$ rpki-client -vvf repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.mft File: E118E8E6144A59677DB6D05BDF713DB23BC61342.mft (raw, json) Hash identifier: kVGoLJWI1gOy0BF3af5zxZKuhTxzqMH7n3JhKMPjikk= Subject key identifier: 5A:5B:86:75:C3:10:67:9E:3D:A8:61:4D:FE:44:7C:AB:8B:5C:08:40 Authority key identifier: E1:18:E8:E6:14:4A:59:67:7D:B6:D0:5B:DF:71:3D:B2:3B:C6:13:42 Certificate issuer: /CN=E118E8E6144A59677DB6D05BDF713DB23BC61342 Certificate serial: 526E9E364702AD87E323BCA495BCFAF29904ED17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E118E8E6144A59677DB6D05BDF713DB23BC61342.cer Subject info access: rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.mft Manifest number: 030A Signing time: Mon 20 Oct 2025 12:21:49 +0000 Manifest this update: Mon 20 Oct 2025 12:16:49 +0000 Manifest next update: Thu 23 Oct 2025 16:58:49 +0000 Files and hashes: 1: 3130332e3137342e31382e302f32332d3234203d3e20313331313131.roa (hash: EPfbuzMbv4cF+h934ARntwSyGoDJC9dJTM001arffsg=) 2: E118E8E6144A59677DB6D05BDF713DB23BC61342.crl (hash: W/geUPWgH2tM2VwjgoESIcMgMutDEeOg9owYyBdXmlM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.crl rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E118E8E6144A59677DB6D05BDF713DB23BC61342.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:6e:9e:36:47:02:ad:87:e3:23:bc:a4:95:bc:fa:f2:99:04:ed:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E118E8E6144A59677DB6D05BDF713DB23BC61342 Validity Not Before: Oct 20 12:16:49 2025 GMT Not After : Oct 23 16:58:49 2025 GMT Subject: CN=5A5B8675C310679E3DA8614DFE447CAB8B5C0840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bb:87:7c:0c:9f:91:76:69:a3:f5:e0:57:d1: 79:eb:7a:33:ab:d7:a5:1e:ea:66:5d:86:4d:ab:71: ee:4b:04:35:c5:0b:d7:ae:11:99:65:f8:39:b7:62: b4:db:7f:c9:4d:db:07:4a:a2:08:81:3c:0f:21:c4: b5:f3:ad:b0:c9:85:af:67:07:89:43:59:71:23:06: 4a:8a:55:98:91:5f:8b:5c:1d:45:da:e4:e3:76:d2: e1:8d:d5:6a:40:aa:b1:b3:41:e3:b1:1f:c7:ba:3a: 20:f1:c8:f8:aa:31:cf:73:bb:a2:91:e1:6f:66:1a: 1a:31:90:7c:55:aa:c8:e7:6b:fd:a9:a9:20:62:7d: b4:3f:0c:a4:4d:10:92:12:dd:fe:d8:fb:25:6e:cf: cb:2f:40:67:53:3e:69:19:05:71:73:55:75:3a:08: 4b:d5:03:4f:ed:dc:65:16:40:e6:71:4f:1b:ad:52: 4a:1c:b1:3e:6c:a0:39:41:e9:c2:16:a9:bd:69:be: ba:40:fd:0d:b2:0c:3a:6e:b6:b2:db:ec:9f:d6:39: c0:d3:5c:f7:c6:ef:b6:44:a3:63:00:00:e4:48:78: b7:80:23:94:71:00:9b:97:d9:30:f5:65:c2:7a:52: 76:3a:d6:c8:48:ef:7c:77:1b:aa:a1:2d:35:05:f6: cb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5B:86:75:C3:10:67:9E:3D:A8:61:4D:FE:44:7C:AB:8B:5C:08:40 X509v3 Authority Key Identifier: keyid:E1:18:E8:E6:14:4A:59:67:7D:B6:D0:5B:DF:71:3D:B2:3B:C6:13:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E118E8E6144A59677DB6D05BDF713DB23BC61342.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:86:43:07:37:3f:97:0a:7b:ef:11:1c:d8:fc:f7:f0:9f:c3: 66:3e:e0:2e:63:e5:da:b7:5e:ba:e8:6f:68:53:71:43:f2:eb: 16:70:46:33:bf:52:35:87:a6:cc:75:17:28:14:d1:6c:3c:e6: 9c:05:81:0e:4d:f5:e1:0c:9f:3f:d2:6a:a3:40:f5:df:5e:50: 63:fc:db:1b:58:a8:38:58:16:8e:32:c1:fc:7c:91:8e:1e:78: 33:ad:ad:20:35:39:8b:e7:e5:56:c1:ac:e7:c9:6e:2a:24:de: 75:f8:d0:d9:74:d4:7a:e4:aa:5e:0b:f4:54:ed:32:44:53:ad: 61:2f:b0:c7:b2:3c:24:2c:fb:1d:5e:1e:5b:42:77:4f:f0:05: b7:33:0c:a1:40:9d:dc:db:e2:5d:30:ff:61:9f:31:c7:18:27: 20:15:44:1d:87:be:8a:2d:3d:10:de:ff:f1:aa:15:e7:f0:35: bb:d4:a2:0d:31:f7:a4:3f:82:25:22:ce:2c:28:95:56:cc:d7: 59:67:22:a8:2e:fe:4b:24:e9:74:09:fe:9c:ef:0b:d9:7d:b4: 4d:6f:dd:a1:5c:fc:d8:eb:0e:89:b7:63:38:ea:3e:80:27:54: 89:05:2b:34:89:15:d3:97:67:62:0b:73:ae:41:b4:53:39:4f: 37:b0:84:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUm6eNkcCrYfjI7yklbz68pkE7RcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTExOEU4RTYxNDRBNTk2NzdEQjZEMDVCREY3MTNEQjIz QkM2MTM0MjAeFw0yNTEwMjAxMjE2NDlaFw0yNTEwMjMxNjU4NDlaMDMxMTAvBgNV BAMTKDVBNUI4Njc1QzMxMDY3OUUzREE4NjE0REZFNDQ3Q0FCOEI1QzA4NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCou4d8DJ+Rdmmj9eBX0XnrejOr 16Ue6mZdhk2rce5LBDXFC9euEZll+Dm3YrTbf8lN2wdKogiBPA8hxLXzrbDJha9n B4lDWXEjBkqKVZiRX4tcHUXa5ON20uGN1WpAqrGzQeOxH8e6OiDxyPiqMc9zu6KR 4W9mGhoxkHxVqsjna/2pqSBifbQ/DKRNEJIS3f7Y+yVuz8svQGdTPmkZBXFzVXU6 CEvVA0/t3GUWQOZxTxutUkocsT5soDlB6cIWqb1pvrpA/Q2yDDputrLb7J/WOcDT XPfG77ZEo2MAAORIeLeAI5RxAJuX2TD1ZcJ6UnY61shI73x3G6qhLTUF9ssLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWluGdcMQZ549qGFN/kR8q4tcCEAwHwYDVR0j BBgwFoAU4Rjo5hRKWWd9ttBb33E9sjvGE0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MDFkYmFmYy1jMGNjLTQ5NmEtYjVlMC00ZjQ4YmE5NDZjZDMvMC9FMTE4RThFNjE0 NEE1OTY3N0RCNkQwNUJERjcxM0RCMjNCQzYxMzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTExOEU4RTYxNDRBNTk2NzdEQjZEMDVCREY3MTNEQjIzQkM2 MTM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTAxZGJhZmMtYzBjYy00OTZhLWI1 ZTAtNGY0OGJhOTQ2Y2QzLzAvRTExOEU4RTYxNDRBNTk2NzdEQjZEMDVCREY3MTNE QjIzQkM2MTM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2GQwc3P5cKe+8RHNj89/Cfw2Y+4C5j5dq3 Xrrob2hTcUPy6xZwRjO/UjWHpsx1FygU0Ww85pwFgQ5N9eEMnz/SaqNA9d9eUGP8 2xtYqDhYFo4ywfx8kY4eeDOtrSA1OYvn5VbBrOfJbiok3nX40Nl01Hrkql4L9FTt MkRTrWEvsMeyPCQs+x1eHltCd0/wBbczDKFAndzb4l0w/2GfMccYJyAVRB2Hvoot PRDe//GqFefwNbvUog0x96Q/giUiziwolVbM11lnIqgu/ksk6XQJ/pzvC9l9tE1v 3aFc/NjrDom3YzjqPoAnVIkFKzSJFdOXZ2ILc65BtFM5TzewhIw= -----END CERTIFICATE-----Generated at Mon Oct 20 13:54:50 2025 by rpki-client