$ rpki-client -vvf repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft File: E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft (raw, json) Hash identifier: PkUdHLo2HMtCbqwMECUjqGCnYaUakaNfIFnirBt9pk8= Subject key identifier: 66:17:B8:C5:05:0E:B5:54:9E:EC:E7:75:E2:C9:57:FE:53:3D:C8:2A Authority key identifier: E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27 Certificate issuer: /CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27 Certificate serial: 26D22359F5819101A574303DD50D30909BBA594B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft Manifest number: 01D6 Signing time: Sat 18 Oct 2025 08:41:05 +0000 Manifest this update: Sat 18 Oct 2025 08:36:05 +0000 Manifest next update: Tue 21 Oct 2025 10:39:05 +0000 Files and hashes: 1: 3130332e34372e31302e302f32332d3233203d3e203539323733.roa (hash: QQ3Rh44LarCBGGxrx2/AHtC6m0nt4l2HW31clE2Q/SY=) 2: E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl (hash: A2qwSOWm3YgCJCwzpvMn6AVqe+IcNOLqO7BnV76A67U=) 3: 3130332e34372e31312e302f32342d3234203d3e203539323733.roa (hash: FYTnb6URKqil9v4UEaprZL6ZdMktcRy6nGXbNBxOe04=) 4: 3130332e34372e31302e302f32342d3234203d3e203539323733.roa (hash: R73yUQxsrQ2/QYaOv8BqS7ocOQns71iqOhL/AfjwD0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 10:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:d2:23:59:f5:81:91:01:a5:74:30:3d:d5:0d:30:90:9b:ba:59:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27 Validity Not Before: Oct 18 08:36:05 2025 GMT Not After : Oct 21 10:39:05 2025 GMT Subject: CN=6617B8C5050EB5549EECE775E2C957FE533DC82A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:48:17:ea:b5:15:27:85:0d:55:ec:ef:94:e2: 67:b8:84:d6:98:8f:bf:ee:94:c1:96:7b:df:7c:4d: 76:27:98:71:40:c8:28:84:d8:0e:5c:67:1c:8f:a8: 89:02:66:26:09:a3:e1:17:cb:a8:65:70:49:4e:83: 69:02:48:5a:9d:34:6b:fc:02:ea:ae:3c:99:d8:ed: 43:d9:f9:06:c8:ff:98:5f:3d:82:8b:7a:dd:21:8f: 14:5b:f2:bb:65:0b:f2:e1:d3:20:f4:87:b2:17:e7: 13:2c:38:4c:65:35:93:fc:1e:dc:25:0a:50:6b:ea: fc:8d:d7:30:53:a1:02:33:94:14:6a:f6:ae:56:a3: 05:bf:90:14:f4:a9:64:3a:59:99:64:2d:41:89:44: 87:ad:b6:d0:c8:55:b8:76:a9:02:ed:bf:82:76:71: fa:8b:2b:f5:bd:db:b4:4a:97:52:7b:f8:95:55:0f: 00:80:6f:d7:1f:fa:e6:b0:fb:7d:5d:23:aa:f7:e0: bb:fd:58:a9:be:be:32:3f:6f:c3:6c:1f:40:8d:0d: c1:f7:b2:5b:78:d2:4c:b1:85:ed:19:65:a2:36:ae: 54:92:28:56:7f:7f:67:e8:b6:96:04:b8:d8:f6:f3: 28:5c:fe:bf:aa:48:9a:0a:cc:26:47:8a:db:a6:20: ae:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:17:B8:C5:05:0E:B5:54:9E:EC:E7:75:E2:C9:57:FE:53:3D:C8:2A X509v3 Authority Key Identifier: keyid:E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:aa:fe:0a:71:cb:ad:72:11:c8:7d:95:c5:76:4b:af:99:80: 1c:3d:4e:f9:e2:49:26:08:0c:ca:72:f9:f4:ad:77:13:49:f9: 78:ef:ec:bd:8c:63:86:03:ec:61:c2:23:ec:2b:fe:17:10:fc: 60:4b:ef:58:b3:b1:5f:02:13:43:06:34:71:cc:8d:a7:cf:f2: 7a:22:27:f5:9b:ad:e1:b5:a8:e7:79:be:0d:21:68:20:94:b5: 9f:a6:61:66:31:2d:63:80:7a:35:e5:9d:e7:78:92:b2:af:bc: 90:88:61:86:27:b9:23:76:32:bc:6a:f9:76:90:8b:94:b1:9c: 20:cd:2d:14:e3:65:66:a2:8b:5a:a1:e0:65:d2:b5:37:23:4f: 88:45:b6:33:21:8a:12:f0:2f:d9:5f:c2:90:32:d3:cc:db:a0: 8a:9b:77:55:e9:2d:5c:f0:1c:7e:84:99:12:4c:83:b3:92:a3: 05:b6:b7:9a:39:81:01:e9:12:87:00:a3:af:a4:b1:34:75:83: 68:58:22:7a:b8:87:92:c1:d0:b6:8c:85:64:4d:60:09:1c:f6: 6f:f0:4c:1e:7e:a2:2b:58:b7:40:b5:19:94:51:f7:43:d7:d0: 9d:36:ec:78:c0:80:f7:19:90:2e:7a:41:88:da:be:1e:6e:5b: 66:0a:1e:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJtIjWfWBkQGldDA91Q0wkJu6WUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZG QTI5QUIyNzAeFw0yNTEwMTgwODM2MDVaFw0yNTEwMjExMDM5MDVaMDMxMTAvBgNV BAMTKDY2MTdCOEM1MDUwRUI1NTQ5RUVDRTc3NUUyQzk1N0ZFNTMzREM4MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBSBfqtRUnhQ1V7O+U4me4hNaY j7/ulMGWe998TXYnmHFAyCiE2A5cZxyPqIkCZiYJo+EXy6hlcElOg2kCSFqdNGv8 AuquPJnY7UPZ+QbI/5hfPYKLet0hjxRb8rtlC/Lh0yD0h7IX5xMsOExlNZP8Htwl ClBr6vyN1zBToQIzlBRq9q5WowW/kBT0qWQ6WZlkLUGJRIetttDIVbh2qQLtv4J2 cfqLK/W927RKl1J7+JVVDwCAb9cf+uaw+31dI6r34Lv9WKm+vjI/b8NsH0CNDcH3 slt40kyxhe0ZZaI2rlSSKFZ/f2fotpYEuNj28yhc/r+qSJoKzCZHitumIK4dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZhe4xQUOtVSe7Od14slX/lM9yCowHwYDVR0j BBgwFoAU6R1R5UqJwN29V/AKE+luNvopqycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWE3MmViOS04ZTUzLTQ0NzItYTM1YS1mZWU4YmYwYWY0NmYvMC9FOTFENTFFNTRB ODlDMEREQkQ1N0YwMEExM0U5NkUzNkZBMjlBQjI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZGQTI5 QUIyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVhNzJlYjktOGU1My00NDcyLWEz NWEtZmVlOGJmMGFmNDZmLzAvRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZF MzZGQTI5QUIyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+q/gpxy61yEch9lcV2S6+ZgBw9TvniSSYI DMpy+fStdxNJ+Xjv7L2MY4YD7GHCI+wr/hcQ/GBL71izsV8CE0MGNHHMjafP8noi J/WbreG1qOd5vg0haCCUtZ+mYWYxLWOAejXlned4krKvvJCIYYYnuSN2Mrxq+XaQ i5SxnCDNLRTjZWaii1qh4GXStTcjT4hFtjMhihLwL9lfwpAy08zboIqbd1XpLVzw HH6EmRJMg7OSowW2t5o5gQHpEocAo6+ksTR1g2hYInq4h5LB0LaMhWRNYAkc9m/w TB5+oitYt0C1GZRR90PX0J027HjAgPcZkC56QYjavh5uW2YKHkQ= -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:02 2025 by rpki-client