$ rpki-client -vvf repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft File: E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft (raw, json) Hash identifier: wgv9EwxchK+ZIoU/MrXGTuGAlCsWWMNIu2XMglV5a4E= Subject key identifier: E3:2F:B8:84:C0:78:AB:11:A9:BA:A2:96:90:2B:C2:C6:DE:5B:1F:E4 Authority key identifier: E8:4D:B4:4F:00:08:62:4F:8E:76:93:BC:3B:E1:F9:BF:CD:DF:A2:80 Certificate issuer: /CN=E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280 Certificate serial: 3283D133351CB39DE88344CDC3F7ED3C49A4C1CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft Manifest number: 04E7 Signing time: Sat 18 Oct 2025 09:51:07 +0000 Manifest this update: Sat 18 Oct 2025 09:46:07 +0000 Manifest next update: Tue 21 Oct 2025 20:53:07 +0000 Files and hashes: 1: E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.crl (hash: lqdxAvMHA7p2t6t+2sueKqG/v+t9nerOLtn3h3UUMNE=) 2: 3130332e3132302e3133382e302f32342d3234203d3e20313338303537.roa (hash: i3kLGZdC4b7g0r22OaWIQLyO15cZEfzn1gqotYUiYWU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.crl rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:83:d1:33:35:1c:b3:9d:e8:83:44:cd:c3:f7:ed:3c:49:a4:c1:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280 Validity Not Before: Oct 18 09:46:07 2025 GMT Not After : Oct 21 20:53:07 2025 GMT Subject: CN=E32FB884C078AB11A9BAA296902BC2C6DE5B1FE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0c:0b:44:c9:1e:1f:91:e3:2b:50:86:8b:40: 5c:e0:15:81:1c:66:6c:a1:6f:e1:02:1c:03:64:08: 62:fc:a9:4e:04:7c:cc:5d:b7:98:48:b2:e1:e7:6b: 25:7f:08:e6:90:a3:ee:53:72:85:f3:01:15:f9:5f: 02:3f:c2:12:c9:9f:72:4f:e8:af:48:78:fd:08:19: 65:d1:dc:71:14:fc:97:d6:f3:ef:96:93:90:d6:8a: 45:15:f8:12:0b:00:99:1e:c8:34:cc:99:f5:33:c9: e8:6a:ee:c0:4b:a0:8c:ac:e0:1e:0a:3d:a8:3f:ca: a1:41:c8:1a:cc:98:f1:78:64:40:fe:a4:bc:c2:26: cf:93:71:a3:30:fb:7a:92:bb:14:53:e3:55:ec:27: 2a:a7:7e:30:62:61:e1:70:67:74:87:8c:99:96:c1: b5:3e:0f:73:7c:10:c1:77:00:28:0a:52:d6:78:3e: e6:60:97:47:a4:59:b7:06:e0:4b:0f:1e:90:bd:e5: 3d:36:4c:4a:8f:76:a4:27:52:b0:83:9c:80:25:fc: f4:d0:0e:f5:11:18:2c:63:b7:d1:3a:a5:e6:04:cb: 62:90:ac:a9:02:cc:e0:46:b7:56:4b:a5:5e:c1:49: 90:57:ed:f7:dd:6d:5b:ae:cb:81:fb:5b:35:42:f5: 2c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2F:B8:84:C0:78:AB:11:A9:BA:A2:96:90:2B:C2:C6:DE:5B:1F:E4 X509v3 Authority Key Identifier: keyid:E8:4D:B4:4F:00:08:62:4F:8E:76:93:BC:3B:E1:F9:BF:CD:DF:A2:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:5e:2b:89:bf:bd:4f:ec:b0:cf:e1:85:0b:fb:0c:01:6b:6d: 0a:e6:70:0c:85:93:d7:e7:d2:de:f2:75:1f:89:03:13:af:53: a4:c7:1b:96:a8:07:da:41:e5:91:ac:38:57:41:f6:a8:e5:7c: 86:a2:c3:59:88:da:47:6e:46:13:df:fe:3d:64:40:ac:aa:1c: 8e:8c:bc:8e:db:37:89:e2:e7:b0:c3:ad:b9:29:e7:43:44:69: 03:33:ef:66:8a:21:67:8d:3a:1e:7b:1e:a7:0c:b5:62:0e:f9: 2a:7c:d2:c5:a5:46:f0:fb:90:58:8a:1f:99:7f:45:81:04:67: aa:d8:d8:3d:dd:d4:52:83:e7:b9:71:fe:ac:11:8b:cb:6c:66: 38:c6:2a:e0:08:3e:7f:57:9c:29:83:23:b3:bc:2e:a7:95:55: 48:bc:59:f5:ce:b5:ee:d4:6d:ec:46:5c:f8:2b:20:bf:05:08: 95:fa:9c:ad:38:28:5d:e7:1b:d1:5e:9b:ef:b3:aa:4b:36:30: 28:c7:5a:26:50:3a:36:83:db:33:22:4e:df:e7:fd:bd:6c:54: b3:8c:e6:a3:83:6c:46:cf:be:77:1b:41:8b:c8:e9:0d:e8:53: 46:ac:a0:ae:e3:84:17:0e:a9:7d:ff:b9:bd:23:6a:ed:07:63: e2:5b:e7:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMoPRMzUcs53og0TNw/ftPEmkwcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg0REI0NEYwMDA4NjI0RjhFNzY5M0JDM0JFMUY5QkZD RERGQTI4MDAeFw0yNTEwMTgwOTQ2MDdaFw0yNTEwMjEyMDUzMDdaMDMxMTAvBgNV BAMTKEUzMkZCODg0QzA3OEFCMTFBOUJBQTI5NjkwMkJDMkM2REU1QjFGRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpDAtEyR4fkeMrUIaLQFzgFYEc Zmyhb+ECHANkCGL8qU4EfMxdt5hIsuHnayV/COaQo+5TcoXzARX5XwI/whLJn3JP 6K9IeP0IGWXR3HEU/JfW8++Wk5DWikUV+BILAJkeyDTMmfUzyehq7sBLoIys4B4K Pag/yqFByBrMmPF4ZED+pLzCJs+TcaMw+3qSuxRT41XsJyqnfjBiYeFwZ3SHjJmW wbU+D3N8EMF3ACgKUtZ4PuZgl0ekWbcG4EsPHpC95T02TEqPdqQnUrCDnIAl/PTQ DvURGCxjt9E6peYEy2KQrKkCzOBGt1ZLpV7BSZBX7ffdbVuuy4H7WzVC9SzxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4y+4hMB4qxGpuqKWkCvCxt5bH+QwHwYDVR0j BBgwFoAU6E20TwAIYk+OdpO8O+H5v83fooAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWI5NjAwNS04M2E5LTQxZTQtYWY1Yi1mM2VhYThmMjM2NTEvMC9FODREQjQ0RjAw MDg2MjRGOEU3NjkzQkMzQkUxRjlCRkNEREZBMjgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg0REI0NEYwMDA4NjI0RjhFNzY5M0JDM0JFMUY5QkZDRERG QTI4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGViOTYwMDUtODNhOS00MWU0LWFm NWItZjNlYWE4ZjIzNjUxLzAvRTg0REI0NEYwMDA4NjI0RjhFNzY5M0JDM0JFMUY5 QkZDRERGQTI4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpeK4m/vU/ssM/hhQv7DAFrbQrmcAyFk9fn 0t7ydR+JAxOvU6THG5aoB9pB5ZGsOFdB9qjlfIaiw1mI2kduRhPf/j1kQKyqHI6M vI7bN4ni57DDrbkp50NEaQMz72aKIWeNOh57HqcMtWIO+Sp80sWlRvD7kFiKH5l/ RYEEZ6rY2D3d1FKD57lx/qwRi8tsZjjGKuAIPn9XnCmDI7O8LqeVVUi8WfXOte7U bexGXPgrIL8FCJX6nK04KF3nG9Fem++zqks2MCjHWiZQOjaD2zMiTt/n/b1sVLOM 5qODbEbPvncbQYvI6Q3oU0asoK7jhBcOqX3/ub0jau0HY+Jb57I= -----END CERTIFICATE-----Generated at Mon Oct 20 07:36:51 2025 by rpki-client