$ rpki-client -vvf repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft File: E0D54A271CD04583E0304613C7075C15FA03E497.mft (raw, json) Hash identifier: ba4XodaoMv0XdRjwe9X0G3Y6BlhyvKc6v5gdax2/GdY= Subject key identifier: 9E:66:8D:D9:CE:6A:5B:3E:B6:76:D3:DC:D3:BF:E4:0D:CE:BB:45:45 Authority key identifier: E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 Certificate issuer: /CN=E0D54A271CD04583E0304613C7075C15FA03E497 Certificate serial: 4EE724856D0353F6E221A5A801439C6AEABC7022 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft Manifest number: 03F1 Signing time: Mon 03 Nov 2025 09:02:18 +0000 Manifest this update: Mon 03 Nov 2025 08:57:18 +0000 Manifest next update: Thu 06 Nov 2025 18:21:18 +0000 Files and hashes: 1: 3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa (hash: iaC5WCoK/QU+xKaB0vnR2mTORiwDsx2/t1ElkG42yQ8=) 2: E0D54A271CD04583E0304613C7075C15FA03E497.crl (hash: cpCQt+mMdXhBWA+M/lMv9CzzkdXvefYiEozr5/xBZsE=) 3: 323430343a636263303a3a2f33322d3332203d3e20313338383433.roa (hash: CUX/FZUFqFLVmfqcGn4Uxf38ndBFpWWkwqBCc1O0Nwg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 18:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e7:24:85:6d:03:53:f6:e2:21:a5:a8:01:43:9c:6a:ea:bc:70:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0D54A271CD04583E0304613C7075C15FA03E497 Validity Not Before: Nov 3 08:57:18 2025 GMT Not After : Nov 6 18:21:18 2025 GMT Subject: CN=9E668DD9CE6A5B3EB676D3DCD3BFE40DCEBB4545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:33:95:2c:42:ce:d2:78:98:6d:98:0e:75:52: 58:e6:27:c2:10:5e:ce:2f:3d:d8:29:33:84:42:02: b6:a8:c3:01:2c:fe:8f:3a:5f:b1:25:94:84:be:7e: 2b:40:67:8a:a9:c5:07:d4:05:1d:6d:1e:d7:bb:f3: b1:53:5e:e6:c2:ba:ea:0a:d9:8e:dd:3c:b1:af:15: 10:7a:b2:ba:c3:67:7f:bf:a4:75:c3:7e:7f:b2:01: 2f:2d:ae:b6:d0:8f:ca:5b:32:43:63:a4:e9:23:f9: 40:96:13:d1:a4:4c:03:a8:20:e9:3e:d0:a8:31:7d: 66:50:8c:f7:1f:70:cb:33:01:c5:9a:2d:21:08:e6: ef:c6:a6:2d:fe:5e:53:de:cf:08:77:ae:6e:66:14: 28:03:ab:0a:c4:31:78:53:4c:21:b0:ad:3d:14:f6: 77:6c:9f:09:95:70:7d:59:0b:41:1b:72:de:8f:47: 01:ff:51:c3:27:7e:f3:a6:c7:00:50:2d:b3:a8:b7: 2b:8f:2c:b6:63:05:40:98:15:2e:95:b0:cf:9d:cb: 6b:84:41:31:b3:7e:97:91:48:fc:8c:b5:28:ce:28: 36:a4:3f:3c:f2:be:b6:4b:9d:a1:9b:cf:2f:b0:fc: 56:c7:48:a9:da:8d:de:b5:71:23:de:a9:d4:9e:d4: ef:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:66:8D:D9:CE:6A:5B:3E:B6:76:D3:DC:D3:BF:E4:0D:CE:BB:45:45 X509v3 Authority Key Identifier: keyid:E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:c4:ee:98:1e:83:0c:73:1c:ff:cc:46:65:0f:8e:6f:e9:50: 1d:1d:36:45:2b:f5:5d:9d:ce:41:82:0f:60:79:04:87:14:92: 0a:dd:ec:68:06:ef:90:1f:37:df:03:37:e0:4a:83:e7:e7:9c: d6:f1:64:c9:58:30:2a:53:8d:e7:33:dd:b4:a2:e9:cd:b0:73: 0e:28:cb:7a:ca:55:86:93:3f:6f:c5:3b:b7:a6:a5:69:6c:5b: 4e:35:a2:ea:8a:f7:6d:75:f2:cd:9b:5f:4a:b9:55:1a:35:67: fe:58:14:85:66:c6:d6:ae:3e:90:2d:df:5a:92:f4:bd:eb:12: 46:55:28:20:8d:80:27:bc:54:ea:f8:a3:51:2c:54:31:5b:ef: 0e:fe:55:5a:e3:49:81:96:9c:2a:2c:4e:c2:9a:2c:6a:28:6c: df:28:18:ea:4a:6f:a2:7b:fc:b9:df:cf:0d:11:b5:53:99:e9: db:0d:17:03:c1:89:ff:d8:a6:88:5b:db:bc:af:c9:e6:e5:11: b9:9b:3f:56:03:76:41:60:0f:66:a4:eb:28:ef:ab:0c:7b:83: c4:89:62:94:c1:96:e0:f7:60:06:cc:08:77:10:cf:1f:5f:f2: 67:37:79:51:53:c6:0d:7b:e0:1c:8b:a3:64:17:43:81:f3:b8: f0:6b:da:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTuckhW0DU/biIaWoAUOcauq8cCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVG QTAzRTQ5NzAeFw0yNTExMDMwODU3MThaFw0yNTExMDYxODIxMThaMDMxMTAvBgNV BAMTKDlFNjY4REQ5Q0U2QTVCM0VCNjc2RDNEQ0QzQkZFNDBEQ0VCQjQ1NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyM5UsQs7SeJhtmA51UljmJ8IQ Xs4vPdgpM4RCAraowwEs/o86X7EllIS+fitAZ4qpxQfUBR1tHte787FTXubCuuoK 2Y7dPLGvFRB6srrDZ3+/pHXDfn+yAS8trrbQj8pbMkNjpOkj+UCWE9GkTAOoIOk+ 0KgxfWZQjPcfcMszAcWaLSEI5u/Gpi3+XlPezwh3rm5mFCgDqwrEMXhTTCGwrT0U 9ndsnwmVcH1ZC0Ebct6PRwH/UcMnfvOmxwBQLbOotyuPLLZjBUCYFS6VsM+dy2uE QTGzfpeRSPyMtSjOKDakPzzyvrZLnaGbzy+w/FbHSKnajd61cSPeqdSe1O+vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnmaN2c5qWz62dtPc07/kDc67RUUwHwYDVR0j BBgwFoAU4NVKJxzQRYPgMEYTxwdcFfoD5JcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzU4NjdkOC0zZDZmLTQ4MTYtYjg0Zi1mZGQ1YzUwMmI2MzQvMC9FMEQ1NEEyNzFD RDA0NTgzRTAzMDQ2MTNDNzA3NUMxNUZBMDNFNDk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVGQTAz RTQ5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmM1ODY3ZDgtM2Q2Zi00ODE2LWI4 NGYtZmRkNWM1MDJiNjM0LzAvRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVD MTVGQTAzRTQ5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHE7pgegwxzHP/MRmUPjm/pUB0dNkUr9V2d zkGCD2B5BIcUkgrd7GgG75AfN98DN+BKg+fnnNbxZMlYMCpTjecz3bSi6c2wcw4o y3rKVYaTP2/FO7empWlsW041ouqK92118s2bX0q5VRo1Z/5YFIVmxtauPpAt31qS 9L3rEkZVKCCNgCe8VOr4o1EsVDFb7w7+VVrjSYGWnCosTsKaLGoobN8oGOpKb6J7 /Lnfzw0RtVOZ6dsNFwPBif/Ypohb27yvyeblEbmbP1YDdkFgD2ak6yjvqwx7g8SJ YpTBluD3YAbMCHcQzx9f8mc3eVFTxg174ByLo2QXQ4HzuPBr2lY= -----END CERTIFICATE-----Generated at Tue Nov 4 21:09:42 2025 by rpki-client