$ rpki-client -vvf repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft File: 020EA2304929066809CA6F723574798639D77438.mft (raw, json) Hash identifier: BIe7saUjYxyA8ZI19LXnVWUDjZtxd1cKq3lwUk34xBo= Subject key identifier: 38:53:3E:94:9B:85:C0:92:62:87:7B:39:E0:F5:66:4F:3C:0E:5F:ED Authority key identifier: 02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 Certificate issuer: /CN=020EA2304929066809CA6F723574798639D77438 Certificate serial: 72FC29B73FCB7CE058CCD83C6DAD1C3451F8A43E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft Manifest number: EE Signing time: Tue 04 Nov 2025 03:30:40 +0000 Manifest this update: Tue 04 Nov 2025 03:25:40 +0000 Manifest next update: Fri 07 Nov 2025 14:55:40 +0000 Files and hashes: 1: 3136302e32352e35342e302f32342d3234203d3e20313533303630.roa (hash: F+hf6H0tQ4o5DL4EaEr99NgmrD9BB/0HbFh2DX09QTE=) 2: 3136302e32352e35352e302f32342d3234203d3e20313533303630.roa (hash: MP77i5+UkMfE9Efc/VCdIpK7dS6PJg0LKmWtQikmXHg=) 3: 020EA2304929066809CA6F723574798639D77438.crl (hash: OKazjny+a73Ka5eb7QPrDyjegIZi0eik85dnXmfWFc4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:fc:29:b7:3f:cb:7c:e0:58:cc:d8:3c:6d:ad:1c:34:51:f8:a4:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020EA2304929066809CA6F723574798639D77438 Validity Not Before: Nov 4 03:25:40 2025 GMT Not After : Nov 7 14:55:40 2025 GMT Subject: CN=38533E949B85C09262877B39E0F5664F3C0E5FED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:72:15:df:f9:08:1f:9d:02:9c:24:e2:5a:a1: 58:0e:82:ed:b9:f5:1b:b4:24:02:df:88:a4:51:0d: 9b:9f:a5:0d:8f:4a:6b:61:4b:72:0c:bd:30:63:8b: c5:2b:9b:d3:94:cd:df:30:70:a4:05:01:e1:aa:44: 42:c2:a6:0a:d1:90:b4:3f:cc:d8:c3:36:60:83:2c: 4b:fb:25:ae:f8:7b:9a:d2:b1:05:e3:17:08:0d:1d: 74:bf:26:4a:e4:23:b6:52:c0:20:45:c2:42:d3:5f: b4:f6:34:fa:4a:8b:c2:c8:07:40:46:ce:2d:b1:72: d5:03:18:02:0b:31:87:48:cc:15:9a:5d:c5:0a:b2: 3b:0c:bd:cf:aa:62:96:00:62:55:98:49:79:9a:67: 28:c4:42:3b:57:c3:21:d1:bd:b8:1a:72:78:85:d7: 53:f1:79:5f:f3:01:e1:5a:af:14:eb:0d:a4:74:c8: df:a3:56:f7:46:7d:6e:e5:3b:36:63:6c:19:e7:24: 02:f3:8b:31:9a:9c:35:46:46:18:0f:d4:9e:54:42: 79:4b:d9:7e:22:59:95:f7:06:55:02:aa:42:a6:81: 6f:4e:b8:25:08:80:9a:29:6e:c1:76:be:55:f7:86: 64:bb:70:a7:07:9f:85:a5:4c:9e:89:74:77:14:f2: 94:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:53:3E:94:9B:85:C0:92:62:87:7B:39:E0:F5:66:4F:3C:0E:5F:ED X509v3 Authority Key Identifier: keyid:02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:5e:48:88:85:27:62:ab:27:25:e3:5f:e3:11:36:10:b2:b0: b4:2e:c2:05:83:05:24:48:ea:cd:5e:22:9f:9c:57:33:9b:0f: 94:8c:b8:e1:8f:cc:01:96:0f:cf:c3:38:74:9b:69:90:52:9c: 3a:86:4a:63:23:9a:f8:08:8a:eb:60:ad:f6:dc:f4:2a:92:ee: ee:4d:25:01:5b:28:cc:96:2c:d6:22:69:b2:53:ab:fb:1f:ff: 86:e8:ce:9d:1a:4b:32:8c:3d:e8:46:9d:94:d5:37:62:77:40: 8d:27:18:36:38:a8:84:fd:c0:c1:e2:76:ca:36:4a:1b:2d:64: 9c:34:3f:01:76:31:98:74:3e:8a:ed:06:12:52:89:d1:0f:9f: 97:7f:fe:e7:26:48:6d:c6:54:ef:81:46:82:ed:92:73:2d:78: ad:fe:27:45:61:ae:1e:11:af:03:6e:3c:4d:62:db:4d:09:5b: 14:bb:a0:39:ee:ee:d1:af:69:90:64:9b:f9:7e:61:12:31:3c: 8e:5e:e1:f9:a8:82:74:17:d4:f5:78:ba:c1:de:75:2d:58:29: e5:87:36:1a:b1:e5:12:ff:e3:aa:ec:c3:79:50:64:f9:76:50: 92:b5:87:c1:0a:d4:89:69:4d:f9:bc:ce:a3:49:99:18:17:43: 01:a8:64:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcvwptz/LfOBYzNg8ba0cNFH4pD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5ODYz OUQ3NzQzODAeFw0yNTExMDQwMzI1NDBaFw0yNTExMDcxNDU1NDBaMDMxMTAvBgNV BAMTKDM4NTMzRTk0OUI4NUMwOTI2Mjg3N0IzOUUwRjU2NjRGM0MwRTVGRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjchXf+QgfnQKcJOJaoVgOgu25 9Ru0JALfiKRRDZufpQ2PSmthS3IMvTBji8Urm9OUzd8wcKQFAeGqRELCpgrRkLQ/ zNjDNmCDLEv7Ja74e5rSsQXjFwgNHXS/JkrkI7ZSwCBFwkLTX7T2NPpKi8LIB0BG zi2xctUDGAILMYdIzBWaXcUKsjsMvc+qYpYAYlWYSXmaZyjEQjtXwyHRvbgacniF 11PxeV/zAeFarxTrDaR0yN+jVvdGfW7lOzZjbBnnJALzizGanDVGRhgP1J5UQnlL 2X4iWZX3BlUCqkKmgW9OuCUIgJopbsF2vlX3hmS7cKcHn4WlTJ6JdHcU8pQDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOFM+lJuFwJJih3s54PVmTzwOX+0wHwYDVR0j BBgwFoAUAg6iMEkpBmgJym9yNXR5hjnXdDgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWEyNmExMC01OGU4LTQzYzctOTQ3ZS03MjIxNzNkNjY2MTQvMC8wMjBFQTIzMDQ5 MjkwNjY4MDlDQTZGNzIzNTc0Nzk4NjM5RDc3NDM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5ODYzOUQ3 NzQzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVhMjZhMTAtNThlOC00M2M3LTk0 N2UtNzIyMTczZDY2NjE0LzAvMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5 ODYzOUQ3NzQzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEReSIiFJ2KrJyXjX+MRNhCysLQuwgWDBSRI 6s1eIp+cVzObD5SMuOGPzAGWD8/DOHSbaZBSnDqGSmMjmvgIiutgrfbc9CqS7u5N JQFbKMyWLNYiabJTq/sf/4bozp0aSzKMPehGnZTVN2J3QI0nGDY4qIT9wMHidso2 ShstZJw0PwF2MZh0PortBhJSidEPn5d//ucmSG3GVO+BRoLtknMteK3+J0Vhrh4R rwNuPE1i200JWxS7oDnu7tGvaZBkm/l+YRIxPI5e4fmognQX1PV4usHedS1YKeWH Nhqx5RL/46rsw3lQZPl2UJK1h8EK1IlpTfm8zqNJmRgXQwGoZP0= -----END CERTIFICATE-----Generated at Tue Nov 4 21:19:05 2025 by rpki-client