$ rpki-client -vvf repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft File: E07D333345CD7D30F1DC10D98F6E73457739DF18.mft (raw, json) Hash identifier: eUotlw2Io54J8FzgUCPh10ub+XAoEHE7MyGKYTGJTJo= Subject key identifier: E7:F5:BE:55:AB:4D:04:B0:42:6A:DA:2F:68:FD:D1:CA:09:6E:21:7E Authority key identifier: E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18 Certificate issuer: /CN=E07D333345CD7D30F1DC10D98F6E73457739DF18 Certificate serial: 2B58BB343A2DF97C7AD0F6826F3B76973608632B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft Manifest number: 02D0 Signing time: Sun 02 Nov 2025 14:52:07 +0000 Manifest this update: Sun 02 Nov 2025 14:47:07 +0000 Manifest next update: Thu 06 Nov 2025 01:28:07 +0000 Files and hashes: 1: 3130332e3137352e32342e302f32342d3234203d3e20313339393532.roa (hash: Vl/OOphd8TYP/hah6fsBqUcpI92+W6WBwIY9PUcjWfo=) 2: E07D333345CD7D30F1DC10D98F6E73457739DF18.crl (hash: JN+wkYYD1Y4E2RpEaoe3753Hv+qB3mGOh2h1bSZNl1k=) 3: 3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa (hash: S9fTdkfTps/6Q59nCYC/yJ1+TjRvCvo04elHUxM7Yz8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:58:bb:34:3a:2d:f9:7c:7a:d0:f6:82:6f:3b:76:97:36:08:63:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E07D333345CD7D30F1DC10D98F6E73457739DF18 Validity Not Before: Nov 2 14:47:07 2025 GMT Not After : Nov 6 01:28:07 2025 GMT Subject: CN=E7F5BE55AB4D04B0426ADA2F68FDD1CA096E217E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:95:46:4a:88:d8:27:21:d9:7b:aa:58:42:84: e2:03:0b:83:bf:3f:76:6b:af:99:b4:fb:81:02:2b: 73:a7:0b:88:7d:11:e1:87:86:da:b6:12:ba:7f:fb: 20:4b:35:f4:c1:af:c0:31:41:ca:64:12:e7:f8:fb: 63:4f:eb:84:65:97:aa:70:31:06:88:71:c0:1a:29: ce:b9:3e:07:06:44:27:6d:f1:61:31:4f:60:6e:ba: 93:9c:39:9b:08:32:63:1d:4f:fb:ab:c2:a9:2e:39: db:05:08:27:d8:c7:77:8f:92:93:9a:7e:e1:ba:bf: 3f:9c:75:6b:95:f3:c9:34:8a:87:e5:42:ea:82:d4: e0:1b:cd:ab:09:f0:c7:0a:d6:db:aa:b4:2a:6b:39: cf:ce:e1:cc:77:1f:73:a0:5d:c5:b1:cb:63:8d:78: 5f:e7:97:ef:ac:6c:37:78:cd:fa:25:e5:cb:67:00: 89:04:2c:2d:36:fc:1a:af:29:e9:ed:e5:41:12:99: 4e:c3:7e:ee:a8:65:11:74:61:1b:f2:4b:a8:45:ba: 63:da:43:94:e3:e5:a5:c6:c1:d6:38:3e:d7:c9:4d: 7d:ef:f1:a6:e9:b7:a9:e7:f9:68:d8:0f:69:d1:26: 64:6e:3f:aa:9a:81:6d:bf:d4:86:0d:e5:cf:96:5e: 24:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F5:BE:55:AB:4D:04:B0:42:6A:DA:2F:68:FD:D1:CA:09:6E:21:7E X509v3 Authority Key Identifier: keyid:E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:21:45:a5:ae:03:fd:aa:b0:cc:05:9a:78:d7:c5:6d:84:8f: c9:6b:41:66:8c:11:40:f2:9d:dc:71:0d:ee:e8:bd:d1:85:20: 70:2a:b4:0e:14:0e:ac:26:50:63:35:b6:c4:42:43:80:de:8b: 67:94:11:b7:0d:4f:da:7c:b9:33:4c:3d:e2:4a:98:81:df:0c: 98:35:46:49:78:0e:2e:40:4f:cf:6a:be:89:9b:af:6c:50:23: d6:4c:bc:97:af:37:df:e9:64:0d:5b:d8:44:c0:aa:b2:b1:c1: c5:80:22:f6:8e:a5:09:2b:6c:cc:bb:e3:89:eb:0d:60:47:1b: 92:38:46:a6:d2:72:e7:e2:24:84:17:cd:7b:e3:8a:08:fc:43: 62:ac:e6:d6:79:79:a9:46:f4:a5:8a:8d:77:b5:ac:41:f8:84: b4:0f:04:72:06:3d:57:ef:9b:9d:1a:42:6d:55:cb:fa:f3:6e: 32:60:fa:ce:11:41:64:92:1d:b3:c2:19:7f:df:71:71:41:ea: 18:1b:c2:ce:fb:75:57:fc:19:c0:28:cf:69:d6:07:90:ab:59: a2:2f:b7:b8:9b:0e:72:20:27:76:44:5a:60:ea:d4:02:56:c6: d7:5d:d2:1d:97:62:85:a3:6c:36:d3:62:36:e8:88:d4:66:d2: 61:a9:c4:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK1i7NDot+Xx60PaCbzt2lzYIYyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTczNDU3 NzM5REYxODAeFw0yNTExMDIxNDQ3MDdaFw0yNTExMDYwMTI4MDdaMDMxMTAvBgNV BAMTKEU3RjVCRTU1QUI0RDA0QjA0MjZBREEyRjY4RkREMUNBMDk2RTIxN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCelUZKiNgnIdl7qlhChOIDC4O/ P3Zrr5m0+4ECK3OnC4h9EeGHhtq2Erp/+yBLNfTBr8AxQcpkEuf4+2NP64Rll6pw MQaIccAaKc65PgcGRCdt8WExT2BuupOcOZsIMmMdT/urwqkuOdsFCCfYx3ePkpOa fuG6vz+cdWuV88k0ioflQuqC1OAbzasJ8McK1tuqtCprOc/O4cx3H3OgXcWxy2ON eF/nl++sbDd4zfol5ctnAIkELC02/BqvKent5UESmU7Dfu6oZRF0YRvyS6hFumPa Q5Tj5aXGwdY4PtfJTX3v8abpt6nn+WjYD2nRJmRuP6qagW2/1IYN5c+WXiQ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5/W+VatNBLBCatovaP3RygluIX4wHwYDVR0j BBgwFoAU4H0zM0XNfTDx3BDZj25zRXc53xgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTYyODgwZS1kNWYyLTQwNjktODhmZi0xMjY3YjdjYzAxYzUvMC9FMDdEMzMzMzQ1 Q0Q3RDMwRjFEQzEwRDk4RjZFNzM0NTc3MzlERjE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTczNDU3NzM5 REYxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU2Mjg4MGUtZDVmMi00MDY5LTg4 ZmYtMTI2N2I3Y2MwMWM1LzAvRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTcz NDU3NzM5REYxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGohRaWuA/2qsMwFmnjXxW2Ej8lrQWaMEUDy ndxxDe7ovdGFIHAqtA4UDqwmUGM1tsRCQ4Dei2eUEbcNT9p8uTNMPeJKmIHfDJg1 Rkl4Di5AT89qvombr2xQI9ZMvJevN9/pZA1b2ETAqrKxwcWAIvaOpQkrbMy744nr DWBHG5I4RqbScufiJIQXzXvjigj8Q2Ks5tZ5ealG9KWKjXe1rEH4hLQPBHIGPVfv m50aQm1Vy/rzbjJg+s4RQWSSHbPCGX/fcXFB6hgbws77dVf8GcAoz2nWB5CrWaIv t7ibDnIgJ3ZEWmDq1AJWxtdd0h2XYoWjbDbTYjboiNRm0mGpxLE= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:42 2025 by rpki-client