$ rpki-client -vvf repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft File: E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft (raw, json) Hash identifier: FXijpq4k6GeX/p7d4IFw/qaCDgZy+92UTBmb6FklnDM= Subject key identifier: 55:4B:82:CB:67:2D:42:44:7E:3C:89:AC:3A:A7:3E:BB:AD:36:03:C2 Authority key identifier: E9:8B:5C:8D:E6:CD:8A:83:09:2F:B5:55:78:38:8B:B5:5D:80:21:A5 Certificate issuer: /CN=E98B5C8DE6CD8A83092FB55578388BB55D8021A5 Certificate serial: 15CB579CC05167D60D39C14D06BD0801F9C3660E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft Manifest number: 0194 Signing time: Tue 04 Nov 2025 01:51:23 +0000 Manifest this update: Tue 04 Nov 2025 01:46:23 +0000 Manifest next update: Fri 07 Nov 2025 03:02:23 +0000 Files and hashes: 1: 3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa (hash: RVW6NTEFxtaBVN2tG8HTXDlbU79ZyUomhDvpDJYoqdQ=) 2: E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl (hash: 2KMHffVFq0owEXpZpI4zYBU5fECNoLeAwqPd2lELbzM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 03:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:cb:57:9c:c0:51:67:d6:0d:39:c1:4d:06:bd:08:01:f9:c3:66:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E98B5C8DE6CD8A83092FB55578388BB55D8021A5 Validity Not Before: Nov 4 01:46:23 2025 GMT Not After : Nov 7 03:02:23 2025 GMT Subject: CN=554B82CB672D42447E3C89AC3AA73EBBAD3603C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ab:dd:dd:de:08:63:cf:8e:08:15:8c:76:1f: d1:f2:1a:59:9e:dd:82:12:2c:08:76:82:68:7d:7f: 48:9b:cc:05:12:79:8e:51:b6:18:72:5b:28:c8:82: 91:50:a8:8c:e1:15:c5:e9:4c:f7:f4:d5:46:07:28: 73:92:d2:7a:97:9a:2d:aa:ca:d3:5b:9c:0f:03:a1: e6:e9:71:cb:6e:1f:2c:39:6a:1f:40:63:4f:0c:f0: 18:ed:1a:51:b4:2f:74:38:78:6c:bd:8b:59:4b:44: 24:fc:fd:96:56:bf:6f:e5:26:0e:83:c1:63:96:58: da:62:85:cb:23:84:f6:84:28:5f:83:2b:aa:3e:8f: 93:46:82:ec:8a:48:d2:11:c0:f3:26:43:33:b0:59: 24:a1:ac:d0:90:dd:b7:94:90:ef:5a:a8:31:c1:de: 77:c3:9a:fc:ae:87:2a:0d:82:ea:2c:4b:78:e9:f0: 57:7f:6b:e0:e4:49:0e:31:b8:f3:97:fa:05:ac:4a: 06:a1:40:78:0f:a3:3f:3e:5f:00:3f:28:e6:fe:a2: 94:a2:16:89:ce:e2:16:1b:63:65:e3:49:a3:24:06: b4:23:5d:56:75:e4:22:c7:0c:8f:70:cb:c7:73:0e: d1:fd:95:36:8c:80:90:84:62:84:42:5a:ea:2b:22: bc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:4B:82:CB:67:2D:42:44:7E:3C:89:AC:3A:A7:3E:BB:AD:36:03:C2 X509v3 Authority Key Identifier: keyid:E9:8B:5C:8D:E6:CD:8A:83:09:2F:B5:55:78:38:8B:B5:5D:80:21:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:8e:73:46:b6:01:5d:91:15:32:2d:78:98:2a:60:ce:e9:5b: 4e:90:3d:54:89:ca:76:bd:3e:f9:de:b7:f2:41:2b:66:30:00: ab:93:e0:91:70:ff:dc:be:97:c1:7f:a9:13:45:37:48:7a:8b: 32:fd:0c:0c:cf:24:a6:30:b7:2b:06:30:4b:9c:1e:17:f1:5e: 13:e7:60:3e:c0:ba:39:52:f9:2e:09:3b:17:7c:e9:1f:05:ae: 3d:af:25:0c:8f:06:c9:7a:f5:21:ab:2d:2b:56:08:cd:db:4c: 43:18:8a:6b:d9:00:83:10:8e:56:24:de:4e:42:8e:da:21:79: a2:7b:f0:9f:2f:7a:97:31:14:a5:47:4a:95:cd:c9:f9:e6:48: 2b:3c:8c:46:4c:42:68:4b:2f:c2:2a:66:85:8e:ed:4f:ca:66: 99:65:ae:b8:95:9e:9b:cf:27:f2:8b:5e:64:71:1d:ce:e7:e4: 41:11:bc:c6:25:94:bb:78:99:58:20:90:ab:37:ea:70:d4:c8: 70:eb:ab:a5:70:2b:1b:2b:52:2a:c8:d8:a9:1b:7c:fc:0e:2f: a5:6a:4f:0a:a2:5c:a9:b4:f7:3d:d4:f2:c8:96:fa:6f:c6:ff: 73:9f:b4:f9:f8:13:70:ba:f0:0b:57:8f:80:f9:27:88:f9:46: d7:d5:67:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFctXnMBRZ9YNOcFNBr0IAfnDZg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhCQjU1 RDgwMjFBNTAeFw0yNTExMDQwMTQ2MjNaFw0yNTExMDcwMzAyMjNaMDMxMTAvBgNV BAMTKDU1NEI4MkNCNjcyRDQyNDQ3RTNDODlBQzNBQTczRUJCQUQzNjAzQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvq93d3ghjz44IFYx2H9HyGlme 3YISLAh2gmh9f0ibzAUSeY5RthhyWyjIgpFQqIzhFcXpTPf01UYHKHOS0nqXmi2q ytNbnA8DoebpcctuHyw5ah9AY08M8BjtGlG0L3Q4eGy9i1lLRCT8/ZZWv2/lJg6D wWOWWNpihcsjhPaEKF+DK6o+j5NGguyKSNIRwPMmQzOwWSShrNCQ3beUkO9aqDHB 3nfDmvyuhyoNguosS3jp8Fd/a+DkSQ4xuPOX+gWsSgahQHgPoz8+XwA/KOb+opSi FonO4hYbY2XjSaMkBrQjXVZ15CLHDI9wy8dzDtH9lTaMgJCEYoRCWuorIryLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVUuCy2ctQkR+PImsOqc+u602A8IwHwYDVR0j BBgwFoAU6YtcjebNioMJL7VVeDiLtV2AIaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmRhZmU1Ni04NDM0LTRiYmEtYjE3Ni0zNWU4NzJjMWFjMTgvMC9FOThCNUM4REU2 Q0Q4QTgzMDkyRkI1NTU3ODM4OEJCNTVEODAyMUE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhCQjU1RDgw MjFBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZkYWZlNTYtODQzNC00YmJhLWIx NzYtMzVlODcyYzFhYzE4LzAvRTk4QjVDOERFNkNEOEE4MzA5MkZCNTU1NzgzODhC QjU1RDgwMjFBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGOc0a2AV2RFTIteJgqYM7pW06QPVSJyna9 Pvnet/JBK2YwAKuT4JFw/9y+l8F/qRNFN0h6izL9DAzPJKYwtysGMEucHhfxXhPn YD7AujlS+S4JOxd86R8Frj2vJQyPBsl69SGrLStWCM3bTEMYimvZAIMQjlYk3k5C jtoheaJ78J8vepcxFKVHSpXNyfnmSCs8jEZMQmhLL8IqZoWO7U/KZpllrriVnpvP J/KLXmRxHc7n5EERvMYllLt4mVggkKs36nDUyHDrq6VwKxsrUirI2KkbfPwOL6Vq TwqiXKm09z3U8siW+m/G/3OftPn4E3C68AtXj4D5J4j5RtfVZ90= -----END CERTIFICATE-----Generated at Tue Nov 4 12:38:55 2025 by rpki-client