$ rpki-client -vvf repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft File: E44D4DE701D932713536A084F76894A6B0473F5E.mft (raw, json) Hash identifier: 4wNuLGXoaS/HJ/xtGNL69ENHM0a4z7CdQbEo+RVrVx8= Subject key identifier: 65:0E:6D:D2:DC:49:14:2B:40:24:0A:D2:F3:5F:87:C4:4F:BD:41:16 Authority key identifier: E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E Certificate issuer: /CN=E44D4DE701D932713536A084F76894A6B0473F5E Certificate serial: 5A4F2F2CA970000D62EBD7B4A2B3A6BB25DFB12A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft Manifest number: 024C Signing time: Tue 04 Nov 2025 10:22:41 +0000 Manifest this update: Tue 04 Nov 2025 10:17:41 +0000 Manifest next update: Fri 07 Nov 2025 14:58:41 +0000 Files and hashes: 1: 3130332e3136322e3232322e302f32342d3234203d3e203438343635.roa (hash: bl/n5bigRNUdzOdSRBMJ4xavg1ElwqsMKJXdZov+BBc=) 2: 3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa (hash: otSYaOpWUX7/R5silYI2qFwHrea2Nhn73//fdSkzDls=) 3: 3130332e3136322e3232332e302f32342d3234203d3e20313431363635.roa (hash: 7QCopDe7hDkeVtB42/2nmhBi3ICh26qKFWh8viPiuG0=) 4: 3130332e3136322e3232322e302f32332d3233203d3e20313431363635.roa (hash: W4u8P1SQQa3NmSN5ZCqGSVGNmCx4edXu6e4flVOIf2c=) 5: E44D4DE701D932713536A084F76894A6B0473F5E.crl (hash: H259qL5atPXXfBUje47iAOi9KlMYehgVGqAJb/a7uvw=) 6: 3130332e3136322e3232332e302f32342d3234203d3e203438343635.roa (hash: 4c0IK//t9QV9eDZcRuS2szDSLoJBAnWIV4hCGmSoEiE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:4f:2f:2c:a9:70:00:0d:62:eb:d7:b4:a2:b3:a6:bb:25:df:b1:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E44D4DE701D932713536A084F76894A6B0473F5E Validity Not Before: Nov 4 10:17:41 2025 GMT Not After : Nov 7 14:58:41 2025 GMT Subject: CN=650E6DD2DC49142B40240AD2F35F87C44FBD4116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:31:00:97:c1:ae:18:43:2c:81:1f:98:e7:7f: 9e:01:0f:7a:1d:0b:a4:17:08:6c:b2:02:a4:b8:f2: 6b:0f:50:d5:07:55:88:df:4d:c8:11:5c:57:98:e2: 75:58:77:86:83:08:5d:5e:c6:35:ac:65:18:a3:f3: c7:8d:90:29:ba:1f:90:27:f5:c6:7d:02:7d:24:05: 71:01:e1:c5:c2:ab:4c:28:7b:25:17:84:d3:48:a5: 1a:ac:f9:92:39:81:3c:f2:7f:32:68:9a:a9:80:08: bc:9e:86:d7:97:14:ed:03:74:39:01:b7:ff:df:06: 41:b9:dc:fb:34:69:e3:5b:80:e8:1f:13:32:21:a7: a5:ab:3a:eb:89:a8:19:3f:31:e8:35:b5:ea:04:79: a0:23:64:fd:01:cd:ef:7d:b1:1b:85:c9:c8:2f:6f: 0b:dd:b3:21:68:1a:43:05:9f:3a:1a:7b:de:1f:4e: bc:5e:1d:9f:82:78:e5:b7:ee:bd:4a:e7:30:89:5c: c5:bc:6a:7b:16:6e:69:35:57:04:f8:b4:0f:e2:98: da:4b:9b:20:e2:d1:80:07:3e:05:2e:c5:4d:75:5c: 25:f8:87:9f:6e:50:06:7d:be:d6:c0:59:8a:cd:ba: 2d:bd:40:52:1c:b2:79:cc:6a:04:57:62:5e:27:ec: 68:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0E:6D:D2:DC:49:14:2B:40:24:0A:D2:F3:5F:87:C4:4F:BD:41:16 X509v3 Authority Key Identifier: keyid:E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:48:ec:c0:02:e7:f0:29:b7:e5:8a:45:b1:b8:67:11:a5:86: 8b:b6:02:4c:7f:35:13:78:d6:f7:92:85:23:21:cd:23:30:ec: d4:df:18:fa:7d:f0:79:05:4e:23:84:32:3d:42:36:69:32:1c: 4b:bf:44:ab:60:d6:67:a8:c6:56:5f:d1:7f:5a:24:82:88:1e: ab:9b:1e:f5:1d:45:dc:e2:c7:63:62:08:56:70:d9:e7:3a:e0: 65:92:b7:26:69:d6:6d:0f:43:e7:93:cb:2c:c4:62:58:d3:c4: 30:35:69:9d:67:5e:a8:71:6d:95:d7:43:4e:c9:71:f3:8a:10: 5b:77:d2:19:3d:3d:ed:16:ab:9e:92:68:b6:5d:7d:70:c0:84: e6:f6:f9:7e:f6:20:83:91:b7:57:3a:75:c9:8c:16:d4:83:07: 77:93:32:c5:30:24:34:84:21:7c:37:e9:c2:13:87:93:aa:99: 14:e8:cf:fa:37:66:b1:8a:6a:3c:eb:b1:9d:3b:4c:6e:11:c3: cc:93:98:70:71:18:3d:63:12:44:f2:80:a5:d0:f9:d1:eb:e3: d7:5c:5d:06:05:6a:52:71:ae:35:96:61:ae:6f:a6:8d:f7:a5: b9:78:a7:49:4b:33:73:92:9a:4d:94:02:f4:c7:38:5e:9d:b1: 84:32:bc:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWk8vLKlwAA1i69e0orOmuyXfsSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ0RDRERTcwMUQ5MzI3MTM1MzZBMDg0Rjc2ODk0QTZC MDQ3M0Y1RTAeFw0yNTExMDQxMDE3NDFaFw0yNTExMDcxNDU4NDFaMDMxMTAvBgNV BAMTKDY1MEU2REQyREM0OTE0MkI0MDI0MEFEMkYzNUY4N0M0NEZCRDQxMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJMQCXwa4YQyyBH5jnf54BD3od C6QXCGyyAqS48msPUNUHVYjfTcgRXFeY4nVYd4aDCF1exjWsZRij88eNkCm6H5An 9cZ9An0kBXEB4cXCq0woeyUXhNNIpRqs+ZI5gTzyfzJomqmACLyehteXFO0DdDkB t//fBkG53Ps0aeNbgOgfEzIhp6WrOuuJqBk/Meg1teoEeaAjZP0Bze99sRuFycgv bwvdsyFoGkMFnzoae94fTrxeHZ+CeOW37r1K5zCJXMW8ansWbmk1VwT4tA/imNpL myDi0YAHPgUuxU11XCX4h59uUAZ9vtbAWYrNui29QFIcsnnMagRXYl4n7GgPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZQ5t0txJFCtAJArS81+HxE+9QRYwHwYDVR0j BBgwFoAU5E1N5wHZMnE1NqCE92iUprBHP14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjRmMGZmYS1lMDMxLTRlZTEtYmYwZi02NGJhY2ZjZjI5NDIvMC9FNDRENERFNzAx RDkzMjcxMzUzNkEwODRGNzY4OTRBNkIwNDczRjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ0RDRERTcwMUQ5MzI3MTM1MzZBMDg0Rjc2ODk0QTZCMDQ3 M0Y1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0ZjBmZmEtZTAzMS00ZWUxLWJm MGYtNjRiYWNmY2YyOTQyLzAvRTQ0RDRERTcwMUQ5MzI3MTM1MzZBMDg0Rjc2ODk0 QTZCMDQ3M0Y1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRI7MAC5/Apt+WKRbG4ZxGlhou2Akx/NRN4 1veShSMhzSMw7NTfGPp98HkFTiOEMj1CNmkyHEu/RKtg1meoxlZf0X9aJIKIHqub HvUdRdzix2NiCFZw2ec64GWStyZp1m0PQ+eTyyzEYljTxDA1aZ1nXqhxbZXXQ07J cfOKEFt30hk9Pe0Wq56SaLZdfXDAhOb2+X72IIORt1c6dcmMFtSDB3eTMsUwJDSE IXw36cITh5OqmRToz/o3ZrGKajzrsZ07TG4Rw8yTmHBxGD1jEkTygKXQ+dHr49dc XQYFalJxrjWWYa5vpo33pbl4p0lLM3OSmk2UAvTHOF6dsYQyvP8= -----END CERTIFICATE-----Generated at Tue Nov 4 19:53:20 2025 by rpki-client