$ rpki-client -vvf repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft File: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft (raw, json) Hash identifier: 6OTCfdI5ObkXgUbGuCciCVQGz2VCNs98FoPaLN/C54w= Subject key identifier: 08:8B:80:B1:9A:D7:71:CA:94:27:AF:EF:9C:81:F0:5C:60:04:4E:A7 Authority key identifier: E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F Certificate issuer: /CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Certificate serial: 2358B031DDB2F31D9B11ED6E92C1BE646ADB8C0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft Manifest number: FA Signing time: Sat 18 Oct 2025 19:51:53 +0000 Manifest this update: Sat 18 Oct 2025 19:46:53 +0000 Manifest next update: Tue 21 Oct 2025 22:45:53 +0000 Files and hashes: 1: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl (hash: N2CL6wRIYGxr2Djvuds9Va+/JkD1idabgrDMagCmIgc=) 2: 323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa (hash: k742tyOIX18+4IlFbV4FgY2xaEXxztUec+tXVFs15vs=) 3: 3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (hash: 0+ulOJPEXxfRU9rDzPOyAhCIeStaBB8o7bfVtpS93+A=) 4: 3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa (hash: PEcDYL2YEDwvOwIh2isXFSsdo3mWol6RplkSJ7kPOGI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 22:45:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:58:b0:31:dd:b2:f3:1d:9b:11:ed:6e:92:c1:be:64:6a:db:8c:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Validity Not Before: Oct 18 19:46:53 2025 GMT Not After : Oct 21 22:45:53 2025 GMT Subject: CN=088B80B19AD771CA9427AFEF9C81F05C60044EA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:59:75:b6:93:9c:31:57:a0:a1:f6:c4:27:38: d2:c1:a0:a6:1c:7c:f1:d6:38:4b:1f:5c:cf:22:b7: 3f:3e:67:5f:68:97:cd:93:25:6b:94:ed:2c:fc:17: d0:1b:0c:b0:21:28:fe:8c:e3:7b:13:9c:b4:2e:82: df:3b:12:b6:24:be:c3:9e:5b:83:c3:5b:3e:e8:d3: 2e:7f:07:0b:d1:9b:fc:a6:bb:43:19:65:b9:db:55: d1:31:36:b7:ce:ba:20:15:2f:98:47:1a:62:a8:e5: 56:09:87:30:23:aa:23:c5:d0:0b:36:20:b0:52:7e: 63:b2:b8:d6:14:55:75:2e:12:55:99:41:1d:87:8d: cd:f9:d5:63:5d:ad:2e:f6:e7:f0:11:d4:26:e7:f6: fd:3c:31:d1:39:e7:c1:67:ea:09:b8:f3:86:04:8c: c6:48:d7:05:d3:64:68:87:54:4d:16:3b:bd:37:a5: 71:88:e9:9d:19:e7:ec:19:dc:e4:dd:a6:2b:36:08: 92:bc:55:32:d3:f0:d7:ca:77:fd:a0:b6:9a:b8:29: b2:8f:ae:af:4f:75:73:9d:6b:5e:29:08:af:42:c8: f4:5d:3b:58:ee:55:cd:91:23:cd:c1:e4:7f:2f:95: 37:52:e2:ec:4b:31:49:2b:f7:97:96:2a:63:aa:0b: 3b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:8B:80:B1:9A:D7:71:CA:94:27:AF:EF:9C:81:F0:5C:60:04:4E:A7 X509v3 Authority Key Identifier: keyid:E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:5c:0a:87:de:d8:b9:4e:87:3b:45:79:62:73:1b:ba:1d:74: 57:2d:57:b5:8c:75:70:36:6f:56:28:42:eb:4a:cb:50:26:0f: a3:52:8b:bf:18:09:09:74:63:5c:00:7a:49:0b:ed:ec:38:de: ab:93:55:d6:6c:81:2d:64:fb:db:8e:1c:9c:17:4a:e3:63:4d: 0d:14:ca:76:61:09:66:03:66:d4:c4:f7:ee:bb:25:1e:0f:f5: 4c:65:11:ce:70:b9:15:aa:9e:c7:f3:b6:88:31:28:cf:43:b6: dd:c2:52:3f:b3:e2:dd:7c:7a:8c:75:d5:38:e9:06:29:ba:9c: 49:6c:8c:41:80:71:6e:e9:f3:62:b2:0c:69:1d:c9:be:30:f8: d8:80:6c:6b:4f:18:3f:a6:78:4c:f3:41:ab:0f:5f:4d:85:f0: d8:da:7f:a3:bc:4a:1c:9d:65:a1:83:ee:56:89:60:9b:3d:5f: ee:17:cd:3c:5f:0a:37:35:c3:09:12:9b:6d:fc:7d:04:6b:3f: 38:77:9e:6f:d2:ef:c8:4e:45:a7:d2:5d:8d:b2:58:77:78:ce: ee:dd:b3:27:0d:94:78:47:e9:4f:b8:04:bb:63:72:29:15:08: 7b:c2:28:38:0b:ff:6c:ba:fb:5b:bd:b2:4c:06:91:17:53:a6: 9e:ca:4e:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI1iwMd2y8x2bEe1uksG+ZGrbjAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0Iy REJCRUQwRjAeFw0yNTEwMTgxOTQ2NTNaFw0yNTEwMjEyMjQ1NTNaMDMxMTAvBgNV BAMTKDA4OEI4MEIxOUFENzcxQ0E5NDI3QUZFRjlDODFGMDVDNjAwNDRFQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBWXW2k5wxV6Ch9sQnONLBoKYc fPHWOEsfXM8itz8+Z19ol82TJWuU7Sz8F9AbDLAhKP6M43sTnLQugt87ErYkvsOe W4PDWz7o0y5/BwvRm/ymu0MZZbnbVdExNrfOuiAVL5hHGmKo5VYJhzAjqiPF0As2 ILBSfmOyuNYUVXUuElWZQR2Hjc351WNdrS725/AR1Cbn9v08MdE558Fn6gm484YE jMZI1wXTZGiHVE0WO703pXGI6Z0Z5+wZ3OTdpis2CJK8VTLT8NfKd/2gtpq4KbKP rq9PdXOda14pCK9CyPRdO1juVc2RI83B5H8vlTdS4uxLMUkr95eWKmOqCzvTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCIuAsZrXccqUJ6/vnIHwXGAETqcwHwYDVR0j BBgwFoAU5M7BHyRL8Nq+wTb4Of1Tey277Q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmYzZjVkOS1jZmI4LTQxMjMtYTJiMS1iMGI1Mjk5ZjljNmUvMC9FNENFQzExRjI0 NEJGMERBQkVDMTM2RjgzOUZENTM3QjJEQkJFRDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0IyREJC RUQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJmM2Y1ZDktY2ZiOC00MTIzLWEy YjEtYjBiNTI5OWY5YzZlLzAvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUz N0IyREJCRUQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBcCofe2LlOhztFeWJzG7oddFctV7WMdXA2 b1YoQutKy1AmD6NSi78YCQl0Y1wAekkL7ew43quTVdZsgS1k+9uOHJwXSuNjTQ0U ynZhCWYDZtTE9+67JR4P9UxlEc5wuRWqnsfztogxKM9Dtt3CUj+z4t18eox11Tjp Bim6nElsjEGAcW7p82KyDGkdyb4w+NiAbGtPGD+meEzzQasPX02F8Njaf6O8Shyd ZaGD7laJYJs9X+4XzTxfCjc1wwkSm238fQRrPzh3nm/S78hORafSXY2yWHd4zu7d sycNlHhH6U+4BLtjcikVCHvCKDgL/2y6+1u9skwGkRdTpp7KTho= -----END CERTIFICATE-----Generated at Mon Oct 20 06:19:59 2025 by rpki-client