$ rpki-client -vvf repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft File: E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft (raw, json) Hash identifier: +nnECoAfDV2WqO8aHpm47hPz0Mfq1Kcn5gp5DFoQaS0= Subject key identifier: 48:05:3E:2D:94:CC:2D:79:EE:96:44:F5:03:B3:6E:34:54:0A:43:08 Authority key identifier: E1:41:ED:0B:8F:1B:83:AB:AC:98:B8:DB:75:8C:25:18:8C:6E:65:A5 Certificate issuer: /CN=E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5 Certificate serial: 0EE479FD29AD45A2584D2E9F8B242027D21C3FC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft Manifest number: 0102 Signing time: Mon 03 Nov 2025 19:42:11 +0000 Manifest this update: Mon 03 Nov 2025 19:37:11 +0000 Manifest next update: Thu 06 Nov 2025 23:26:11 +0000 Files and hashes: 1: E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl (hash: wrNQIm8rHyeD/DjtrUqahzCNFHNmcYk5OOD3qtVX14k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 23:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:e4:79:fd:29:ad:45:a2:58:4d:2e:9f:8b:24:20:27:d2:1c:3f:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5 Validity Not Before: Nov 3 19:37:11 2025 GMT Not After : Nov 6 23:26:11 2025 GMT Subject: CN=48053E2D94CC2D79EE9644F503B36E34540A4308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a3:6a:5b:ba:1f:f7:40:4a:ac:fc:65:23:46: 63:91:53:2d:8c:c4:7b:73:66:37:cc:7e:c3:39:8b: 55:d4:b3:1e:7b:35:cc:45:c9:fc:4a:11:de:fb:75: 57:8f:03:09:a9:f4:42:3f:06:21:24:9e:23:e3:10: 8c:6b:c7:d8:96:71:db:ed:81:f5:35:e7:5c:d5:73: 0c:17:81:cc:a7:f9:ef:c9:a8:d1:1c:01:26:12:4d: c4:d3:21:dd:fc:c0:8b:b2:05:72:0d:0d:48:80:64: 55:5e:78:46:44:b3:8d:27:f7:8a:b7:20:18:40:4d: 41:3a:b6:36:cc:d2:e7:28:05:e2:cc:a0:8f:dc:e7: be:e2:df:1b:89:ff:8c:91:91:38:dd:ad:29:fe:44: 65:eb:8e:b9:c0:3c:fb:0b:ce:41:52:59:4e:f5:83: ef:9e:cc:3a:29:7a:93:66:6a:72:9e:55:80:ce:72: 73:d1:78:eb:16:68:28:fa:62:f5:fc:8d:86:94:a7: 0b:53:3e:12:cf:be:fe:d8:0d:68:4b:76:20:56:27: ae:e2:54:97:b8:ec:55:40:e5:d0:3f:31:eb:df:80: e2:53:d0:5b:1c:70:73:8a:a0:88:cf:0f:60:46:a5: 85:34:51:cb:32:f7:5c:a9:48:7f:58:17:70:e0:c8: aa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:05:3E:2D:94:CC:2D:79:EE:96:44:F5:03:B3:6E:34:54:0A:43:08 X509v3 Authority Key Identifier: keyid:E1:41:ED:0B:8F:1B:83:AB:AC:98:B8:DB:75:8C:25:18:8C:6E:65:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:02:76:7d:60:51:fd:1c:c1:97:14:8f:d6:32:88:48:4b:5c: 57:ca:25:b8:8d:55:d7:b5:4b:ec:ed:79:4c:2b:fd:68:01:cf: eb:03:f1:11:c8:d6:03:9e:b0:26:42:31:5c:aa:71:73:ca:b1: 78:7a:dc:16:c9:f8:ff:da:48:e9:1b:e1:85:4d:0d:67:01:9e: 25:61:94:7d:8a:26:07:4b:e7:76:84:3a:14:9d:57:c2:22:12: e8:90:df:ee:ec:fd:96:f8:d7:95:23:33:53:df:8e:76:a6:42: dd:cd:6b:c5:ac:62:90:8b:12:96:8a:13:75:c8:26:69:d1:3e: 4a:0d:f9:01:75:70:fd:60:0d:d9:ac:63:93:98:38:d4:18:35: 96:06:c7:8e:95:89:45:8d:44:1b:5b:c9:44:82:ac:2a:4a:81: 18:44:6a:c9:1c:91:5f:3b:de:7d:26:cc:b6:45:c5:8a:f6:c7: 12:6e:35:72:a1:af:06:a4:81:b1:f6:04:b5:91:8f:60:70:20: ab:87:46:8d:b7:07:b8:b3:d2:40:42:d5:b2:3f:59:84:2f:31: ad:42:a8:0f:4c:b4:72:91:18:f4:c6:5c:1e:bd:c5:ee:34:d2: 8e:7e:8f:a3:bf:23:7d:e6:51:6b:03:c0:58:8b:f6:ad:71:ff: 5b:66:d6:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDuR5/SmtRaJYTS6fiyQgJ9IcP8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1MTg4 QzZFNjVBNTAeFw0yNTExMDMxOTM3MTFaFw0yNTExMDYyMzI2MTFaMDMxMTAvBgNV BAMTKDQ4MDUzRTJEOTRDQzJENzlFRTk2NDRGNTAzQjM2RTM0NTQwQTQzMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9o2pbuh/3QEqs/GUjRmORUy2M xHtzZjfMfsM5i1XUsx57NcxFyfxKEd77dVePAwmp9EI/BiEkniPjEIxrx9iWcdvt gfU151zVcwwXgcyn+e/JqNEcASYSTcTTId38wIuyBXINDUiAZFVeeEZEs40n94q3 IBhATUE6tjbM0ucoBeLMoI/c577i3xuJ/4yRkTjdrSn+RGXrjrnAPPsLzkFSWU71 g++ezDopepNmanKeVYDOcnPReOsWaCj6YvX8jYaUpwtTPhLPvv7YDWhLdiBWJ67i VJe47FVA5dA/MevfgOJT0FsccHOKoIjPD2BGpYU0Ucsy91ypSH9YF3DgyKqPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSAU+LZTMLXnulkT1A7NuNFQKQwgwHwYDVR0j BBgwFoAU4UHtC48bg6usmLjbdYwlGIxuZaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzFlNjkzYy0yZmQ3LTRmNGMtYWY2My1mZWU2OTA3NmUwZDEvMC9FMTQxRUQwQjhG MUI4M0FCQUM5OEI4REI3NThDMjUxODhDNkU2NUE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1MTg4QzZF NjVBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMxZTY5M2MtMmZkNy00ZjRjLWFm NjMtZmVlNjkwNzZlMGQxLzAvRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1 MTg4QzZFNjVBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKACdn1gUf0cwZcUj9YyiEhLXFfKJbiNVde1 S+zteUwr/WgBz+sD8RHI1gOesCZCMVyqcXPKsXh63BbJ+P/aSOkb4YVNDWcBniVh lH2KJgdL53aEOhSdV8IiEuiQ3+7s/Zb415UjM1PfjnamQt3Na8WsYpCLEpaKE3XI JmnRPkoN+QF1cP1gDdmsY5OYONQYNZYGx46ViUWNRBtbyUSCrCpKgRhEaskckV87 3n0mzLZFxYr2xxJuNXKhrwakgbH2BLWRj2BwIKuHRo23B7iz0kBC1bI/WYQvMa1C qA9MtHKRGPTGXB69xe400o5+j6O/I33mUWsDwFiL9q1x/1tm1lM= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:39 2025 by rpki-client