$ rpki-client -vvf repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft File: E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft (raw, json) Hash identifier: pK7WrBV9oYLY/jE9/T0TiGNqRzlFgru7ZiOugqDOnZA= Subject key identifier: FE:15:F2:E7:94:53:41:F9:91:58:7C:96:F6:BF:39:70:3F:A8:BE:D3 Authority key identifier: E0:AC:9F:73:54:2C:4F:A1:E5:2F:9E:56:5E:ED:95:2D:45:28:AB:D5 Certificate issuer: /CN=E0AC9F73542C4FA1E52F9E565EED952D4528ABD5 Certificate serial: 51B08E1E4EC89A72B8655CB9740871BFDFAF410C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft Manifest number: 01AF Signing time: Sun 02 Nov 2025 15:01:53 +0000 Manifest this update: Sun 02 Nov 2025 14:56:53 +0000 Manifest next update: Wed 05 Nov 2025 20:47:53 +0000 Files and hashes: 1: E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl (hash: HIKfz36AuUDvnHJ0iWWIi6T/Z4Q8SuvN8SCK8cmWD1k=) 2: 3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa (hash: bfGWWBYLFdBS0ipwVQx4h+wBe1EIqVM2TX2GM2uhPGQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:b0:8e:1e:4e:c8:9a:72:b8:65:5c:b9:74:08:71:bf:df:af:41:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0AC9F73542C4FA1E52F9E565EED952D4528ABD5 Validity Not Before: Nov 2 14:56:53 2025 GMT Not After : Nov 5 20:47:53 2025 GMT Subject: CN=FE15F2E7945341F991587C96F6BF39703FA8BED3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:39:0e:45:1b:b5:7f:d7:33:81:88:40:cf:fe: df:38:49:06:66:15:91:8e:9c:52:a0:28:47:96:28: c7:d8:b3:90:35:9d:d5:91:ad:3c:d2:f0:7e:d1:a1: 07:74:25:9d:f6:8d:80:dc:18:49:fc:66:84:43:3e: 8e:99:28:dc:ce:b2:67:a1:14:f0:71:71:dd:2b:2e: a3:9a:bd:ce:ff:70:c7:ce:21:76:5c:11:6a:2a:1a: fb:e1:ee:f3:f1:05:22:3b:c2:4b:cf:a4:77:75:45: 2b:c1:c1:ea:66:85:b9:3a:e9:65:4e:3a:6b:6e:07: 64:8f:46:97:9b:10:fd:67:f6:c6:53:c0:1f:06:42: 67:ae:8b:ad:b7:5e:35:59:48:24:3e:e8:14:8a:dd: 73:3b:e9:48:9c:cf:02:6f:03:81:f9:ad:ee:b6:6e: a8:cf:55:64:6b:79:ff:64:d1:b0:b2:0c:fa:4d:66: eb:68:fb:50:cf:fb:c8:ad:9e:d3:03:2d:d3:03:62: 52:ec:b4:f5:bd:b9:2f:58:bb:e7:74:5b:23:5f:7f: 56:8b:e0:77:dd:39:e4:3a:9a:0c:4e:6c:5f:1c:28: 58:48:0c:aa:1a:0c:59:9e:5d:ff:ad:88:b4:0d:00: 8d:9d:24:38:88:1e:78:76:92:d4:ad:68:d0:43:26: 06:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:15:F2:E7:94:53:41:F9:91:58:7C:96:F6:BF:39:70:3F:A8:BE:D3 X509v3 Authority Key Identifier: keyid:E0:AC:9F:73:54:2C:4F:A1:E5:2F:9E:56:5E:ED:95:2D:45:28:AB:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:bc:fc:ad:d8:5c:73:5c:25:36:81:df:c4:e1:44:e8:18:ce: 56:9c:3e:d7:4a:66:b4:65:6d:27:b1:ee:5e:c8:2b:cd:a1:eb: ac:6d:c7:a0:2c:ff:86:5b:a6:8b:94:9f:3a:d1:61:e4:b2:f1: ff:cc:33:3c:d7:77:3f:52:29:db:2f:8a:8b:a3:f7:e1:bf:8c: 49:b9:a1:d8:71:30:1c:a1:25:a3:2f:f0:35:f1:61:8e:16:50: 00:67:69:37:0e:d9:de:bf:c2:ef:a4:5d:b3:3c:c6:5b:a7:50: 6d:f8:55:dd:8f:6e:6d:cb:a5:89:34:f1:6c:99:78:aa:13:f3: c9:a6:03:18:c0:11:a8:f2:48:b2:62:23:f4:52:06:7a:9a:12: fe:4c:4b:af:77:9c:0d:28:14:74:0e:c6:3e:86:ba:87:4a:74: ce:79:20:1f:d7:1e:1e:13:20:65:65:70:89:13:55:0f:89:f5: d9:ee:ad:a6:b8:6f:40:14:35:a1:47:fb:ff:3a:43:55:f0:a3: dc:63:d2:42:2e:f8:cb:d9:0d:50:5a:cd:ce:55:43:0f:96:ad: 8c:c9:a7:dd:59:08:c6:d1:97:e1:8b:b3:14:dd:5f:cb:f1:6b: b3:93:03:8a:7f:2f:2a:80:8d:6d:3e:b3:5a:1e:f0:66:d7:db: bd:06:5e:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUbCOHk7ImnK4ZVy5dAhxv9+vQQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBBQzlGNzM1NDJDNEZBMUU1MkY5RTU2NUVFRDk1MkQ0 NTI4QUJENTAeFw0yNTExMDIxNDU2NTNaFw0yNTExMDUyMDQ3NTNaMDMxMTAvBgNV BAMTKEZFMTVGMkU3OTQ1MzQxRjk5MTU4N0M5NkY2QkYzOTcwM0ZBOEJFRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlOQ5FG7V/1zOBiEDP/t84SQZm FZGOnFKgKEeWKMfYs5A1ndWRrTzS8H7RoQd0JZ32jYDcGEn8ZoRDPo6ZKNzOsmeh FPBxcd0rLqOavc7/cMfOIXZcEWoqGvvh7vPxBSI7wkvPpHd1RSvBwepmhbk66WVO OmtuB2SPRpebEP1n9sZTwB8GQmeui623XjVZSCQ+6BSK3XM76UiczwJvA4H5re62 bqjPVWRref9k0bCyDPpNZuto+1DP+8itntMDLdMDYlLstPW9uS9Yu+d0WyNff1aL 4HfdOeQ6mgxObF8cKFhIDKoaDFmeXf+tiLQNAI2dJDiIHnh2ktStaNBDJgYfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/hXy55RTQfmRWHyW9r85cD+ovtMwHwYDVR0j BBgwFoAU4Kyfc1QsT6HlL55WXu2VLUUoq9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWYwMDEzYi01OWE2LTQ3MzMtODlmOC0yOGZhM2Q4ODU3OWYvMC9FMEFDOUY3MzU0 MkM0RkExRTUyRjlFNTY1RUVEOTUyRDQ1MjhBQkQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBBQzlGNzM1NDJDNEZBMUU1MkY5RTU2NUVFRDk1MkQ0NTI4 QUJENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmMDAxM2ItNTlhNi00NzMzLTg5 ZjgtMjhmYTNkODg1NzlmLzAvRTBBQzlGNzM1NDJDNEZBMUU1MkY5RTU2NUVFRDk1 MkQ0NTI4QUJENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGC8/K3YXHNcJTaB38ThROgYzlacPtdKZrRl bSex7l7IK82h66xtx6As/4ZbpouUnzrRYeSy8f/MMzzXdz9SKdsviouj9+G/jEm5 odhxMByhJaMv8DXxYY4WUABnaTcO2d6/wu+kXbM8xlunUG34Vd2Pbm3LpYk08WyZ eKoT88mmAxjAEajySLJiI/RSBnqaEv5MS693nA0oFHQOxj6GuodKdM55IB/XHh4T IGVlcIkTVQ+J9dnuraa4b0AUNaFH+/86Q1Xwo9xj0kIu+MvZDVBazc5VQw+WrYzJ p91ZCMbRl+GLsxTdX8vxa7OTA4p/LyqAjW0+s1oe8GbX270GXuw= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:28 2025 by rpki-client