$ rpki-client -vvf repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft File: E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft (raw, json) Hash identifier: JjE2zyvYf44tTABYZnP/GDtv2p/kQjTObtgop5gabKI= Subject key identifier: 6A:D2:BC:CB:49:EF:25:08:A6:9A:9F:79:5A:3C:6B:08:2B:D5:1E:E6 Authority key identifier: E7:DC:BB:5E:91:2C:56:AB:C8:9C:BB:C8:FA:42:B5:E6:3D:15:2A:F4 Certificate issuer: /CN=E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4 Certificate serial: 052A846D14B7B74668758C75A1DED6BA8A4D20B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft Manifest number: 051D Signing time: Sun 19 Oct 2025 03:32:22 +0000 Manifest this update: Sun 19 Oct 2025 03:27:22 +0000 Manifest next update: Wed 22 Oct 2025 10:11:22 +0000 Files and hashes: 1: E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl (hash: jBqxGolzNzmF+7ZR3QXABcSuH9+ljJ5HLffA2bt4yVw=) 2: 3130332e3133392e3138362e302f32342d3234203d3e20313338383634.roa (hash: hCqKQAmBft8A8taUBcT8sOYve7SjkWXpgzjj9NA6B/s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 10:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:2a:84:6d:14:b7:b7:46:68:75:8c:75:a1:de:d6:ba:8a:4d:20:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4 Validity Not Before: Oct 19 03:27:22 2025 GMT Not After : Oct 22 10:11:22 2025 GMT Subject: CN=6AD2BCCB49EF2508A69A9F795A3C6B082BD51EE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4c:29:e2:c4:7e:63:b5:86:c7:cc:66:19:3a: 1d:46:37:41:3c:aa:f8:ed:16:c5:9f:be:dd:a5:61: 55:33:b6:57:2f:e4:b9:54:df:05:bc:6e:44:74:31: e8:91:57:9f:8d:95:69:8c:a3:20:aa:6c:5c:8b:21: 89:3b:1f:2c:1d:4d:0a:82:c9:b9:05:d1:3e:60:3a: 3d:8e:0a:7b:52:ed:7f:ac:81:88:27:d1:1f:90:49: 6f:6a:1a:28:80:ab:2c:61:85:f7:18:fb:d5:cd:c7: 8c:4c:8f:28:83:62:9e:74:c8:6b:77:93:bc:73:71: 1c:12:81:3e:0c:b2:d8:b0:14:13:f6:e4:d8:db:5b: 92:ad:d5:b3:6e:0b:97:19:7b:6f:61:8f:99:ee:a0: 39:ef:67:99:81:5b:00:1d:4a:0f:99:97:20:1e:9c: 1d:44:4a:69:d4:a3:82:e0:b5:5d:80:1a:22:94:74: d5:2d:26:f9:44:65:25:c9:26:da:ff:ed:f8:60:6b: 0a:c6:94:d1:9c:ca:16:2d:70:53:d5:21:6d:07:06: 5f:08:49:a0:3a:cf:ea:01:6a:ca:6b:11:3c:10:0a: 4d:96:28:44:76:8d:2d:85:cc:19:a1:28:eb:28:5e: 4e:b9:c5:b8:80:54:47:5c:6a:d0:cd:fa:82:79:89: dc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D2:BC:CB:49:EF:25:08:A6:9A:9F:79:5A:3C:6B:08:2B:D5:1E:E6 X509v3 Authority Key Identifier: keyid:E7:DC:BB:5E:91:2C:56:AB:C8:9C:BB:C8:FA:42:B5:E6:3D:15:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/E7DCBB5E912C56ABC89CBBC8FA42B5E63D152AF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:78:33:2a:45:71:bd:62:db:d2:a8:43:23:f0:2d:a8:bf:78: 23:8d:f7:86:d5:5e:ad:55:e2:39:f5:7f:b4:9a:9d:62:6e:a7: a6:7d:76:db:6a:b1:6a:76:26:aa:e5:f4:08:8d:20:d2:11:65: 8b:65:21:8c:a5:1d:9a:42:2b:11:a4:60:24:bd:6e:0b:97:20: f2:6c:e5:66:2e:57:ee:fb:8c:70:77:40:6a:80:bb:73:5d:9a: 18:96:25:e4:07:76:e2:a9:9e:9b:d6:5d:2d:37:63:a4:24:0d: 13:10:d2:0b:f0:72:5b:6d:ad:fa:b2:84:dc:3c:13:4a:fc:ac: e0:4d:fb:d1:b3:dc:9f:4d:a4:46:e7:fc:07:71:d9:5b:8e:3a: 50:b3:3e:f9:40:07:7f:bf:82:05:43:c1:31:0b:ff:54:bc:84: 8d:5f:88:4f:12:8f:09:44:83:53:da:61:73:2f:40:da:7c:fb: 81:2b:5b:08:c7:a4:25:07:7c:e6:44:64:24:fa:b2:00:5d:f3: 03:f3:99:42:51:ff:f0:36:fe:63:bf:15:84:1a:6a:73:23:8a: 3c:07:94:dd:de:f9:31:b1:66:c3:31:b5:19:f9:55:39:91:ff: b8:e5:fe:4d:2c:47:a0:ee:99:cf:7c:56:ed:d9:fa:e6:9d:65: 52:8a:5b:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBSqEbRS3t0ZodYx1od7WuopNILAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdEQ0JCNUU5MTJDNTZBQkM4OUNCQkM4RkE0MkI1RTYz RDE1MkFGNDAeFw0yNTEwMTkwMzI3MjJaFw0yNTEwMjIxMDExMjJaMDMxMTAvBgNV BAMTKDZBRDJCQ0NCNDlFRjI1MDhBNjlBOUY3OTVBM0M2QjA4MkJENTFFRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUTCnixH5jtYbHzGYZOh1GN0E8 qvjtFsWfvt2lYVUztlcv5LlU3wW8bkR0MeiRV5+NlWmMoyCqbFyLIYk7HywdTQqC ybkF0T5gOj2OCntS7X+sgYgn0R+QSW9qGiiAqyxhhfcY+9XNx4xMjyiDYp50yGt3 k7xzcRwSgT4MstiwFBP25NjbW5Kt1bNuC5cZe29hj5nuoDnvZ5mBWwAdSg+ZlyAe nB1ESmnUo4LgtV2AGiKUdNUtJvlEZSXJJtr/7fhgawrGlNGcyhYtcFPVIW0HBl8I SaA6z+oBasprETwQCk2WKER2jS2FzBmhKOsoXk65xbiAVEdcatDN+oJ5idzbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUatK8y0nvJQimmp95WjxrCCvVHuYwHwYDVR0j BBgwFoAU59y7XpEsVqvInLvI+kK15j0VKvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDM1OGIwMC0zMWNkLTQxYTMtOTUzNi1kYmIxOTNlN2Y0ZDAvMC9FN0RDQkI1RTkx MkM1NkFCQzg5Q0JCQzhGQTQyQjVFNjNEMTUyQUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdEQ0JCNUU5MTJDNTZBQkM4OUNCQkM4RkE0MkI1RTYzRDE1 MkFGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQzNThiMDAtMzFjZC00MWEzLTk1 MzYtZGJiMTkzZTdmNGQwLzAvRTdEQ0JCNUU5MTJDNTZBQkM4OUNCQkM4RkE0MkI1 RTYzRDE1MkFGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACB4MypFcb1i29KoQyPwLai/eCON94bVXq1V 4jn1f7SanWJup6Z9dttqsWp2Jqrl9AiNINIRZYtlIYylHZpCKxGkYCS9bguXIPJs 5WYuV+77jHB3QGqAu3NdmhiWJeQHduKpnpvWXS03Y6QkDRMQ0gvwclttrfqyhNw8 E0r8rOBN+9Gz3J9NpEbn/Adx2VuOOlCzPvlAB3+/ggVDwTEL/1S8hI1fiE8SjwlE g1PaYXMvQNp8+4ErWwjHpCUHfOZEZCT6sgBd8wPzmUJR//A2/mO/FYQaanMjijwH lN3e+TGxZsMxtRn5VTmR/7jl/k0sR6Dumc98Vu3Z+uadZVKKW8Y= -----END CERTIFICATE-----Generated at Mon Oct 20 15:04:26 2025 by rpki-client