$ rpki-client -vvf repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft File: E64D2B2A02A172B64A71F75C753571C841216A21.mft (raw, json) Hash identifier: 7wDeaqlhLFfHKWjZxsB0u4OsHem5UaJDW+CTVfdcUnc= Subject key identifier: 0B:85:0A:24:15:40:0E:D9:D5:FE:55:B0:48:76:B0:19:EC:CE:31:44 Authority key identifier: E6:4D:2B:2A:02:A1:72:B6:4A:71:F7:5C:75:35:71:C8:41:21:6A:21 Certificate issuer: /CN=E64D2B2A02A172B64A71F75C753571C841216A21 Certificate serial: 7AAFA90DFD2A2BF34EB027113A2A612E13510EC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft Manifest number: C8 Signing time: Mon 03 Nov 2025 12:30:50 +0000 Manifest this update: Mon 03 Nov 2025 12:25:50 +0000 Manifest next update: Thu 06 Nov 2025 15:12:50 +0000 Files and hashes: 1: E64D2B2A02A172B64A71F75C753571C841216A21.crl (hash: 2gpbvMvbo3USXuJ56UXVtVHOF7oIvW0eW+S0A4FScBQ=) 2: 3130332e3137372e35362e302f32332d3234203d3e20313437313532.roa (hash: 3wY6YhGHW2FNk89iUabtEb3voGoMeSvrsN+5cal1TNI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.crl rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 15:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:af:a9:0d:fd:2a:2b:f3:4e:b0:27:11:3a:2a:61:2e:13:51:0e:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E64D2B2A02A172B64A71F75C753571C841216A21 Validity Not Before: Nov 3 12:25:50 2025 GMT Not After : Nov 6 15:12:50 2025 GMT Subject: CN=0B850A2415400ED9D5FE55B04876B019ECCE3144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:04:49:85:e4:24:89:a5:d7:74:2e:de:37:e2: c0:e7:34:2e:51:ba:9e:2d:73:5a:66:02:a5:5b:ea: 05:d6:01:ac:d7:d5:d4:a9:46:7a:49:e6:02:5c:c9: e8:ed:f9:0a:e8:1f:c1:72:61:c4:b7:7d:25:9a:85: ce:d3:35:7c:ee:eb:6c:f8:30:e1:ca:22:32:40:d5: dc:70:4a:62:d6:76:88:98:f5:7b:49:a1:17:39:b5: a2:d2:cd:fa:56:97:71:18:c2:33:e7:f6:96:f0:c8: 3a:a3:c9:35:76:8f:4c:9f:05:00:73:c0:1e:80:56: b4:77:7c:12:5a:9f:b5:94:12:53:d8:f2:b8:a8:ad: 21:99:37:3e:6a:22:e0:2a:36:0a:15:56:ca:1c:2a: bb:f0:d3:db:2a:ee:bd:c0:95:b8:1b:08:66:bb:eb: 7c:6a:48:41:28:1d:c2:df:9f:7f:7b:ed:49:20:60: a7:8e:d6:eb:bf:08:89:f4:57:29:bc:2c:8e:7c:1d: 31:fb:09:4d:45:4f:d1:d8:a5:77:22:13:a7:e8:2e: 44:9d:2f:76:ca:63:b3:06:7a:a3:da:bd:c8:f7:f7: a4:50:3b:32:ff:03:92:d0:a9:25:80:64:55:e9:66: 04:6c:6b:04:d9:76:4d:18:5c:b6:7f:fa:fe:10:c3: 95:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:85:0A:24:15:40:0E:D9:D5:FE:55:B0:48:76:B0:19:EC:CE:31:44 X509v3 Authority Key Identifier: keyid:E6:4D:2B:2A:02:A1:72:B6:4A:71:F7:5C:75:35:71:C8:41:21:6A:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:6f:74:7d:fe:63:aa:bc:c8:2e:f1:a4:5f:94:a8:88:18:f1: ee:65:a3:ff:26:26:f0:bd:f0:fa:cd:82:f9:77:13:bb:13:16: f8:28:8c:d1:29:29:86:86:59:4e:70:e7:c7:ad:e7:fa:03:c3: 97:7c:62:e8:4f:ed:01:ef:ce:fe:28:27:47:0b:de:b2:ff:c8: a0:aa:09:28:d8:8c:60:7c:5c:e6:92:b7:0b:a6:f8:df:4a:7f: 0c:5f:23:03:f7:dd:e5:24:2a:d3:ac:93:a4:4c:7e:71:0c:19: 28:10:87:dc:60:99:e3:a8:cb:3f:26:14:aa:16:ef:cc:0d:8e: 71:b8:68:1f:2c:d6:0f:f2:d9:06:2b:c5:bf:20:1b:3e:c6:a0: 46:28:17:9b:df:90:c4:96:73:57:99:0c:18:1b:f3:4b:d2:20: 52:14:87:61:ff:56:50:ec:f7:5d:c0:32:50:88:d1:aa:ba:b5: c6:7d:84:3f:e1:5e:ee:0c:2b:d7:2d:18:cc:4a:11:53:1f:89: 09:74:0a:7a:02:f1:42:6e:e9:42:21:bc:a2:a3:73:22:07:91: 87:d6:7d:a8:a0:c4:92:a0:79:9e:f6:af:23:24:d1:37:97:8d: a3:79:e6:92:54:d9:15:15:8b:e0:01:e4:d7:15:41:4d:2a:2a: 6d:32:9f:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeq+pDf0qK/NOsCcROiphLhNRDsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTY0RDJCMkEwMkExNzJCNjRBNzFGNzVDNzUzNTcxQzg0 MTIxNkEyMTAeFw0yNTExMDMxMjI1NTBaFw0yNTExMDYxNTEyNTBaMDMxMTAvBgNV BAMTKDBCODUwQTI0MTU0MDBFRDlENUZFNTVCMDQ4NzZCMDE5RUNDRTMxNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNBEmF5CSJpdd0Lt434sDnNC5R up4tc1pmAqVb6gXWAazX1dSpRnpJ5gJcyejt+QroH8FyYcS3fSWahc7TNXzu62z4 MOHKIjJA1dxwSmLWdoiY9XtJoRc5taLSzfpWl3EYwjPn9pbwyDqjyTV2j0yfBQBz wB6AVrR3fBJan7WUElPY8riorSGZNz5qIuAqNgoVVsocKrvw09sq7r3AlbgbCGa7 63xqSEEoHcLfn3977UkgYKeO1uu/CIn0Vym8LI58HTH7CU1FT9HYpXciE6foLkSd L3bKY7MGeqPavcj396RQOzL/A5LQqSWAZFXpZgRsawTZdk0YXLZ/+v4Qw5VtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC4UKJBVADtnV/lWwSHawGezOMUQwHwYDVR0j BBgwFoAU5k0rKgKhcrZKcfdcdTVxyEEhaiEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Njc1MGJmOS05ZjU4LTQyOGEtODk1Mi04YjU1NTVlZjdjYTcvMC9FNjREMkIyQTAy QTE3MkI2NEE3MUY3NUM3NTM1NzFDODQxMjE2QTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTY0RDJCMkEwMkExNzJCNjRBNzFGNzVDNzUzNTcxQzg0MTIx NkEyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTY3NTBiZjktOWY1OC00MjhhLTg5 NTItOGI1NTU1ZWY3Y2E3LzAvRTY0RDJCMkEwMkExNzJCNjRBNzFGNzVDNzUzNTcx Qzg0MTIxNkEyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChvdH3+Y6q8yC7xpF+UqIgY8e5lo/8mJvC9 8PrNgvl3E7sTFvgojNEpKYaGWU5w58et5/oDw5d8YuhP7QHvzv4oJ0cL3rL/yKCq CSjYjGB8XOaStwum+N9KfwxfIwP33eUkKtOsk6RMfnEMGSgQh9xgmeOoyz8mFKoW 78wNjnG4aB8s1g/y2QYrxb8gGz7GoEYoF5vfkMSWc1eZDBgb80vSIFIUh2H/VlDs 913AMlCI0aq6tcZ9hD/hXu4MK9ctGMxKEVMfiQl0CnoC8UJu6UIhvKKjcyIHkYfW faigxJKgeZ72ryMk0TeXjaN55pJU2RUVi+AB5NcVQU0qKm0yn88= -----END CERTIFICATE-----Generated at Tue Nov 4 08:03:33 2025 by rpki-client