$ rpki-client -vvf repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft File: E4C33FFA425046D044E7F503AC8065468BAF739E.mft (raw, json) Hash identifier: LIPTGnf+ENsvDAHXCwmlOlfMq2LFExPSq7i0grF+IrU= Subject key identifier: 48:31:77:5D:AC:ED:26:F3:A8:87:56:F4:D2:B1:22:89:F6:BF:2F:1D Authority key identifier: E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E Certificate issuer: /CN=E4C33FFA425046D044E7F503AC8065468BAF739E Certificate serial: 73C8CB7AF5444944F104F9F8DFC1D6B079311773 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft Manifest number: 01D4 Signing time: Sat 01 Nov 2025 23:52:05 +0000 Manifest this update: Sat 01 Nov 2025 23:47:05 +0000 Manifest next update: Wed 05 Nov 2025 10:29:05 +0000 Files and hashes: 1: 3130332e39392e32372e302f32342d3234203d3e20313530323739.roa (hash: fFWzPgou/ECKiXU5DKj/fTCFyECWSQWhIu1tavvJN+Q=) 2: E4C33FFA425046D044E7F503AC8065468BAF739E.crl (hash: vj1BFfI/S1D9Zu7RMosP/dQDBNw1zDBBO08yZf2Eze4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.crl rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 10:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:c8:cb:7a:f5:44:49:44:f1:04:f9:f8:df:c1:d6:b0:79:31:17:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4C33FFA425046D044E7F503AC8065468BAF739E Validity Not Before: Nov 1 23:47:05 2025 GMT Not After : Nov 5 10:29:05 2025 GMT Subject: CN=4831775DACED26F3A88756F4D2B12289F6BF2F1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ed:85:d8:27:bf:df:aa:c2:62:2b:cb:4c:e6: c2:12:cc:f1:4b:47:a6:8e:9f:4e:d7:82:05:48:aa: 92:b9:55:a5:2b:f6:0d:6c:9a:56:51:47:b4:5c:28: da:15:60:ce:e2:eb:0b:4a:46:aa:5a:d8:bb:13:32: d5:7f:ad:a3:5a:ea:a8:43:aa:ce:68:17:a6:96:15: c4:9b:c6:55:c1:11:f3:67:15:4d:38:60:45:e6:88: 3f:ca:b0:9c:7e:cf:c7:6b:1b:b3:e1:e8:42:bc:57: 20:48:c1:91:ae:f3:4d:22:c3:d8:79:3c:92:65:48: 7b:fc:f6:2e:1e:1b:3f:57:97:85:99:26:4c:cc:db: 55:13:e4:15:d1:fe:5a:ca:48:a0:55:27:93:2c:3b: af:5d:91:31:a8:10:07:e9:df:0d:5f:5a:34:52:88: ca:10:b1:d9:b1:a6:af:71:67:ee:4e:77:a0:c6:59: 64:02:f1:3e:d5:27:8f:23:01:3d:bf:8d:1e:5a:de: 00:d3:08:c0:67:26:45:60:39:0c:ab:6f:77:f6:bd: 3c:e5:a1:da:ff:b3:e0:be:bc:5f:57:16:89:3c:00: 2b:aa:6e:ad:b0:d9:09:68:88:c0:17:90:6e:a2:b2: 16:f7:e2:dd:af:25:10:a4:1a:83:b8:2d:92:d2:a3: 3c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:31:77:5D:AC:ED:26:F3:A8:87:56:F4:D2:B1:22:89:F6:BF:2F:1D X509v3 Authority Key Identifier: keyid:E4:C3:3F:FA:42:50:46:D0:44:E7:F5:03:AC:80:65:46:8B:AF:73:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C33FFA425046D044E7F503AC8065468BAF739E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/E4C33FFA425046D044E7F503AC8065468BAF739E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:7b:88:de:a6:15:ec:11:15:56:18:af:ca:45:a5:71:81:89: ad:28:98:cc:c3:50:15:34:18:0e:0c:62:9a:a6:eb:d8:a5:31: c8:c2:1a:07:cf:f3:44:66:cf:d4:74:76:84:32:cb:95:ae:2e: d6:3a:e8:29:c5:2b:01:ed:b7:4f:26:71:5a:f5:4c:ec:a9:74: e8:96:fa:7b:47:93:5f:88:d5:f9:b0:66:20:2c:d2:5f:6b:ae: 05:20:f2:05:8f:65:5a:d5:cd:40:42:88:2b:89:e0:8a:1e:25: 73:86:d0:57:17:aa:ea:9b:4a:0c:98:d1:c7:89:2d:3b:71:0b: 2e:b3:32:76:60:9d:5a:2d:d0:e8:d4:c3:cf:1f:a0:1a:47:ed: 8e:b7:5b:c1:ca:bc:a4:d0:a4:76:7c:ec:96:04:79:e2:1d:f6: 34:bd:4d:32:1b:dc:82:04:47:7a:8b:92:81:cd:9f:83:47:e9: 78:39:6d:b0:37:9f:b5:f6:5a:04:e3:dc:90:9c:2d:7b:6f:bf: 55:35:b6:14:08:10:1c:3d:2b:ea:a9:fe:3b:a2:98:c7:10:ed: 8b:7d:4f:43:d1:7b:3f:6a:5e:66:f2:8c:20:87:39:25:6f:5d: ce:71:8b:d5:ae:eb:0d:d4:39:ae:e6:15:99:a7:5b:27:db:39: 6e:0f:4a:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc8jLevVESUTxBPn438HWsHkxF3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1NDY4 QkFGNzM5RTAeFw0yNTExMDEyMzQ3MDVaFw0yNTExMDUxMDI5MDVaMDMxMTAvBgNV BAMTKDQ4MzE3NzVEQUNFRDI2RjNBODg3NTZGNEQyQjEyMjg5RjZCRjJGMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/7YXYJ7/fqsJiK8tM5sISzPFL R6aOn07XggVIqpK5VaUr9g1smlZRR7RcKNoVYM7i6wtKRqpa2LsTMtV/raNa6qhD qs5oF6aWFcSbxlXBEfNnFU04YEXmiD/KsJx+z8drG7Ph6EK8VyBIwZGu800iw9h5 PJJlSHv89i4eGz9Xl4WZJkzM21UT5BXR/lrKSKBVJ5MsO69dkTGoEAfp3w1fWjRS iMoQsdmxpq9xZ+5Od6DGWWQC8T7VJ48jAT2/jR5a3gDTCMBnJkVgOQyrb3f2vTzl odr/s+C+vF9XFok8ACuqbq2w2QloiMAXkG6ishb34t2vJRCkGoO4LZLSozx1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSDF3XaztJvOoh1b00rEiifa/Lx0wHwYDVR0j BBgwFoAU5MM/+kJQRtBE5/UDrIBlRouvc54wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDk3NmUyNi05NTEzLTQ4ZmYtOWY3Zi1lYTNmZGNmM2UyZTgvMC9FNEMzM0ZGQTQy NTA0NkQwNDRFN0Y1MDNBQzgwNjU0NjhCQUY3MzlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1NDY4QkFG NzM5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA5NzZlMjYtOTUxMy00OGZmLTlm N2YtZWEzZmRjZjNlMmU4LzAvRTRDMzNGRkE0MjUwNDZEMDQ0RTdGNTAzQUM4MDY1 NDY4QkFGNzM5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKF7iN6mFewRFVYYr8pFpXGBia0omMzDUBU0 GA4MYpqm69ilMcjCGgfP80Rmz9R0doQyy5WuLtY66CnFKwHtt08mcVr1TOypdOiW +ntHk1+I1fmwZiAs0l9rrgUg8gWPZVrVzUBCiCuJ4IoeJXOG0FcXquqbSgyY0ceJ LTtxCy6zMnZgnVot0OjUw88foBpH7Y63W8HKvKTQpHZ87JYEeeId9jS9TTIb3IIE R3qLkoHNn4NH6Xg5bbA3n7X2WgTj3JCcLXtvv1U1thQIEBw9K+qp/juimMcQ7Yt9 T0PRez9qXmbyjCCHOSVvXc5xi9Wu6w3UOa7mFZmnWyfbOW4PSqs= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:45 2025 by rpki-client