$ rpki-client -vvf repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft File: 0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft (raw, json) Hash identifier: OgM9QNz22TWI5EXAd25TbNqTXEX8euiN4NRGNT2EECM= Subject key identifier: AE:B1:16:80:BE:92:FF:FA:B0:2D:5A:C2:53:6A:21:40:6D:78:87:D5 Authority key identifier: 0E:7B:F2:CE:27:D8:99:D8:E9:85:DB:D9:31:1D:F8:B2:50:C5:85:81 Certificate issuer: /CN=0E7BF2CE27D899D8E985DBD9311DF8B250C58581 Certificate serial: 72F17B47BF1099E42D97F588BEB7C0B16AED1FFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft Manifest number: 0111 Signing time: Tue 04 Nov 2025 12:01:20 +0000 Manifest this update: Tue 04 Nov 2025 11:56:20 +0000 Manifest next update: Fri 07 Nov 2025 17:06:20 +0000 Files and hashes: 1: 0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl (hash: 5QCQX1V64Pi3fb8ToIhXTSKMvt+uAXo5bsaRfLlukHc=) 2: 3130332e3235322e3130312e302f32342d3234203d3e203539313437.roa (hash: MWGkE6CsRSWqMBYLVPUy9HMPTSzmfg1RhCwIFa2snrk=) 3: 3130332e3235322e3130302e302f32332d3233203d3e203539313437.roa (hash: 7Av//tJaFwT8z6GFSW7uk6ehjT5V0e5+FTRipECyI0I=) 4: 3130332e3235322e3130302e302f32342d3234203d3e203539313437.roa (hash: YM9KbHhAudmxJLriUiNFwnyRKQIeMezebhltKdO9iVg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 17:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f1:7b:47:bf:10:99:e4:2d:97:f5:88:be:b7:c0:b1:6a:ed:1f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E7BF2CE27D899D8E985DBD9311DF8B250C58581 Validity Not Before: Nov 4 11:56:20 2025 GMT Not After : Nov 7 17:06:20 2025 GMT Subject: CN=AEB11680BE92FFFAB02D5AC2536A21406D7887D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:99:10:f3:4d:8e:f9:71:34:f9:30:1c:9f:c4: 43:fc:05:aa:87:1c:ab:9f:e1:86:2e:26:55:a3:f7: 2c:b5:ff:27:5e:19:48:a7:f4:13:5c:b6:1e:5e:eb: c2:f8:aa:0a:d6:57:20:45:56:a9:c7:5f:b7:3c:d7: 02:68:b2:80:47:52:e8:d5:19:4c:81:76:7a:89:31: 2b:e6:c5:d5:80:4d:b5:a7:3a:14:99:f4:c3:5e:c4: d3:27:65:35:65:77:d8:f2:f6:bf:ba:a6:bd:88:48: 10:26:d1:2e:c2:97:7f:0f:43:98:19:a5:2f:b6:11: f6:bb:46:8a:00:4b:8f:99:84:ea:ad:09:9c:06:cc: e3:e5:fb:08:4e:6c:7d:83:b4:4b:aa:46:84:95:cf: 8f:1f:be:81:12:57:5e:d5:da:60:70:46:06:ce:2e: 9d:49:de:53:50:1f:57:a7:3a:ff:40:77:db:00:71: 80:7b:8a:48:67:23:9a:d2:dc:b8:e5:bb:a1:57:48: 79:5e:53:17:e4:9b:bf:26:97:a7:ac:bf:b6:d5:9f: 5f:91:21:2a:0e:58:4f:02:6b:c1:80:b8:77:42:16: c9:39:97:55:3b:d9:7a:0a:8c:35:c1:3a:8e:82:e6: 8d:a6:0a:ad:6c:43:6d:84:38:47:b0:44:41:cd:1d: 8b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B1:16:80:BE:92:FF:FA:B0:2D:5A:C2:53:6A:21:40:6D:78:87:D5 X509v3 Authority Key Identifier: keyid:0E:7B:F2:CE:27:D8:99:D8:E9:85:DB:D9:31:1D:F8:B2:50:C5:85:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:76:1d:dd:2a:1f:7c:0a:80:24:7e:b4:a9:ba:02:f8:a9:b1: 49:2a:6a:cf:b1:c5:17:63:fe:ae:d5:91:9e:8d:f7:52:58:88: bc:0f:b0:4e:65:8f:4c:db:1e:a3:81:9d:a5:f9:dc:d8:bb:f3: 7d:7c:52:27:1b:77:e2:17:cc:79:a5:c4:88:c7:3e:f2:69:f4: 45:8e:c3:1e:ab:d9:54:e6:47:53:45:5e:f7:e1:2c:29:e9:e0: e4:e7:ed:2a:20:9a:64:26:83:87:0d:cf:48:84:6f:fd:c1:fd: f6:d4:84:64:37:bb:16:33:6e:82:da:c7:15:8a:7e:90:f9:a4: ac:42:2d:d8:7c:7b:bc:1e:0a:86:2a:57:f7:14:4e:52:32:d0: 3e:24:df:b3:b7:5e:21:00:0e:a1:cc:86:d9:db:0a:c5:a7:f6: bd:cc:5a:9e:c8:b2:e7:07:0c:de:5c:75:b4:16:24:5a:7d:cd: 1f:4a:cc:a4:27:33:5f:44:0b:bc:29:25:8a:ca:71:f6:2c:8a: b4:6b:7b:d6:56:92:64:3b:ee:ab:3d:27:8c:4f:09:ec:9c:b9: 5f:2b:0a:4a:85:8e:d2:32:ec:52:9d:c4:4f:3e:46:6c:76:8b: 99:ce:01:d6:e6:61:77:93:ca:fc:23:39:8b:45:64:54:0f:e1: f2:94:94:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcvF7R78QmeQtl/WIvrfAsWrtH/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU3QkYyQ0UyN0Q4OTlEOEU5ODVEQkQ5MzExREY4QjI1 MEM1ODU4MTAeFw0yNTExMDQxMTU2MjBaFw0yNTExMDcxNzA2MjBaMDMxMTAvBgNV BAMTKEFFQjExNjgwQkU5MkZGRkFCMDJENUFDMjUzNkEyMTQwNkQ3ODg3RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDImRDzTY75cTT5MByfxEP8BaqH HKuf4YYuJlWj9yy1/ydeGUin9BNcth5e68L4qgrWVyBFVqnHX7c81wJosoBHUujV GUyBdnqJMSvmxdWATbWnOhSZ9MNexNMnZTVld9jy9r+6pr2ISBAm0S7Cl38PQ5gZ pS+2Efa7RooAS4+ZhOqtCZwGzOPl+whObH2DtEuqRoSVz48fvoESV17V2mBwRgbO Lp1J3lNQH1enOv9Ad9sAcYB7ikhnI5rS3Ljlu6FXSHleUxfkm78ml6esv7bVn1+R ISoOWE8Ca8GAuHdCFsk5l1U72XoKjDXBOo6C5o2mCq1sQ22EOEewREHNHYvBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrrEWgL6S//qwLVrCU2ohQG14h9UwHwYDVR0j BBgwFoAUDnvyzifYmdjphdvZMR34slDFhYEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGM1NTAzNC01ZjM2LTQxNzMtYjY0Yy1hOTc1ZTMyMzEzOGEvMC8wRTdCRjJDRTI3 RDg5OUQ4RTk4NURCRDkzMTFERjhCMjUwQzU4NTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU3QkYyQ0UyN0Q4OTlEOEU5ODVEQkQ5MzExREY4QjI1MEM1 ODU4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBjNTUwMzQtNWYzNi00MTczLWI2 NGMtYTk3NWUzMjMxMzhhLzAvMEU3QkYyQ0UyN0Q4OTlEOEU5ODVEQkQ5MzExREY4 QjI1MEM1ODU4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAB2Hd0qH3wKgCR+tKm6AvipsUkqas+xxRdj /q7VkZ6N91JYiLwPsE5lj0zbHqOBnaX53Ni78318Uicbd+IXzHmlxIjHPvJp9EWO wx6r2VTmR1NFXvfhLCnp4OTn7SogmmQmg4cNz0iEb/3B/fbUhGQ3uxYzboLaxxWK fpD5pKxCLdh8e7weCoYqV/cUTlIy0D4k37O3XiEADqHMhtnbCsWn9r3MWp7IsucH DN5cdbQWJFp9zR9KzKQnM19EC7wpJYrKcfYsirRre9ZWkmQ77qs9J4xPCeycuV8r CkqFjtIy7FKdxE8+Rmx2i5nOAdbmYXeTyvwjOYtFZFQP4fKUlOw= -----END CERTIFICATE-----Generated at Wed Nov 5 11:49:28 2025 by rpki-client