$ rpki-client -vvf repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft File: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft (raw, json) Hash identifier: iTa7oF5jcnBb9Zy3UukHq64evK8R5fp7eyI4/y7hW0M= Subject key identifier: A7:B0:3E:C1:30:5A:6B:70:81:5D:AB:96:44:0B:70:A8:1C:01:00:4A Authority key identifier: E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 Certificate issuer: /CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Certificate serial: 4E4AA8D97CD25AA40F32731991686702731ED17A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft Manifest number: 0370 Signing time: Wed 05 Nov 2025 00:41:49 +0000 Manifest this update: Wed 05 Nov 2025 00:36:49 +0000 Manifest next update: Sat 08 Nov 2025 03:12:49 +0000 Files and hashes: 1: E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl (hash: hRCNI2ffscirmkPv136apRKtVhg0zzLUBJV9oKynS5I=) 2: 3130332e3136342e3233312e302f32342d3234203d3e20313431393133.roa (hash: NK0HZEK3BAxoXUs/T9BsQ+3NHYIYmmtIH82zUm/fzDk=) 3: 3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa (hash: zTY/Xpdv3MSQoDsOl/9obTqa4WAjpeiNnIpy7In5lOI=) 4: 3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa (hash: Wwvtox4pnVKWLsRl/E/cxu7UuLzmLQJxzxgchSEOlMg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 03:12:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:4a:a8:d9:7c:d2:5a:a4:0f:32:73:19:91:68:67:02:73:1e:d1:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Validity Not Before: Nov 5 00:36:49 2025 GMT Not After : Nov 8 03:12:49 2025 GMT Subject: CN=A7B03EC1305A6B70815DAB96440B70A81C01004A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4a:4c:ba:6d:75:cb:7c:f0:1d:b5:99:85:37: 47:4b:a9:cb:1b:6c:10:41:d5:a0:37:ea:db:6c:59: 92:49:14:38:f0:7d:c5:22:9f:10:b8:4a:80:98:5a: 26:25:59:f6:fc:6e:35:a4:69:9c:42:30:7b:cf:dd: 99:76:29:19:ce:c7:d3:c6:f5:6d:35:9e:d1:b4:fa: 93:f1:86:40:65:44:27:43:0a:14:a2:a8:8e:50:7d: d0:8b:89:f9:31:cc:5f:f3:6b:50:74:14:3e:f2:d3: 7c:42:58:f2:5a:25:52:4d:02:ed:bb:f4:84:01:ce: 71:55:92:80:13:e8:f9:1e:98:38:9d:8e:f7:69:aa: 6d:79:b4:0f:66:cb:a2:cc:1e:d0:39:dd:fb:9d:11: 73:66:1a:9b:4d:54:48:7a:48:8f:5b:39:b0:de:20: 37:39:9e:e3:b7:7d:c4:8d:85:e6:cc:3b:cc:65:c7: 05:49:1c:5c:5d:5c:57:60:51:df:1f:fa:4a:e8:0e: 91:37:2a:a0:a3:f5:d6:ba:09:f2:c7:f1:99:dc:17: 98:96:8d:80:8b:29:3e:1e:7a:18:08:52:47:52:36: bc:52:d4:77:48:ee:df:b7:1e:b0:da:e3:de:9e:9a: e9:61:55:e6:c7:c8:ca:4b:08:64:b1:70:3e:f2:13: 16:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B0:3E:C1:30:5A:6B:70:81:5D:AB:96:44:0B:70:A8:1C:01:00:4A X509v3 Authority Key Identifier: keyid:E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:52:9f:e9:8e:cb:47:ed:cb:89:d0:c6:5e:a6:e6:89:ec:41: 61:ea:a1:7d:7d:ec:80:2b:aa:ba:8b:97:4f:7c:72:87:a7:15: 7d:f4:a5:3b:ab:39:3c:81:84:62:d1:44:40:8b:5c:c9:0a:20: 10:18:fe:71:bd:80:17:73:f1:ed:82:0a:13:4c:c2:ed:67:35: 04:60:02:87:8d:e1:05:05:62:eb:ce:ce:31:86:f0:90:75:59: 87:ca:09:27:48:3f:93:86:5e:27:b7:19:ef:49:8c:42:12:c4: c3:76:de:ec:c6:89:37:12:1e:d8:62:98:eb:61:c1:f4:b8:81: ef:b8:c7:13:b6:a6:66:f1:5c:2a:14:64:15:94:9c:cf:35:57: 94:fb:6e:07:4f:3c:33:ee:12:df:d1:87:5a:74:d9:5f:9a:07: dc:12:d3:1b:18:d7:65:41:eb:0a:d4:28:b3:d3:6a:49:e8:7f: 4c:5a:67:4b:2e:a7:be:69:dc:90:3b:67:58:c1:b3:3c:e7:5a: 34:cd:21:71:6d:d7:66:1b:0e:d5:2c:8b:a4:69:38:03:32:18: 01:7f:09:7f:36:58:f3:54:d1:73:9d:34:cc:e7:35:96:d1:f6: 3c:c9:03:f9:51:4d:42:4b:ab:1b:60:ba:2f:96:9d:ae:f9:58: dd:56:e7:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTkqo2XzSWqQPMnMZkWhnAnMe0XowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIz MzNFQkI1ODAeFw0yNTExMDUwMDM2NDlaFw0yNTExMDgwMzEyNDlaMDMxMTAvBgNV BAMTKEE3QjAzRUMxMzA1QTZCNzA4MTVEQUI5NjQ0MEI3MEE4MUMwMTAwNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrSky6bXXLfPAdtZmFN0dLqcsb bBBB1aA36ttsWZJJFDjwfcUinxC4SoCYWiYlWfb8bjWkaZxCMHvP3Zl2KRnOx9PG 9W01ntG0+pPxhkBlRCdDChSiqI5QfdCLifkxzF/za1B0FD7y03xCWPJaJVJNAu27 9IQBznFVkoAT6PkemDidjvdpqm15tA9my6LMHtA53fudEXNmGptNVEh6SI9bObDe IDc5nuO3fcSNhebMO8xlxwVJHFxdXFdgUd8f+kroDpE3KqCj9da6CfLH8ZncF5iW jYCLKT4eehgIUkdSNrxS1HdI7t+3HrDa496emulhVebHyMpLCGSxcD7yExYJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp7A+wTBaa3CBXauWRAtwqBwBAEowHwYDVR0j BBgwFoAU5yMdGj4FG9kD24bX3gB3wjM+u1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTE3OTRhYS0zMjkxLTQ4M2ItYWMwYi03YmM3YjFhNjdjYzYvMC9FNzIzMUQxQTNF MDUxQkQ5MDNEQjg2RDdERTAwNzdDMjMzM0VCQjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIzMzNF QkI1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWExNzk0YWEtMzI5MS00ODNiLWFj MGItN2JjN2IxYTY3Y2M2LzAvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3 QzIzMzNFQkI1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN1Sn+mOy0fty4nQxl6m5onsQWHqoX197IAr qrqLl098coenFX30pTurOTyBhGLRRECLXMkKIBAY/nG9gBdz8e2CChNMwu1nNQRg AoeN4QUFYuvOzjGG8JB1WYfKCSdIP5OGXie3Ge9JjEISxMN23uzGiTcSHthimOth wfS4ge+4xxO2pmbxXCoUZBWUnM81V5T7bgdPPDPuEt/Rh1p02V+aB9wS0xsY12VB 6wrUKLPTaknof0xaZ0sup75p3JA7Z1jBszznWjTNIXFt12YbDtUsi6RpOAMyGAF/ CX82WPNU0XOdNMznNZbR9jzJA/lRTUJLqxtgui+Wna75WN1W588= -----END CERTIFICATE-----Generated at Wed Nov 5 11:45:26 2025 by rpki-client