$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft File: E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft (raw, json) Hash identifier: FDjsXv1/L8FCxPUjfHg3cqh5sNd8vfNse5e+1WGv73c= Subject key identifier: 15:D2:AC:24:5B:76:E6:8C:F7:F4:1C:F8:94:07:CF:A6:93:95:11:A7 Authority key identifier: E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 Certificate issuer: /CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Certificate serial: 6D3BFE8471A8B5808B091AE30FD26EE85BFD261F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft Manifest number: D8 Signing time: Sun 19 Oct 2025 05:42:06 +0000 Manifest this update: Sun 19 Oct 2025 05:37:06 +0000 Manifest next update: Wed 22 Oct 2025 06:03:06 +0000 Files and hashes: 1: E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl (hash: gT+DeyN7jPn0mpBd0Q1gIuSZ93XfvSWIQeqZjnvpAqU=) 2: 323030313a6466333a653563303a3a2f34382d3438203d3e20313532383231.roa (hash: qxwzYie9RBuV/7W0nohtPX4U19ZjLN0Jy/HLrDrkfAc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 06:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:3b:fe:84:71:a8:b5:80:8b:09:1a:e3:0f:d2:6e:e8:5b:fd:26:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Validity Not Before: Oct 19 05:37:06 2025 GMT Not After : Oct 22 06:03:06 2025 GMT Subject: CN=15D2AC245B76E68CF7F41CF89407CFA6939511A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:6a:0d:1e:b2:3e:b4:9d:92:28:2e:25:9b:69: a5:1e:e7:66:b7:7b:6a:66:57:74:33:25:3f:28:64: 4b:8d:b6:c8:0a:f8:cc:60:17:02:d7:1c:26:b2:a2: a4:28:3b:9b:4c:0a:8a:0b:8b:bb:ad:8f:ba:f4:f1: 21:5c:05:40:6f:22:3a:4d:22:19:86:fb:7b:db:a0: ca:0c:3c:d7:4e:af:c4:c7:7c:16:ae:68:ad:c7:b3: 25:af:b0:39:c7:9c:fc:10:36:c6:c1:94:7b:df:72: 10:03:fc:dc:0b:1c:ff:8a:2a:d3:67:9d:a1:0b:b9: 76:21:d9:1b:8c:7e:08:a8:d9:79:97:ee:46:2c:15: a8:43:6d:a7:47:58:c0:49:2a:30:6b:2c:3d:81:6c: 87:74:ac:58:ff:ec:13:27:3c:0d:a4:24:8d:ba:8e: f2:85:8f:0e:9d:13:3f:0c:6a:b8:cb:72:aa:28:da: cf:6e:07:5c:21:cd:83:f8:98:21:5a:ac:bf:36:f3: d4:cb:6a:10:9b:d9:4f:1e:d0:6a:b0:84:e3:53:2e: 3a:c1:9c:f7:5f:a2:d1:5b:41:59:11:1f:79:71:8c: b2:79:9c:8f:8e:b4:bb:6a:65:ff:04:fe:29:15:dd: 0c:f0:4e:36:0b:d8:8c:bc:8b:6f:b2:3d:91:5e:92: 73:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D2:AC:24:5B:76:E6:8C:F7:F4:1C:F8:94:07:CF:A6:93:95:11:A7 X509v3 Authority Key Identifier: keyid:E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:84:29:45:dd:68:dd:8b:62:43:87:bf:75:2a:3d:fd:cb:28: 49:fb:42:a1:37:12:39:91:8f:eb:c1:87:00:6f:7d:7d:b1:f8: d1:67:62:4d:34:d7:0b:04:0e:67:ee:f8:5d:98:00:0f:51:72: 9e:a9:5a:ca:46:42:6c:9a:1c:9f:90:40:32:92:f9:ec:41:91: 8a:0f:18:7b:84:4b:e1:3f:09:ea:3a:8e:86:c9:2c:90:79:87: 09:73:91:07:1f:28:38:21:bc:ed:d9:7d:d7:94:e8:f9:59:5c: 87:61:d8:ed:ed:87:c6:24:cd:f2:54:15:ea:04:77:a8:3b:e9: 5e:0f:f8:81:6a:db:fd:08:61:f6:83:de:df:44:48:71:15:1f: 86:b2:0c:9f:15:b7:32:65:ba:cc:9a:b3:81:af:b7:e2:d4:9d: 4c:5d:a1:3c:a4:10:06:27:c5:c5:d4:d1:bc:8e:19:6b:fe:54: 4c:fb:29:15:0c:b1:fd:a7:72:8a:c6:16:19:22:0b:40:5a:6a: c1:3f:7e:ff:62:90:7f:1e:ed:91:53:e8:ca:cf:a5:a8:bb:8b: 8c:79:0f:48:2a:f4:40:1a:b0:cf:6e:88:61:fb:0d:f2:9d:aa: cf:f0:eb:e4:14:3f:30:fa:91:a5:ba:08:5c:9a:1d:53:ee:34: 66:b7:8b:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbTv+hHGotYCLCRrjD9Ju6Fv9Jh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1 MTM2QzAwMjAeFw0yNTEwMTkwNTM3MDZaFw0yNTEwMjIwNjAzMDZaMDMxMTAvBgNV BAMTKDE1RDJBQzI0NUI3NkU2OENGN0Y0MUNGODk0MDdDRkE2OTM5NTExQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnag0esj60nZIoLiWbaaUe52a3 e2pmV3QzJT8oZEuNtsgK+MxgFwLXHCayoqQoO5tMCooLi7utj7r08SFcBUBvIjpN IhmG+3vboMoMPNdOr8THfBauaK3HsyWvsDnHnPwQNsbBlHvfchAD/NwLHP+KKtNn naELuXYh2RuMfgio2XmX7kYsFahDbadHWMBJKjBrLD2BbId0rFj/7BMnPA2kJI26 jvKFjw6dEz8MarjLcqoo2s9uB1whzYP4mCFarL8289TLahCb2U8e0GqwhONTLjrB nPdfotFbQVkRH3lxjLJ5nI+OtLtqZf8E/ikV3QzwTjYL2Iy8i2+yPZFeknNlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFdKsJFt25oz39Bz4lAfPppOVEacwHwYDVR0j BBgwFoAU5wjJd7Bqz66Lr8ayGeWkWFE2wAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMS9FNzA4Qzk3N0Iw NkFDRkFFOEJBRkM2QjIxOUU1QTQ1ODUxMzZDMDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1MTM2 QzAwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzEvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0 NTg1MTM2QzAwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWEKUXdaN2LYkOHv3UqPf3LKEn7QqE3EjmR j+vBhwBvfX2x+NFnYk001wsEDmfu+F2YAA9Rcp6pWspGQmyaHJ+QQDKS+exBkYoP GHuES+E/Ceo6jobJLJB5hwlzkQcfKDghvO3ZfdeU6PlZXIdh2O3th8YkzfJUFeoE d6g76V4P+IFq2/0IYfaD3t9ESHEVH4ayDJ8VtzJlusyas4Gvt+LUnUxdoTykEAYn xcXU0byOGWv+VEz7KRUMsf2ncorGFhkiC0BaasE/fv9ikH8e7ZFT6MrPpai7i4x5 D0gq9EAasM9uiGH7DfKdqs/w6+QUPzD6kaW6CFyaHVPuNGa3i3M= -----END CERTIFICATE-----Generated at Mon Oct 20 12:08:46 2025 by rpki-client