$ rpki-client -vvf repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft File: E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft (raw, json) Hash identifier: /Dq/nZOXxeJWy7OpFKM3olsRwY969AnApm86wnUxdIg= Subject key identifier: C6:E8:BA:1A:C7:5A:7B:19:79:3C:09:77:8A:4E:7A:4F:A5:4B:E1:5E Authority key identifier: E8:DA:87:F3:4A:55:0D:00:47:EE:C0:39:A2:0C:84:41:F0:66:EC:5B Certificate issuer: /CN=E8DA87F34A550D0047EEC039A20C8441F066EC5B Certificate serial: 4A6DC72E66BC4BA26FDAD2C82C7CAF6CD5EB206D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft Manifest number: 031F Signing time: Mon 20 Oct 2025 03:20:37 +0000 Manifest this update: Mon 20 Oct 2025 03:15:37 +0000 Manifest next update: Thu 23 Oct 2025 14:14:37 +0000 Files and hashes: 1: E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl (hash: uAywK3PYZlq8djclsWbJQ3zQ8Jun6DNsl5MgGn8DunE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:6d:c7:2e:66:bc:4b:a2:6f:da:d2:c8:2c:7c:af:6c:d5:eb:20:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8DA87F34A550D0047EEC039A20C8441F066EC5B Validity Not Before: Oct 20 03:15:37 2025 GMT Not After : Oct 23 14:14:37 2025 GMT Subject: CN=C6E8BA1AC75A7B19793C09778A4E7A4FA54BE15E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2e:e5:0c:68:85:21:cd:3b:80:d4:9a:f5:f5: ed:89:2d:ff:06:1e:de:e6:ab:46:c2:45:ec:3e:48: 9d:89:87:fb:7b:bd:bb:2f:8e:41:a2:c9:e1:80:0f: e9:c7:cf:a9:07:ed:23:86:75:d7:ea:9f:ee:d1:cc: 43:ff:41:b6:a4:e8:05:82:09:26:30:df:75:4c:eb: 69:72:11:6a:90:1a:ba:6d:e7:f5:32:f2:c4:c5:8d: f6:68:79:cd:1c:af:ed:3f:3f:1d:74:44:d9:d5:2a: 3f:cc:4c:b7:92:a3:e1:bf:b9:05:27:22:a0:91:e7: eb:27:12:0c:bf:d4:62:1b:99:3d:c6:8c:05:6a:4a: 52:b0:7f:81:84:a5:91:15:2b:be:a5:c2:cb:6a:57: b0:5a:52:75:23:14:de:a1:a0:e2:2a:69:d0:0d:a5: 86:56:55:4e:14:c7:78:27:9f:df:57:d2:66:8f:23: d3:1a:b4:ad:2c:87:5b:9f:d1:ea:e2:13:51:7f:43: fb:97:36:a5:0b:ec:2a:a3:e2:22:3c:3d:4b:26:8d: 1b:18:47:ea:1d:f6:0c:8b:d6:90:32:6a:b8:d2:39: 82:86:25:38:84:52:4f:9a:6d:56:33:d3:07:5a:c8: 27:03:0e:69:d7:70:fd:a3:28:0f:2b:38:34:b5:ea: 05:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E8:BA:1A:C7:5A:7B:19:79:3C:09:77:8A:4E:7A:4F:A5:4B:E1:5E X509v3 Authority Key Identifier: keyid:E8:DA:87:F3:4A:55:0D:00:47:EE:C0:39:A2:0C:84:41:F0:66:EC:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:1c:0d:ae:84:ff:e8:1e:93:70:9f:5f:1a:f3:a4:0c:48:7e: 56:9a:50:03:8f:12:c9:f0:a1:6c:24:aa:34:19:9e:ad:62:50: e8:e6:1e:16:8c:eb:c6:1d:2e:e4:65:a0:8f:43:e0:2c:b7:be: 0f:66:a6:79:86:e6:68:b1:b5:bc:53:d1:de:c6:c2:7e:29:b9: 77:10:d8:de:7c:97:b3:4b:51:fd:a4:2d:ea:39:50:7a:c4:54: 74:58:ab:dd:8f:7f:08:9c:bf:25:51:e7:05:d4:26:2b:5f:9e: 59:be:64:f2:1f:33:bf:60:02:fb:74:df:1a:e7:b5:67:62:29: e6:55:b1:50:6d:2b:0a:28:40:76:5c:a9:b3:6e:6b:6b:c6:6e: f1:95:5c:b9:79:f6:bc:17:4d:45:e8:fa:b6:7d:9a:8e:4c:a1: 82:55:24:04:cf:53:a2:9b:68:a9:37:62:df:6c:76:76:36:a8: be:9b:6b:03:b9:cb:b4:94:5f:62:b9:c6:ac:1e:ef:bd:93:f1: 63:10:01:f7:a4:18:58:69:bd:90:b3:f5:3b:b5:28:17:21:ed: ab:38:77:87:af:6b:6c:94:18:8e:44:45:39:24:44:07:76:1b: a5:15:2b:d9:16:1d:4f:17:63:c2:70:b0:a9:57:51:0d:d5:21: 07:b7:bf:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSm3HLma8S6Jv2tLILHyvbNXrIG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0NDFG MDY2RUM1QjAeFw0yNTEwMjAwMzE1MzdaFw0yNTEwMjMxNDE0MzdaMDMxMTAvBgNV BAMTKEM2RThCQTFBQzc1QTdCMTk3OTNDMDk3NzhBNEU3QTRGQTU0QkUxNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiLuUMaIUhzTuA1Jr19e2JLf8G Ht7mq0bCRew+SJ2Jh/t7vbsvjkGiyeGAD+nHz6kH7SOGddfqn+7RzEP/Qbak6AWC CSYw33VM62lyEWqQGrpt5/Uy8sTFjfZoec0cr+0/Px10RNnVKj/MTLeSo+G/uQUn IqCR5+snEgy/1GIbmT3GjAVqSlKwf4GEpZEVK76lwstqV7BaUnUjFN6hoOIqadAN pYZWVU4Ux3gnn99X0maPI9MatK0sh1uf0eriE1F/Q/uXNqUL7Cqj4iI8PUsmjRsY R+od9gyL1pAyarjSOYKGJTiEUk+abVYz0wdayCcDDmnXcP2jKA8rODS16gU7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxui6Gsdaexl5PAl3ik56T6VL4V4wHwYDVR0j BBgwFoAU6NqH80pVDQBH7sA5ogyEQfBm7FswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTQ2NzZjZC1kZTM5LTQ2OGEtYWQyNS02NzVlMWI5MTBmYWMvMC9FOERBODdGMzRB NTUwRDAwNDdFRUMwMzlBMjBDODQ0MUYwNjZFQzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0NDFGMDY2 RUM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE0Njc2Y2QtZGUzOS00NjhhLWFk MjUtNjc1ZTFiOTEwZmFjLzAvRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0 NDFGMDY2RUM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMcDa6E/+gek3CfXxrzpAxIflaaUAOPEsnw oWwkqjQZnq1iUOjmHhaM68YdLuRloI9D4Cy3vg9mpnmG5mixtbxT0d7Gwn4puXcQ 2N58l7NLUf2kLeo5UHrEVHRYq92PfwicvyVR5wXUJitfnlm+ZPIfM79gAvt03xrn tWdiKeZVsVBtKwooQHZcqbNua2vGbvGVXLl59rwXTUXo+rZ9mo5MoYJVJATPU6Kb aKk3Yt9sdnY2qL6bawO5y7SUX2K5xqwe772T8WMQAfekGFhpvZCz9Tu1KBch7as4 d4eva2yUGI5ERTkkRAd2G6UVK9kWHU8XY8JwsKlXUQ3VIQe3v84= -----END CERTIFICATE-----Generated at Tue Oct 21 04:49:32 2025 by rpki-client