$ rpki-client -vvf repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft File: 581E644EEC44F9523CF189893E102BCC6008F9BE.mft (raw, json) Hash identifier: kkBAqQnOktS+ztkSsYSA7BjzkbUF0iGewElAii8o9/4= Subject key identifier: 0B:3B:C5:27:65:06:F6:65:DE:18:BF:0B:08:73:FD:97:29:B6:08:07 Authority key identifier: 58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE Certificate issuer: /CN=581E644EEC44F9523CF189893E102BCC6008F9BE Certificate serial: 6FD843E1A39677E48280D792D25565A3A14E9DBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft Manifest number: 01E9 Signing time: Tue 04 Nov 2025 06:00:01 +0000 Manifest this update: Tue 04 Nov 2025 05:55:01 +0000 Manifest next update: Fri 07 Nov 2025 11:38:01 +0000 Files and hashes: 1: 3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa (hash: BD1xmKcIfvv53+qbSsqU41j3RH48RKcR2IUwYcDCVHU=) 2: 581E644EEC44F9523CF189893E102BCC6008F9BE.crl (hash: ppEYklA2DC0wFTCDqRGNGzAdvXRhfHBMxKBYpfJLUeI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.crl rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 11:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:d8:43:e1:a3:96:77:e4:82:80:d7:92:d2:55:65:a3:a1:4e:9d:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=581E644EEC44F9523CF189893E102BCC6008F9BE Validity Not Before: Nov 4 05:55:01 2025 GMT Not After : Nov 7 11:38:01 2025 GMT Subject: CN=0B3BC5276506F665DE18BF0B0873FD9729B60807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:55:6b:a0:33:b2:ce:9e:4e:5b:0e:49:42:f0: 82:cd:08:c6:d4:67:c8:a3:31:82:fb:37:a9:9b:0d: 3a:63:65:32:25:33:d4:b2:18:51:c8:03:c9:c4:58: db:6e:66:b7:18:59:fd:2a:4f:32:d8:2c:fe:c9:18: c3:91:d2:4e:9e:f3:b4:9e:a1:10:03:f1:10:ee:92: cf:b5:4c:81:75:6f:1a:77:8f:b9:99:d4:c6:f6:de: db:d9:26:e7:da:a7:05:65:84:3c:60:59:33:a4:40: a6:5e:33:37:f5:77:9f:27:29:3b:5f:41:df:e9:ed: 0c:3e:7d:45:62:ab:29:2c:ea:2d:29:bb:9d:77:56: 9f:2c:1b:02:a5:70:72:4c:56:29:85:e5:d9:04:4c: 44:f8:20:45:a1:a0:4d:4a:4d:47:7e:e7:2a:0c:6f: b2:e8:32:f5:86:ca:9f:f2:80:c2:36:2a:93:e3:b3: 31:68:60:04:63:15:41:ce:ca:05:32:50:62:00:cf: a7:08:78:b6:32:1b:89:9d:cc:d6:9b:75:be:1e:03: 47:83:ca:d7:87:92:b9:72:e7:ef:94:e7:80:88:2d: c6:bf:97:18:d8:14:27:16:12:29:75:06:4c:d3:57: f7:50:ff:31:77:5a:c0:15:32:c2:c5:28:07:54:d3: 4c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3B:C5:27:65:06:F6:65:DE:18:BF:0B:08:73:FD:97:29:B6:08:07 X509v3 Authority Key Identifier: keyid:58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:53:6b:dc:7f:57:37:75:4f:e3:8c:c3:60:d2:d2:35:48:1b: 4a:8b:73:87:aa:cb:18:1d:35:3c:2a:16:8b:c8:1f:c6:31:04: 8d:52:0a:89:05:2c:1d:a5:50:cb:a3:fc:e3:1c:31:1d:52:1f: 03:aa:9e:25:9a:65:9e:4a:0d:09:e9:e8:8e:3f:0d:45:50:b2: d6:64:0a:a8:8b:8e:de:34:f1:b1:ad:d4:57:33:e3:6c:24:12: b8:78:de:7d:cd:61:ce:f5:62:03:d9:88:df:c5:36:1f:6b:4c: d9:7b:4c:31:46:24:ee:7c:c7:ff:46:c2:70:d6:16:21:9d:b6: 0d:e6:ea:f1:d4:a0:8e:6a:7e:c0:76:56:a3:2c:41:6f:a5:03: aa:08:2b:a7:53:f4:97:f4:9e:4e:1a:61:81:86:42:c4:2d:38: a3:1b:fc:b1:6d:b8:31:73:19:5a:f7:61:07:2d:c2:4a:3f:ed: 51:fd:c1:07:d8:65:97:c7:6b:df:31:98:46:0c:ee:c2:83:25: 58:11:04:b9:ea:50:04:14:90:c6:11:f6:d4:c8:72:b8:a0:80: c4:aa:cc:7e:58:d9:0c:21:20:15:ea:2e:a0:59:28:36:8a:5d: 21:ab:b2:9e:62:87:77:f7:41:0d:8d:7d:46:33:42:4a:2b:2e: ee:8f:b2:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb9hD4aOWd+SCgNeS0lVlo6FOnb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTgxRTY0NEVFQzQ0Rjk1MjNDRjE4OTg5M0UxMDJCQ0M2 MDA4RjlCRTAeFw0yNTExMDQwNTU1MDFaFw0yNTExMDcxMTM4MDFaMDMxMTAvBgNV BAMTKDBCM0JDNTI3NjUwNkY2NjVERTE4QkYwQjA4NzNGRDk3MjlCNjA4MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYVWugM7LOnk5bDklC8ILNCMbU Z8ijMYL7N6mbDTpjZTIlM9SyGFHIA8nEWNtuZrcYWf0qTzLYLP7JGMOR0k6e87Se oRAD8RDuks+1TIF1bxp3j7mZ1Mb23tvZJufapwVlhDxgWTOkQKZeMzf1d58nKTtf Qd/p7Qw+fUViqyks6i0pu513Vp8sGwKlcHJMVimF5dkETET4IEWhoE1KTUd+5yoM b7LoMvWGyp/ygMI2KpPjszFoYARjFUHOygUyUGIAz6cIeLYyG4mdzNabdb4eA0eD yteHkrly5++U54CILca/lxjYFCcWEil1BkzTV/dQ/zF3WsAVMsLFKAdU00wPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCzvFJ2UG9mXeGL8LCHP9lym2CAcwHwYDVR0j BBgwFoAUWB5kTuxE+VI88YmJPhArzGAI+b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Yjc5NDdhYS1jZTY5LTQwMTMtYTI1Ni01ODc5OWE1NjU4MWMvMC81ODFFNjQ0RUVD NDRGOTUyM0NGMTg5ODkzRTEwMkJDQzYwMDhGOUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTgxRTY0NEVFQzQ0Rjk1MjNDRjE4OTg5M0UxMDJCQ0M2MDA4 RjlCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3OTQ3YWEtY2U2OS00MDEzLWEy NTYtNTg3OTlhNTY1ODFjLzAvNTgxRTY0NEVFQzQ0Rjk1MjNDRjE4OTg5M0UxMDJC Q0M2MDA4RjlCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJTa9x/Vzd1T+OMw2DS0jVIG0qLc4eqyxgd NTwqFovIH8YxBI1SCokFLB2lUMuj/OMcMR1SHwOqniWaZZ5KDQnp6I4/DUVQstZk CqiLjt408bGt1Fcz42wkErh43n3NYc71YgPZiN/FNh9rTNl7TDFGJO58x/9GwnDW FiGdtg3m6vHUoI5qfsB2VqMsQW+lA6oIK6dT9Jf0nk4aYYGGQsQtOKMb/LFtuDFz GVr3YQctwko/7VH9wQfYZZfHa98xmEYM7sKDJVgRBLnqUAQUkMYR9tTIcriggMSq zH5Y2QwhIBXqLqBZKDaKXSGrsp5ih3f3QQ2NfUYzQkorLu6PstA= -----END CERTIFICATE-----Generated at Wed Nov 5 08:40:48 2025 by rpki-client