$ rpki-client -vvf repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft File: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft (raw, json) Hash identifier: mQYc8pAOX+owjZN2c8IYo89XAK+0jmgmAHSxSWFVz/I= Subject key identifier: 83:65:C5:A3:13:21:3F:83:20:78:64:86:2D:3A:C0:9B:EA:BE:54:74 Authority key identifier: ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF Certificate issuer: /CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Certificate serial: 46D5726EB3CF0105B3CAD07B956843C7911EDA8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft Manifest number: 023D Signing time: Mon 03 Nov 2025 19:31:33 +0000 Manifest this update: Mon 03 Nov 2025 19:26:33 +0000 Manifest next update: Thu 06 Nov 2025 22:14:33 +0000 Files and hashes: 1: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl (hash: mYAmK/8r+x7qqSYuEBClaXI+8pXj4tW/zk61S3qGEpA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 22:14:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:d5:72:6e:b3:cf:01:05:b3:ca:d0:7b:95:68:43:c7:91:1e:da:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Validity Not Before: Nov 3 19:26:33 2025 GMT Not After : Nov 6 22:14:33 2025 GMT Subject: CN=8365C5A313213F83207864862D3AC09BEABE5474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7c:38:d0:e3:a2:5b:5b:5b:ad:6c:35:b1:32: 95:bf:97:8d:43:50:d1:ce:36:71:21:db:ff:27:24: 6e:14:de:17:b7:86:03:0a:f9:8f:52:27:44:fe:03: b2:ac:2d:9b:eb:d8:12:4f:3d:29:23:d8:d0:33:c6: 52:a3:7c:d4:76:42:b1:39:db:11:36:84:d1:12:5b: d2:c4:cf:6e:41:c5:fb:3b:a2:3d:91:f4:48:51:a7: ae:12:1f:03:27:0a:7e:d2:d3:01:8d:e8:e1:6e:54: ef:22:ef:d6:32:27:84:a7:90:2f:bf:28:bb:ee:57: 16:50:62:60:1a:e9:76:39:7c:e5:13:13:e9:6b:b6: df:29:81:14:3f:37:c0:43:e8:34:ab:d9:62:c7:70: f6:79:5d:0e:24:54:6f:84:24:71:4f:d9:2b:b5:7c: b4:71:8b:9c:c2:5e:dc:3b:83:95:06:02:02:a4:ec: 16:73:d3:30:19:19:e8:57:24:bc:1f:79:e8:ec:4f: 6a:c7:3a:28:9e:ac:0b:7d:11:81:42:12:05:c6:8d: 2f:1f:d0:e0:e0:05:96:68:08:ee:79:06:c7:3f:fb: 40:c5:08:75:5a:df:84:57:8b:5c:6c:cb:36:c3:b2: b2:e0:2e:0a:b3:06:6b:e3:e8:58:29:54:7f:95:36: b5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:65:C5:A3:13:21:3F:83:20:78:64:86:2D:3A:C0:9B:EA:BE:54:74 X509v3 Authority Key Identifier: keyid:ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:d3:04:9f:93:50:49:be:4e:fe:fb:f3:0e:fd:b5:08:ff:cb: 52:9f:54:6a:6a:d8:7e:4b:92:cf:47:a3:60:c1:4e:a0:1d:f3: a7:db:98:58:5c:5a:67:06:49:05:26:e1:88:99:19:d7:b6:57: f7:50:a4:10:ef:7a:89:0b:ca:5b:08:5d:cb:b0:4e:16:37:36: cf:00:21:31:c4:58:70:f3:8d:a7:12:a9:a2:46:a0:1d:1c:f4: 74:1e:8c:90:dc:03:8e:6b:42:72:60:e3:1b:e0:a8:a4:5e:59: 07:b4:eb:e4:f7:1d:24:9c:50:da:ed:78:6f:96:ca:ae:42:6f: 9f:3a:d7:31:ff:17:3c:44:b1:17:a8:ef:a6:0d:1b:00:fd:4c: 73:04:fc:2b:0c:06:11:e2:1c:86:31:c1:2f:9f:39:04:48:e0: f9:96:7f:8a:11:53:7b:ec:81:7c:86:10:da:37:82:bc:3e:19: 9a:2d:76:71:8a:11:88:f2:31:5b:8b:c4:d3:de:6f:eb:de:9d: ba:7b:8f:7d:c5:43:63:f8:a7:47:f1:26:ab:64:d3:d3:2b:62: 11:ad:d8:ab:75:56:41:5d:26:e9:50:19:a3:52:4c:45:c8:da: d7:59:33:c4:2e:d2:8d:92:86:b8:da:85:db:b2:ce:c3:0e:6a: bd:cb:95:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURtVybrPPAQWzytB7lWhDx5Ee2o0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1 NUJGQjBBRjAeFw0yNTExMDMxOTI2MzNaFw0yNTExMDYyMjE0MzNaMDMxMTAvBgNV BAMTKDgzNjVDNUEzMTMyMTNGODMyMDc4NjQ4NjJEM0FDMDlCRUFCRTU0NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5fDjQ46JbW1utbDWxMpW/l41D UNHONnEh2/8nJG4U3he3hgMK+Y9SJ0T+A7KsLZvr2BJPPSkj2NAzxlKjfNR2QrE5 2xE2hNESW9LEz25Bxfs7oj2R9EhRp64SHwMnCn7S0wGN6OFuVO8i79YyJ4SnkC+/ KLvuVxZQYmAa6XY5fOUTE+lrtt8pgRQ/N8BD6DSr2WLHcPZ5XQ4kVG+EJHFP2Su1 fLRxi5zCXtw7g5UGAgKk7BZz0zAZGehXJLwfeejsT2rHOiierAt9EYFCEgXGjS8f 0ODgBZZoCO55Bsc/+0DFCHVa34RXi1xsyzbDsrLgLgqzBmvj6FgpVH+VNrWbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg2XFoxMhP4MgeGSGLTrAm+q+VHQwHwYDVR0j BBgwFoAU7XpI6tENH+l8fvI6puoq1lW/sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDMzZTM0NC1lODE5LTQ0MzgtYjhjYS0xZjU4YzNkNTI3Y2IvMC9FRDdBNDhFQUQx MEQxRkU5N0M3RUYyM0FBNkVBMkFENjU1QkZCMEFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1NUJG QjBBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQzM2UzNDQtZTgxOS00NDM4LWI4 Y2EtMWY1OGMzZDUyN2NiLzAvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJB RDY1NUJGQjBBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALrTBJ+TUEm+Tv778w79tQj/y1KfVGpq2H5L ks9Ho2DBTqAd86fbmFhcWmcGSQUm4YiZGde2V/dQpBDveokLylsIXcuwThY3Ns8A ITHEWHDzjacSqaJGoB0c9HQejJDcA45rQnJg4xvgqKReWQe06+T3HSScUNrteG+W yq5Cb5861zH/FzxEsReo76YNGwD9THME/CsMBhHiHIYxwS+fOQRI4PmWf4oRU3vs gXyGENo3grw+GZotdnGKEYjyMVuLxNPeb+venbp7j33FQ2P4p0fxJqtk09MrYhGt 2Kt1VkFdJulQGaNSTEXI2tdZM8Qu0o2ShrjahduyzsMOar3LlUo= -----END CERTIFICATE-----Generated at Tue Nov 4 01:58:37 2025 by rpki-client