$ rpki-client -vvf repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft File: EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft (raw, json) Hash identifier: cv8xJa+RHJXNK/N6ULy71rkYm3mLVW4ypl/V00Kkv40= Subject key identifier: 4E:14:50:84:88:6B:97:F0:62:A7:F5:13:4E:3F:0A:2F:F7:A9:D1:BE Authority key identifier: EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5 Certificate issuer: /CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5 Certificate serial: 5DCE115B064A289461E924A40F6E3451FEF1E211 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft Manifest number: 051A Signing time: Mon 20 Oct 2025 00:31:36 +0000 Manifest this update: Mon 20 Oct 2025 00:26:36 +0000 Manifest next update: Thu 23 Oct 2025 09:10:36 +0000 Files and hashes: 1: 3130332e362e3231342e302f32342d3234203d3e20313331313132.roa (hash: F0a3JFzr6TEGFg4XROWEIEBL9cNyd2bfiVU6lzFtCLY=) 2: EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl (hash: WXHK1l9Rcg3Wa/l19ZGDdGTYObXp5slHzUnS1hMF94A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 09:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ce:11:5b:06:4a:28:94:61:e9:24:a4:0f:6e:34:51:fe:f1:e2:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5 Validity Not Before: Oct 20 00:26:36 2025 GMT Not After : Oct 23 09:10:36 2025 GMT Subject: CN=4E145084886B97F062A7F5134E3F0A2FF7A9D1BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fc:1b:5f:e1:9c:81:3a:53:1c:f6:52:cb:74: ba:42:7e:f1:4d:13:2c:d6:2a:77:ce:5b:2a:58:b5: 1f:56:12:a6:51:08:c0:80:f2:57:03:9a:16:1f:f6: a9:61:98:5b:6d:e7:66:3e:fd:44:96:fa:ba:a1:69: 1e:f6:6f:3f:8e:33:cc:a1:77:63:0f:ff:85:ac:5b: 85:be:e3:88:7c:fc:5c:5d:99:3a:e2:10:f5:0e:f7: a5:21:32:46:6c:e7:95:5c:96:21:e7:d4:42:82:e4: b2:18:d0:a2:d0:32:a5:cd:39:46:c8:95:e4:15:a9: 24:42:b4:12:d8:ac:17:cb:c8:71:15:21:64:a9:2a: da:8e:86:e1:5e:e9:2e:57:ef:e5:cc:f2:0d:99:6c: be:a3:5b:e2:f8:af:a2:d9:6d:e5:c0:35:37:5b:f9: 24:29:b1:cb:d1:c0:2b:08:e8:29:01:14:67:4c:e4: 3c:d1:2b:4d:5d:b3:4b:ff:ce:59:f1:0f:a9:c2:b9: d2:d7:67:c8:0b:7c:22:02:99:6b:05:19:1e:dd:96: b4:46:63:4e:de:2b:37:89:06:8b:0d:d9:70:8c:33: 9a:cc:7e:d8:fc:4a:67:74:b6:b5:f7:79:4d:6a:7a: 70:ce:eb:da:eb:c0:36:f9:20:4b:4e:9c:49:46:59: 35:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:14:50:84:88:6B:97:F0:62:A7:F5:13:4E:3F:0A:2F:F7:A9:D1:BE X509v3 Authority Key Identifier: keyid:EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:a7:e2:d8:9f:07:4d:71:3a:44:7a:25:35:c8:e3:01:a1:4a: f6:1e:53:29:9f:86:6f:af:16:8e:7e:8a:93:f4:9f:b7:d0:ed: 86:ac:db:19:7e:31:af:3a:d0:35:cf:a3:23:bf:15:80:e9:51: 42:0a:fb:cc:00:d8:39:a5:f1:bd:ef:63:ae:3f:c1:c7:07:81: 34:36:3b:7f:01:ce:97:7b:d6:c6:bf:e6:7f:ab:67:6c:62:56: 0e:6e:22:3c:94:0d:93:bc:fa:87:a3:8d:9c:1b:c3:88:77:fb: 32:80:2b:19:a7:91:bf:de:4f:34:75:7e:05:3e:60:25:94:3b: 48:4b:b3:27:29:a0:b6:74:04:1c:bd:2c:e4:34:7d:5d:da:a2: 77:a4:e5:5c:d2:1f:08:62:e8:5c:a2:bb:92:88:a5:35:c2:a7: 6e:5d:f3:9e:d8:13:e5:65:fc:99:01:39:dd:c9:20:71:88:e7: 56:f6:2d:3e:ff:91:c9:62:1e:98:23:65:59:db:31:cc:d1:5e: e3:ed:f6:4a:6d:d0:dc:2f:55:44:ca:50:c8:78:9f:43:46:bf: 13:ff:f0:76:d2:08:f3:98:cf:3b:1d:a9:2b:47:c5:ad:2a:de: 87:f0:1d:de:b8:16:03:52:dd:b5:5c:32:64:87:71:ca:2f:6a: 7c:e2:48:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXc4RWwZKKJRh6SSkD240Uf7x4hEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdFREJB M0QxMTZENTAeFw0yNTEwMjAwMDI2MzZaFw0yNTEwMjMwOTEwMzZaMDMxMTAvBgNV BAMTKDRFMTQ1MDg0ODg2Qjk3RjA2MkE3RjUxMzRFM0YwQTJGRjdBOUQxQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6/Btf4ZyBOlMc9lLLdLpCfvFN EyzWKnfOWypYtR9WEqZRCMCA8lcDmhYf9qlhmFtt52Y+/USW+rqhaR72bz+OM8yh d2MP/4WsW4W+44h8/FxdmTriEPUO96UhMkZs55VcliHn1EKC5LIY0KLQMqXNOUbI leQVqSRCtBLYrBfLyHEVIWSpKtqOhuFe6S5X7+XM8g2ZbL6jW+L4r6LZbeXANTdb +SQpscvRwCsI6CkBFGdM5DzRK01ds0v/zlnxD6nCudLXZ8gLfCICmWsFGR7dlrRG Y07eKzeJBosN2XCMM5rMftj8Smd0trX3eU1qenDO69rrwDb5IEtOnElGWTUVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUThRQhIhrl/Bip/UTTj8KL/ep0b4wHwYDVR0j BBgwFoAU7GKpSXDlasn+i4KKVCt+26PRFtUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODdmOGY4Mi0zN2JiLTQ5ODMtOTNjYS01ZTA2NzBhYjAyZTMvMC9FQzYyQTk0OTcw RTU2QUM5RkU4QjgyOEE1NDJCN0VEQkEzRDExNkQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdFREJBM0Qx MTZENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg3ZjhmODItMzdiYi00OTgzLTkz Y2EtNWUwNjcwYWIwMmUzLzAvRUM2MkE5NDk3MEU1NkFDOUZFOEI4MjhBNTQyQjdF REJBM0QxMTZENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWn4tifB01xOkR6JTXI4wGhSvYeUymfhm+v Fo5+ipP0n7fQ7Yas2xl+Ma860DXPoyO/FYDpUUIK+8wA2Dml8b3vY64/wccHgTQ2 O38Bzpd71sa/5n+rZ2xiVg5uIjyUDZO8+oejjZwbw4h3+zKAKxmnkb/eTzR1fgU+ YCWUO0hLsycpoLZ0BBy9LOQ0fV3aonek5VzSHwhi6Fyiu5KIpTXCp25d857YE+Vl /JkBOd3JIHGI51b2LT7/kcliHpgjZVnbMczRXuPt9kpt0NwvVUTKUMh4n0NGvxP/ 8HbSCPOYzzsdqStHxa0q3ofwHd64FgNS3bVcMmSHccovanziSAg= -----END CERTIFICATE-----Generated at Mon Oct 20 15:26:18 2025 by rpki-client