$ rpki-client -vvf repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft File: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft (raw, json) Hash identifier: saRFcBZjtKicrDZ3M9lTSHLogME7/WzWxHwGK3bQE0c= Subject key identifier: 17:87:BF:F6:45:E0:F2:E1:26:02:15:D2:86:8E:C2:1F:F7:D2:35:72 Authority key identifier: E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42 Certificate issuer: /CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42 Certificate serial: 0479692C6551F25657F3F6017E45AF5C6FD1FCAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft Manifest number: 0526 Signing time: Sun 02 Nov 2025 13:50:05 +0000 Manifest this update: Sun 02 Nov 2025 13:45:05 +0000 Manifest next update: Thu 06 Nov 2025 01:18:05 +0000 Files and hashes: 1: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl (hash: TAPfiWjpJ6wnotcn9QeKvgF3j+KN7rv/OBNEUFysORI=) 2: 35392e3135332e32342e302f32332d3233203d3e203539323835.roa (hash: 1SizngiTVzIbRBWH1t3CjVmzzkPKhWLCfAxINTFYNoo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:18:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:79:69:2c:65:51:f2:56:57:f3:f6:01:7e:45:af:5c:6f:d1:fc:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42 Validity Not Before: Nov 2 13:45:05 2025 GMT Not After : Nov 6 01:18:05 2025 GMT Subject: CN=1787BFF645E0F2E1260215D2868EC21FF7D23572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ba:88:ca:8b:3b:08:0e:02:50:1a:58:4a:e8: aa:7f:80:05:18:b0:3d:ee:b9:6e:01:0b:6d:b6:43: 79:50:f6:07:7e:b3:e2:af:4c:4b:c0:ac:f3:31:bd: 9a:44:77:8d:19:92:e3:2d:a1:58:a0:10:0c:18:1d: 17:04:c2:d4:38:a9:c3:e0:27:4e:86:74:d9:bb:74: 40:86:53:6f:6a:6b:37:76:27:fd:a0:6d:9e:14:f0: 27:8a:3c:7b:e9:34:13:17:fa:19:42:66:50:14:24: ba:99:56:f1:75:c7:32:14:10:f3:1a:1b:56:c5:9b: 53:b8:38:98:bd:b2:3b:62:91:91:e7:70:87:9e:4d: 92:81:f4:aa:38:7a:c3:37:91:d8:2e:56:ac:e8:f8: ab:79:d2:89:29:96:b9:24:ed:c8:29:e2:3b:5f:67: f0:0e:40:2b:a7:41:38:1c:20:9a:4b:9e:f6:32:64: 80:f6:c9:c7:e0:7e:0a:ac:cf:f9:80:2f:70:36:18: ff:68:8f:74:00:fa:1d:f5:df:9d:8d:99:3e:d5:fe: 2b:68:3c:1b:b2:4d:77:4b:bb:f4:a0:0c:82:b1:0a: 77:c2:9e:cf:37:93:bc:54:1d:de:9d:d3:6b:48:f9: 7c:26:d8:1f:50:c4:cf:c0:9f:61:d6:80:9d:df:0e: 5b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:87:BF:F6:45:E0:F2:E1:26:02:15:D2:86:8E:C2:1F:F7:D2:35:72 X509v3 Authority Key Identifier: keyid:E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:32:cd:2d:23:6f:bc:f9:18:e7:e0:11:09:a4:f8:96:4e:09: 1a:92:e4:c8:0f:a6:73:66:fe:fe:d1:11:f6:1b:4d:aa:99:2e: 02:3a:cb:89:4d:f5:ff:af:b5:04:e3:e8:a9:5c:9f:f0:4a:79: 23:b0:84:70:8d:fc:2b:a2:4d:c6:89:67:de:30:a6:4d:00:fd: 82:49:7d:03:54:b1:e4:43:40:cc:0a:4f:b7:7f:d4:bc:7c:72: 99:06:b8:df:16:7f:16:62:62:40:59:7f:aa:3f:3b:48:b5:4a: f5:f9:cf:95:15:30:8a:7a:f1:f2:38:df:6f:9f:ec:60:b9:54: f3:8d:ba:c3:18:aa:68:25:11:ab:1a:d6:61:30:56:04:eb:06: c3:b1:c9:2e:42:46:3a:cd:5a:9f:59:0e:35:c3:d8:04:4a:76: b0:d1:90:b4:e3:98:b0:15:3b:07:b8:c7:98:10:57:24:89:ab: 9a:77:b0:d6:85:a0:3d:fc:7d:7d:03:99:bf:8a:e8:bd:d7:2d: 3e:da:6d:fc:ec:05:d4:60:0c:8f:cf:b9:5f:40:13:b9:60:e6: 8b:8d:de:b4:31:28:77:e4:ea:56:90:0b:6c:f1:d4:90:f8:a4: 1e:8a:a2:5e:5a:c5:57:71:69:a7:2d:d0:a0:32:d2:9d:0c:cf: 1f:6a:dd:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBHlpLGVR8lZX8/YBfkWvXG/R/K4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRDNTYw MUJERUE0MjAeFw0yNTExMDIxMzQ1MDVaFw0yNTExMDYwMTE4MDVaMDMxMTAvBgNV BAMTKDE3ODdCRkY2NDVFMEYyRTEyNjAyMTVEMjg2OEVDMjFGRjdEMjM1NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9uojKizsIDgJQGlhK6Kp/gAUY sD3uuW4BC222Q3lQ9gd+s+KvTEvArPMxvZpEd40ZkuMtoVigEAwYHRcEwtQ4qcPg J06GdNm7dECGU29qazd2J/2gbZ4U8CeKPHvpNBMX+hlCZlAUJLqZVvF1xzIUEPMa G1bFm1O4OJi9sjtikZHncIeeTZKB9Ko4esM3kdguVqzo+Kt50okplrkk7cgp4jtf Z/AOQCunQTgcIJpLnvYyZID2ycfgfgqsz/mAL3A2GP9oj3QA+h31352NmT7V/ito PBuyTXdLu/SgDIKxCnfCns83k7xUHd6d02tI+Xwm2B9QxM/An2HWgJ3fDlubAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF4e/9kXg8uEmAhXSho7CH/fSNXIwHwYDVR0j BBgwFoAU4PugPWtolc61NyLO/blMVgG96kIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTFmM2IzNy1iZDU0LTQ5MTEtOTA1Yi0zNjU0OTY2ODdjOGQvMC9FMEZCQTAzRDZC Njg5NUNFQjUzNzIyQ0VGREI5NEM1NjAxQkRFQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRDNTYwMUJE RUE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExZjNiMzctYmQ1NC00OTExLTkw NWItMzY1NDk2Njg3YzhkLzAvRTBGQkEwM0Q2QjY4OTVDRUI1MzcyMkNFRkRCOTRD NTYwMUJERUE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMyzS0jb7z5GOfgEQmk+JZOCRqS5MgPpnNm /v7REfYbTaqZLgI6y4lN9f+vtQTj6Klcn/BKeSOwhHCN/CuiTcaJZ94wpk0A/YJJ fQNUseRDQMwKT7d/1Lx8cpkGuN8WfxZiYkBZf6o/O0i1SvX5z5UVMIp68fI432+f 7GC5VPONusMYqmglEasa1mEwVgTrBsOxyS5CRjrNWp9ZDjXD2ARKdrDRkLTjmLAV Owe4x5gQVySJq5p3sNaFoD38fX0Dmb+K6L3XLT7abfzsBdRgDI/PuV9AE7lg5ouN 3rQxKHfk6laQC2zx1JD4pB6Kol5axVdxaact0KAy0p0Mzx9q3RA= -----END CERTIFICATE-----Generated at Tue Nov 4 16:06:58 2025 by rpki-client