$ rpki-client -vvf repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft File: E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft (raw, json) Hash identifier: vX6rmR7CasA2eSmPm8QoIRopo6SgZubQl6tgSw3Ujdk= Subject key identifier: 81:26:E5:A5:17:E3:CA:B5:09:D2:D3:9A:7B:96:14:FE:D9:46:E1:77 Authority key identifier: E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65 Certificate issuer: /CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65 Certificate serial: 70B7D10748DDA972E70B94F3A1F27562410B1177 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft Manifest number: BF Signing time: Sun 02 Nov 2025 19:21:56 +0000 Manifest this update: Sun 02 Nov 2025 19:16:56 +0000 Manifest next update: Wed 05 Nov 2025 19:59:56 +0000 Files and hashes: 1: 3130332e3134312e3233342e302f32342d3234203d3e20313339333634.roa (hash: S22ChZGEvJ5gAYFztY/TYC839FBrS83Y5ZysrOVb4ss=) 2: E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl (hash: j3M8ZVE+BLl519Rr/q1oFluPozCIbmqDpUYR/3rsycs=) 3: 3130332e3136392e3230302e302f32342d3234203d3e20313339333634.roa (hash: jU/SQlHFg0i0t2XT427YG+4xTKw9TASNvTEDlba6svA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 19:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b7:d1:07:48:dd:a9:72:e7:0b:94:f3:a1:f2:75:62:41:0b:11:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65 Validity Not Before: Nov 2 19:16:56 2025 GMT Not After : Nov 5 19:59:56 2025 GMT Subject: CN=8126E5A517E3CAB509D2D39A7B9614FED946E177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e3:31:3b:37:04:2f:56:1b:be:23:f6:4f:f2: 6f:0c:ba:82:19:4b:ab:c8:c5:07:b5:40:2a:8a:37: 0e:0d:27:9f:f6:fe:4d:fe:8a:bb:21:41:39:e4:22: f8:79:0a:28:f3:bb:a2:65:51:b5:e4:51:c6:5a:ae: da:51:2a:43:32:99:73:2b:72:38:04:dc:41:aa:f2: 3a:0d:69:ef:8d:f9:58:53:7a:82:46:c4:b5:ac:99: 3e:60:39:8b:13:7f:b4:fb:28:e5:96:4d:c4:bc:d2: d4:1d:05:ff:82:95:53:08:1d:de:b5:72:19:3e:01: 6d:45:65:bc:bf:49:f4:05:45:29:81:79:01:91:07: 89:c0:93:42:ff:04:7d:37:5a:42:d5:88:38:05:95: 4b:20:cf:4c:8b:f6:c3:95:f2:ef:db:d8:68:60:31: 57:53:55:d4:e7:f9:e0:61:ad:05:f1:0e:12:40:93: 65:40:d8:54:d3:8a:c0:16:d6:5b:2b:fb:48:e4:bd: fb:10:e5:a3:5e:ef:b4:b8:e0:a1:81:3f:69:fc:2a: c2:a0:4e:ee:39:7e:59:68:50:94:df:86:05:e5:cd: c8:e9:41:fc:5c:4f:fd:79:39:bd:eb:0a:95:f6:c6: 7a:14:e4:a7:67:c0:6c:d1:39:75:3b:46:a3:96:55: 73:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:26:E5:A5:17:E3:CA:B5:09:D2:D3:9A:7B:96:14:FE:D9:46:E1:77 X509v3 Authority Key Identifier: keyid:E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:38:5b:10:e3:3f:59:ed:de:6b:ba:e8:53:01:29:3b:04:2f: 33:96:3d:e6:bb:30:f9:55:29:f1:a7:2f:ae:2a:53:5e:ac:5b: 75:4a:f6:ed:7f:63:b0:b3:41:28:0f:4b:a9:79:e6:c1:34:5c: 7a:98:84:72:11:42:2f:20:d1:1d:c3:6b:54:84:e2:85:f5:ab: 2f:54:56:8c:4c:e7:88:5e:4c:8c:cc:8d:f7:53:01:e0:b7:75: 84:09:29:2c:b5:b0:4e:db:6f:9b:56:cd:33:7f:8a:31:95:4c: 8c:4d:a9:17:bd:b9:0b:59:a8:9e:78:d8:b6:26:35:40:7c:ae: ef:c7:48:cc:08:aa:c3:f0:10:c4:a6:ec:24:05:32:ef:f2:e3: 39:41:f2:bd:0b:e0:15:52:54:92:21:c3:0d:bb:75:dd:9f:e4: 82:fb:11:b7:56:a5:e5:38:f4:5d:25:f7:80:6c:5f:f1:61:10: 28:10:08:73:05:f9:a4:e8:4c:df:28:82:4a:91:3e:1b:1e:b4: 59:e3:a7:6a:bd:ef:5b:01:df:e5:ca:e4:0d:e2:b8:7d:b2:be: ba:5e:b1:f6:e1:aa:47:7f:f6:a1:50:c4:c7:69:b7:00:7d:d2: f3:2f:e8:c2:8f:3e:bf:da:a4:15:02:e8:1e:dd:69:a4:b7:af: 3b:f6:d2:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcLfRB0jdqXLnC5TzofJ1YkELEXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5QTJD MzZDRUU2NTAeFw0yNTExMDIxOTE2NTZaFw0yNTExMDUxOTU5NTZaMDMxMTAvBgNV BAMTKDgxMjZFNUE1MTdFM0NBQjUwOUQyRDM5QTdCOTYxNEZFRDk0NkUxNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW4zE7NwQvVhu+I/ZP8m8MuoIZ S6vIxQe1QCqKNw4NJ5/2/k3+irshQTnkIvh5Cijzu6JlUbXkUcZartpRKkMymXMr cjgE3EGq8joNae+N+VhTeoJGxLWsmT5gOYsTf7T7KOWWTcS80tQdBf+ClVMIHd61 chk+AW1FZby/SfQFRSmBeQGRB4nAk0L/BH03WkLViDgFlUsgz0yL9sOV8u/b2Ghg MVdTVdTn+eBhrQXxDhJAk2VA2FTTisAW1lsr+0jkvfsQ5aNe77S44KGBP2n8KsKg Tu45flloUJTfhgXlzcjpQfxcT/15Ob3rCpX2xnoU5KdnwGzROXU7RqOWVXPdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgSblpRfjyrUJ0tOae5YU/tlG4XcwHwYDVR0j BBgwFoAU5IWKJhVHqsBlzflsIfiposNs7mUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzI4YWFjMy0wMDk0LTQyMWYtYTIwMS0yNGQ4MjBlMmFiM2QvMC9FNDg1OEEyNjE1 NDdBQUMwNjVDREY5NkMyMUY4QTlBMkMzNkNFRTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5QTJDMzZD RUU2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMyOGFhYzMtMDA5NC00MjFmLWEy MDEtMjRkODIwZTJhYjNkLzAvRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5 QTJDMzZDRUU2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQ4WxDjP1nt3mu66FMBKTsELzOWPea7MPlV KfGnL64qU16sW3VK9u1/Y7CzQSgPS6l55sE0XHqYhHIRQi8g0R3Da1SE4oX1qy9U VoxM54heTIzMjfdTAeC3dYQJKSy1sE7bb5tWzTN/ijGVTIxNqRe9uQtZqJ542LYm NUB8ru/HSMwIqsPwEMSm7CQFMu/y4zlB8r0L4BVSVJIhww27dd2f5IL7EbdWpeU4 9F0l94BsX/FhECgQCHMF+aToTN8ogkqRPhsetFnjp2q971sB3+XK5A3iuH2yvrpe sfbhqkd/9qFQxMdptwB90vMv6MKPPr/apBUC6B7daaS3rzv20hQ= -----END CERTIFICATE-----Generated at Tue Nov 4 19:15:05 2025 by rpki-client