$ rpki-client -vvf repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft File: E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft (raw, json) Hash identifier: TtmF+9Y+M5vt1BGCn3oqbeYM6angYVVtS+vwFaj412o= Subject key identifier: 50:67:2E:CB:3C:31:D6:3D:99:2D:88:F8:1E:FF:7C:EC:B0:7E:77:02 Authority key identifier: E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65 Certificate issuer: /CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65 Certificate serial: 31E90E238D29E2C7C3660AD41677EBE10AB773A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft Manifest number: C0 Signing time: Tue 04 Nov 2025 20:01:58 +0000 Manifest this update: Tue 04 Nov 2025 19:56:58 +0000 Manifest next update: Sat 08 Nov 2025 06:41:58 +0000 Files and hashes: 1: 3130332e3134312e3233342e302f32342d3234203d3e20313339333634.roa (hash: S22ChZGEvJ5gAYFztY/TYC839FBrS83Y5ZysrOVb4ss=) 2: 3130332e3136392e3230302e302f32342d3234203d3e20313339333634.roa (hash: jU/SQlHFg0i0t2XT427YG+4xTKw9TASNvTEDlba6svA=) 3: E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl (hash: DtePw9wWCp7lvDQTHdNbZQ625HnHiShV756CFGk2fNc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:e9:0e:23:8d:29:e2:c7:c3:66:0a:d4:16:77:eb:e1:0a:b7:73:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65 Validity Not Before: Nov 4 19:56:58 2025 GMT Not After : Nov 8 06:41:58 2025 GMT Subject: CN=50672ECB3C31D63D992D88F81EFF7CECB07E7702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e6:03:de:8a:f5:d1:03:cb:2d:a1:6f:14:9d: ee:ef:1a:ec:ea:e3:14:57:27:5f:16:10:d6:87:ab: c9:8f:87:fb:33:21:62:19:09:8a:c0:96:52:c1:a3: d8:52:54:3f:9b:b8:f2:b0:95:e5:74:cb:55:ae:2c: fa:1d:14:a0:90:a5:e2:28:fe:e7:3e:53:53:10:b5: 22:bc:d8:22:87:c5:c1:ef:f8:90:3e:23:16:09:40: 73:24:25:4e:46:44:de:11:ab:07:17:2b:d8:f8:05: f8:e8:df:73:08:41:86:6c:44:c4:14:fb:e6:ea:16: 59:1f:15:1f:49:f2:61:5b:8b:12:cc:a4:f7:17:98: cb:f1:6d:f6:5b:87:24:38:3d:07:fe:ab:f9:a1:fc: 41:80:ec:e2:1f:04:4a:3d:4a:ec:1d:9e:a4:4d:83: 40:20:37:76:6b:4f:66:b4:57:1a:86:e5:d2:d2:56: d3:6b:8e:00:e3:6c:ab:5d:1f:a0:1a:63:c1:ac:fb: 5a:f5:62:b1:51:1a:92:d0:76:70:c9:de:95:6a:a7: 99:96:54:cd:21:18:3c:49:5f:e9:e1:a8:05:19:30: 3d:49:e3:55:3e:1d:b6:2e:93:e0:1e:24:20:b2:1c: e5:18:a9:84:03:55:38:38:ca:2d:d3:7a:00:6d:6d: 1d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:67:2E:CB:3C:31:D6:3D:99:2D:88:F8:1E:FF:7C:EC:B0:7E:77:02 X509v3 Authority Key Identifier: keyid:E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:7c:0f:b8:29:76:07:c6:a8:1e:e9:52:1a:39:41:73:26:a7: 1f:e2:bf:e0:9e:64:58:58:69:2a:b2:dd:bc:db:08:45:35:f6: 12:2a:f4:48:62:ad:b1:27:9f:40:f9:32:60:36:48:58:79:00: 90:93:a0:00:89:5e:6f:02:19:9b:58:d2:20:c7:85:a8:06:0a: b6:f4:91:bb:35:04:6d:50:05:5b:6c:ad:2a:c5:ea:7d:b8:c7: d6:25:cc:30:f5:f9:db:14:68:a8:19:b1:3d:66:a5:4e:27:8f: 99:36:bf:97:6d:c2:21:47:c3:5d:4f:e1:e6:8e:c3:5e:4a:7d: 8b:15:6f:5f:5a:5f:4f:ff:c7:bb:ab:24:1b:b1:82:43:73:54: 01:da:95:3b:a3:00:31:76:5a:9e:11:eb:e7:33:27:a1:1b:16: 43:6c:4d:cc:4f:d8:c0:f1:aa:24:d9:19:7e:1b:15:4c:00:7c: 9b:23:c8:4c:32:93:29:a1:fa:0d:eb:c5:f0:01:96:f2:4a:3c: 79:c0:b2:f1:a2:8a:c0:2b:18:f1:36:de:7f:1e:07:a9:7e:77: 27:b9:6a:33:45:83:08:16:d3:eb:34:bd:1f:3d:15:e2:20:d8: 92:c3:5f:c1:25:40:97:e0:b2:7d:0e:60:2a:d5:8a:09:d2:2d: 73:3b:b4:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMekOI40p4sfDZgrUFnfr4Qq3c6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5QTJD MzZDRUU2NTAeFw0yNTExMDQxOTU2NThaFw0yNTExMDgwNjQxNThaMDMxMTAvBgNV BAMTKDUwNjcyRUNCM0MzMUQ2M0Q5OTJEODhGODFFRkY3Q0VDQjA3RTc3MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC45gPeivXRA8stoW8Une7vGuzq 4xRXJ18WENaHq8mPh/szIWIZCYrAllLBo9hSVD+buPKwleV0y1WuLPodFKCQpeIo /uc+U1MQtSK82CKHxcHv+JA+IxYJQHMkJU5GRN4RqwcXK9j4Bfjo33MIQYZsRMQU ++bqFlkfFR9J8mFbixLMpPcXmMvxbfZbhyQ4PQf+q/mh/EGA7OIfBEo9SuwdnqRN g0AgN3ZrT2a0VxqG5dLSVtNrjgDjbKtdH6AaY8Gs+1r1YrFRGpLQdnDJ3pVqp5mW VM0hGDxJX+nhqAUZMD1J41U+HbYuk+AeJCCyHOUYqYQDVTg4yi3TegBtbR3jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUGcuyzwx1j2ZLYj4Hv987LB+dwIwHwYDVR0j BBgwFoAU5IWKJhVHqsBlzflsIfiposNs7mUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzI4YWFjMy0wMDk0LTQyMWYtYTIwMS0yNGQ4MjBlMmFiM2QvMC9FNDg1OEEyNjE1 NDdBQUMwNjVDREY5NkMyMUY4QTlBMkMzNkNFRTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5QTJDMzZD RUU2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMyOGFhYzMtMDA5NC00MjFmLWEy MDEtMjRkODIwZTJhYjNkLzAvRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5 QTJDMzZDRUU2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHh8D7gpdgfGqB7pUho5QXMmpx/iv+CeZFhY aSqy3bzbCEU19hIq9EhirbEnn0D5MmA2SFh5AJCToACJXm8CGZtY0iDHhagGCrb0 kbs1BG1QBVtsrSrF6n24x9YlzDD1+dsUaKgZsT1mpU4nj5k2v5dtwiFHw11P4eaO w15KfYsVb19aX0//x7urJBuxgkNzVAHalTujADF2Wp4R6+czJ6EbFkNsTcxP2MDx qiTZGX4bFUwAfJsjyEwykymh+g3rxfABlvJKPHnAsvGiisArGPE23n8eB6l+dye5 ajNFgwgW0+s0vR89FeIg2JLDX8ElQJfgsn0OYCrVignSLXM7tIk= -----END CERTIFICATE-----Generated at Tue Nov 4 21:18:18 2025 by rpki-client