$ rpki-client -vvf repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft File: E42B0752D5FFAB254C3F0E221499F67420870FEB.mft (raw, json) Hash identifier: QMJNJnDPSedrOlLG5YyQmUC/ejWyOUtej1CJrMd/wqM= Subject key identifier: 89:C2:CC:55:82:45:C2:67:B0:2E:F7:85:72:1D:AF:66:7A:9D:64:E2 Authority key identifier: E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB Certificate issuer: /CN=E42B0752D5FFAB254C3F0E221499F67420870FEB Certificate serial: 5A2B2465622825D4CC42852AF033CDD26028254C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft Manifest number: 04A5 Signing time: Tue 04 Nov 2025 14:11:13 +0000 Manifest this update: Tue 04 Nov 2025 14:06:13 +0000 Manifest next update: Fri 07 Nov 2025 14:11:13 +0000 Files and hashes: 1: 323430323a646130303a3a2f33322d3438203d3e203234353236.roa (hash: KXkQEzDE7eAOGwkwjqYSUBJ2gO8yBncemPnpiy3ztzA=) 2: 3230322e35382e3137362e302f32312d3234203d3e203234353236.roa (hash: TiBDscIwDM8LXa+oZsdSozLCIgCynFE1SJZ86LD1GBs=) 3: 3230322e35382e3136302e302f32302d3234203d3e203234353236.roa (hash: U5G6WyuhUeeAyAkhv6VtLWLCxLc3eTUGqsMy7Fb3zes=) 4: E42B0752D5FFAB254C3F0E221499F67420870FEB.crl (hash: En3ZVP129z9p5ir7SLaF7Q6ZYUakf7UxN4oCYigKhI8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.crl rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 14:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:2b:24:65:62:28:25:d4:cc:42:85:2a:f0:33:cd:d2:60:28:25:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E42B0752D5FFAB254C3F0E221499F67420870FEB Validity Not Before: Nov 4 14:06:13 2025 GMT Not After : Nov 7 14:11:13 2025 GMT Subject: CN=89C2CC558245C267B02EF785721DAF667A9D64E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b8:97:54:cb:7f:64:af:0c:66:0f:cf:8f:96: 7d:7a:01:89:40:68:27:28:25:ca:c9:d1:d2:1a:a4: 37:58:93:1b:2d:30:9f:0f:01:a3:c6:52:63:17:58: 6e:84:0e:51:b0:71:68:e5:c9:95:7d:23:a1:2b:27: e2:a7:fa:59:9a:bd:30:3f:f7:c2:b4:9d:7d:28:e4: ad:7a:b1:ff:e9:ca:2d:f3:bc:5a:d5:f7:1e:d8:96: 31:d1:65:8e:31:d5:a1:b0:da:30:f6:d3:5e:1e:de: 69:b7:cd:63:7e:fb:8a:0f:6b:a5:23:a7:f5:82:a2: 5c:35:ac:11:d8:02:d7:8c:93:20:48:05:66:4f:6e: a8:40:4d:ce:09:69:9c:60:1c:23:1d:4c:47:48:ce: d4:87:ab:8c:ac:ca:46:94:e8:bc:0e:9f:19:09:a1: 52:21:2a:67:51:9e:36:15:66:23:ae:b9:76:97:ac: f2:8f:25:a0:4e:bf:a7:49:51:20:64:fd:df:44:1d: 6c:0f:59:c2:6a:27:67:ab:6b:ad:05:48:35:c2:b2: 73:16:ce:6c:49:a7:04:32:c7:4d:61:d4:83:b7:c6: cd:3b:0f:4d:f2:9d:20:5a:92:ff:5d:55:69:01:ad: 6a:de:a6:7c:6d:46:48:da:cf:bb:71:fb:76:ff:74: 55:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C2:CC:55:82:45:C2:67:B0:2E:F7:85:72:1D:AF:66:7A:9D:64:E2 X509v3 Authority Key Identifier: keyid:E4:2B:07:52:D5:FF:AB:25:4C:3F:0E:22:14:99:F6:74:20:87:0F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E42B0752D5FFAB254C3F0E221499F67420870FEB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/E42B0752D5FFAB254C3F0E221499F67420870FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:cd:e6:c8:8a:8b:d4:7c:15:0b:b7:1d:f9:70:dc:d3:40:8a: f8:43:a7:37:79:7e:a0:86:a4:41:5d:ff:e2:3c:32:07:ef:24: 06:9f:18:2d:b6:11:64:68:51:bb:90:f7:f0:0f:55:65:41:e3: 63:48:30:87:e4:6a:cb:5c:c2:c7:fd:6c:ea:96:3a:1b:d1:b8: d4:c7:aa:b1:11:6a:fb:7f:06:d7:19:ee:f4:d8:64:0b:e4:a0: 70:df:5f:30:9f:29:6f:da:79:bd:ac:6f:ed:db:be:9d:c6:fa: b5:8e:e0:76:b9:26:b9:3e:bd:fc:2c:00:63:f8:ed:6d:2f:1d: 95:99:28:11:0c:34:b4:96:52:3e:ad:eb:5a:7c:16:6f:82:14: fd:6c:9d:46:6f:db:e3:c1:74:ac:2e:0e:30:52:43:e9:8a:a1: 7f:8a:df:b9:34:a9:80:2a:8f:75:04:7f:1c:3e:1b:a7:b6:33: 71:51:e3:80:55:83:fc:fa:77:60:4b:8a:3e:69:c3:60:d7:8d: 53:fc:c7:e1:30:59:cc:71:de:1e:26:a8:55:2d:4b:68:23:29: c7:dc:e0:1d:a9:c3:31:eb:8b:02:b5:46:b8:51:35:77:d0:fc: 40:17:4c:b6:dc:32:f0:33:fe:d2:6d:de:ae:59:9e:c9:84:6c: 0f:b0:02:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWiskZWIoJdTMQoUq8DPN0mAoJUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2NzQy MDg3MEZFQjAeFw0yNTExMDQxNDA2MTNaFw0yNTExMDcxNDExMTNaMDMxMTAvBgNV BAMTKDg5QzJDQzU1ODI0NUMyNjdCMDJFRjc4NTcyMURBRjY2N0E5RDY0RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRuJdUy39krwxmD8+Pln16AYlA aCcoJcrJ0dIapDdYkxstMJ8PAaPGUmMXWG6EDlGwcWjlyZV9I6ErJ+Kn+lmavTA/ 98K0nX0o5K16sf/pyi3zvFrV9x7YljHRZY4x1aGw2jD2014e3mm3zWN++4oPa6Uj p/WColw1rBHYAteMkyBIBWZPbqhATc4JaZxgHCMdTEdIztSHq4ysykaU6LwOnxkJ oVIhKmdRnjYVZiOuuXaXrPKPJaBOv6dJUSBk/d9EHWwPWcJqJ2era60FSDXCsnMW zmxJpwQyx01h1IO3xs07D03ynSBakv9dVWkBrWrepnxtRkjaz7tx+3b/dFU3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUicLMVYJFwmewLveFch2vZnqdZOIwHwYDVR0j BBgwFoAU5CsHUtX/qyVMPw4iFJn2dCCHD+swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzUxMjllNC0yMzI4LTQzZDItYTQ1OC05ZDM4Mjk2MTQ4MTUvMC9FNDJCMDc1MkQ1 RkZBQjI1NEMzRjBFMjIxNDk5RjY3NDIwODcwRkVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2NzQyMDg3 MEZFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM1MTI5ZTQtMjMyOC00M2QyLWE0 NTgtOWQzODI5NjE0ODE1LzAvRTQyQjA3NTJENUZGQUIyNTRDM0YwRTIyMTQ5OUY2 NzQyMDg3MEZFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/N5siKi9R8FQu3Hflw3NNAivhDpzd5fqCG pEFd/+I8MgfvJAafGC22EWRoUbuQ9/APVWVB42NIMIfkastcwsf9bOqWOhvRuNTH qrERavt/BtcZ7vTYZAvkoHDfXzCfKW/aeb2sb+3bvp3G+rWO4Ha5Jrk+vfwsAGP4 7W0vHZWZKBEMNLSWUj6t61p8Fm+CFP1snUZv2+PBdKwuDjBSQ+mKoX+K37k0qYAq j3UEfxw+G6e2M3FR44BVg/z6d2BLij5pw2DXjVP8x+EwWcxx3h4mqFUtS2gjKcfc 4B2pwzHriwK1RrhRNXfQ/EAXTLbcMvAz/tJt3q5ZnsmEbA+wAgw= -----END CERTIFICATE-----Generated at Wed Nov 5 09:33:36 2025 by rpki-client