$ rpki-client -vvf repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft File: E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft (raw, json) Hash identifier: gvxkucSmEH834sfwLqT49odzNTXERTYmB+TIWGy9B6E= Subject key identifier: 16:8D:90:DF:CD:CA:2D:48:86:A3:16:93:FA:ED:FB:75:76:66:7D:69 Authority key identifier: E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D Certificate issuer: /CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D Certificate serial: 610551B1140FCFC10694242835CF71621A2B0333 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft Manifest number: 03A4 Signing time: Sun 19 Oct 2025 10:40:39 +0000 Manifest this update: Sun 19 Oct 2025 10:35:39 +0000 Manifest next update: Wed 22 Oct 2025 13:24:39 +0000 Files and hashes: 1: 3130332e33312e3230342e302f32332d3234203d3e203435373138.roa (hash: VoMnlv1vt+phfoqqSj3NlhfZbmojrA8l7T65WTVbYMM=) 2: 323030313a6466303a62333a3a2f34382d3438203d3e203435373138.roa (hash: goKqtOANx7qYkuYC16JMyOMD7wMXtPJ41zk+xa8C7PI=) 3: 3130332e33312e3230362e302f32342d3234203d3e203435373138.roa (hash: w1mWD70iTqDZcL+qWJT3UxUlTEt3Oeyv9uC8w3hj0HU=) 4: 3130332e3139382e39332e302f32342d3234203d3e203435373138.roa (hash: wa+1RTscgoKKgYWFX2arn9cWcToBF6A/kXjZvyHLVV8=) 5: E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl (hash: zlN1n3G9A8AQ8VGgIb2WyRoZTqwgXZ9Rg6IomzrTNeA=) 6: 3230332e37392e32392e302f32342d3234203d3e203435373138.roa (hash: ILlvOWLN9Xs8cUbwHU8Z2NUUNxyuB2q6+J4DPU9EvmQ=) 7: 3131372e3130332e36342e302f32322d3234203d3e203435373138.roa (hash: dcaXEHmtpvgdp2B+61+9NSsaEhu3dJ+pR5a99XJxHq0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:05:51:b1:14:0f:cf:c1:06:94:24:28:35:cf:71:62:1a:2b:03:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D Validity Not Before: Oct 19 10:35:39 2025 GMT Not After : Oct 22 13:24:39 2025 GMT Subject: CN=168D90DFCDCA2D4886A31693FAEDFB7576667D69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:2a:8a:36:64:8a:55:ca:a8:95:1b:f6:28:12: 23:7d:32:7c:ac:91:05:12:ca:f4:8e:2b:40:44:77: 06:8f:0b:32:f3:7e:46:6e:7b:53:b7:ee:46:33:94: 3e:c1:88:7f:44:2d:ee:09:d0:fa:2e:14:6c:82:38: df:94:ae:b9:59:61:bc:3e:fb:1a:54:d1:4f:fe:de: 4c:b8:bc:52:16:5a:42:7b:ec:15:22:54:0c:f1:8c: 30:0f:37:6c:c7:30:a4:95:bb:c7:a9:c0:d7:f4:40: 36:31:15:6a:b3:35:cc:42:50:d9:fb:b4:cd:10:88: 4e:8c:ae:07:88:e1:64:68:8b:e8:a7:e4:c7:2a:bd: 79:b6:bd:0d:ce:96:d2:3c:0c:65:f7:8c:06:0d:29: 02:c6:b5:ce:ef:f6:1a:e6:97:70:c9:9e:69:61:ea: 65:7c:65:44:1c:1d:84:bc:69:02:ed:a2:52:6a:2b: dc:6f:b0:45:91:ad:39:d4:b5:43:ed:f0:d4:3e:45: 80:17:31:c1:7d:f8:7c:8e:75:38:ac:cc:88:67:7d: 6c:6b:d9:77:ec:ca:f2:63:94:26:7b:c3:21:b4:41: b7:6a:a8:85:ad:e5:14:aa:81:e0:41:a4:ed:5d:71: a7:c6:f3:c1:86:7c:93:6a:3e:6c:8b:dd:cb:a7:07: 91:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8D:90:DF:CD:CA:2D:48:86:A3:16:93:FA:ED:FB:75:76:66:7D:69 X509v3 Authority Key Identifier: keyid:E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:23:6e:5b:15:77:73:77:2f:78:95:9f:aa:25:90:a4:6d:f2: 37:1a:4a:86:9e:3f:2d:0f:66:bf:c8:9e:0d:84:6d:6f:8b:fd: df:79:25:4d:8f:3c:0b:2b:15:0a:59:19:83:38:65:91:fd:47: 45:87:c1:3a:41:22:d4:0e:ac:f4:93:42:fb:7d:ca:2c:e3:d0: 72:be:7f:91:6b:67:f7:c3:90:6a:1f:88:d0:6c:e3:28:dc:b6: 48:43:be:03:94:54:4c:4e:18:c3:89:24:5f:36:84:ec:21:8c: b9:f8:ec:75:ee:38:70:0b:79:d2:0b:82:95:9a:89:55:a6:9f: 49:af:85:37:e2:c6:7a:72:88:99:bb:d9:00:7c:a9:ae:79:1c: 67:f7:78:e5:d5:38:de:5e:4e:82:3a:a9:5c:9e:7e:39:f8:1d: c1:1f:9d:6b:87:48:04:0d:c4:55:2b:23:16:34:b5:e8:b0:68: 5e:cc:7c:70:23:78:3f:b3:b7:94:d7:c2:1b:c4:04:78:f9:ef: f5:7e:bf:f3:5b:0c:19:40:98:e5:cb:6c:74:4b:86:95:fa:18: 73:38:4f:f5:64:2b:b6:b6:cf:5b:d3:44:64:c0:11:26:43:c3: 8f:9e:d5:26:10:bf:a3:5c:ef:c8:bd:b9:13:b9:36:44:af:25: cc:15:90:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYQVRsRQPz8EGlCQoNc9xYhorAzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0MkIz QkQzMUQxRDAeFw0yNTEwMTkxMDM1MzlaFw0yNTEwMjIxMzI0MzlaMDMxMTAvBgNV BAMTKDE2OEQ5MERGQ0RDQTJENDg4NkEzMTY5M0ZBRURGQjc1NzY2NjdENjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3Koo2ZIpVyqiVG/YoEiN9Mnys kQUSyvSOK0BEdwaPCzLzfkZue1O37kYzlD7BiH9ELe4J0PouFGyCON+UrrlZYbw+ +xpU0U/+3ky4vFIWWkJ77BUiVAzxjDAPN2zHMKSVu8epwNf0QDYxFWqzNcxCUNn7 tM0QiE6MrgeI4WRoi+in5McqvXm2vQ3OltI8DGX3jAYNKQLGtc7v9hrml3DJnmlh 6mV8ZUQcHYS8aQLtolJqK9xvsEWRrTnUtUPt8NQ+RYAXMcF9+HyOdTiszIhnfWxr 2XfsyvJjlCZ7wyG0QbdqqIWt5RSqgeBBpO1dcafG88GGfJNqPmyL3cunB5FbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFo2Q383KLUiGoxaT+u37dXZmfWkwHwYDVR0j BBgwFoAU5HWosBi65YRI3eVdlIdEKzvTHR0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDQ5YzIxMC1mMzY1LTQzMmYtYTdjYS0wYjVlYjg2YjAxYzYvMC9FNDc1QThCMDE4 QkFFNTg0NDhEREU1NUQ5NDg3NDQyQjNCRDMxRDFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0MkIzQkQz MUQxRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA0OWMyMTAtZjM2NS00MzJmLWE3 Y2EtMGI1ZWI4NmIwMWM2LzAvRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0 MkIzQkQzMUQxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkjblsVd3N3L3iVn6olkKRt8jcaSoaePy0P Zr/Ing2EbW+L/d95JU2PPAsrFQpZGYM4ZZH9R0WHwTpBItQOrPSTQvt9yizj0HK+ f5FrZ/fDkGofiNBs4yjctkhDvgOUVExOGMOJJF82hOwhjLn47HXuOHALedILgpWa iVWmn0mvhTfixnpyiJm72QB8qa55HGf3eOXVON5eToI6qVyefjn4HcEfnWuHSAQN xFUrIxY0teiwaF7MfHAjeD+zt5TXwhvEBHj57/V+v/NbDBlAmOXLbHRLhpX6GHM4 T/VkK7a2z1vTRGTAESZDw4+e1SYQv6Nc78i9uRO5NkSvJcwVkMk= -----END CERTIFICATE-----Generated at Mon Oct 20 15:40:01 2025 by rpki-client