$ rpki-client -vvf repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft File: E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft (raw, json) Hash identifier: qSFcwvcjHBcb27GNIZfsRrEzvtlqWmi3k8nhiSYmEBI= Subject key identifier: 89:BE:F8:A7:1C:46:43:6F:EE:9C:1D:5D:AF:1D:1C:9D:97:48:7B:DF Authority key identifier: E1:B0:3F:9E:EA:71:C0:0F:69:D8:38:BC:1D:AA:D1:13:A8:BD:F6:DF Certificate issuer: /CN=E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF Certificate serial: 17A98BA525C84D85923B0ABC4535F1380B8C41A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft Manifest number: 0214 Signing time: Sat 18 Oct 2025 20:12:12 +0000 Manifest this update: Sat 18 Oct 2025 20:07:12 +0000 Manifest next update: Tue 21 Oct 2025 22:41:12 +0000 Files and hashes: 1: 3130332e3135322e39342e302f32342d3234203d3e20313432333039.roa (hash: LwR/Ij+tJvdbqCidmKE7lrWijDVtZaGN/EKnL9Uohnc=) 2: E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.crl (hash: JDofjjXIquUbSnXsbX3rChf4x7h0iTC51XO57qXWh/M=) 3: 3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa (hash: iXlr6ynCJTWhRXgxuJ3jQPCoK8YD+Mi69YQAcWlh+5g=) 4: 3130332e3135322e39342e302f32342d3234203d3e203435333132.roa (hash: oyewj7z2z/pNCV5NDy0zw0UISqbqq4GZm0zaT4XOSl8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.crl rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 22:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a9:8b:a5:25:c8:4d:85:92:3b:0a:bc:45:35:f1:38:0b:8c:41:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF Validity Not Before: Oct 18 20:07:12 2025 GMT Not After : Oct 21 22:41:12 2025 GMT Subject: CN=89BEF8A71C46436FEE9C1D5DAF1D1C9D97487BDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f6:ea:5f:de:ee:00:9e:e5:8d:a0:46:25:03: 42:fa:7f:74:47:c7:9f:21:ff:9e:17:36:fb:03:36: ec:f5:99:88:fc:d7:2d:24:48:ab:f6:69:ff:e9:cb: 53:c2:e4:ab:05:9f:56:82:3c:5e:7e:71:8e:36:aa: 1d:76:28:20:1b:80:1b:1d:37:f0:37:b8:7f:4d:8c: ef:29:11:98:ef:f1:38:27:f2:0a:ee:22:65:9c:dc: a1:e4:a4:7f:92:da:94:8e:e0:ea:43:a1:1f:ac:be: 34:22:88:58:bd:97:77:fe:3f:87:74:85:5f:96:8d: 70:49:83:47:e7:95:9f:15:c6:aa:d7:88:c8:7f:23: c7:c6:cf:fc:71:b5:e3:63:8d:0b:74:f8:3f:c7:48: 7d:65:c5:8a:53:bb:ff:28:92:18:1a:59:9f:1f:72: fb:ad:00:5b:30:7c:3b:ba:5b:7b:73:29:6b:34:34: 3b:7c:86:72:77:6c:5d:5c:f0:8c:6a:2b:35:29:b5: d2:f7:60:4c:37:ea:11:05:b9:88:ca:13:05:6a:7f: 39:6e:20:2e:4d:d7:93:04:91:84:c7:58:7f:ce:17: e3:55:08:06:4d:34:ca:13:7d:06:85:66:23:17:ca: 4b:a5:f4:3a:be:ab:f6:a7:87:10:25:b2:e6:a4:1c: ac:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BE:F8:A7:1C:46:43:6F:EE:9C:1D:5D:AF:1D:1C:9D:97:48:7B:DF X509v3 Authority Key Identifier: keyid:E1:B0:3F:9E:EA:71:C0:0F:69:D8:38:BC:1D:AA:D1:13:A8:BD:F6:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:1c:6a:6b:68:e4:e2:74:a9:b4:bd:76:c4:0b:f9:0b:f6:2c: 75:db:2e:c3:be:17:fa:08:81:ed:bb:31:16:15:9c:6f:7d:b4: 2a:2f:1f:70:3a:9b:d2:a3:a7:cc:52:79:73:44:84:9c:e8:d6: 9e:83:74:65:53:12:ef:61:45:5e:c0:02:b2:34:77:e6:47:20: a2:c5:03:53:a1:14:13:bb:ec:b8:31:82:36:26:24:8e:3e:ef: 9d:01:f7:2b:f3:f1:df:48:7f:dc:f8:a5:f3:20:3b:76:b0:c4: ed:a6:82:55:d8:2c:aa:f8:cc:1b:7d:b1:26:ed:c0:b4:04:fd: da:fa:68:2e:c6:69:af:c0:a4:91:fa:3b:07:d1:21:30:c5:6c: fa:78:c8:f5:ef:7b:2e:85:47:bf:ef:c7:80:66:26:db:fa:6e: e5:b3:7b:6d:68:ca:67:72:46:43:98:bc:35:6b:2d:b3:d6:54: 8b:76:48:50:1e:70:27:f8:c0:2a:5f:07:e6:fa:91:01:f4:5d: 30:f6:74:e2:32:3b:9b:90:2b:05:77:fa:2f:36:c2:15:22:6c: c7:ba:f0:18:97:57:96:2a:04:ee:4f:36:65:7f:7b:e4:fa:eb: 99:4c:31:e0:58:8c:71:a7:f2:aa:8e:a5:13:5c:f9:22:6c:0e: dd:a5:3d:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF6mLpSXITYWSOwq8RTXxOAuMQaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFCMDNGOUVFQTcxQzAwRjY5RDgzOEJDMURBQUQxMTNB OEJERjZERjAeFw0yNTEwMTgyMDA3MTJaFw0yNTEwMjEyMjQxMTJaMDMxMTAvBgNV BAMTKDg5QkVGOEE3MUM0NjQzNkZFRTlDMUQ1REFGMUQxQzlEOTc0ODdCREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA9upf3u4AnuWNoEYlA0L6f3RH x58h/54XNvsDNuz1mYj81y0kSKv2af/py1PC5KsFn1aCPF5+cY42qh12KCAbgBsd N/A3uH9NjO8pEZjv8Tgn8gruImWc3KHkpH+S2pSO4OpDoR+svjQiiFi9l3f+P4d0 hV+WjXBJg0fnlZ8VxqrXiMh/I8fGz/xxteNjjQt0+D/HSH1lxYpTu/8okhgaWZ8f cvutAFswfDu6W3tzKWs0NDt8hnJ3bF1c8IxqKzUptdL3YEw36hEFuYjKEwVqfzlu IC5N15MEkYTHWH/OF+NVCAZNNMoTfQaFZiMXykul9Dq+q/anhxAlsuakHKxpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUib74pxxGQ2/unB1drx0cnZdIe98wHwYDVR0j BBgwFoAU4bA/nupxwA9p2Di8HarRE6i99t8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjNkMTRjYi1jY2MyLTQ2ZDItOGUzMS0xNmY1YmVjMGFjZDgvMC9FMUIwM0Y5RUVB NzFDMDBGNjlEODM4QkMxREFBRDExM0E4QkRGNkRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFCMDNGOUVFQTcxQzAwRjY5RDgzOEJDMURBQUQxMTNBOEJE RjZERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWIzZDE0Y2ItY2NjMi00NmQyLThl MzEtMTZmNWJlYzBhY2Q4LzAvRTFCMDNGOUVFQTcxQzAwRjY5RDgzOEJDMURBQUQx MTNBOEJERjZERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIcamto5OJ0qbS9dsQL+Qv2LHXbLsO+F/oI ge27MRYVnG99tCovH3A6m9Kjp8xSeXNEhJzo1p6DdGVTEu9hRV7AArI0d+ZHIKLF A1OhFBO77LgxgjYmJI4+750B9yvz8d9If9z4pfMgO3awxO2mglXYLKr4zBt9sSbt wLQE/dr6aC7Gaa/ApJH6OwfRITDFbPp4yPXvey6FR7/vx4BmJtv6buWze21oymdy RkOYvDVrLbPWVIt2SFAecCf4wCpfB+b6kQH0XTD2dOIyO5uQKwV3+i82whUibMe6 8BiXV5YqBO5PNmV/e+T665lMMeBYjHGn8qqOpRNc+SJsDt2lPWA= -----END CERTIFICATE-----Generated at Mon Oct 20 12:02:45 2025 by rpki-client