$ rpki-client -vvf repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.mft File: E377371E82C6C53C7A5796B49B085190AFB64B4C.mft (raw, json) Hash identifier: tS0lq5Vhp5o0CCK060dNXaVioGuQ/AK1rBcN8X2OG8A= Subject key identifier: 4D:05:C3:A9:C6:AC:7F:5D:A5:1D:AD:69:35:17:63:FE:E8:F7:DE:55 Authority key identifier: E3:77:37:1E:82:C6:C5:3C:7A:57:96:B4:9B:08:51:90:AF:B6:4B:4C Certificate issuer: /CN=E377371E82C6C53C7A5796B49B085190AFB64B4C Certificate serial: 3818FEB0068CFD111B51D3AF87C11CA5F9C69800 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E377371E82C6C53C7A5796B49B085190AFB64B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.mft Manifest number: 01AD Signing time: Sat 18 Oct 2025 11:31:44 +0000 Manifest this update: Sat 18 Oct 2025 11:26:44 +0000 Manifest next update: Tue 21 Oct 2025 23:06:44 +0000 Files and hashes: 1: E377371E82C6C53C7A5796B49B085190AFB64B4C.crl (hash: qA0gy9qQVKuorZPVcFixFBrstd8O7Ec/kvY2gkvv/20=) 2: 3130332e38392e3234322e302f32342d3234203d3e20313530393133.roa (hash: Wq0HxmVMzepldSWl2tLo0jkVOCM3LQ2XSCQDbU6pmew=) 3: 3130332e38392e3234332e302f32342d3234203d3e20313530393133.roa (hash: otr3kFi0uUngcjSenFt7w7igUVSs51cTPJ2XyknCg2A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.crl rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E377371E82C6C53C7A5796B49B085190AFB64B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 23:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:18:fe:b0:06:8c:fd:11:1b:51:d3:af:87:c1:1c:a5:f9:c6:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E377371E82C6C53C7A5796B49B085190AFB64B4C Validity Not Before: Oct 18 11:26:44 2025 GMT Not After : Oct 21 23:06:44 2025 GMT Subject: CN=4D05C3A9C6AC7F5DA51DAD69351763FEE8F7DE55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9c:1b:71:fa:e5:8e:36:47:a2:2b:fd:a5:bc: de:f1:06:94:00:1f:0c:db:ff:3a:d1:5c:4c:08:f9: e2:77:a5:42:50:96:11:4b:69:7c:e6:c9:9a:b1:25: df:5f:1e:f5:d5:5a:3e:30:08:1e:91:6b:47:53:fa: 8e:28:e2:f1:4a:35:75:1f:5e:4d:1b:0b:f4:bc:57: 43:c3:82:18:03:d0:ca:83:5f:70:1f:d3:2b:f7:b6: b5:93:69:e3:30:87:08:f5:09:bc:06:f9:c1:21:5f: 0e:05:bb:0f:82:7a:a6:8e:57:7c:2f:93:12:87:6d: 8b:1c:e5:57:a9:98:df:1d:2a:79:3a:58:e4:da:4d: c4:f6:df:e6:b3:79:10:32:b3:52:d4:fc:21:d2:31: 48:89:59:b7:a7:c7:f0:5a:d8:13:e3:20:99:4f:77: be:a5:8e:e8:7f:4e:50:e1:34:57:c6:7f:4c:b8:ba: 19:d9:d0:94:f0:fe:22:e3:f6:a5:63:56:9b:84:35: 73:2b:bf:6d:55:4c:7e:c7:2e:83:46:f8:26:db:75: 17:12:6b:b7:13:9c:14:23:cd:21:2d:6b:0a:58:10: 98:e0:60:a3:93:ff:09:20:31:e0:37:f1:70:e6:84: 12:e4:5a:f6:bc:5b:69:eb:5a:b5:5c:fb:4d:3c:1d: 9a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:05:C3:A9:C6:AC:7F:5D:A5:1D:AD:69:35:17:63:FE:E8:F7:DE:55 X509v3 Authority Key Identifier: keyid:E3:77:37:1E:82:C6:C5:3C:7A:57:96:B4:9B:08:51:90:AF:B6:4B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E377371E82C6C53C7A5796B49B085190AFB64B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:12:04:ee:9e:4a:69:26:1f:80:41:fc:bf:9b:86:dc:83:2e: b0:1b:c4:8e:30:59:0b:d8:93:fc:46:33:ac:4e:66:32:4d:32: d2:05:1b:b8:03:0b:c1:37:fe:c7:e1:bd:3a:26:c6:5c:69:46: b4:10:a1:5f:df:61:01:c3:3e:07:81:50:f5:69:b4:61:35:57: 28:aa:21:2f:a5:1c:09:53:9f:9b:85:5f:ff:ba:ec:20:69:c4: 25:b8:23:15:59:1c:94:a9:48:05:69:c6:9c:b0:12:54:a9:54: 65:e9:1f:53:d1:53:e1:47:f4:b7:55:e7:22:c1:e3:6b:87:ef: ca:5a:77:95:96:37:0a:d9:22:03:93:8f:fd:61:d7:3e:aa:3f: 9c:a3:00:fa:0a:21:c7:5d:a2:50:62:6a:24:24:c0:d2:cf:bf: bf:e6:3f:ce:c5:3a:d2:61:b8:ce:73:e9:e1:3b:1c:ab:dd:57: 66:06:a9:b0:52:69:87:3b:d1:0c:25:38:0a:23:ab:c6:dd:7d: c0:76:c5:cb:32:37:6f:73:53:98:c3:f8:d8:db:4d:d2:e1:ea: d5:a4:20:d1:e9:94:32:42:60:d0:f2:79:48:36:02:46:a9:b4: e1:42:e6:f3:d7:e1:49:23:78:40:f2:0e:29:ad:77:7f:65:2b: 2d:25:34:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOBj+sAaM/REbUdOvh8EcpfnGmAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM3NzM3MUU4MkM2QzUzQzdBNTc5NkI0OUIwODUxOTBB RkI2NEI0QzAeFw0yNTEwMTgxMTI2NDRaFw0yNTEwMjEyMzA2NDRaMDMxMTAvBgNV BAMTKDREMDVDM0E5QzZBQzdGNURBNTFEQUQ2OTM1MTc2M0ZFRThGN0RFNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsnBtx+uWONkeiK/2lvN7xBpQA Hwzb/zrRXEwI+eJ3pUJQlhFLaXzmyZqxJd9fHvXVWj4wCB6Ra0dT+o4o4vFKNXUf Xk0bC/S8V0PDghgD0MqDX3Af0yv3trWTaeMwhwj1CbwG+cEhXw4Fuw+CeqaOV3wv kxKHbYsc5VepmN8dKnk6WOTaTcT23+azeRAys1LU/CHSMUiJWbenx/Ba2BPjIJlP d76ljuh/TlDhNFfGf0y4uhnZ0JTw/iLj9qVjVpuENXMrv21VTH7HLoNG+CbbdRcS a7cTnBQjzSEtawpYEJjgYKOT/wkgMeA38XDmhBLkWva8W2nrWrVc+008HZoRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTQXDqcasf12lHa1pNRdj/uj33lUwHwYDVR0j BBgwFoAU43c3HoLGxTx6V5a0mwhRkK+2S0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTMzMDg3Ni03ZTY4LTQ3MDctYTUzZC05MmJiZmRiMmYyM2MvMC9FMzc3MzcxRTgy QzZDNTNDN0E1Nzk2QjQ5QjA4NTE5MEFGQjY0QjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM3NzM3MUU4MkM2QzUzQzdBNTc5NkI0OUIwODUxOTBBRkI2 NEI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGUzMzA4NzYtN2U2OC00NzA3LWE1 M2QtOTJiYmZkYjJmMjNjLzAvRTM3NzM3MUU4MkM2QzUzQzdBNTc5NkI0OUIwODUx OTBBRkI2NEI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALMSBO6eSmkmH4BB/L+bhtyDLrAbxI4wWQvY k/xGM6xOZjJNMtIFG7gDC8E3/sfhvTomxlxpRrQQoV/fYQHDPgeBUPVptGE1Vyiq IS+lHAlTn5uFX/+67CBpxCW4IxVZHJSpSAVpxpywElSpVGXpH1PRU+FH9LdV5yLB 42uH78pad5WWNwrZIgOTj/1h1z6qP5yjAPoKIcddolBiaiQkwNLPv7/mP87FOtJh uM5z6eE7HKvdV2YGqbBSaYc70QwlOAojq8bdfcB2xcsyN29zU5jD+NjbTdLh6tWk INHplDJCYNDyeUg2AkaptOFC5vPX4UkjeEDyDimtd39lKy0lNH8= -----END CERTIFICATE-----Generated at Mon Oct 20 09:20:23 2025 by rpki-client