e1:62:01:84:a0:c9:35:16:a2:ec: af:5b:41:7a:b2:92:b4:db:7e:c7:8d:f1:47:be:9e:1d:80:5d: 50:8f:62:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWfDdwOPzfU7wh1lH6NKF6bMgwNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0 NUYyOUVERTAeFw0yNTExMDQwNDA2MzNaFw0yNTExMDcwODMzMzNaMDMxMTAvBgNV BAMTKDVFMjMwMUU1NjA0RUM4MThEQTRCOTRGRjU4QzA4RjU5MjQ5Mjc0REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/BCVZkEZ5x6T1K+eTb4VgWJtU zq0NCD7ltkzfmNmN2wypH/kdlAS7pd6lwVnjV0tjmAS97mdbTXGIBvXSOcrvIkkE B808oAu2gw13X+2UVuMeLsiyMHsvYShSxIJEUcdSRJlUIqixIG9N6VEgdM6xjT9D 1oum0gVtcveyB2rfvLgFYQIbsqED2akmg0Su6Lqwz6dZBUt8v3TwhCVpmzveaKjA aLkV5houWdXbGEjqB/7Xb+9tpcYow1BqRlIcloShgRzrWMy5Prdu0WDm9MD9TNLt tmO3Pa3o4aReT08Zv36yWsnu59sMQoWXURI5aN8yO/m0wMY+VcJk7xiHzj83AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXiMB5WBOyBjaS5T/WMCPWSSSdNwwHwYDVR0j BBgwFoAU7JqrkQBwU+Y84X+Y10/9iUXynt4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmI0M2VjOC1mNTgyLTQwMjUtOGYzNi0zY2VhNTM5ZDBiMDkvMC9FQzlBQUI5MTAw NzA1M0U2M0NFMTdGOThENzRGRkQ4OTQ1RjI5RURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0NUYy OUVERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJiNDNlYzgtZjU4Mi00MDI1LThm MzYtM2NlYTUzOWQwYjA5LzAvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZE ODk0NUYyOUVERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDiX6QMrymnnP7ctUeWKO+bN8+nYSvgT5Pa am3bPZ2TmIh/wCW31vN+vN4z680GaGZjS6e4ZiSWLSp4B0PKPopJtIqxGLpvotsv g4iRmz9qGnSVQ3UxcgDxmnPYf04HFE3zYOkB43fzbq2zjSnINpwOnL25QYPyQkbL 7JhPiwCP/cxs5kxMpkQnBmjexdXo47PvQBKMFULQounxMfRMryB/gcX4Ld3nMMq1 6y9uMFWl/UD++g0IXDlPbTu2ZZlYh4dwzVDwSPR19iwQyrXHFomSAteoD5C5QsPF Frg1/qxa4WIBhKDJNRai7K9bQXqykrTbfseN8Ue+nh2AXVCPYmk= -----END CERTIFICATE-----Generated at Wed Nov 5 23:34:27 2025 by rpki-client