$ rpki-client -vvf repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft File: E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft (raw, json) Hash identifier: 8PpyY+z1zIO7IKxSlrndTrMkraUjAMpZ9+G9raMsDmo= Subject key identifier: 5E:C6:D8:7B:06:1E:EC:D7:CC:07:27:DC:88:F4:E8:4F:69:95:66:A6 Authority key identifier: E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1 Certificate issuer: /CN=E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1 Certificate serial: 35A5D68E11946003269C9100ADE63C57CCF79639 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft Manifest number: 029A Signing time: Sat 18 Oct 2025 00:52:13 +0000 Manifest this update: Sat 18 Oct 2025 00:47:13 +0000 Manifest next update: Tue 21 Oct 2025 11:56:13 +0000 Files and hashes: 1: 3130332e3137382e3137312e302f32342d3234203d3e20313339393532.roa (hash: qWtnu+D2OJjgUIAZhBWqF4N8kzQJfxmKrFVqp2H/d+E=) 2: E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl (hash: uNp6YfmtIo7PIwq4OkaJHD7zVtIT3by1UTRsyOEDZn4=) 3: 3130332e3137382e3137302e302f32342d3234203d3e20313339393532.roa (hash: h1Tx5XQe9PTjaWSuT2kvzlzqF3kndx9Hsu7Upo8uOTc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 11:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:a5:d6:8e:11:94:60:03:26:9c:91:00:ad:e6:3c:57:cc:f7:96:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1 Validity Not Before: Oct 18 00:47:13 2025 GMT Not After : Oct 21 11:56:13 2025 GMT Subject: CN=5EC6D87B061EECD7CC0727DC88F4E84F699566A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fa:06:f9:04:e2:56:7f:4b:48:d6:5c:84:66: db:9e:e3:12:77:9e:c7:f4:16:b6:c2:84:d3:ad:2e: 83:e4:c4:7a:b1:84:7f:41:0c:7b:0d:44:43:df:75: b3:2b:49:68:6e:9d:c0:db:4b:4c:02:78:9a:6c:a2: 6b:71:6d:6b:4d:d5:85:f5:e2:4c:80:70:67:39:44: d1:7e:5c:cc:24:fd:7e:14:ea:9d:78:af:5e:d4:32: a7:19:28:7d:87:cf:71:30:08:d2:4c:ee:46:d6:f1: 66:c5:0c:09:82:ff:a0:6c:49:e0:e0:a1:8f:70:69: 44:0e:96:3a:9a:42:04:dc:0b:97:9c:97:32:29:00: fe:c0:e6:4b:27:d5:64:d2:32:15:38:68:ee:8c:d5: 5f:f2:72:ab:a9:d9:46:39:0e:6e:2f:a3:92:aa:fa: b5:8a:01:a4:fe:20:21:1f:59:bc:55:17:b5:ee:71: b7:15:14:ea:81:56:4e:c7:27:c0:e0:b0:9c:53:51: 29:c3:fd:f9:e2:aa:ea:e1:ed:57:f3:45:23:c3:e7: aa:45:02:62:53:db:6e:8f:72:bd:e0:c4:e0:e6:bb: cf:48:e4:13:0a:42:82:f7:3b:c9:fa:83:30:12:d0: 01:a4:1f:be:4e:e6:a4:88:30:99:71:0e:41:b0:25: 87:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C6:D8:7B:06:1E:EC:D7:CC:07:27:DC:88:F4:E8:4F:69:95:66:A6 X509v3 Authority Key Identifier: keyid:E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:e3:c1:0b:5b:41:af:ca:d8:7f:08:30:0d:0b:21:97:00:91: 3e:37:f8:59:45:b0:0f:e0:5b:35:0d:b2:57:82:bf:ac:dd:8e: 71:76:52:5f:e9:00:93:af:d1:5e:56:e2:58:f4:af:e2:e8:41: 78:0e:1e:97:eb:ff:d4:b5:2f:48:26:26:f6:7f:ba:46:c6:a1: ec:0a:a1:bb:ec:f1:24:52:8b:e5:7b:86:37:03:ab:75:3f:4e: 7f:93:3b:83:4a:f7:e0:33:94:c4:c9:be:97:ba:30:3b:50:35: 7c:a4:fd:c6:8c:36:3c:74:df:68:c6:d7:92:f1:c0:3d:90:0d: 72:f6:fc:c0:b4:d3:d6:7a:16:d2:d1:bd:88:f6:ca:cb:be:fd: b2:c6:a8:e1:d0:f5:a8:ab:99:5f:ac:b9:95:3c:0c:1d:6d:fd: de:7b:09:c4:b2:5f:e2:c9:29:7c:9c:6d:c7:41:c6:0b:2f:7d: 4d:04:25:1f:bc:0a:98:35:5f:de:54:0b:e3:6f:c0:0b:fa:40: cc:b2:d8:7f:37:f7:58:a4:48:f5:13:b6:95:60:e6:f6:ce:f7: a8:57:09:bc:4c:04:d1:29:81:7e:f5:9d:54:ce:62:c1:aa:41: c2:fe:8a:49:1d:8f:06:3e:1c:0d:53:5c:65:c5:cb:ee:d1:8b: 2a:38:ac:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNaXWjhGUYAMmnJEAreY8V8z3ljkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA5RDBFMUQyNjNEQkQ5MTREMEM0RTBDQUE3RTVFNTBE MDIyNDZGMTAeFw0yNTEwMTgwMDQ3MTNaFw0yNTEwMjExMTU2MTNaMDMxMTAvBgNV BAMTKDVFQzZEODdCMDYxRUVDRDdDQzA3MjdEQzg4RjRFODRGNjk5NTY2QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa+gb5BOJWf0tI1lyEZtue4xJ3 nsf0FrbChNOtLoPkxHqxhH9BDHsNREPfdbMrSWhuncDbS0wCeJpsomtxbWtN1YX1 4kyAcGc5RNF+XMwk/X4U6p14r17UMqcZKH2Hz3EwCNJM7kbW8WbFDAmC/6BsSeDg oY9waUQOljqaQgTcC5eclzIpAP7A5ksn1WTSMhU4aO6M1V/ycqup2UY5Dm4vo5Kq +rWKAaT+ICEfWbxVF7XucbcVFOqBVk7HJ8DgsJxTUSnD/fniqurh7VfzRSPD56pF AmJT226Pcr3gxODmu89I5BMKQoL3O8n6gzAS0AGkH75O5qSIMJlxDkGwJYfnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXsbYewYe7NfMByfciPToT2mVZqYwHwYDVR0j BBgwFoAU4J0OHSY9vZFNDE4Mqn5eUNAiRvEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzAxZmQ0NC04Y2Q2LTRkOWYtOWJkMS04MzY3YWQ5Y2Q5ZWEvMC9FMDlEMEUxRDI2 M0RCRDkxNEQwQzRFMENBQTdFNUU1MEQwMjI0NkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA5RDBFMUQyNjNEQkQ5MTREMEM0RTBDQUE3RTVFNTBEMDIy NDZGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMwMWZkNDQtOGNkNi00ZDlmLTli ZDEtODM2N2FkOWNkOWVhLzAvRTA5RDBFMUQyNjNEQkQ5MTREMEM0RTBDQUE3RTVF NTBEMDIyNDZGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHjwQtbQa/K2H8IMA0LIZcAkT43+FlFsA/g WzUNsleCv6zdjnF2Ul/pAJOv0V5W4lj0r+LoQXgOHpfr/9S1L0gmJvZ/ukbGoewK obvs8SRSi+V7hjcDq3U/Tn+TO4NK9+AzlMTJvpe6MDtQNXyk/caMNjx032jG15Lx wD2QDXL2/MC009Z6FtLRvYj2ysu+/bLGqOHQ9airmV+suZU8DB1t/d57CcSyX+LJ KXycbcdBxgsvfU0EJR+8Cpg1X95UC+NvwAv6QMyy2H8391ikSPUTtpVg5vbO96hX CbxMBNEpgX71nVTOYsGqQcL+ikkdjwY+HA1TXGXFy+7Riyo4rL8= -----END CERTIFICATE-----Generated at Mon Oct 20 09:19:49 2025 by rpki-client