$ rpki-client -vvf repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft File: 0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft (raw, json) Hash identifier: lcvVm/HffSUR3qXKzp+ItDVLy4ebAyk96RdVw06qFLk= Subject key identifier: 89:74:5E:C0:E7:96:0B:7F:B0:84:84:0A:6E:AF:3C:9E:A4:F3:EF:A0 Authority key identifier: 0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 Certificate issuer: /CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Certificate serial: 56C627127204C2880292895FECE7FF094C8AF1D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft Manifest number: 0195 Signing time: Mon 03 Nov 2025 14:31:14 +0000 Manifest this update: Mon 03 Nov 2025 14:26:14 +0000 Manifest next update: Thu 06 Nov 2025 23:37:14 +0000 Files and hashes: 1: 3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa (hash: yEcjBYMEhWAt95OnuEgZE8+ngUIiXOyjNrn3KEwiAMQ=) 2: 3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa (hash: aKqDqYBnpCKhc8gJwr/XqiZQGx53wEdqRvJeZczMctg=) 3: 3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa (hash: 5vckiyQJuSi5InScnRJB6lh0igVA9LU4uDMI9g1nnHk=) 4: 0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl (hash: fQiR0zhwtTQxRoILuNSaoginikNi1bMC0FRt3F1HaEo=) 5: 323430303a613334303a3a2f33322d3332203d3e20313336303735.roa (hash: lN/0N+kBLkh9oCnDV7GHH4dEry+Eu95iWP1NL/JaKa0=) 6: 3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa (hash: YVW6U8qaSLxFWjHeTdwpm9kiRp4vZO+dMYcJdXXF9qE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 23:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:c6:27:12:72:04:c2:88:02:92:89:5f:ec:e7:ff:09:4c:8a:f1:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Validity Not Before: Nov 3 14:26:14 2025 GMT Not After : Nov 6 23:37:14 2025 GMT Subject: CN=89745EC0E7960B7FB084840A6EAF3C9EA4F3EFA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b7:63:1e:52:4c:8e:d2:cf:d7:ac:e4:fb:0b: 21:83:96:11:fb:91:e3:62:e5:94:2a:a1:5f:c8:17: cf:8f:fd:50:4b:ee:15:2e:fe:29:2e:00:38:ae:75: eb:2e:e5:90:f3:2b:1d:11:11:50:48:29:53:95:7c: 97:aa:df:bc:19:7d:f0:7b:80:9a:b9:79:fe:eb:50: 39:9a:97:79:26:d9:d0:29:86:78:c0:90:25:fe:e5: 03:40:9c:38:47:13:fe:59:52:2b:73:c6:21:03:5f: 19:ac:a5:f2:ea:f5:39:e5:b1:00:f2:0e:7c:a5:80: 88:69:0e:4f:ae:50:54:86:9a:b5:cc:32:a9:cb:c1: 54:f7:b5:2e:66:fb:02:b5:d8:ed:f2:ae:d1:2c:27: 36:97:74:a5:cf:e1:8e:52:63:9e:63:ae:4b:25:c1: a0:74:2c:a4:1e:f0:9f:08:16:27:b8:38:e0:32:43: 66:a0:4b:f1:a6:89:0d:71:9b:00:e8:89:7f:07:d2: 3f:ca:09:b7:d9:cb:08:d1:43:b3:89:ec:a8:ae:4b: 6b:3c:db:97:f8:41:47:fb:ff:05:59:68:f5:fb:00: 7d:1d:87:db:57:1d:2b:0b:c8:f0:58:15:3d:a3:09: 10:5b:bd:ba:d3:50:2a:13:9b:b4:f4:39:d6:4c:54: 20:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:74:5E:C0:E7:96:0B:7F:B0:84:84:0A:6E:AF:3C:9E:A4:F3:EF:A0 X509v3 Authority Key Identifier: keyid:0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:7c:84:28:86:16:c8:77:51:96:64:ed:df:52:b3:1a:a9:a4: e8:fa:19:5f:5f:2a:b7:7f:6a:5a:60:3b:7c:a9:01:65:41:b7: e0:0a:1d:73:3c:78:6a:92:39:ba:ba:92:a4:76:18:74:d7:8b: c1:b4:fa:7c:9f:b7:d7:3f:ff:14:c7:75:b6:3a:ec:c2:25:f9: 11:4b:ad:b0:05:aa:bd:fb:ee:8e:19:44:5b:3d:6b:31:dc:93: 93:e8:c3:60:51:60:bc:f3:64:88:99:f8:1a:8a:18:b6:85:df: 2c:63:a8:dc:d3:8a:ce:47:f0:4e:6d:aa:29:3d:ca:a0:07:72: 68:3b:4f:e7:b7:c5:b7:72:42:0b:85:5e:a5:d3:7b:ce:89:b5: 5e:43:b9:3f:ea:83:d8:b2:4b:cf:92:be:15:51:d5:54:13:bd: 07:67:ac:b3:87:b1:db:78:47:75:29:06:a1:19:99:39:21:a3: 3e:44:4a:c6:a1:71:23:2d:07:54:ca:be:39:9b:d2:27:00:6e: 5a:e7:55:29:7f:bb:18:80:c8:6f:05:1a:54:f2:ea:6a:84:c7: 74:10:d1:3b:7b:46:2e:60:dd:3e:e1:12:be:d5:40:f5:57:77: 45:1c:e8:c5:6b:02:3c:a9:da:71:98:6e:2a:d5:e9:e9:cc:27: 80:8a:33:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVsYnEnIEwogCkolf7Of/CUyK8dcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJD QUVBREM5NjAeFw0yNTExMDMxNDI2MTRaFw0yNTExMDYyMzM3MTRaMDMxMTAvBgNV BAMTKDg5NzQ1RUMwRTc5NjBCN0ZCMDg0ODQwQTZFQUYzQzlFQTRGM0VGQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqt2MeUkyO0s/XrOT7CyGDlhH7 keNi5ZQqoV/IF8+P/VBL7hUu/ikuADiudesu5ZDzKx0REVBIKVOVfJeq37wZffB7 gJq5ef7rUDmal3km2dAphnjAkCX+5QNAnDhHE/5ZUitzxiEDXxmspfLq9TnlsQDy DnylgIhpDk+uUFSGmrXMMqnLwVT3tS5m+wK12O3yrtEsJzaXdKXP4Y5SY55jrksl waB0LKQe8J8IFie4OOAyQ2agS/GmiQ1xmwDoiX8H0j/KCbfZywjRQ7OJ7KiuS2s8 25f4QUf7/wVZaPX7AH0dh9tXHSsLyPBYFT2jCRBbvbrTUCoTm7T0OdZMVCDPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiXRewOeWC3+whIQKbq88nqTz76AwHwYDVR0j BBgwFoAUDkImpfF2aurnaKKmdsPossrq3JYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTBlNWFjMi1iNmJiLTRiZWMtOWRjOS1lNDMwYTY3MzMyMTYvMC8wRTQyMjZBNUYx NzY2QUVBRTc2OEEyQTY3NkMzRThCMkNBRUFEQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJDQUVB REM5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUwZTVhYzItYjZiYi00YmVjLTlk YzktZTQzMGE2NzMzMjE2LzAvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4 QjJDQUVBREM5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKR8hCiGFsh3UZZk7d9SsxqppOj6GV9fKrd/ alpgO3ypAWVBt+AKHXM8eGqSObq6kqR2GHTXi8G0+nyft9c//xTHdbY67MIl+RFL rbAFqr377o4ZRFs9azHck5Pow2BRYLzzZIiZ+BqKGLaF3yxjqNzTis5H8E5tqik9 yqAHcmg7T+e3xbdyQguFXqXTe86JtV5DuT/qg9iyS8+SvhVR1VQTvQdnrLOHsdt4 R3UpBqEZmTkhoz5ESsahcSMtB1TKvjmb0icAblrnVSl/uxiAyG8FGlTy6mqEx3QQ 0Tt7Ri5g3T7hEr7VQPVXd0Uc6MVrAjyp2nGYbirV6enMJ4CKM2s= -----END CERTIFICATE-----Generated at Wed Nov 5 23:25:49 2025 by rpki-client