$ rpki-client -vvf repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft File: E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft (raw, json) Hash identifier: qZjd4xwhgJdWWxRPkSgkXo2M2oNKrAslSgA5z1PN1Hc= Subject key identifier: 28:F9:41:F6:EE:E5:90:99:4C:DA:9D:CE:7A:FC:E5:70:AD:E5:37:FC Authority key identifier: E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C Certificate issuer: /CN=E530A7B43C0C79FD8707007080E2F7AEA478FD1C Certificate serial: 105FF938AF6310685276182A90741EAFB3AD42F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft Manifest number: 051F Signing time: Sun 02 Nov 2025 15:50:15 +0000 Manifest this update: Sun 02 Nov 2025 15:45:15 +0000 Manifest next update: Wed 05 Nov 2025 15:57:15 +0000 Files and hashes: 1: E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl (hash: I1v1UPDAw059Pq8AkKS4DaSVtrcvm65COFKlfhVXQME=) 2: 323430323a613630303a3a2f33322d3332203d3e203137393936.roa (hash: mhHbC7IIWFFORZdV/WAdZvBGn0b08EabDQByz7GAvr4=) 3: 3230322e3136322e33322e302f32302d3234203d3e203137393936.roa (hash: 7t1UfL5E/ZJwSEO7orDivflRDFpoQvNkURGau+OZ9WE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 15:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:5f:f9:38:af:63:10:68:52:76:18:2a:90:74:1e:af:b3:ad:42:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E530A7B43C0C79FD8707007080E2F7AEA478FD1C Validity Not Before: Nov 2 15:45:15 2025 GMT Not After : Nov 5 15:57:15 2025 GMT Subject: CN=28F941F6EEE590994CDA9DCE7AFCE570ADE537FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5c:bd:5c:1e:cc:3e:ed:fc:90:66:d9:ad:35: 38:b6:3b:fa:18:52:2c:04:c2:6e:71:9a:39:ca:f2: 36:1c:37:f5:49:dc:48:f0:dd:28:07:73:ac:e6:21: 29:3f:7d:97:df:ec:b6:6a:3f:bb:7e:0d:aa:3c:b2: 90:23:24:8b:19:25:10:5c:46:d3:9e:4f:bd:72:8f: e8:22:05:ec:e3:76:93:d1:77:3d:fa:19:06:f3:3a: fe:c5:88:e4:d5:96:55:76:89:64:8e:0e:0c:2d:b3: 20:81:d7:87:e9:62:5b:4d:9c:07:9c:d0:3e:65:fd: 63:24:03:1a:fd:77:2a:19:a7:71:99:58:4f:cd:fd: a5:3d:23:fe:d8:63:7b:b7:17:09:4a:8b:c0:d0:de: 13:e5:b2:00:92:4e:41:b7:93:08:c7:8c:6d:92:de: bf:7f:bf:76:c8:68:3f:77:d4:f2:98:d5:61:72:ab: 4c:26:ea:06:b9:36:78:5d:0e:21:ea:3c:1e:2a:66: 13:26:c6:8d:60:72:cb:d2:81:d4:7a:6d:f1:ba:20: 16:e4:9e:fa:7d:6b:5c:a6:37:84:41:1f:ca:87:3b: ae:75:76:3a:87:2f:3b:6e:a4:d8:76:17:61:db:c5: 53:29:d1:0b:fa:80:87:54:d3:3d:87:9f:bb:28:b9: 68:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F9:41:F6:EE:E5:90:99:4C:DA:9D:CE:7A:FC:E5:70:AD:E5:37:FC X509v3 Authority Key Identifier: keyid:E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:3e:64:4d:31:e9:30:51:ca:02:b8:04:88:fd:24:75:ab:b9: 46:63:c6:82:1a:b7:72:0a:70:a3:06:55:67:c6:29:b7:f2:91: 3c:8b:2f:0e:43:9c:74:fd:3d:62:06:08:e6:47:ee:f9:94:a0: 07:d9:c2:83:80:30:b0:f8:be:d2:c2:42:a7:0b:4e:9c:0a:a6: ed:af:d3:0c:b7:79:f8:b2:b3:7f:cc:6c:fb:80:00:07:a7:83: e1:d4:a4:4f:22:6a:10:5e:bb:e0:56:cf:b0:c1:15:12:8c:87: 89:55:06:f1:4d:fc:16:c0:1d:34:b7:1e:f8:d6:10:ca:35:a5: c8:76:48:f3:51:3a:83:59:14:bc:2b:64:58:7f:e4:fa:22:5d: 0c:a6:c9:bf:01:51:2c:e3:3e:d2:7d:6b:91:e1:43:45:d5:bd: 6d:ec:02:cb:a5:6c:81:7d:8d:95:04:08:42:f2:e6:f7:e1:07: 5b:b6:ab:b9:de:ec:0d:99:dd:ac:15:a1:d4:23:71:7e:6b:61: 78:72:ea:2f:58:bf:0e:d1:a9:91:38:51:9c:2b:f5:4d:c5:13: 9f:96:7b:35:f4:1d:78:b4:5d:eb:67:6c:2a:66:8b:99:9d:7e: ac:07:cf:30:e4:6a:1d:95:8f:66:00:5a:78:9c:be:a4:a3:d9: 5b:10:91:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEF/5OK9jEGhSdhgqkHQer7OtQvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3QUVB NDc4RkQxQzAeFw0yNTExMDIxNTQ1MTVaFw0yNTExMDUxNTU3MTVaMDMxMTAvBgNV BAMTKDI4Rjk0MUY2RUVFNTkwOTk0Q0RBOURDRTdBRkNFNTcwQURFNTM3RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/XL1cHsw+7fyQZtmtNTi2O/oY UiwEwm5xmjnK8jYcN/VJ3Ejw3SgHc6zmISk/fZff7LZqP7t+Dao8spAjJIsZJRBc RtOeT71yj+giBezjdpPRdz36GQbzOv7FiOTVllV2iWSODgwtsyCB14fpYltNnAec 0D5l/WMkAxr9dyoZp3GZWE/N/aU9I/7YY3u3FwlKi8DQ3hPlsgCSTkG3kwjHjG2S 3r9/v3bIaD931PKY1WFyq0wm6ga5NnhdDiHqPB4qZhMmxo1gcsvSgdR6bfG6IBbk nvp9a1ymN4RBH8qHO651djqHLztupNh2F2HbxVMp0Qv6gIdU0z2Hn7souWg3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKPlB9u7lkJlM2p3OevzlcK3lN/wwHwYDVR0j BBgwFoAU5TCntDwMef2HBwBwgOL3rqR4/RwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2QyZjJmOC0zNTEyLTQzZTUtYmUxNy1iMTFiNThmOTYwODMvMC9FNTMwQTdCNDND MEM3OUZEODcwNzAwNzA4MEUyRjdBRUE0NzhGRDFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3QUVBNDc4 RkQxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNkMmYyZjgtMzUxMi00M2U1LWJl MTctYjExYjU4Zjk2MDgzLzAvRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3 QUVBNDc4RkQxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACI+ZE0x6TBRygK4BIj9JHWruUZjxoIat3IK cKMGVWfGKbfykTyLLw5DnHT9PWIGCOZH7vmUoAfZwoOAMLD4vtLCQqcLTpwKpu2v 0wy3efiys3/MbPuAAAeng+HUpE8iahBeu+BWz7DBFRKMh4lVBvFN/BbAHTS3HvjW EMo1pch2SPNROoNZFLwrZFh/5PoiXQymyb8BUSzjPtJ9a5HhQ0XVvW3sAsulbIF9 jZUECELy5vfhB1u2q7ne7A2Z3awVodQjcX5rYXhy6i9Yvw7RqZE4UZwr9U3FE5+W ezX0HXi0XetnbCpmi5mdfqwHzzDkah2Vj2YAWnicvqSj2VsQkY4= -----END CERTIFICATE-----Generated at Tue Nov 4 16:48:15 2025 by rpki-client