$ rpki-client -vvf repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft File: E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft (raw, json) Hash identifier: qeq5AA/yiF+q0/mSDFcT2OG8ClkkWjyEJ4N808575o4= Subject key identifier: 47:D8:71:5A:B7:91:28:58:94:DC:59:1F:56:61:CA:73:1A:A1:F6:E1 Authority key identifier: E0:B3:E0:49:B0:31:30:8B:37:78:BB:68:5F:D3:D1:49:FA:69:DD:3B Certificate issuer: /CN=E0B3E049B031308B3778BB685FD3D149FA69DD3B Certificate serial: 6F6CD39AC3D2BE49FBA6BE11096A1158CD6D421C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft Manifest number: 0140 Signing time: Wed 05 Nov 2025 08:22:08 +0000 Manifest this update: Wed 05 Nov 2025 08:17:08 +0000 Manifest next update: Sat 08 Nov 2025 09:03:08 +0000 Files and hashes: 1: E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl (hash: kPYFy+uU74rrGcD3bf8kJMG8mBT4+4oEqjF08kc4mXA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 09:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:6c:d3:9a:c3:d2:be:49:fb:a6:be:11:09:6a:11:58:cd:6d:42:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0B3E049B031308B3778BB685FD3D149FA69DD3B Validity Not Before: Nov 5 08:17:08 2025 GMT Not After : Nov 8 09:03:08 2025 GMT Subject: CN=47D8715AB791285894DC591F5661CA731AA1F6E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b2:47:56:60:d7:a9:e9:d2:03:6a:76:2e:67: 23:dc:f0:a9:7b:21:91:db:eb:ed:95:e9:f2:01:77: 02:82:12:c5:fa:9b:3c:8f:97:75:5c:df:26:29:43: 40:72:27:26:ed:f2:bd:e7:50:6e:9c:f1:34:23:60: 35:40:86:c8:76:88:54:83:31:ba:9a:20:3a:f4:a0: 2d:80:d7:b4:28:ff:39:1c:4c:b0:56:85:5f:04:7e: 42:24:3c:2c:89:d5:b7:fd:cc:22:5d:1f:cc:07:ef: ad:05:9e:78:9d:08:03:5c:a9:38:dd:99:39:7c:83: 39:10:87:f8:3b:14:47:97:07:c6:40:f2:bc:0e:00: a8:55:dc:4a:e6:db:74:79:68:3e:fd:c4:c5:06:0f: 4d:72:57:6b:d1:6b:2d:10:2e:4d:75:09:f5:5f:31: 4d:a7:70:3b:c9:55:7d:40:2e:3f:bb:86:f3:f8:ec: a6:48:3a:1e:b5:e1:aa:d6:44:ef:74:d1:17:7b:32: 9c:be:34:d2:6c:26:3d:e0:d4:68:b8:c4:36:bb:a0: c8:89:21:b6:f2:54:12:c6:64:c0:28:1f:3c:26:17: b6:d6:cf:bc:f6:33:b9:6a:89:c0:65:89:5c:77:bf: dc:2b:94:2f:05:14:d1:4a:e0:e9:80:f4:5d:95:55: cb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D8:71:5A:B7:91:28:58:94:DC:59:1F:56:61:CA:73:1A:A1:F6:E1 X509v3 Authority Key Identifier: keyid:E0:B3:E0:49:B0:31:30:8B:37:78:BB:68:5F:D3:D1:49:FA:69:DD:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B3E049B031308B3778BB685FD3D149FA69DD3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1c7e833-6c54-4e0b-831c-1c1a710ce8e3/0/E0B3E049B031308B3778BB685FD3D149FA69DD3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:90:a1:58:40:6d:2f:ed:db:8e:b1:75:8f:df:c4:e2:87:cd: f8:83:89:cf:85:30:93:f9:f5:2c:16:e3:56:cc:7c:a6:af:a3: 2d:21:af:12:cc:ab:96:09:80:e8:0d:6c:7e:8e:54:67:51:0d: 98:8d:8a:47:3c:1f:6d:cb:d0:d5:bd:19:1f:57:a8:70:e6:cc: 79:6a:85:c3:8b:81:88:d7:99:68:9b:ff:07:46:23:ef:72:41: 94:59:b3:29:38:57:c4:fb:d7:92:cd:ca:26:04:01:5d:e9:c5: 5d:9d:2c:82:86:90:cf:b9:d9:3e:c1:0b:d7:be:86:15:45:1c: d3:90:95:52:13:c2:ca:c0:68:ca:ae:4b:70:a3:08:8c:9f:b0: 26:e9:d7:17:60:d0:07:04:08:82:a1:f3:a9:91:fc:39:9d:af: 1f:19:49:f4:01:ff:0f:00:f5:e9:9c:be:bf:41:3d:89:21:dc: 37:ee:fa:a2:1d:5a:69:fa:69:a4:ec:3f:09:8e:90:1e:38:bb: ea:4f:a7:ea:11:93:55:8a:db:aa:34:c4:e2:d7:86:f4:7c:7c: 6e:fc:fa:ed:7a:ff:1d:e2:a1:5f:f3:c3:c8:35:2e:e0:dc:a4: 5f:11:6d:54:a9:bd:92:26:15:50:5c:7c:c4:f4:4f:21:06:42: 6f:dd:81:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb2zTmsPSvkn7pr4RCWoRWM1tQhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0QxNDlG QTY5REQzQjAeFw0yNTExMDUwODE3MDhaFw0yNTExMDgwOTAzMDhaMDMxMTAvBgNV BAMTKDQ3RDg3MTVBQjc5MTI4NTg5NERDNTkxRjU2NjFDQTczMUFBMUY2RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3skdWYNep6dIDanYuZyPc8Kl7 IZHb6+2V6fIBdwKCEsX6mzyPl3Vc3yYpQ0ByJybt8r3nUG6c8TQjYDVAhsh2iFSD MbqaIDr0oC2A17Qo/zkcTLBWhV8EfkIkPCyJ1bf9zCJdH8wH760FnnidCANcqTjd mTl8gzkQh/g7FEeXB8ZA8rwOAKhV3Erm23R5aD79xMUGD01yV2vRay0QLk11CfVf MU2ncDvJVX1ALj+7hvP47KZIOh614arWRO900Rd7Mpy+NNJsJj3g1Gi4xDa7oMiJ IbbyVBLGZMAoHzwmF7bWz7z2M7lqicBliVx3v9wrlC8FFNFK4OmA9F2VVcu/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR9hxWreRKFiU3FkfVmHKcxqh9uEwHwYDVR0j BBgwFoAU4LPgSbAxMIs3eLtoX9PRSfpp3TswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWM3ZTgzMy02YzU0LTRlMGItODMxYy0xYzFhNzEwY2U4ZTMvMC9FMEIzRTA0OUIw MzEzMDhCMzc3OEJCNjg1RkQzRDE0OUZBNjlERDNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0QxNDlGQTY5 REQzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFjN2U4MzMtNmM1NC00ZTBiLTgz MWMtMWMxYTcxMGNlOGUzLzAvRTBCM0UwNDlCMDMxMzA4QjM3NzhCQjY4NUZEM0Qx NDlGQTY5REQzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEaQoVhAbS/t246xdY/fxOKHzfiDic+FMJP5 9SwW41bMfKavoy0hrxLMq5YJgOgNbH6OVGdRDZiNikc8H23L0NW9GR9XqHDmzHlq hcOLgYjXmWib/wdGI+9yQZRZsyk4V8T715LNyiYEAV3pxV2dLIKGkM+52T7BC9e+ hhVFHNOQlVITwsrAaMquS3CjCIyfsCbp1xdg0AcECIKh86mR/Dmdrx8ZSfQB/w8A 9emcvr9BPYkh3Dfu+qIdWmn6aaTsPwmOkB44u+pPp+oRk1WK26o0xOLXhvR8fG78 +u16/x3ioV/zw8g1LuDcpF8RbVSpvZImFVBcfMT0TyEGQm/dgXY= -----END CERTIFICATE-----Generated at Wed Nov 5 22:04:08 2025 by rpki-client