$ rpki-client -vvf repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft File: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft (raw, json) Hash identifier: NlQf4x3y8DHttkwOkdTnW2SSIB8rJPcw7qMLYD1jVVw= Subject key identifier: 45:22:AA:D4:C3:FA:AC:C1:C7:21:D8:16:8B:16:35:2F:5D:5C:C6:3C Authority key identifier: E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 Certificate issuer: /CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Certificate serial: 62228515220E994AE792FB4CD49582CE933E2CE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft Manifest number: 01A6 Signing time: Tue 04 Nov 2025 13:22:15 +0000 Manifest this update: Tue 04 Nov 2025 13:17:15 +0000 Manifest next update: Fri 07 Nov 2025 20:11:15 +0000 Files and hashes: 1: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl (hash: Wr58frTWsxcnmAZv78VbjiEfryYopUm+is4oPZ5eazY=) 2: 3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa (hash: zvs63z9VCpiCzE9F7SS2YuDrGUS8w4FG4VYk90PMazI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:22:85:15:22:0e:99:4a:e7:92:fb:4c:d4:95:82:ce:93:3e:2c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Validity Not Before: Nov 4 13:17:15 2025 GMT Not After : Nov 7 20:11:15 2025 GMT Subject: CN=4522AAD4C3FAACC1C721D8168B16352F5D5CC63C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:76:43:06:64:69:fd:9f:47:c9:78:36:d3:5e: d4:66:e0:d9:0d:13:da:6d:10:e4:de:ba:59:20:f3: 07:40:be:1f:b5:1a:ad:16:aa:51:2e:ff:93:ae:21: 42:e8:c7:9f:70:7c:ac:88:aa:1d:7e:74:e4:b9:89: 59:8d:f9:a7:19:00:35:97:8c:83:48:8d:af:bb:e4: 3e:d1:fb:a3:14:f8:51:7c:77:0f:c8:bf:df:a3:37: 5a:0b:f1:10:b6:19:6b:ed:03:3a:0c:70:a1:26:58: b5:6b:f6:82:9b:d9:c9:14:65:de:10:fa:6a:00:3f: 22:74:54:b4:6f:f5:c4:e7:37:65:ae:a0:ab:01:9d: 14:3d:84:2d:cd:59:fe:18:95:02:97:75:7b:51:22: 52:d2:a9:6e:d2:60:8f:c3:1a:2c:7b:bc:91:d8:f2: 9d:cf:02:9a:6b:58:c1:bf:30:e0:fa:54:ad:e7:db: b3:d9:c0:52:5d:16:03:c0:1f:81:1b:fb:1a:d1:c9: 65:c6:09:09:ee:bc:c4:86:4d:15:eb:f7:04:10:7c: 9c:01:c6:24:05:ce:55:e0:be:6b:d4:6f:5e:c9:78: 42:4b:82:63:ce:c1:44:04:6f:22:09:8a:c0:0d:a8: 4c:b1:95:ae:da:a0:59:7c:13:52:3e:07:85:55:c7: 93:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:22:AA:D4:C3:FA:AC:C1:C7:21:D8:16:8B:16:35:2F:5D:5C:C6:3C X509v3 Authority Key Identifier: keyid:E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:77:86:f3:b8:0a:13:c8:fe:7b:ec:3a:78:fc:c4:f8:a3:d1: 27:30:fc:4a:39:d4:75:e5:52:d0:38:96:07:77:be:d7:ad:90: 80:07:a5:7d:e8:e1:17:f0:d9:c2:1f:c6:47:43:34:8d:b2:42: eb:ed:65:38:9d:98:5c:b3:2c:0e:a3:35:e7:2e:56:b2:55:30: 06:4f:17:b4:b3:f6:e5:9b:0b:0a:ae:15:cc:04:4d:31:e6:57: 9a:3b:40:67:9d:87:54:09:dc:a6:02:4c:09:df:76:c6:1b:33: 4f:e3:94:39:34:b1:ce:b1:d4:8f:c7:02:0e:23:52:07:4b:2d: df:fe:82:41:dc:db:c3:1a:4b:a1:2d:1d:32:22:c3:5a:36:45: 09:93:44:58:45:de:1e:c8:1c:cd:68:0b:82:7a:d5:99:27:01: b8:07:f4:39:9c:ad:ef:d4:4e:c3:a1:d4:6a:91:48:4c:37:d6: 5c:80:6d:82:35:a4:7c:d7:85:0e:1c:f7:cf:2a:81:f5:7c:87: 26:47:d2:81:aa:cd:5c:26:a6:70:7f:d9:58:d1:a0:66:90:9c: 38:65:89:3b:c9:0d:f4:ef:b7:76:3c:0c:81:d3:fe:76:b7:34: 29:20:5a:c1:f7:16:87:45:85:f8:eb:97:0b:31:e5:e3:96:47: fc:6f:1d:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYiKFFSIOmUrnkvtM1JWCzpM+LOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlG QkZGMTVDOTAeFw0yNTExMDQxMzE3MTVaFw0yNTExMDcyMDExMTVaMDMxMTAvBgNV BAMTKDQ1MjJBQUQ0QzNGQUFDQzFDNzIxRDgxNjhCMTYzNTJGNUQ1Q0M2M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBdkMGZGn9n0fJeDbTXtRm4NkN E9ptEOTeulkg8wdAvh+1Gq0WqlEu/5OuIULox59wfKyIqh1+dOS5iVmN+acZADWX jINIja+75D7R+6MU+FF8dw/Iv9+jN1oL8RC2GWvtAzoMcKEmWLVr9oKb2ckUZd4Q +moAPyJ0VLRv9cTnN2WuoKsBnRQ9hC3NWf4YlQKXdXtRIlLSqW7SYI/DGix7vJHY 8p3PApprWMG/MOD6VK3n27PZwFJdFgPAH4Eb+xrRyWXGCQnuvMSGTRXr9wQQfJwB xiQFzlXgvmvUb17JeEJLgmPOwUQEbyIJisANqEyxla7aoFl8E1I+B4VVx5MbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURSKq1MP6rMHHIdgWixY1L11cxjwwHwYDVR0j BBgwFoAU6H2RT6U2zdocBIbwkj0r6fv/FckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Yjg0M2YwMC0yODIzLTQ3MzItOWI3Yy1kOGNmZTYzMDEwZGMvMC9FODdEOTE0RkE1 MzZDRERBMUMwNDg2RjA5MjNEMkJFOUZCRkYxNUM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlGQkZG MTVDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4NDNmMDAtMjgyMy00NzMyLTli N2MtZDhjZmU2MzAxMGRjLzAvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJC RTlGQkZGMTVDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEh3hvO4ChPI/nvsOnj8xPij0Scw/Eo51HXl UtA4lgd3vtetkIAHpX3o4Rfw2cIfxkdDNI2yQuvtZTidmFyzLA6jNecuVrJVMAZP F7Sz9uWbCwquFcwETTHmV5o7QGedh1QJ3KYCTAnfdsYbM0/jlDk0sc6x1I/HAg4j UgdLLd/+gkHc28MaS6EtHTIiw1o2RQmTRFhF3h7IHM1oC4J61ZknAbgH9Dmcre/U TsOh1GqRSEw31lyAbYI1pHzXhQ4c988qgfV8hyZH0oGqzVwmpnB/2VjRoGaQnDhl iTvJDfTvt3Y8DIHT/na3NCkgWsH3FodFhfjrlwsx5eOWR/xvHVc= -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:41 2025 by rpki-client