$ rpki-client -vvf repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft File: EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft (raw, json) Hash identifier: S6W9hiZpXf0uolqle+VEbDppiANzWX1IkpFKs/xfmB4= Subject key identifier: 4D:8E:05:7F:70:97:84:54:BF:E9:B1:07:FE:80:53:F9:41:CA:25:3E Authority key identifier: EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3 Certificate issuer: /CN=EE12F179A5D1F52EC033677282AE7E2E72E0F2C3 Certificate serial: 033BF4CF92EE29907AA6084CFCA2487B4B433174 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft Manifest number: 018A Signing time: Tue 04 Nov 2025 23:11:19 +0000 Manifest this update: Tue 04 Nov 2025 23:06:19 +0000 Manifest next update: Sat 08 Nov 2025 00:17:19 +0000 Files and hashes: 1: 3130332e38352e35322e302f32342d3234203d3e20313530353535.roa (hash: kUp7KI2fPhlmcspldsUBOsyjkjUvmMSaheteN59dWW0=) 2: 3130332e38352e35322e302f32332d3233203d3e20313530353535.roa (hash: +9CDenNH43oJ9XkYbEWMdjfmnpMvrt7QWdKjYHPJebM=) 3: EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl (hash: 6WFuciy3XxK+zInpuRSVXTfM172AZ9QhcC8urEjNiJU=) 4: 3130332e38352e35332e302f32342d3234203d3e20313530353535.roa (hash: mZAxTr3skSw5Z8e7tPmU/OrFl4lSut1UK4pgkxrw8Us=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 00:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:3b:f4:cf:92:ee:29:90:7a:a6:08:4c:fc:a2:48:7b:4b:43:31:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE12F179A5D1F52EC033677282AE7E2E72E0F2C3 Validity Not Before: Nov 4 23:06:19 2025 GMT Not After : Nov 8 00:17:19 2025 GMT Subject: CN=4D8E057F70978454BFE9B107FE8053F941CA253E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b7:cc:26:11:dc:2a:b0:b7:0d:ca:f2:f8:24: 70:1c:31:37:cb:d2:34:9f:11:88:1f:23:d0:83:8b: 31:0e:bf:aa:ce:58:b1:35:c6:f5:f2:69:5e:be:e1: 2e:74:1e:73:17:0a:2b:0a:47:35:8e:b8:0f:98:66: 5d:1b:f1:9d:8c:40:8c:9c:7d:37:48:8a:6f:68:de: 3a:e4:c1:d6:c5:58:ea:8a:dd:14:e2:80:18:e0:c4: 52:87:66:bb:d3:f1:1e:7e:20:b9:7f:49:fd:fd:d6: 81:bb:05:f4:24:aa:a7:a7:0a:d2:a5:c4:24:8c:d7: 89:8d:0a:47:6b:37:fe:46:80:59:ef:0f:fd:2c:9e: b0:ca:c1:c4:94:2c:b2:8e:de:04:9f:b6:15:96:2b: 50:ff:f3:42:ad:8d:50:2e:06:fe:c8:c7:ef:c9:3a: c5:e6:32:cc:bd:50:ee:39:35:4c:54:ed:86:d4:d2: e6:41:a2:e7:45:f4:0b:ca:7d:b2:c0:fc:89:84:17: b2:85:77:12:32:2d:10:04:ee:8d:f4:1f:f4:02:61: 50:de:fc:8c:f6:a5:d1:39:8d:57:1e:36:0e:b5:6c: c1:7b:aa:5a:e1:a5:47:0b:f8:af:af:c9:7d:82:13: 17:78:59:1b:5f:ef:19:e9:96:66:86:57:cf:8f:be: 7a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8E:05:7F:70:97:84:54:BF:E9:B1:07:FE:80:53:F9:41:CA:25:3E X509v3 Authority Key Identifier: keyid:EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:68:24:01:a7:32:f1:67:8f:72:e0:d0:11:78:24:ea:d6:b7: e1:45:d8:41:5d:b1:fa:5e:1e:68:c4:80:a3:5d:d6:f2:ca:b0: 0a:18:7b:a7:a0:16:82:f8:cd:96:19:7e:4e:a6:bf:2e:40:3b: ec:55:be:00:00:38:9e:b4:c2:27:7a:65:e1:f0:fd:bb:b5:8d: b0:94:72:94:e6:6f:b2:ce:e9:a3:e5:46:af:de:cf:69:0b:9e: 8c:3d:25:80:b1:57:72:08:e4:8c:09:fb:c2:9d:87:16:9f:ef: 6a:34:61:86:43:0f:2f:e0:db:76:02:f5:1e:2a:a6:b8:aa:ca: d4:19:89:3b:d7:5f:08:fb:af:62:15:ce:4a:12:2c:c1:f3:a2: 9f:89:7e:6c:d2:90:0e:90:09:bb:b5:b8:80:5c:ad:28:59:74: 8c:e6:8c:a5:b4:16:e4:bf:0d:18:c6:87:e1:1e:09:a0:6c:d4: 40:37:4f:ba:4a:b5:a8:6e:97:b9:fe:6a:22:9c:48:c4:2a:0f: e5:15:b9:15:27:f4:f4:72:67:d6:07:f0:29:ee:a9:34:30:fe: 4b:b7:1a:dc:05:48:ce:06:82:ab:f4:14:97:9b:25:ac:9c:dd: 4a:47:27:05:2d:6f:39:03:54:7d:b6:96:9d:cf:6b:e2:67:31: cb:7a:e5:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAzv0z5LuKZB6pghM/KJIe0tDMXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdFMkU3 MkUwRjJDMzAeFw0yNTExMDQyMzA2MTlaFw0yNTExMDgwMDE3MTlaMDMxMTAvBgNV BAMTKDREOEUwNTdGNzA5Nzg0NTRCRkU5QjEwN0ZFODA1M0Y5NDFDQTI1M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBt8wmEdwqsLcNyvL4JHAcMTfL 0jSfEYgfI9CDizEOv6rOWLE1xvXyaV6+4S50HnMXCisKRzWOuA+YZl0b8Z2MQIyc fTdIim9o3jrkwdbFWOqK3RTigBjgxFKHZrvT8R5+ILl/Sf391oG7BfQkqqenCtKl xCSM14mNCkdrN/5GgFnvD/0snrDKwcSULLKO3gSfthWWK1D/80KtjVAuBv7Ix+/J OsXmMsy9UO45NUxU7YbU0uZBoudF9AvKfbLA/ImEF7KFdxIyLRAE7o30H/QCYVDe /Iz2pdE5jVceNg61bMF7qlrhpUcL+K+vyX2CExd4WRtf7xnplmaGV8+Pvnq9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTY4Ff3CXhFS/6bEH/oBT+UHKJT4wHwYDVR0j BBgwFoAU7hLxeaXR9S7AM2dygq5+LnLg8sMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGQxZjRjZS0xNjliLTQzMWEtODI4Ni1jNWYzYTA3YmJiZTMvMC9FRTEyRjE3OUE1 RDFGNTJFQzAzMzY3NzI4MkFFN0UyRTcyRTBGMkMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdFMkU3MkUw RjJDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBkMWY0Y2UtMTY5Yi00MzFhLTgy ODYtYzVmM2EwN2JiYmUzLzAvRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdF MkU3MkUwRjJDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxoJAGnMvFnj3Lg0BF4JOrWt+FF2EFdsfpe HmjEgKNd1vLKsAoYe6egFoL4zZYZfk6mvy5AO+xVvgAAOJ60wid6ZeHw/bu1jbCU cpTmb7LO6aPlRq/ez2kLnow9JYCxV3II5IwJ+8Kdhxaf72o0YYZDDy/g23YC9R4q priqytQZiTvXXwj7r2IVzkoSLMHzop+JfmzSkA6QCbu1uIBcrShZdIzmjKW0FuS/ DRjGh+EeCaBs1EA3T7pKtahul7n+aiKcSMQqD+UVuRUn9PRyZ9YH8CnuqTQw/ku3 GtwFSM4Ggqv0FJebJayc3UpHJwUtbzkDVH22lp3Pa+JnMct65Uo= -----END CERTIFICATE-----Generated at Wed Nov 5 03:54:32 2025 by rpki-client