$ rpki-client -vvf repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft File: E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft (raw, json) Hash identifier: R0YIgcRKT4sBlTj5A8qrs7rJboOc/poGDr8FHRBVkTc= Subject key identifier: 69:68:8D:22:BD:48:A8:03:E5:E9:C8:A3:47:63:BB:C8:E7:01:D7:A9 Authority key identifier: E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2 Certificate issuer: /CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2 Certificate serial: 6696E942AD5980406C96585734E2ACAFF3E6381D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft Manifest number: 013E Signing time: Sun 19 Oct 2025 20:32:26 +0000 Manifest this update: Sun 19 Oct 2025 20:27:26 +0000 Manifest next update: Thu 23 Oct 2025 07:03:26 +0000 Files and hashes: 1: 3130332e3138392e3232332e302f32342d3234203d3e20313439383831.roa (hash: Y71EeD959aIr9ucCZApJALClmCCepz1YWwy1H6B20+w=) 2: E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl (hash: EqbhT2eUX5aVY6d6ZrueqxZ4u2hOHgFHNrHzvaflgmQ=) 3: 323030313a6466313a396563303a3a2f34382d3438203d3e20313439383831.roa (hash: icoM+EmZmnaUSNYe+M3YT7QPi2377uDTJ5GrlCTs7Lw=) 4: 3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa (hash: LJVWK744DaCLalz0/Sl7Gt/PYQWV0FOVmOX8NAlnD4I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 07:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:96:e9:42:ad:59:80:40:6c:96:58:57:34:e2:ac:af:f3:e6:38:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2 Validity Not Before: Oct 19 20:27:26 2025 GMT Not After : Oct 23 07:03:26 2025 GMT Subject: CN=69688D22BD48A803E5E9C8A34763BBC8E701D7A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:54:7f:fe:7c:e4:bc:15:fd:77:29:32:0d:43: 29:4a:94:d8:9d:5c:88:3d:03:6e:f6:3d:24:34:f9: c3:2a:9b:7f:2f:11:61:73:40:6b:30:6c:51:f4:43: 43:ca:86:d8:86:6a:45:65:24:3d:1e:d7:0f:19:2d: a1:99:50:02:aa:db:25:47:e5:23:61:93:92:02:63: ab:c4:6f:cb:8c:ea:9b:95:4d:76:74:36:3e:ee:31: 90:1b:04:aa:20:cb:04:87:f4:7e:a6:11:75:fc:32: b8:b0:30:2e:9b:3e:0a:cf:6a:39:db:db:ef:50:ec: 78:67:ac:00:c9:b4:e5:88:0f:d9:ae:19:87:6f:e3: cb:b4:80:a1:43:ee:b4:3f:fa:5b:b4:09:e7:b1:66: de:1d:6a:ad:94:7c:b7:b4:db:9d:fa:bd:16:7c:36: 43:90:c4:7f:49:5b:90:35:ca:c3:42:9d:93:ef:38: a3:de:b5:70:5e:c1:4d:47:82:c1:10:ce:77:af:eb: 25:65:1a:d9:6c:d1:60:fe:42:dc:c1:b4:10:a7:71: 39:a3:51:f6:f8:cf:98:77:9d:e6:8e:e6:02:89:32: 4e:ea:ed:c6:c3:98:74:f1:57:a9:74:c7:36:19:80: d3:1f:11:ee:ba:c1:82:ba:6f:67:f5:44:9c:7e:ce: 34:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:68:8D:22:BD:48:A8:03:E5:E9:C8:A3:47:63:BB:C8:E7:01:D7:A9 X509v3 Authority Key Identifier: keyid:E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:df:80:ad:dd:07:fc:3f:6c:89:ab:88:11:bc:31:82:e2:65: 75:18:29:48:7b:1e:5a:4c:da:c1:b2:67:9e:9f:42:c0:31:a2: 93:8c:b3:40:3e:b8:bb:c3:7b:a7:87:2c:81:1a:d0:d5:53:bf: b3:9d:a9:07:cb:ee:35:ea:6a:e7:ba:be:29:15:59:7c:db:5e: 02:46:dd:9c:97:9e:70:52:2d:2e:e5:20:e0:b9:cf:28:00:71: 92:f0:74:1c:76:8a:39:5d:b4:db:ad:4f:4b:a0:3f:4c:49:0a: 74:b2:f7:88:f4:cf:2d:be:17:bf:e5:84:90:c7:fb:e2:f9:17: 09:bd:e2:ff:05:63:94:d7:fd:59:a2:a4:1c:27:e5:01:b8:5f: 51:11:8e:89:c8:3d:13:13:b5:8b:e0:6b:20:ba:8e:51:c0:a1: 08:3a:61:de:46:48:1e:c6:9b:cf:22:5f:11:06:47:4a:7f:12: b4:63:c7:67:6d:e7:3b:db:5c:0a:66:b3:81:33:d0:7c:4c:cc: 14:c5:a7:a9:ba:e6:f1:1e:f9:4e:a3:30:eb:82:e2:e9:fc:17: 78:bc:60:93:c0:e4:4d:6b:88:f4:23:91:24:52:d4:15:2e:c8: 4b:f6:a8:09:e8:18:db:25:c9:39:4d:cd:d7:aa:86:95:4a:4d: 6f:8b:30:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZpbpQq1ZgEBsllhXNOKsr/PmOB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFGRTY5QTM0MjE2QzI0RDE4NzBGNUNFRDNBNDMwOTIz NEEwRjFCMjAeFw0yNTEwMTkyMDI3MjZaFw0yNTEwMjMwNzAzMjZaMDMxMTAvBgNV BAMTKDY5Njg4RDIyQkQ0OEE4MDNFNUU5QzhBMzQ3NjNCQkM4RTcwMUQ3QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrVH/+fOS8Ff13KTINQylKlNid XIg9A272PSQ0+cMqm38vEWFzQGswbFH0Q0PKhtiGakVlJD0e1w8ZLaGZUAKq2yVH 5SNhk5ICY6vEb8uM6puVTXZ0Nj7uMZAbBKogywSH9H6mEXX8MriwMC6bPgrPajnb 2+9Q7HhnrADJtOWID9muGYdv48u0gKFD7rQ/+lu0CeexZt4daq2UfLe02536vRZ8 NkOQxH9JW5A1ysNCnZPvOKPetXBewU1HgsEQznev6yVlGtls0WD+QtzBtBCncTmj Ufb4z5h3neaO5gKJMk7q7cbDmHTxV6l0xzYZgNMfEe66wYK6b2f1RJx+zjSlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaWiNIr1IqAPl6cijR2O7yOcB16kwHwYDVR0j BBgwFoAU4f5po0IWwk0YcPXO06QwkjSg8bIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODhlM2ExNy0xYzkxLTQ3OTMtODNjNC0yMTFkNDIxMGFlYTgvMC9FMUZFNjlBMzQy MTZDMjREMTg3MEY1Q0VEM0E0MzA5MjM0QTBGMUIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFGRTY5QTM0MjE2QzI0RDE4NzBGNUNFRDNBNDMwOTIzNEEw RjFCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg4ZTNhMTctMWM5MS00NzkzLTgz YzQtMjExZDQyMTBhZWE4LzAvRTFGRTY5QTM0MjE2QzI0RDE4NzBGNUNFRDNBNDMw OTIzNEEwRjFCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHfgK3dB/w/bImriBG8MYLiZXUYKUh7HlpM 2sGyZ56fQsAxopOMs0A+uLvDe6eHLIEa0NVTv7OdqQfL7jXqaue6vikVWXzbXgJG 3ZyXnnBSLS7lIOC5zygAcZLwdBx2ijldtNutT0ugP0xJCnSy94j0zy2+F7/lhJDH ++L5Fwm94v8FY5TX/VmipBwn5QG4X1ERjonIPRMTtYvgayC6jlHAoQg6Yd5GSB7G m88iXxEGR0p/ErRjx2dt5zvbXApms4Ez0HxMzBTFp6m65vEe+U6jMOuC4un8F3i8 YJPA5E1riPQjkSRS1BUuyEv2qAnoGNslyTlNzdeqhpVKTW+LMMs= -----END CERTIFICATE-----Generated at Mon Oct 20 17:13:37 2025 by rpki-client