$ rpki-client -vvf repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft File: E810D41602DB2D5449939EA97EB71C350841BC5D.mft (raw, json) Hash identifier: idgvGfHMZaRCSNoIs8MC77YG3QeumlsrVocwQrvR+l8= Subject key identifier: 55:EE:1A:D9:7B:A8:18:76:D9:D4:6E:AF:DA:23:16:8C:EF:27:35:7A Authority key identifier: E8:10:D4:16:02:DB:2D:54:49:93:9E:A9:7E:B7:1C:35:08:41:BC:5D Certificate issuer: /CN=E810D41602DB2D5449939EA97EB71C350841BC5D Certificate serial: 602062A57D016A1397F55FF5E303B80A8B5491AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft Manifest number: 0238 Signing time: Mon 03 Nov 2025 12:41:05 +0000 Manifest this update: Mon 03 Nov 2025 12:36:05 +0000 Manifest next update: Thu 06 Nov 2025 15:44:05 +0000 Files and hashes: 1: E810D41602DB2D5449939EA97EB71C350841BC5D.crl (hash: S7tTOg6PK7tsb3HXoL3k2zyPxLgyL2FPo61hyJAofuk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.crl rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 15:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:20:62:a5:7d:01:6a:13:97:f5:5f:f5:e3:03:b8:0a:8b:54:91:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E810D41602DB2D5449939EA97EB71C350841BC5D Validity Not Before: Nov 3 12:36:05 2025 GMT Not After : Nov 6 15:44:05 2025 GMT Subject: CN=55EE1AD97BA81876D9D46EAFDA23168CEF27357A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5f:2e:9c:f4:59:03:81:ef:87:f9:6b:c7:18: c8:5a:21:95:50:d4:e9:f9:ca:d6:0c:02:37:d6:b8: e5:d6:fc:55:ab:d9:82:57:c9:12:56:84:e2:5d:b7: a8:ca:ce:79:d9:84:ce:1d:bc:49:5a:cc:3c:83:4f: 0c:a9:6f:42:b3:60:78:20:3e:8d:9a:86:f2:f3:26: 8d:0e:50:71:6f:1d:a5:47:f0:c4:04:45:c7:48:a8: 07:1b:61:30:16:65:e7:a7:76:83:6d:1a:f6:18:d5: 85:9d:2e:9a:fb:c8:68:2c:e0:67:8f:83:52:ad:0e: b4:08:2a:59:7c:9d:f6:8d:e6:4a:f1:1d:8f:f3:69: 85:5b:54:57:28:cc:58:15:c6:e2:b2:c9:71:a1:10: b3:ce:73:8d:ea:5e:bf:3c:5d:43:31:d6:02:b8:7a: a2:81:69:46:3f:1f:a6:03:3d:4d:30:ed:e7:87:97: 8b:60:2f:0e:3a:fe:b1:94:ea:87:4d:14:2d:19:6f: eb:3f:c6:bd:99:64:57:4f:60:22:59:d5:7e:db:22: e6:29:a9:86:c8:d9:b1:03:90:a5:c4:65:1b:a3:91: b0:f9:35:65:a3:32:96:42:74:e8:65:c7:e4:b6:2c: 87:67:98:2e:af:0e:d6:d2:3b:50:dd:a2:4e:ac:af: e5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:EE:1A:D9:7B:A8:18:76:D9:D4:6E:AF:DA:23:16:8C:EF:27:35:7A X509v3 Authority Key Identifier: keyid:E8:10:D4:16:02:DB:2D:54:49:93:9E:A9:7E:B7:1C:35:08:41:BC:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:e1:df:f8:26:8e:e1:07:9d:8b:ac:ed:8b:f4:a7:71:97:99: 57:97:70:7b:68:95:a3:0d:3b:4c:28:5c:a0:1a:e2:16:37:50: a5:0a:8c:9b:4d:db:f9:95:5d:b7:42:71:fe:7d:d8:9e:30:45: 57:73:a4:50:2e:8c:64:d2:7d:fb:39:2c:fa:77:93:55:6e:c3: 1e:4a:25:be:45:59:cc:9d:f9:18:50:52:dc:46:d2:f6:0f:16: 18:cb:eb:c6:79:9c:a9:72:a6:b9:b2:35:e9:4b:5e:ed:f1:bd: 14:48:e0:36:6a:c3:d9:ae:14:55:56:89:51:25:ff:b7:b6:cd: 44:04:52:dd:f4:bb:84:d3:fd:e1:b5:78:95:8a:f1:6d:40:30: 3f:cd:a8:86:7f:8a:0c:57:42:40:3a:f0:dc:99:31:5b:70:ab: 68:ac:5f:8b:f7:ae:bd:f8:39:5f:60:eb:42:af:97:74:1a:2d: 18:a9:b8:f8:d3:f1:b7:3d:21:4e:e6:cb:f4:ec:d9:df:f9:3d: cd:f3:59:35:fb:ba:e9:8b:e8:54:97:a1:ff:a1:4c:fd:24:bf: 31:78:43:f1:ba:e6:5e:dc:1a:2f:2f:47:a5:47:c7:df:1d:5d: 21:91:ac:f1:ff:14:5b:a2:85:ce:d4:c1:9b:b2:90:79:18:e4: 85:45:d7:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYCBipX0BahOX9V/14wO4CotUkaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTgxMEQ0MTYwMkRCMkQ1NDQ5OTM5RUE5N0VCNzFDMzUw ODQxQkM1RDAeFw0yNTExMDMxMjM2MDVaFw0yNTExMDYxNTQ0MDVaMDMxMTAvBgNV BAMTKDU1RUUxQUQ5N0JBODE4NzZEOUQ0NkVBRkRBMjMxNjhDRUYyNzM1N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiXy6c9FkDge+H+WvHGMhaIZVQ 1On5ytYMAjfWuOXW/FWr2YJXyRJWhOJdt6jKznnZhM4dvElazDyDTwypb0KzYHgg Po2ahvLzJo0OUHFvHaVH8MQERcdIqAcbYTAWZeendoNtGvYY1YWdLpr7yGgs4GeP g1KtDrQIKll8nfaN5krxHY/zaYVbVFcozFgVxuKyyXGhELPOc43qXr88XUMx1gK4 eqKBaUY/H6YDPU0w7eeHl4tgLw46/rGU6odNFC0Zb+s/xr2ZZFdPYCJZ1X7bIuYp qYbI2bEDkKXEZRujkbD5NWWjMpZCdOhlx+S2LIdnmC6vDtbSO1Ddok6sr+XLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVe4a2XuoGHbZ1G6v2iMWjO8nNXowHwYDVR0j BBgwFoAU6BDUFgLbLVRJk56pfrccNQhBvF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTkwNWI4Zi01YzBhLTQ1NzktYjRmNy0wOTI2N2I1NTg5NjgvMC9FODEwRDQxNjAy REIyRDU0NDk5MzlFQTk3RUI3MUMzNTA4NDFCQzVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTgxMEQ0MTYwMkRCMkQ1NDQ5OTM5RUE5N0VCNzFDMzUwODQx QkM1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk5MDViOGYtNWMwYS00NTc5LWI0 ZjctMDkyNjdiNTU4OTY4LzAvRTgxMEQ0MTYwMkRCMkQ1NDQ5OTM5RUE5N0VCNzFD MzUwODQxQkM1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPh3/gmjuEHnYus7Yv0p3GXmVeXcHtolaMN O0woXKAa4hY3UKUKjJtN2/mVXbdCcf592J4wRVdzpFAujGTSffs5LPp3k1Vuwx5K Jb5FWcyd+RhQUtxG0vYPFhjL68Z5nKlyprmyNelLXu3xvRRI4DZqw9muFFVWiVEl /7e2zUQEUt30u4TT/eG1eJWK8W1AMD/NqIZ/igxXQkA68NyZMVtwq2isX4v3rr34 OV9g60Kvl3QaLRipuPjT8bc9IU7my/Ts2d/5Pc3zWTX7uumL6FSXof+hTP0kvzF4 Q/G65l7cGi8vR6VHx98dXSGRrPH/FFuihc7UwZuykHkY5IVF18g= -----END CERTIFICATE-----Generated at Tue Nov 4 16:43:32 2025 by rpki-client