$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft File: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft (raw, json) Hash identifier: JqJ16o8wYAJLnA2tMvvrqefurT47EGrcgjADwdTTSzU= Subject key identifier: 62:57:34:C8:BA:3A:51:B1:2E:C7:F4:36:B8:2B:B4:88:69:F6:54:5B Authority key identifier: E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F Certificate issuer: /CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F Certificate serial: 2305D672C0C99B27342023C9297C9E79028644E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft Manifest number: 01B6 Signing time: Sat 18 Oct 2025 10:40:52 +0000 Manifest this update: Sat 18 Oct 2025 10:35:52 +0000 Manifest next update: Tue 21 Oct 2025 17:30:52 +0000 Files and hashes: 1: 3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa (hash: L7eyl2XZ6A1jGQ7W7TcXIFdLoB9CiiJsysljc4+PR9I=) 2: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl (hash: 57DZUOWsnP/N8G3dneOOqdZn+vQh8SYwBN0yvwP/eDs=) 3: 3130332e3137322e3234322e302f32342d3234203d3e20313437303836.roa (hash: BUZVEiAJYJLqmtOMsKiwoKkvjDG5Aqhzz5fYoIUA7O8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 17:30:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:05:d6:72:c0:c9:9b:27:34:20:23:c9:29:7c:9e:79:02:86:44:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F Validity Not Before: Oct 18 10:35:52 2025 GMT Not After : Oct 21 17:30:52 2025 GMT Subject: CN=625734C8BA3A51B12EC7F436B82BB48869F6545B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a5:c4:1f:83:18:4a:b2:4e:36:d2:2c:6c:37: 46:44:1c:10:f0:7b:83:28:43:5a:0b:a8:9f:bc:80: 1a:5d:67:5b:ba:0e:50:3f:54:59:a1:34:b2:f1:4c: 15:20:a5:d7:ab:bb:fe:7e:88:3f:ed:22:46:e5:29: 5f:9f:6c:db:04:76:03:c0:5a:82:f4:02:98:89:7d: eb:a7:8a:59:d0:76:7b:d6:da:dd:ac:3a:ac:99:fb: 14:ea:c9:78:de:94:e6:db:2a:a2:55:4a:a1:0d:ae: 44:60:25:55:fc:4e:f4:b6:e9:8e:a9:be:18:5c:eb: 8b:7a:76:ef:96:54:c4:2a:81:65:44:0c:df:3e:30: b8:c1:d2:2c:53:fc:20:e2:c0:84:9a:ec:e6:6b:8c: 3a:98:e4:db:13:36:06:86:28:e0:54:56:2c:3f:04: fb:25:24:fb:62:80:3e:ca:b3:b0:28:fd:c5:8e:7f: 13:0b:95:33:30:e4:b2:be:49:fd:65:c0:7e:76:94: 2f:f3:93:3f:d9:ae:ed:d3:6c:30:92:05:4e:1a:57: 3b:b2:5d:4b:42:b1:12:f2:e7:a1:8b:5c:b6:98:d9: f5:09:b1:dd:ef:0a:52:92:c2:2d:01:81:8e:88:18: 6c:5c:43:2a:37:67:6b:f3:bb:0f:39:66:bf:f8:f8: 76:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:57:34:C8:BA:3A:51:B1:2E:C7:F4:36:B8:2B:B4:88:69:F6:54:5B X509v3 Authority Key Identifier: keyid:E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:40:2a:64:5f:89:17:be:5f:04:71:45:be:60:bc:99:e3:2b: cf:f7:cf:0b:6f:0b:15:d3:53:9c:3a:37:44:ac:95:01:e7:29: e8:01:36:77:12:4f:ef:b0:33:20:54:8c:2d:83:dc:1a:a5:86: 40:70:7a:1a:1a:ad:9b:ff:a3:00:a9:e7:b5:83:14:29:24:26: 6a:06:8d:ff:53:85:ec:a1:5c:9f:e9:8b:ee:c2:dc:05:74:62: de:cb:d6:c4:3c:9d:60:2f:71:06:d6:f3:b3:42:1a:c6:59:4b: 2b:29:01:7a:eb:d0:24:8b:e0:f7:01:2d:25:fb:b2:1a:d6:6c: 1b:9a:c5:db:95:70:dc:5d:50:11:8c:5a:9d:5d:99:1f:34:63: 5e:3b:c1:d4:15:b8:bb:31:4a:d9:a3:92:8c:1c:d1:09:78:9a: 2a:ff:c2:67:8d:53:a8:1e:30:d0:36:46:19:57:89:df:b4:53: 03:bb:4e:4b:24:ff:ab:6f:bb:a6:7c:1c:f1:3b:7b:07:8f:30: 72:2c:3d:e0:28:40:86:54:2a:5e:ac:3d:4d:6a:56:61:57:35: ed:a3:db:d0:de:41:9f:89:15:07:5b:24:e0:f1:a2:e6:03:a3: c0:2d:0b:3e:fe:95:93:8c:e4:fe:94:a4:73:f3:3d:99:46:15: 85:71:7c:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIwXWcsDJmyc0ICPJKXyeeQKGROIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJBMDNG QUY1NzU2RjAeFw0yNTEwMTgxMDM1NTJaFw0yNTEwMjExNzMwNTJaMDMxMTAvBgNV BAMTKDYyNTczNEM4QkEzQTUxQjEyRUM3RjQzNkI4MkJCNDg4NjlGNjU0NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+pcQfgxhKsk420ixsN0ZEHBDw e4MoQ1oLqJ+8gBpdZ1u6DlA/VFmhNLLxTBUgpderu/5+iD/tIkblKV+fbNsEdgPA WoL0ApiJfeunilnQdnvW2t2sOqyZ+xTqyXjelObbKqJVSqENrkRgJVX8TvS26Y6p vhhc64t6du+WVMQqgWVEDN8+MLjB0ixT/CDiwISa7OZrjDqY5NsTNgaGKOBUViw/ BPslJPtigD7Ks7Ao/cWOfxMLlTMw5LK+Sf1lwH52lC/zkz/Zru3TbDCSBU4aVzuy XUtCsRLy56GLXLaY2fUJsd3vClKSwi0BgY6IGGxcQyo3Z2vzuw85Zr/4+HatAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYlc0yLo6UbEux/Q2uCu0iGn2VFswHwYDVR0j BBgwFoAU4q7sffiXqdbk8NHRxDEqA/r1dW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjZkOGY5Ny1jODA2LTQ3OTktODVlMC04Y2NmMThkYmJiMzEvMC9FMkFFRUM3REY4 OTdBOUQ2RTRGMEQxRDFDNDMxMkEwM0ZBRjU3NTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJBMDNGQUY1 NzU2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2ZDhmOTctYzgwNi00Nzk5LTg1 ZTAtOGNjZjE4ZGJiYjMxLzAvRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJB MDNGQUY1NzU2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdAKmRfiRe+XwRxRb5gvJnjK8/3zwtvCxXT U5w6N0SslQHnKegBNncST++wMyBUjC2D3BqlhkBwehoarZv/owCp57WDFCkkJmoG jf9TheyhXJ/pi+7C3AV0Yt7L1sQ8nWAvcQbW87NCGsZZSyspAXrr0CSL4PcBLSX7 shrWbBuaxduVcNxdUBGMWp1dmR80Y147wdQVuLsxStmjkowc0Ql4mir/wmeNU6ge MNA2RhlXid+0UwO7Tksk/6tvu6Z8HPE7ewePMHIsPeAoQIZUKl6sPU1qVmFXNe2j 29DeQZ+JFQdbJODxouYDo8AtCz7+lZOM5P6UpHPzPZlGFYVxfCQ= -----END CERTIFICATE-----Generated at Mon Oct 20 15:33:03 2025 by rpki-client