$ rpki-client -vvf repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft File: 01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft (raw, json) Hash identifier: UDps0FQu9B98A9oRfJfXGJihEJVCwqvHkQwW/MQynM4= Subject key identifier: 62:4C:3F:4D:7C:7F:74:53:9A:64:9D:06:0B:FE:1F:27:B0:47:98:6D Authority key identifier: 01:E8:7E:DC:BE:90:1A:9A:E8:6C:F5:E4:1C:BA:8B:24:83:E9:B6:AC Certificate issuer: /CN=01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC Certificate serial: 50FDE506DF7F87B06EEE1B8BDA95901208BE2ADD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft Manifest number: 50 Signing time: Mon 03 Nov 2025 12:52:17 +0000 Manifest this update: Mon 03 Nov 2025 12:47:17 +0000 Manifest next update: Thu 06 Nov 2025 14:22:17 +0000 Files and hashes: 1: 01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl (hash: hS3jB6C8kGETbbshzY83O0gzLkfhyf3mRSqIt37yF3M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 14:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:fd:e5:06:df:7f:87:b0:6e:ee:1b:8b:da:95:90:12:08:be:2a:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC Validity Not Before: Nov 3 12:47:17 2025 GMT Not After : Nov 6 14:22:17 2025 GMT Subject: CN=624C3F4D7C7F74539A649D060BFE1F27B047986D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7e:dc:a1:c4:77:7b:53:97:94:f7:fa:d3:e5: cf:19:6c:8b:51:4f:9c:78:99:74:bb:71:c4:ac:bc: 2f:86:1c:20:1a:c9:cc:6e:a7:4c:53:e6:c9:67:71: 81:3c:45:d6:26:cf:49:bd:ea:70:8b:0c:d8:e3:a5: cb:0f:3d:e4:ec:2a:ac:50:88:dd:d9:12:56:ca:e6: 27:4f:5b:37:43:66:45:63:d9:9a:99:c7:ea:c5:cf: 70:b1:d4:cf:a6:0e:28:c2:38:1b:ce:e5:74:c4:97: 5d:a8:b1:c6:3f:b8:94:4b:23:8c:91:0e:d4:86:c4: 76:c8:4c:97:ad:ca:44:59:e9:e6:dd:a2:34:9a:30: 20:23:6a:b4:7f:99:a3:35:ed:87:58:f5:b5:52:77: 54:5f:00:a6:e9:d2:24:20:cf:ba:52:02:81:66:5c: 20:21:15:68:be:3d:50:2a:44:4d:f6:67:db:44:ef: 1b:43:60:12:12:b0:c7:0a:15:f7:28:d2:f9:58:58: 05:2c:10:e4:2d:9f:af:54:dc:49:7b:4a:84:59:5c: 35:b5:22:be:9e:97:38:00:1b:c5:19:43:41:48:26: e6:84:04:03:74:f4:5e:0c:db:a8:96:f4:9c:41:c8: 02:ba:f7:96:18:13:bf:46:db:41:3b:98:ad:72:4f: f1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:4C:3F:4D:7C:7F:74:53:9A:64:9D:06:0B:FE:1F:27:B0:47:98:6D X509v3 Authority Key Identifier: keyid:01:E8:7E:DC:BE:90:1A:9A:E8:6C:F5:E4:1C:BA:8B:24:83:E9:B6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:a8:5d:ae:24:ff:0d:d7:b5:6a:e1:3d:0b:08:b7:00:8f:f6: 79:b5:18:6a:79:19:a8:76:84:cc:ef:18:7c:44:a8:42:1c:cf: 16:bf:80:83:cb:a4:87:fe:c7:79:8d:08:18:4e:66:80:a8:69: dd:aa:ed:4f:0f:99:1a:30:87:9b:b1:65:66:6e:6f:9b:3a:6c: a3:53:13:28:b6:2d:a7:af:10:32:85:c6:3b:8d:fe:73:08:83: be:3d:b9:41:a2:20:ac:24:35:0d:f9:96:ff:ae:08:dc:ed:53: 41:67:97:f3:b3:9b:1c:a3:a6:11:17:df:89:4e:a3:36:75:b8: 44:a9:d5:3c:d3:61:c0:36:2f:a4:ad:f8:c4:ce:5f:57:f5:5b: b0:b6:10:14:dc:9b:23:04:75:72:8f:3c:cd:73:b0:2a:6d:90: 67:6e:bf:dd:49:22:b2:db:1c:86:46:4c:c5:e2:4f:3b:82:9d: 35:b7:f9:59:47:29:1f:87:0e:db:a1:54:31:25:10:37:67:88: 43:3e:3d:72:1d:3c:23:36:37:79:2b:58:a2:a0:8f:5a:63:9e: cd:de:92:3c:56:bd:68:77:b0:18:fb:c3:89:27:02:64:97:2a: fa:8f:0f:4e:fa:a1:4c:79:6b:80:4f:b3:eb:b2:70:f4:d8:e4: 25:f4:c7:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUP3lBt9/h7Bu7huL2pWQEgi+Kt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThCMjQ4 M0U5QjZBQzAeFw0yNTExMDMxMjQ3MTdaFw0yNTExMDYxNDIyMTdaMDMxMTAvBgNV BAMTKDYyNEMzRjREN0M3Rjc0NTM5QTY0OUQwNjBCRkUxRjI3QjA0Nzk4NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcftyhxHd7U5eU9/rT5c8ZbItR T5x4mXS7ccSsvC+GHCAaycxup0xT5slncYE8RdYmz0m96nCLDNjjpcsPPeTsKqxQ iN3ZElbK5idPWzdDZkVj2ZqZx+rFz3Cx1M+mDijCOBvO5XTEl12oscY/uJRLI4yR DtSGxHbITJetykRZ6ebdojSaMCAjarR/maM17YdY9bVSd1RfAKbp0iQgz7pSAoFm XCAhFWi+PVAqRE32Z9tE7xtDYBISsMcKFfco0vlYWAUsEOQtn69U3El7SoRZXDW1 Ir6elzgAG8UZQ0FIJuaEBAN09F4M26iW9JxByAK695YYE79G20E7mK1yT/E1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYkw/TXx/dFOaZJ0GC/4fJ7BHmG0wHwYDVR0j BBgwFoAUAeh+3L6QGprobPXkHLqLJIPptqwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTZiNTk5ZC03ZmJiLTQ0OTgtODZlZi0xODY0NWFlOThlM2QvMC8wMUU4N0VEQ0JF OTAxQTlBRTg2Q0Y1RTQxQ0JBOEIyNDgzRTlCNkFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThCMjQ4M0U5 QjZBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE2YjU5OWQtN2ZiYi00NDk4LTg2 ZWYtMTg2NDVhZTk4ZTNkLzAvMDFFODdFRENCRTkwMUE5QUU4NkNGNUU0MUNCQThC MjQ4M0U5QjZBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2oXa4k/w3XtWrhPQsItwCP9nm1GGp5Gah2 hMzvGHxEqEIczxa/gIPLpIf+x3mNCBhOZoCoad2q7U8PmRowh5uxZWZub5s6bKNT Eyi2LaevEDKFxjuN/nMIg749uUGiIKwkNQ35lv+uCNztU0Fnl/OzmxyjphEX34lO ozZ1uESp1TzTYcA2L6St+MTOX1f1W7C2EBTcmyMEdXKPPM1zsCptkGduv91JIrLb HIZGTMXiTzuCnTW3+VlHKR+HDtuhVDElEDdniEM+PXIdPCM2N3krWKKgj1pjns3e kjxWvWh3sBj7w4knAmSXKvqPD076oUx5a4BPs+uycPTY5CX0x30= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:23 2025 by rpki-client