$ rpki-client -vvf repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft File: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft (raw, json) Hash identifier: HSq7k/vRnQqHiUl47bupPzC/cqbdEhKNPa/F6G5WYtY= Subject key identifier: 4E:42:4C:24:6D:00:98:AE:D5:F3:15:78:83:C4:DA:29:92:C7:85:02 Authority key identifier: E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE Certificate issuer: /CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE Certificate serial: 32249B44410C7B481F6C632890AACA709AD973A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft Manifest number: 0242 Signing time: Tue 04 Nov 2025 11:40:53 +0000 Manifest this update: Tue 04 Nov 2025 11:35:53 +0000 Manifest next update: Fri 07 Nov 2025 22:20:53 +0000 Files and hashes: 1: 3130332e3137322e3139342e302f32332d3233203d3e20313437303735.roa (hash: PyDXoIlT1NIef5VwI6vIhfIo1ytHrmrJtk3n+sEFsT0=) 2: E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl (hash: 3L/7YkO+OaBAUdF6+BJdNXfG5/9vDDlVZ2QmqUu7HME=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:24:9b:44:41:0c:7b:48:1f:6c:63:28:90:aa:ca:70:9a:d9:73:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE Validity Not Before: Nov 4 11:35:53 2025 GMT Not After : Nov 7 22:20:53 2025 GMT Subject: CN=4E424C246D0098AED5F3157883C4DA2992C78502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:37:69:ff:d0:fe:ac:fb:83:36:ff:a7:a9:ce: 10:01:5f:39:87:73:43:25:4e:7c:6a:82:37:0a:a6: 5e:99:a8:d4:41:5d:1d:fd:47:86:e6:5f:fe:b8:96: c6:53:6f:d2:2d:c1:b6:31:0c:33:18:cf:ba:ca:ba: 29:8e:11:77:5c:89:25:63:b0:92:de:f8:66:18:17: 41:f5:a7:53:70:24:1a:5b:f2:89:85:41:6e:9e:21: 77:50:50:e4:8c:a8:91:83:1b:c5:e5:77:f0:b4:b6: 37:44:9c:1e:aa:44:6d:39:4b:d8:d4:70:cf:e1:be: 5c:56:d8:1f:61:87:3b:17:94:c4:1d:57:bd:1c:cd: 3c:00:7b:05:7c:50:de:c4:fd:25:b9:53:0a:e9:bf: 6f:3e:d8:47:4a:85:95:ad:b5:b4:28:20:28:4a:44: 36:94:52:b4:39:f1:de:96:9d:c2:81:79:0a:f2:73: 31:ae:da:28:fa:81:4b:36:bf:42:60:9e:b3:7e:18: ac:6c:d7:28:05:5a:60:11:54:12:7f:76:6e:b8:9e: 2d:42:c5:b3:44:76:0b:05:c6:88:4a:f0:bd:8b:77: ba:2c:86:fb:08:a5:fc:44:2b:67:a3:b5:2c:3d:1d: a9:a3:60:3e:7d:ae:fa:d5:6a:87:48:ce:fe:ff:f1: 50:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:42:4C:24:6D:00:98:AE:D5:F3:15:78:83:C4:DA:29:92:C7:85:02 X509v3 Authority Key Identifier: keyid:E4:86:34:E1:D6:FB:2E:8A:06:A4:88:25:B4:D7:EE:C4:7B:2A:E4:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3ec2cb6-35ad-4101-982e-2e34d566efda/0/E48634E1D6FB2E8A06A48825B4D7EEC47B2AE4BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c8:61:10:82:cb:bb:f4:d5:ae:41:5d:5b:fe:4c:db:dd:d4: db:5e:65:18:9b:83:c9:ed:94:23:4e:5c:8f:e9:a0:03:0e:b0: 53:fe:10:b2:63:d2:30:b0:5e:86:cb:62:3b:a5:be:2a:4c:f8: 31:2c:9b:38:19:8f:aa:98:5f:64:39:2c:bb:b9:c5:c1:eb:6d: 13:81:60:1a:3d:f7:66:83:50:ab:f4:1a:99:0e:0d:b0:a7:1c: b7:0c:bb:cb:7b:bd:83:2a:4f:0d:ab:97:48:68:ae:58:97:03: 93:f3:00:6c:98:9b:18:92:18:21:00:14:ac:3b:3d:e7:ad:2d: 47:dc:e8:2f:94:c3:02:05:dd:7e:c9:16:83:34:49:87:3d:61: 55:62:b2:42:0f:de:7a:a6:ef:ba:fc:89:f6:21:5a:85:ee:d7: 20:40:0e:77:07:e4:1f:f5:0f:39:78:38:b4:be:c0:6d:e8:30: 40:23:84:56:69:5b:7d:04:77:c4:66:fd:bc:4c:e4:72:02:1d: 40:23:3e:a7:26:9a:df:d8:47:38:32:3f:37:09:83:40:d2:94: 00:e2:2e:86:07:f9:75:28:ef:df:64:a7:43:32:bd:f9:1e:14: 3d:ab:8b:9a:af:1a:b5:68:db:12:1a:87:61:3a:1a:0b:fe:6a: 8a:c9:66:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMiSbREEMe0gfbGMokKrKcJrZc6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3 QjJBRTRCRTAeFw0yNTExMDQxMTM1NTNaFw0yNTExMDcyMjIwNTNaMDMxMTAvBgNV BAMTKDRFNDI0QzI0NkQwMDk4QUVENUYzMTU3ODgzQzREQTI5OTJDNzg1MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDON2n/0P6s+4M2/6epzhABXzmH c0MlTnxqgjcKpl6ZqNRBXR39R4bmX/64lsZTb9ItwbYxDDMYz7rKuimOEXdciSVj sJLe+GYYF0H1p1NwJBpb8omFQW6eIXdQUOSMqJGDG8Xld/C0tjdEnB6qRG05S9jU cM/hvlxW2B9hhzsXlMQdV70czTwAewV8UN7E/SW5Uwrpv28+2EdKhZWttbQoIChK RDaUUrQ58d6WncKBeQryczGu2ij6gUs2v0JgnrN+GKxs1ygFWmARVBJ/dm64ni1C xbNEdgsFxohK8L2Ld7oshvsIpfxEK2ejtSw9HamjYD59rvrVaodIzv7/8VCtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTkJMJG0AmK7V8xV4g8TaKZLHhQIwHwYDVR0j BBgwFoAU5IY04db7LooGpIgltNfuxHsq5L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2VjMmNiNi0zNWFkLTQxMDEtOTgyZS0yZTM0ZDU2NmVmZGEvMC9FNDg2MzRFMUQ2 RkIyRThBMDZBNDg4MjVCNEQ3RUVDNDdCMkFFNEJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VFQzQ3QjJB RTRCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNlYzJjYjYtMzVhZC00MTAxLTk4 MmUtMmUzNGQ1NjZlZmRhLzAvRTQ4NjM0RTFENkZCMkU4QTA2QTQ4ODI1QjREN0VF QzQ3QjJBRTRCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzIYRCCy7v01a5BXVv+TNvd1NteZRibg8nt lCNOXI/poAMOsFP+ELJj0jCwXobLYjulvipM+DEsmzgZj6qYX2Q5LLu5xcHrbROB YBo992aDUKv0GpkODbCnHLcMu8t7vYMqTw2rl0horliXA5PzAGyYmxiSGCEAFKw7 PeetLUfc6C+UwwIF3X7JFoM0SYc9YVViskIP3nqm77r8ifYhWoXu1yBADncH5B/1 Dzl4OLS+wG3oMEAjhFZpW30Ed8Rm/bxM5HICHUAjPqcmmt/YRzgyPzcJg0DSlADi LoYH+XUo799kp0MyvfkeFD2ri5qvGrVo2xIah2E6Ggv+aorJZgU= -----END CERTIFICATE-----Generated at Tue Nov 4 21:14:37 2025 by rpki-client