$ rpki-client -vvf repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft File: EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft (raw, json) Hash identifier: 6njnzAV6qUp8iDaWzMsa2a5IalY/G9fpBcpI1brtVLU= Subject key identifier: 0A:47:C9:E5:97:1E:45:A8:21:B9:83:3A:CA:62:EB:BA:1B:1A:EB:97 Authority key identifier: EE:CC:4A:44:F0:95:94:EB:71:1E:A1:F6:F3:4B:95:8D:19:A3:B4:FD Certificate issuer: /CN=EECC4A44F09594EB711EA1F6F34B958D19A3B4FD Certificate serial: 75830A49339C11FAB9F900DAA93E1CADF3044EE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft Manifest number: 01AD Signing time: Mon 20 Oct 2025 02:01:22 +0000 Manifest this update: Mon 20 Oct 2025 01:56:22 +0000 Manifest next update: Thu 23 Oct 2025 09:15:22 +0000 Files and hashes: 1: 3130332e3230342e31352e302f32342d3234203d3e20313530393230.roa (hash: 84mIKFs557T9blcI7/exXdbBapxr7Cu4g0VLqBjO/cg=) 2: EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.crl (hash: +RY27gwG7snoRwchclNPOD98wFA2rlCB1w2eaWOofic=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.crl rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 09:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:83:0a:49:33:9c:11:fa:b9:f9:00:da:a9:3e:1c:ad:f3:04:4e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EECC4A44F09594EB711EA1F6F34B958D19A3B4FD Validity Not Before: Oct 20 01:56:22 2025 GMT Not After : Oct 23 09:15:22 2025 GMT Subject: CN=0A47C9E5971E45A821B9833ACA62EBBA1B1AEB97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:52:07:0a:9c:27:6d:85:ee:6a:40:0a:95:0f: b8:49:5a:0d:07:01:16:40:e4:c2:60:c1:22:96:b1: 4c:78:cd:a1:c4:15:c0:05:5f:40:1f:ba:41:ad:1a: d0:76:7d:67:11:2a:c6:47:6c:2b:02:f0:65:d4:11: 1c:cb:a1:f8:f1:86:0c:61:76:b5:f2:cd:51:a9:62: 61:0e:b4:a5:0c:0f:f5:5b:c0:a2:1f:80:5e:28:77: 26:3a:99:c3:07:16:10:94:48:66:11:98:41:1f:e6: ea:39:a9:20:a8:d4:8c:1c:f3:f7:24:7c:a8:af:4d: 8f:d7:a5:65:77:a9:08:2b:b7:0f:16:da:4a:30:0f: 70:35:67:f2:c7:05:cd:fe:d7:4f:7c:ad:53:85:50: b1:b0:35:63:8f:ff:c0:d0:e5:a2:25:5e:58:26:55: d3:eb:1c:4c:94:32:f3:6e:4c:50:8c:31:7b:30:98: cd:28:af:b4:f4:fc:57:40:49:1d:dc:7f:01:95:b8: 59:34:e1:c0:84:f7:42:89:6b:a7:c4:29:6f:b1:96: 62:09:56:08:11:c2:f9:a9:1c:ff:4b:f0:d4:4c:0b: e7:fd:59:6f:2c:27:89:41:3c:3d:4d:36:70:80:4b: 69:2c:8f:25:20:cf:11:38:bc:82:5b:65:00:da:8f: 90:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:47:C9:E5:97:1E:45:A8:21:B9:83:3A:CA:62:EB:BA:1B:1A:EB:97 X509v3 Authority Key Identifier: keyid:EE:CC:4A:44:F0:95:94:EB:71:1E:A1:F6:F3:4B:95:8D:19:A3:B4:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29fc996f-72ca-4d6b-a0e7-ff5bc42b0589/0/EECC4A44F09594EB711EA1F6F34B958D19A3B4FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:46:79:2e:63:8c:c4:04:5a:7b:12:d7:84:cd:c1:40:e0:8e: dd:71:10:65:d3:d1:31:ba:d0:09:8e:56:14:2c:bd:ec:dc:78: bf:17:f1:28:7a:41:bc:fc:9e:0f:72:48:ac:a5:a5:01:87:82: aa:33:eb:0a:97:ff:23:d5:1e:6d:c3:87:39:52:c9:12:75:00: b0:e6:1f:16:d4:e9:2e:d4:21:b0:fd:26:40:f6:cc:0c:2f:6d: c3:16:19:4e:45:23:14:9b:98:15:ac:9d:f4:53:98:73:40:bb: a2:a1:29:5b:80:1a:31:2e:57:a5:b3:f0:83:5a:eb:e0:79:8f: fd:8b:6e:ed:36:db:6c:91:04:9b:4c:6f:0e:26:2c:2b:e8:fb: 82:67:1a:a1:54:60:9a:09:d6:95:ea:c9:56:b1:d2:78:23:64: 1b:1f:c2:27:86:51:9c:08:40:0f:a9:82:6b:2e:9d:f4:35:b2: 4c:ff:cf:82:5f:d5:0f:50:74:19:f3:e1:bb:b8:8d:85:97:72: cc:11:e5:a9:15:91:33:29:dc:a4:a5:82:cb:b8:fa:51:fe:01: 53:aa:7d:86:ca:3e:d0:78:ff:e2:77:ed:91:20:fd:90:f0:95: 34:d4:fa:d4:99:ba:45:54:ca:7a:7f:94:91:7b:81:71:8c:6b: 89:d1:57:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdYMKSTOcEfq5+QDaqT4crfMETugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVDQzRBNDRGMDk1OTRFQjcxMUVBMUY2RjM0Qjk1OEQx OUEzQjRGRDAeFw0yNTEwMjAwMTU2MjJaFw0yNTEwMjMwOTE1MjJaMDMxMTAvBgNV BAMTKDBBNDdDOUU1OTcxRTQ1QTgyMUI5ODMzQUNBNjJFQkJBMUIxQUVCOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgUgcKnCdthe5qQAqVD7hJWg0H ARZA5MJgwSKWsUx4zaHEFcAFX0AfukGtGtB2fWcRKsZHbCsC8GXUERzLofjxhgxh drXyzVGpYmEOtKUMD/VbwKIfgF4odyY6mcMHFhCUSGYRmEEf5uo5qSCo1Iwc8/ck fKivTY/XpWV3qQgrtw8W2kowD3A1Z/LHBc3+1098rVOFULGwNWOP/8DQ5aIlXlgm VdPrHEyUMvNuTFCMMXswmM0or7T0/FdASR3cfwGVuFk04cCE90KJa6fEKW+xlmIJ VggRwvmpHP9L8NRMC+f9WW8sJ4lBPD1NNnCAS2ksjyUgzxE4vIJbZQDaj5DzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCkfJ5ZceRaghuYM6ymLruhsa65cwHwYDVR0j BBgwFoAU7sxKRPCVlOtxHqH280uVjRmjtP0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWZjOTk2Zi03MmNhLTRkNmItYTBlNy1mZjViYzQyYjA1ODkvMC9FRUNDNEE0NEYw OTU5NEVCNzExRUExRjZGMzRCOTU4RDE5QTNCNEZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUVDQzRBNDRGMDk1OTRFQjcxMUVBMUY2RjM0Qjk1OEQxOUEz QjRGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjlmYzk5NmYtNzJjYS00ZDZiLWEw ZTctZmY1YmM0MmIwNTg5LzAvRUVDQzRBNDRGMDk1OTRFQjcxMUVBMUY2RjM0Qjk1 OEQxOUEzQjRGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxGeS5jjMQEWnsS14TNwUDgjt1xEGXT0TG6 0AmOVhQsvezceL8X8Sh6Qbz8ng9ySKylpQGHgqoz6wqX/yPVHm3DhzlSyRJ1ALDm HxbU6S7UIbD9JkD2zAwvbcMWGU5FIxSbmBWsnfRTmHNAu6KhKVuAGjEuV6Wz8INa 6+B5j/2Lbu0222yRBJtMbw4mLCvo+4JnGqFUYJoJ1pXqyVax0ngjZBsfwieGUZwI QA+pgmsunfQ1skz/z4Jf1Q9QdBnz4bu4jYWXcswR5akVkTMp3KSlgsu4+lH+AVOq fYbKPtB4/+J37ZEg/ZDwlTTU+tSZukVUynp/lJF7gXGMa4nRV6k= -----END CERTIFICATE-----Generated at Mon Oct 20 12:01:58 2025 by rpki-client