$ rpki-client -vvf repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft File: EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft (raw, json) Hash identifier: fQYnxZ8Bee9zMkbydcGV3Scg3lbw8m+LpiWqrYC+pKg= Subject key identifier: C2:A4:E1:73:64:37:3D:48:FE:22:7D:76:6E:FE:45:27:04:D9:4D:4A Authority key identifier: EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6 Certificate issuer: /CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6 Certificate serial: 27D1070A8EA5CCC8C8B5F4E9AEB788152399B69C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft Manifest number: 25 Signing time: Mon 03 Nov 2025 22:12:05 +0000 Manifest this update: Mon 03 Nov 2025 22:07:05 +0000 Manifest next update: Fri 07 Nov 2025 00:04:05 +0000 Files and hashes: 1: 34352e3132362e35372e302f32342d3234203d3e20313332363437.roa (hash: EEcqACfpJzv9e6aJJ3QgCFqjvxlrFVyI4AnnhuBfrzI=) 2: 323430323a656538303a3137363a3a2f34382d3438203d3e20313332363437.roa (hash: ssoTJWcnOTneohkhAvdxsLglXradXsID6/iYQ5O+53I=) 3: 3130332e31392e3137362e302f32342d3234203d3e20313332363437.roa (hash: S4kzvu4zbCmfw9stND1YY9BCQd30K/363b7rtm3YUq4=) 4: 323430323a656538303a35383a3a2f34382d3438203d3e20313332363437.roa (hash: 95YayLBo+Z60JGd6py6XLMSdK9u7PSYjLko8lAlklJ4=) 5: 3130332e31392e3137392e302f32342d3234203d3e20313332363437.roa (hash: MtiwOPRjzKh8TAh6x51imM/Vbo/YwNmBGuNUEh5cML4=) 6: 323430323a656538303a623a3a2f34382d3438203d3e20313332363437.roa (hash: vG82X1ya4RP+iLybP3Nf3VH9eiCkt21NvKQm4mVZqlY=) 7: 3130332e31392e3137372e302f32342d3234203d3e20313332363437.roa (hash: eUTXj0qM9U0VlVIo2698+rxVfkNrjLXS73ArKqTPZHc=) 8: 323430323a656538303a35363a3a2f34382d3438203d3e20313332363437.roa (hash: ILpEJfv/S+leWwxiBN0hUwFSsvpCv7zbnSPVhks28zg=) 9: 323430323a656538303a643a3a2f34382d3438203d3e20313332363437.roa (hash: xgpk0l8wHBzrP9AZayJBujyNuU1WlslUVoFQcTt2ROE=) 10: 34352e3132362e35362e302f32342d3234203d3e20313332363437.roa (hash: iVD71KXe0iI/vtmA+DjA6o/5T6NexfyKd675pvEkuFc=) 11: 323430323a656538303a633a3a2f34382d3438203d3e20313332363437.roa (hash: 2s6ODMSjUVaffAG6UbhZ8oJIX5hnW9ppp33Tq9tR3wY=) 12: 3130332e31392e3137382e302f32342d3234203d3e20313332363437.roa (hash: +54gsDdv0eW3zDbkaD5HbAoyLmCd/qoIOZWo63Fy2oM=) 13: 34352e3132362e35382e302f32342d3234203d3e20313332363437.roa (hash: WUYYTi2XuFyUmWlSOlOmbSyC8k33VJEvWxEEHToe/f4=) 14: EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl (hash: 8SUsKdFNwvE4d18CeEHilPyndqY+duw3seK4hdvYriQ=) 15: 34352e3132362e35392e302f32342d3234203d3e20313332363437.roa (hash: ayAqEs1b1nTm1L0OUHAQCAticCSJ6e0ze/fgkYyk4lc=) 16: 323030313a6466353a343030303a3a2f34382d3438203d3e20313332363437.roa (hash: ea0BH5+9TDEtitqep4Xyx8IGG6HIfg5zxzhcj4dvnnA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:04:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:d1:07:0a:8e:a5:cc:c8:c8:b5:f4:e9:ae:b7:88:15:23:99:b6:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6 Validity Not Before: Nov 3 22:07:05 2025 GMT Not After : Nov 7 00:04:05 2025 GMT Subject: CN=C2A4E17364373D48FE227D766EFE452704D94D4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4f:7b:86:89:84:24:cf:ea:f3:be:3b:a5:49: 82:11:74:08:75:d6:d4:39:55:46:b5:88:e3:ee:4a: bc:52:c4:09:a8:eb:09:d7:d0:4c:6c:24:ff:44:de: 40:b2:90:d3:f6:da:25:36:66:77:f6:02:07:6f:7e: 64:6e:49:37:3a:45:42:79:87:29:02:f9:a9:44:fc: cd:54:97:ec:22:58:56:27:d8:50:91:58:60:64:e5: 3c:e5:76:56:18:6c:7d:3d:24:76:6e:02:42:1d:15: be:57:d0:4d:6f:34:aa:6a:68:86:ba:35:09:13:08: bc:b9:81:4c:2a:f0:74:a1:75:77:8a:45:02:11:d1: 6d:3c:22:42:95:68:08:aa:8e:fd:44:ab:4a:03:c0: 7c:c2:d0:82:df:67:71:f0:89:d5:90:c6:f7:d4:ac: 36:c3:e8:a1:35:72:ad:42:fb:61:c9:5f:fa:ab:3d: 90:63:4e:d7:21:3e:80:b1:8b:5c:47:d4:a4:26:c1: 8a:c0:e1:1e:92:39:03:9b:c3:47:ea:81:dc:e4:f9: 4e:06:c9:6a:68:fa:12:34:35:bb:36:67:59:7a:97: ce:e6:1f:da:a2:56:cf:c2:b0:6c:98:0b:7e:a4:5e: 83:05:ec:58:26:b5:d0:e4:59:fa:3c:03:c4:b7:5b: 87:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A4:E1:73:64:37:3D:48:FE:22:7D:76:6E:FE:45:27:04:D9:4D:4A X509v3 Authority Key Identifier: keyid:EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:0b:62:40:b3:8a:bd:55:3e:59:7b:98:d1:b0:45:08:8b:2a: d9:06:16:3d:3c:61:e7:a4:c8:95:26:d8:6b:06:f0:13:6c:33: 64:4d:48:9d:02:b2:c3:35:c5:79:ae:d6:ec:78:f5:db:01:ab: 88:7e:79:0c:e4:34:8d:73:6a:c8:c4:10:fa:8e:2a:c6:90:ea: 38:ca:50:67:97:9d:05:0d:2e:9b:23:5f:06:69:e7:cd:61:95: e3:2e:3c:6f:c8:1f:73:d6:75:75:b8:70:73:6c:ad:22:70:68: 62:9e:5d:24:a2:18:90:67:63:bf:64:24:a5:e8:2c:06:90:a4: de:54:f1:bf:51:e2:aa:f5:72:24:e4:25:a2:26:0a:22:2e:d3: a8:21:c7:33:53:b2:7a:c9:5b:00:c0:ea:3a:79:bc:d5:f8:79: 75:39:79:95:3e:80:dc:b7:26:55:8b:ff:0d:14:ec:bf:81:f8: 29:32:89:a2:43:d5:99:71:62:fa:40:c3:cf:e3:6a:65:fd:e7: b4:a5:e0:84:cb:53:ea:cf:6b:6f:6d:ab:7a:ee:a8:53:1a:cd: 6a:45:fc:d5:49:e4:4a:70:7c:4c:56:94:c9:d4:0b:cd:1e:01: 6c:77:e2:3f:83:2f:85:29:38:fd:f8:e3:e4:11:4f:fd:22:95: 0a:f5:4b:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ9EHCo6lzMjItfTprreIFSOZtpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5RDk4NzJBNzEwRkU3MTNEQzYyMjQxRDU4NzcwM0JE RjdEQzFENjAeFw0yNTExMDMyMjA3MDVaFw0yNTExMDcwMDA0MDVaMDMxMTAvBgNV BAMTKEMyQTRFMTczNjQzNzNENDhGRTIyN0Q3NjZFRkU0NTI3MDREOTRENEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnT3uGiYQkz+rzvjulSYIRdAh1 1tQ5VUa1iOPuSrxSxAmo6wnX0ExsJP9E3kCykNP22iU2Znf2AgdvfmRuSTc6RUJ5 hykC+alE/M1Ul+wiWFYn2FCRWGBk5TzldlYYbH09JHZuAkIdFb5X0E1vNKpqaIa6 NQkTCLy5gUwq8HShdXeKRQIR0W08IkKVaAiqjv1Eq0oDwHzC0ILfZ3HwidWQxvfU rDbD6KE1cq1C+2HJX/qrPZBjTtchPoCxi1xH1KQmwYrA4R6SOQObw0fqgdzk+U4G yWpo+hI0Nbs2Z1l6l87mH9qiVs/CsGyYC36kXoMF7FgmtdDkWfo8A8S3W4dbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwqThc2Q3PUj+In12bv5FJwTZTUowHwYDVR0j BBgwFoAU7J2YcqcQ/nE9xiJB1YdwO999wdYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjYxN2Q4Yy1kMTU0LTQ2MWUtYmNjYS1iNjZkMjY3Y2ZmYzcvMC9FQzlEOTg3MkE3 MTBGRTcxM0RDNjIyNDFENTg3NzAzQkRGN0RDMUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5RDk4NzJBNzEwRkU3MTNEQzYyMjQxRDU4NzcwM0JERjdE QzFENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY2MTdkOGMtZDE1NC00NjFlLWJj Y2EtYjY2ZDI2N2NmZmM3LzAvRUM5RDk4NzJBNzEwRkU3MTNEQzYyMjQxRDU4Nzcw M0JERjdEQzFENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKYLYkCzir1VPll7mNGwRQiLKtkGFj08Yeek yJUm2GsG8BNsM2RNSJ0CssM1xXmu1ux49dsBq4h+eQzkNI1zasjEEPqOKsaQ6jjK UGeXnQUNLpsjXwZp581hleMuPG/IH3PWdXW4cHNsrSJwaGKeXSSiGJBnY79kJKXo LAaQpN5U8b9R4qr1ciTkJaImCiIu06ghxzNTsnrJWwDA6jp5vNX4eXU5eZU+gNy3 JlWL/w0U7L+B+CkyiaJD1ZlxYvpAw8/jamX957Sl4ITLU+rPa29tq3ruqFMazWpF /NVJ5EpwfExWlMnUC80eAWx34j+DL4UpOP344+QRT/0ilQr1S8Y= -----END CERTIFICATE-----Generated at Tue Nov 4 02:05:58 2025 by rpki-client