$ rpki-client -vvf repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft File: E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft (raw, json) Hash identifier: J+PauGj1uniupTdN6yEobaPtEUY03JL+uuCUNHg/Gz0= Subject key identifier: FD:2A:05:2A:AC:8C:96:25:44:66:D2:9E:45:5C:8C:5D:A7:58:53:40 Authority key identifier: E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9 Certificate issuer: /CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9 Certificate serial: 75F26DB32FCDE6E027AA850E9CECBEF9DD4813E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft Manifest number: 01FB Signing time: Sat 18 Oct 2025 14:11:29 +0000 Manifest this update: Sat 18 Oct 2025 14:06:29 +0000 Manifest next update: Wed 22 Oct 2025 01:31:29 +0000 Files and hashes: 1: 3130332e3138392e3234392e302f32342d3234203d3e20313439383838.roa (hash: yz9DrhiZMU3eHWMSo1Oy5Cw6+/2sDeBXKj2G3NoDN0k=) 2: 3130332e3138392e3234382e302f32342d3234203d3e20313439383838.roa (hash: r4fgqA47qTlb3GhP6gzYmrPLdVv6QpS/f5hXYEC/f/k=) 3: E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl (hash: amlh2y7dcq+hfcq47oqekZ/RCgM43WHLKLd+lIrr4aM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 01:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:f2:6d:b3:2f:cd:e6:e0:27:aa:85:0e:9c:ec:be:f9:dd:48:13:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9 Validity Not Before: Oct 18 14:06:29 2025 GMT Not After : Oct 22 01:31:29 2025 GMT Subject: CN=FD2A052AAC8C96254466D29E455C8C5DA7585340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6c:41:a5:75:5b:98:c2:28:2b:84:0e:12:34: 3a:40:ff:88:d1:51:16:df:5c:36:da:36:02:48:4c: 00:9b:ce:8d:13:36:29:50:ca:97:53:b3:41:c1:99: 22:8d:b0:59:3e:5b:1e:56:11:f7:1a:82:a7:d5:ad: d8:30:f8:f8:9d:87:4d:78:e5:2a:cd:6e:05:c7:dd: 4c:d4:d0:bb:b8:39:44:48:39:c2:85:20:df:a3:75: 03:43:30:78:cd:6d:3d:e8:63:08:94:e1:7d:2d:86: a1:16:15:73:92:f4:e9:47:c1:77:9e:1a:80:42:db: 33:57:73:79:e4:a2:e5:b4:e0:3a:84:af:e4:f3:91: 11:3c:5b:01:d9:75:47:d0:cc:a4:05:f1:99:fb:bd: 22:ec:c9:41:89:ac:ce:d8:63:68:27:13:89:cb:c6: 5d:61:7d:7d:97:60:11:be:8b:aa:8d:ff:6d:c3:d3: 30:d7:86:66:33:89:4c:45:9a:ee:42:58:0e:5b:80: 41:be:4b:49:04:0b:88:3a:c8:cd:df:63:33:03:66: c5:3e:80:b7:1e:c2:53:a8:fd:19:0c:a1:0d:c3:1e: fa:44:2d:53:c0:89:c2:28:c3:b8:4f:c7:ef:c1:77: 5e:98:2c:d3:f1:ac:b3:0a:d9:5c:db:71:bd:bb:a9: 7c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2A:05:2A:AC:8C:96:25:44:66:D2:9E:45:5C:8C:5D:A7:58:53:40 X509v3 Authority Key Identifier: keyid:E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:44:1b:f7:4b:d2:64:1d:93:9a:f6:3e:32:74:c8:e7:cb:8f: 98:56:05:b0:6d:b4:03:a8:16:24:5d:a0:1b:61:97:18:05:38: 56:6b:5d:b1:43:3f:97:89:9c:45:12:30:4f:1d:08:78:25:6f: 07:2b:7f:d3:07:50:52:47:fc:06:3a:d1:ad:ca:00:d9:02:f4: e4:09:74:64:89:9b:9d:1a:10:cf:73:64:58:2b:0c:d0:99:36: 0d:f5:a3:87:bb:4d:13:28:1b:4b:51:ff:16:b0:93:c1:1f:7f: 6d:39:51:94:24:b2:93:a9:c4:51:54:8c:f2:c3:fb:ec:40:7f: 28:15:a1:4a:bb:bc:65:27:6e:72:0f:12:ba:a0:1f:b2:ee:87: fb:24:ab:63:65:0b:61:c9:5c:e4:5c:33:0b:3d:3d:9d:da:e5: bb:cb:c4:81:28:9a:bd:19:a6:de:ad:af:62:fb:48:41:13:4b: 00:24:72:05:34:42:df:3a:56:35:a7:24:1e:e2:66:e0:8c:ae: fe:ee:96:5c:d1:95:d7:ec:79:35:f7:1a:2c:eb:c6:fb:de:77: 58:cb:c0:b6:c4:d6:50:c0:4b:98:d8:8d:b3:44:ca:9e:53:64: 81:50:3e:a6:3e:1b:ee:7d:bb:da:7e:4a:e6:6a:5c:f7:53:34: 53:f7:ba:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdfJtsy/N5uAnqoUOnOy++d1IE+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VEMjEx QzlGMjFDOTAeFw0yNTEwMTgxNDA2MjlaFw0yNTEwMjIwMTMxMjlaMDMxMTAvBgNV BAMTKEZEMkEwNTJBQUM4Qzk2MjU0NDY2RDI5RTQ1NUM4QzVEQTc1ODUzNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVbEGldVuYwigrhA4SNDpA/4jR URbfXDbaNgJITACbzo0TNilQypdTs0HBmSKNsFk+Wx5WEfcagqfVrdgw+Pidh014 5SrNbgXH3UzU0Lu4OURIOcKFIN+jdQNDMHjNbT3oYwiU4X0thqEWFXOS9OlHwXee GoBC2zNXc3nkouW04DqEr+TzkRE8WwHZdUfQzKQF8Zn7vSLsyUGJrM7YY2gnE4nL xl1hfX2XYBG+i6qN/23D0zDXhmYziUxFmu5CWA5bgEG+S0kEC4g6yM3fYzMDZsU+ gLcewlOo/RkMoQ3DHvpELVPAicIow7hPx+/Bd16YLNPxrLMK2Vzbcb27qXzBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/SoFKqyMliVEZtKeRVyMXadYU0AwHwYDVR0j BBgwFoAU4s2qIjv7bysTlz64A1PtIRyfIckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGY0MTY0ZS03NGU1LTQwZDYtOWEzMC1iMzcyYTRkMmE0NTQvMC9FMkNEQUEyMjNC RkI2RjJCMTM5NzNFQjgwMzUzRUQyMTFDOUYyMUM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VEMjExQzlG MjFDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRmNDE2NGUtNzRlNS00MGQ2LTlh MzAtYjM3MmE0ZDJhNDU0LzAvRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VE MjExQzlGMjFDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJEG/dL0mQdk5r2PjJ0yOfLj5hWBbBttAOo FiRdoBthlxgFOFZrXbFDP5eJnEUSME8dCHglbwcrf9MHUFJH/AY60a3KANkC9OQJ dGSJm50aEM9zZFgrDNCZNg31o4e7TRMoG0tR/xawk8Eff205UZQkspOpxFFUjPLD ++xAfygVoUq7vGUnbnIPErqgH7Luh/skq2NlC2HJXORcMws9PZ3a5bvLxIEomr0Z pt6tr2L7SEETSwAkcgU0Qt86VjWnJB7iZuCMrv7ullzRldfseTX3Gizrxvved1jL wLbE1lDAS5jYjbNEyp5TZIFQPqY+G+59u9p+SuZqXPdTNFP3ui4= -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:18 2025 by rpki-client