$ rpki-client -vvf repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft File: E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft (raw, json) Hash identifier: wHzgSJJ+0ZUaX5cJdN4gZ9sOvBk1R1wQpgVMPnFYp5g= Subject key identifier: 66:E9:4E:E0:95:76:B9:7E:93:F9:34:19:FA:2D:7A:1D:09:73:D5:7A Authority key identifier: E1:A2:4B:09:8E:9A:C0:7C:65:8F:6A:FE:E0:99:07:51:CD:B6:92:A4 Certificate issuer: /CN=E1A24B098E9AC07C658F6AFEE0990751CDB692A4 Certificate serial: 2C6508B9C17AF7C1A773C54EAD860E5EEB3A75C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft Manifest number: 02D8 Signing time: Mon 03 Nov 2025 20:31:31 +0000 Manifest this update: Mon 03 Nov 2025 20:26:31 +0000 Manifest next update: Fri 07 Nov 2025 03:37:31 +0000 Files and hashes: 1: 3130332e3230332e37372e302f32342d3234203d3e20313334363230.roa (hash: Kwtm71D/Z6NhSfdr0MOgpN01lazOwL/r2/rIVuBoO7I=) 2: 3130332e3230332e37392e302f32342d3234203d3e20313334363230.roa (hash: XFCtvmMAAUBkMVCFTzI1cVSJed8FZNsw+FTnuaIBLa8=) 3: 3130332e3230332e37382e302f32342d3234203d3e20313334363230.roa (hash: s+fqkugTUtrfTnYLMhS2gRWf2sStTpZQt4ymRPeizms=) 4: 3130332e3230332e37362e302f32342d3234203d3e20313334363230.roa (hash: Brdn2dLUZTxd6fnM4xWw5E67aagF7MF4tCt2gy0nMwM=) 5: E1A24B098E9AC07C658F6AFEE0990751CDB692A4.crl (hash: Ok13wCQVNiddxLuZ1AYurGk6115JX2dYKCvpZoOs2nU=) 6: 3130332e3230332e37362e302f32322d3232203d3e20313334363230.roa (hash: rkQIsU4mH+wmPkEwMYQGKlUQJZpq5skC0u2AtTeyAJY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.crl rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 03:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:65:08:b9:c1:7a:f7:c1:a7:73:c5:4e:ad:86:0e:5e:eb:3a:75:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A24B098E9AC07C658F6AFEE0990751CDB692A4 Validity Not Before: Nov 3 20:26:31 2025 GMT Not After : Nov 7 03:37:31 2025 GMT Subject: CN=66E94EE09576B97E93F93419FA2D7A1D0973D57A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bf:31:14:cc:ec:08:2e:fb:bd:f2:26:01:06: f1:0f:0d:d8:f2:4a:49:1a:1f:84:08:20:eb:6d:a4: 25:82:d1:85:aa:29:9d:4d:01:5e:bb:c7:3e:fb:dc: d7:90:fe:f8:11:ed:ea:80:01:03:4d:43:1f:81:e1: cc:30:f5:75:7b:59:e3:89:57:46:34:46:8c:f5:14: 12:0c:3b:0c:2d:10:56:de:e6:f6:47:01:a5:49:13: 37:62:c7:b6:ee:b8:9f:00:b2:56:43:05:6e:1c:a7: ce:b1:7f:ed:c5:9e:3b:89:5f:a1:0d:b1:9c:cf:73: f2:ae:a0:d1:3b:95:06:30:e6:ab:b8:67:57:31:2b: b7:be:4f:57:79:9c:34:c4:25:97:8d:7a:6c:46:06: 8c:d6:8c:e7:e9:d4:15:cc:f2:9d:4b:bf:a2:12:04: 2e:52:ad:e6:69:a8:03:4d:32:a0:0b:c0:2f:21:45: 4e:2c:4c:19:47:d1:20:7c:33:60:34:01:3c:58:a7: 79:58:43:96:ef:65:8e:be:e6:6b:c3:a2:1d:29:34: d2:10:f9:65:d5:dd:07:8b:c4:4f:59:94:89:4e:6d: cf:4f:1e:9c:4d:e4:a1:9b:09:7f:12:bb:86:3e:02: 48:99:44:94:60:34:57:6d:23:a8:9c:92:f7:8b:f1: 2f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E9:4E:E0:95:76:B9:7E:93:F9:34:19:FA:2D:7A:1D:09:73:D5:7A X509v3 Authority Key Identifier: keyid:E1:A2:4B:09:8E:9A:C0:7C:65:8F:6A:FE:E0:99:07:51:CD:B6:92:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ae:f2:f6:28:c4:de:7a:2e:dd:54:17:31:c3:e3:e7:2c:29: 74:d5:32:bb:8e:6d:a7:df:54:39:9c:1e:75:e9:fc:8a:e7:66: 11:38:da:a9:88:d8:48:b4:1a:fa:34:ae:81:8d:4a:b3:96:74: 21:f1:72:9e:cf:f5:dd:61:4a:c7:05:73:14:b2:8d:ea:0d:10: 2a:d1:d4:db:f9:6b:44:49:34:1b:76:cb:5e:b5:42:76:be:8e: a1:33:77:8e:c4:95:57:4a:24:59:6a:a7:a8:7c:d1:d9:f7:11: 62:9c:da:23:92:f7:14:a2:34:64:b9:d6:e9:e5:57:b6:ca:1c: f9:c8:e3:1c:e8:50:ff:60:8b:a0:6c:30:0c:3c:eb:c6:05:7d: b4:06:09:f6:a7:09:8b:fb:f0:d0:c0:9e:22:a6:6a:ac:36:b2: 46:98:31:84:32:07:81:a9:ae:fe:3c:3c:bd:8b:81:7f:3d:4c: 61:d5:12:c9:32:40:5f:db:14:68:a8:77:37:a8:c4:60:18:37: cf:08:80:8d:a5:b6:8b:7e:23:0d:7c:ed:02:c1:44:04:4b:48: 48:3d:3f:14:d1:d5:67:b4:d6:68:f6:ab:ea:c1:8f:ae:e7:58: a8:05:98:fb:9e:cb:08:fc:7d:51:64:e8:4a:88:2f:78:a4:d0: e0:7b:cc:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULGUIucF698Gnc8VOrYYOXus6dcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFBMjRCMDk4RTlBQzA3QzY1OEY2QUZFRTA5OTA3NTFD REI2OTJBNDAeFw0yNTExMDMyMDI2MzFaFw0yNTExMDcwMzM3MzFaMDMxMTAvBgNV BAMTKDY2RTk0RUUwOTU3NkI5N0U5M0Y5MzQxOUZBMkQ3QTFEMDk3M0Q1N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZvzEUzOwILvu98iYBBvEPDdjy SkkaH4QIIOttpCWC0YWqKZ1NAV67xz773NeQ/vgR7eqAAQNNQx+B4cww9XV7WeOJ V0Y0Roz1FBIMOwwtEFbe5vZHAaVJEzdix7buuJ8AslZDBW4cp86xf+3FnjuJX6EN sZzPc/KuoNE7lQYw5qu4Z1cxK7e+T1d5nDTEJZeNemxGBozWjOfp1BXM8p1Lv6IS BC5SreZpqANNMqALwC8hRU4sTBlH0SB8M2A0ATxYp3lYQ5bvZY6+5mvDoh0pNNIQ +WXV3QeLxE9ZlIlObc9PHpxN5KGbCX8Su4Y+AkiZRJRgNFdtI6ickveL8S/jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZulO4JV2uX6T+TQZ+i16HQlz1XowHwYDVR0j BBgwFoAU4aJLCY6awHxlj2r+4JkHUc22kqQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZGFhNGMwZi05OTkyLTQyZmMtYTU0Mi1lZmY3NDA5MWIzMzQvMC9FMUEyNEIwOThF OUFDMDdDNjU4RjZBRkVFMDk5MDc1MUNEQjY5MkE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFBMjRCMDk4RTlBQzA3QzY1OEY2QUZFRTA5OTA3NTFDREI2 OTJBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGRhYTRjMGYtOTk5Mi00MmZjLWE1 NDItZWZmNzQwOTFiMzM0LzAvRTFBMjRCMDk4RTlBQzA3QzY1OEY2QUZFRTA5OTA3 NTFDREI2OTJBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyu8vYoxN56Lt1UFzHD4+csKXTVMruObaff VDmcHnXp/IrnZhE42qmI2Ei0Gvo0roGNSrOWdCHxcp7P9d1hSscFcxSyjeoNECrR 1Nv5a0RJNBt2y161Qna+jqEzd47ElVdKJFlqp6h80dn3EWKc2iOS9xSiNGS51unl V7bKHPnI4xzoUP9gi6BsMAw868YFfbQGCfanCYv78NDAniKmaqw2skaYMYQyB4Gp rv48PL2LgX89TGHVEskyQF/bFGiodzeoxGAYN88IgI2ltot+Iw187QLBRARLSEg9 PxTR1We01mj2q+rBj67nWKgFmPueywj8fVFk6EqIL3ik0OB7zLU= -----END CERTIFICATE-----Generated at Tue Nov 4 12:32:56 2025 by rpki-client