$ rpki-client -vvf repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft File: E5B2AB049E75667C8F00ECB0EBF617859558571D.mft (raw, json) Hash identifier: xl5Wa+qj0BrjJqrqAB0g7xURUR5NZUa6QNTIIVWoAlM= Subject key identifier: 0B:6E:19:96:52:EF:6E:F0:2C:14:0C:83:4E:39:2E:BF:A3:5D:8F:22 Authority key identifier: E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D Certificate issuer: /CN=E5B2AB049E75667C8F00ECB0EBF617859558571D Certificate serial: 6BBDC6C87F6DF260711DD67C704ED235E89F676A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft Manifest number: 0152 Signing time: Sat 01 Nov 2025 21:30:36 +0000 Manifest this update: Sat 01 Nov 2025 21:25:36 +0000 Manifest next update: Wed 05 Nov 2025 03:53:36 +0000 Files and hashes: 1: 3130332e3232342e37362e302f32342d3234203d3e203536323535.roa (hash: pWyEMJB2NECQjGD21jXFIhV6AewDgUPpxcuSNxlavYI=) 2: E5B2AB049E75667C8F00ECB0EBF617859558571D.crl (hash: h++JFrcCAPx9SIvhAR6/OnL2WD2byKET9+fjYrFhXuk=) 3: 3130332e3232342e37372e302f32342d3234203d3e203536323535.roa (hash: p909d8VjhDkob+UXRoZRxJtZcS/lf4G9yDRtU4iVWWk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 03:53:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:bd:c6:c8:7f:6d:f2:60:71:1d:d6:7c:70:4e:d2:35:e8:9f:67:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5B2AB049E75667C8F00ECB0EBF617859558571D Validity Not Before: Nov 1 21:25:36 2025 GMT Not After : Nov 5 03:53:36 2025 GMT Subject: CN=0B6E199652EF6EF02C140C834E392EBFA35D8F22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d4:62:4f:c6:c9:3f:95:42:76:0f:33:c4:01: b7:f3:2b:aa:f0:2a:fc:f7:58:de:4c:46:52:05:95: 66:c3:3e:6f:16:c8:83:3d:1d:1f:a7:4d:3b:aa:95: 96:7e:aa:f7:ce:15:4c:5c:5b:2c:30:12:ad:52:4f: 1a:3e:f0:ef:6d:a5:be:5b:cc:46:9c:b4:5d:54:f7: f9:e5:63:bb:ab:fc:cb:03:63:ca:2e:1e:94:7b:f8: 62:81:4c:78:ce:8a:8a:61:b6:cf:30:62:dc:26:46: 24:ea:3c:27:57:a5:1c:55:30:e4:02:53:61:51:ab: 60:d0:69:e2:ca:ee:06:07:2e:be:9f:f5:55:36:46: 3a:24:8a:05:73:8e:1d:2a:df:2c:52:b5:bd:8f:81: ca:e3:27:dc:e0:f2:b0:05:21:10:0e:b6:36:3b:3b: 1b:f7:41:8e:ed:b3:3a:fa:59:ff:fc:40:3f:d6:0d: 8b:13:cc:52:82:26:b0:9b:c2:9a:30:13:d7:bc:2b: 14:63:a0:b0:b7:ad:29:b2:68:99:0f:79:c0:bd:be: 3f:6a:a6:4e:f9:c7:97:fe:4a:0d:fd:45:a0:e9:85: 18:3f:05:9c:02:ca:35:d5:ae:1b:f8:5d:93:2c:89: 7a:77:b0:1d:c2:61:36:46:5f:04:0a:45:6b:9e:37: 2b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6E:19:96:52:EF:6E:F0:2C:14:0C:83:4E:39:2E:BF:A3:5D:8F:22 X509v3 Authority Key Identifier: keyid:E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:98:a9:d3:b1:0a:d2:27:4c:eb:42:27:df:dc:77:fc:4f:d7: df:14:e2:a1:88:7c:70:5a:c7:46:f3:2e:23:3a:b6:a1:8c:13: 15:fa:7a:6a:4c:b7:99:25:d1:ba:12:80:15:53:07:c8:bd:4a: 76:76:8e:49:a9:72:9e:64:c5:21:8e:8c:34:c6:13:30:cb:26: 33:9d:2b:37:98:fc:79:98:43:db:e8:65:bd:71:30:ec:ef:2e: ef:ad:a2:49:f6:c1:7a:f2:36:b3:b5:31:2f:3d:44:19:12:63: 6d:df:56:ca:92:a1:57:0c:fd:64:a8:c6:a4:4f:88:13:a9:e9: 63:3d:94:b0:21:fd:81:8f:eb:f5:4c:9d:43:3a:9f:df:cb:2c: 18:1a:6c:04:8c:32:ec:f5:47:eb:fe:12:2b:f4:0a:35:7a:5c: 08:17:ff:8a:e5:00:e9:ba:6b:23:53:c7:87:3c:81:e3:30:d4: 5d:93:9b:26:af:33:76:4e:8a:0a:96:5c:ad:fb:fb:61:7f:ee: 77:e3:c6:2d:b4:f9:9e:bf:63:ce:a5:e8:38:4a:de:5b:2e:33: 98:02:32:16:5e:da:d1:1b:06:b7:0c:fd:07:d3:6c:38:5f:7b: 44:d0:66:1d:6e:f2:8f:fa:9d:3e:07:63:6d:cf:86:18:f5:fe: a7:69:35:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa73GyH9t8mBxHdZ8cE7SNeifZ2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3ODU5 NTU4NTcxRDAeFw0yNTExMDEyMTI1MzZaFw0yNTExMDUwMzUzMzZaMDMxMTAvBgNV BAMTKDBCNkUxOTk2NTJFRjZFRjAyQzE0MEM4MzRFMzkyRUJGQTM1RDhGMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC21GJPxsk/lUJ2DzPEAbfzK6rw Kvz3WN5MRlIFlWbDPm8WyIM9HR+nTTuqlZZ+qvfOFUxcWywwEq1STxo+8O9tpb5b zEactF1U9/nlY7ur/MsDY8ouHpR7+GKBTHjOiophts8wYtwmRiTqPCdXpRxVMOQC U2FRq2DQaeLK7gYHLr6f9VU2RjokigVzjh0q3yxStb2PgcrjJ9zg8rAFIRAOtjY7 Oxv3QY7tszr6Wf/8QD/WDYsTzFKCJrCbwpowE9e8KxRjoLC3rSmyaJkPecC9vj9q pk75x5f+Sg39RaDphRg/BZwCyjXVrhv4XZMsiXp3sB3CYTZGXwQKRWueNyuzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC24ZllLvbvAsFAyDTjkuv6NdjyIwHwYDVR0j BBgwFoAU5bKrBJ51ZnyPAOyw6/YXhZVYVx0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjI2YjNlMS1kN2Y2LTQ2NWUtODMwMi03ZDUyZjVjMzQwZmYvMC9FNUIyQUIwNDlF NzU2NjdDOEYwMEVDQjBFQkY2MTc4NTk1NTg1NzFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3ODU5NTU4 NTcxRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIyNmIzZTEtZDdmNi00NjVlLTgz MDItN2Q1MmY1YzM0MGZmLzAvRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3 ODU5NTU4NTcxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMiYqdOxCtInTOtCJ9/cd/xP198U4qGIfHBa x0bzLiM6tqGMExX6empMt5kl0boSgBVTB8i9SnZ2jkmpcp5kxSGOjDTGEzDLJjOd KzeY/HmYQ9voZb1xMOzvLu+tokn2wXryNrO1MS89RBkSY23fVsqSoVcM/WSoxqRP iBOp6WM9lLAh/YGP6/VMnUM6n9/LLBgabASMMuz1R+v+Eiv0CjV6XAgX/4rlAOm6 ayNTx4c8geMw1F2TmyavM3ZOigqWXK37+2F/7nfjxi20+Z6/Y86l6DhK3lsuM5gC MhZe2tEbBrcM/QfTbDhfe0TQZh1u8o/6nT4HY23Phhj1/qdpNYc= -----END CERTIFICATE-----Generated at Tue Nov 4 01:58:34 2025 by rpki-client