$ rpki-client -vvf repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft File: E7D91E7B841DB274E77E823084312F8B78A5C951.mft (raw, json) Hash identifier: m/YDCle9705/Vzez7MwFbjW2yNWZeyd2CWdRnnnO5f4= Subject key identifier: 10:CB:18:55:A9:EA:EE:C1:49:12:0C:54:B3:1A:19:69:D9:D0:DE:CF Authority key identifier: E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51 Certificate issuer: /CN=E7D91E7B841DB274E77E823084312F8B78A5C951 Certificate serial: 43A2BACE9701246955142E29B535A1F0F65E113F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft Manifest number: 04DD Signing time: Sun 19 Oct 2025 14:51:34 +0000 Manifest this update: Sun 19 Oct 2025 14:46:34 +0000 Manifest next update: Thu 23 Oct 2025 00:46:34 +0000 Files and hashes: 1: 323030313a6466313a316338303a3a2f34382d3438203d3e20313339333637.roa (hash: FFu9qqO0bSps/kj6fyv5I//5Hd+4wId09goi1uFGoE8=) 2: E7D91E7B841DB274E77E823084312F8B78A5C951.crl (hash: OUBd99wR4935U57obn0i78UAqh8BBzVc7SS13tHK2r4=) 3: 3130332e3134312e3233382e302f32332d3234203d3e20313339333637.roa (hash: Q8AiVS513YZaJstY9RUzjxicepMe2vYlP+usoxO41hE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.crl rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 00:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a2:ba:ce:97:01:24:69:55:14:2e:29:b5:35:a1:f0:f6:5e:11:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7D91E7B841DB274E77E823084312F8B78A5C951 Validity Not Before: Oct 19 14:46:34 2025 GMT Not After : Oct 23 00:46:34 2025 GMT Subject: CN=10CB1855A9EAEEC149120C54B31A1969D9D0DECF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:48:de:41:94:b2:27:3d:3c:03:09:c1:12:4c: 04:4b:35:04:c9:bd:73:f5:be:a9:be:54:3b:0f:68: 2b:c2:0e:d8:3b:d6:16:dc:c7:86:33:dc:15:e3:7c: 94:2a:bc:9a:64:ad:84:51:44:14:97:eb:6f:43:18: 4f:e0:0a:94:74:da:7f:0e:dc:43:68:53:34:41:a7: 3b:a7:a2:33:8c:de:a3:f0:1b:d1:31:29:77:c8:5c: 12:f0:92:25:e4:db:ae:84:00:87:ee:1b:a3:35:30: 2c:9b:5e:86:c0:69:42:81:e1:b6:05:b9:46:e7:d6: 11:c3:1b:e9:9e:cb:8d:ef:1b:e7:20:95:1f:ca:b2: 07:5e:59:5a:95:4e:8e:71:06:f9:b5:28:e3:7d:70: 10:ab:bc:8b:0a:34:6f:5e:c5:d9:76:97:c8:47:c3: 7d:b8:1c:08:2e:d0:2d:cd:18:59:eb:4d:50:66:8c: f4:69:14:88:0e:90:ae:f8:f9:6b:02:b6:18:8e:5d: 28:22:41:df:e8:8f:4b:92:74:fc:ac:3a:56:bd:1c: a8:f3:aa:0d:d0:24:6b:75:e9:63:3c:12:87:b6:8d: b2:57:b0:fd:21:a9:80:2f:50:78:8f:17:bf:fa:b0: dd:d3:66:9a:d1:4f:d1:b1:73:29:4b:b1:6b:a3:99: 1a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CB:18:55:A9:EA:EE:C1:49:12:0C:54:B3:1A:19:69:D9:D0:DE:CF X509v3 Authority Key Identifier: keyid:E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:28:da:6b:08:0c:62:b3:62:8e:f2:76:be:8c:9f:19:6a:cb: ee:7a:27:bd:49:38:7b:37:90:4a:ad:35:d2:74:ce:79:a6:ef: b3:36:e0:49:a2:3a:b0:f8:8b:61:3c:b7:a1:4d:89:c0:d0:c3: 0b:00:4c:ca:2e:82:c2:44:a8:5d:52:19:a4:b4:60:68:a3:54: 83:e9:00:4b:09:ca:0c:be:29:c3:61:14:d8:41:31:5f:36:d4: 1d:a6:dd:e2:bd:c4:9b:d9:f9:e4:53:6a:ab:b5:2f:18:a4:80: 8f:e2:50:ad:68:2f:51:36:8e:99:20:d1:5a:cc:66:1b:8b:19: 4d:28:2a:5a:e4:39:53:2e:25:84:21:b0:e9:82:bd:74:59:eb: ff:7f:b6:e4:51:e3:fa:2b:09:60:c9:15:86:51:dd:95:40:66: ae:96:ae:3a:51:59:a9:47:2c:71:86:0a:ae:43:88:1f:4b:2f: dd:7a:0d:3b:7f:47:ab:84:cb:4d:3f:a3:4d:bc:9d:5c:da:b4: c6:6e:c9:93:72:87:a3:ba:7a:a5:9c:21:37:b9:68:69:ba:1a: b2:a9:9b:11:cd:db:a7:c7:af:2a:1b:04:28:2a:31:bf:34:6a: fc:b2:64:e3:3c:2a:5f:29:08:0a:5c:ec:05:72:49:9d:3e:35: 38:c3:37:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ6K6zpcBJGlVFC4ptTWh8PZeET8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJGOEI3 OEE1Qzk1MTAeFw0yNTEwMTkxNDQ2MzRaFw0yNTEwMjMwMDQ2MzRaMDMxMTAvBgNV BAMTKDEwQ0IxODU1QTlFQUVFQzE0OTEyMEM1NEIzMUExOTY5RDlEMERFQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcSN5BlLInPTwDCcESTARLNQTJ vXP1vqm+VDsPaCvCDtg71hbcx4Yz3BXjfJQqvJpkrYRRRBSX629DGE/gCpR02n8O 3ENoUzRBpzunojOM3qPwG9ExKXfIXBLwkiXk266EAIfuG6M1MCybXobAaUKB4bYF uUbn1hHDG+mey43vG+cglR/KsgdeWVqVTo5xBvm1KON9cBCrvIsKNG9exdl2l8hH w324HAgu0C3NGFnrTVBmjPRpFIgOkK74+WsCthiOXSgiQd/oj0uSdPysOla9HKjz qg3QJGt16WM8Eoe2jbJXsP0hqYAvUHiPF7/6sN3TZprRT9GxcylLsWujmRrhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEMsYVanq7sFJEgxUsxoZadnQ3s8wHwYDVR0j BBgwFoAU59kee4QdsnTnfoIwhDEvi3ilyVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTcwODNhYi0yNzBhLTRiMGEtOGU1NS1hNDVlMWNmMWFmZDUvMC9FN0Q5MUU3Qjg0 MURCMjc0RTc3RTgyMzA4NDMxMkY4Qjc4QTVDOTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJGOEI3OEE1 Qzk1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3MDgzYWItMjcwYS00YjBhLThl NTUtYTQ1ZTFjZjFhZmQ1LzAvRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJG OEI3OEE1Qzk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQo2msIDGKzYo7ydr6Mnxlqy+56J71JOHs3 kEqtNdJ0znmm77M24EmiOrD4i2E8t6FNicDQwwsATMougsJEqF1SGaS0YGijVIPp AEsJygy+KcNhFNhBMV821B2m3eK9xJvZ+eRTaqu1LxikgI/iUK1oL1E2jpkg0VrM ZhuLGU0oKlrkOVMuJYQhsOmCvXRZ6/9/tuRR4/orCWDJFYZR3ZVAZq6WrjpRWalH LHGGCq5DiB9LL916DTt/R6uEy00/o028nVzatMZuyZNyh6O6eqWcITe5aGm6GrKp mxHN26fHryobBCgqMb80avyyZOM8Kl8pCApc7AVySZ0+NTjDN4A= -----END CERTIFICATE-----Generated at Tue Oct 21 16:05:20 2025 by rpki-client