$ rpki-client -vvf repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft File: E420F134FA1A6BA70588424BD4E862EE6C50C188.mft (raw, json) Hash identifier: xgW0rUMaVUV6vY2M9EgO080C6L6i9RDVrb9+oGXwTDI= Subject key identifier: A8:05:5D:D1:9B:B8:8D:A5:9D:F1:11:5C:8B:34:09:A0:FE:FA:B4:87 Authority key identifier: E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88 Certificate issuer: /CN=E420F134FA1A6BA70588424BD4E862EE6C50C188 Certificate serial: 70407BEE67AE3CBCD408C5A360E26A25C9F19448 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft Manifest number: 0516 Signing time: Sun 19 Oct 2025 12:51:18 +0000 Manifest this update: Sun 19 Oct 2025 12:46:18 +0000 Manifest next update: Wed 22 Oct 2025 14:09:18 +0000 Files and hashes: 1: E420F134FA1A6BA70588424BD4E862EE6C50C188.crl (hash: 9g7oHwetsgXHpzlg5v+H3SZdOc9mPxR8Onqcw7xkoPc=) 2: 323430323a636438303a3a2f33322d3438203d3e203633383835.roa (hash: MDl2DN2os7/fU39oaMG8yA+MKomCGHMu/9vzlZ9xU2U=) 3: 3130332e3139342e3137322e302f32322d3234203d3e203633383835.roa (hash: nIcaXDvKx2+XVxNFuL8CckiCEV48hFgqOSdn9qzzkF4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 14:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:40:7b:ee:67:ae:3c:bc:d4:08:c5:a3:60:e2:6a:25:c9:f1:94:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E420F134FA1A6BA70588424BD4E862EE6C50C188 Validity Not Before: Oct 19 12:46:18 2025 GMT Not After : Oct 22 14:09:18 2025 GMT Subject: CN=A8055DD19BB88DA59DF1115C8B3409A0FEFAB487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e8:71:6b:55:a7:47:30:cb:81:c7:3d:78:f2: 89:a6:1e:7e:13:27:35:c2:e6:e3:24:f4:f8:81:02: 45:41:2b:57:53:76:23:0b:88:3c:dc:9a:3a:7a:95: b3:5d:58:9a:68:01:3f:1b:56:2f:c0:41:6d:83:99: 55:bb:9e:73:93:e8:5d:03:a7:65:ac:30:46:ae:1a: 69:1e:9d:b4:d2:4f:56:00:a6:40:65:3b:e6:5d:82: 79:3a:4c:b9:b2:07:7a:c4:b0:73:4c:5b:4e:66:bb: 62:c2:c6:71:97:9b:19:b8:fb:a9:73:3a:2a:d2:e7: da:a4:fd:fb:2f:b8:ac:e4:64:7f:b7:f8:17:d3:e0: 96:a5:b9:88:a3:c3:72:e5:53:49:a1:2d:3e:b3:ff: d5:8f:76:47:fc:91:97:f7:e2:e0:2c:9b:78:9e:ce: 3c:24:33:02:78:b2:4f:dc:a1:b5:d4:d5:75:cc:30: ad:2b:10:e0:b9:94:1f:7b:4a:48:ab:e8:65:8f:75: 02:79:96:9e:a3:fe:0c:e9:29:ec:5a:90:71:88:29: 3a:de:d9:9a:c6:59:45:c9:ef:df:f3:99:77:c9:e7: 18:7d:99:15:34:76:93:a0:73:94:da:2e:c4:97:ed: f3:79:c7:9c:e6:0f:98:be:01:fa:52:0e:02:27:02: 7e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:05:5D:D1:9B:B8:8D:A5:9D:F1:11:5C:8B:34:09:A0:FE:FA:B4:87 X509v3 Authority Key Identifier: keyid:E4:20:F1:34:FA:1A:6B:A7:05:88:42:4B:D4:E8:62:EE:6C:50:C1:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E420F134FA1A6BA70588424BD4E862EE6C50C188.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fe35faa-ed2b-4271-b48c-4ea21c309352/0/E420F134FA1A6BA70588424BD4E862EE6C50C188.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:01:97:d3:5f:c4:89:bb:2d:b7:8f:91:36:b9:31:ae:88:ec: 1d:8f:85:ce:cf:17:6b:9b:ed:72:a7:f9:17:d4:b8:57:91:c5: 3f:a6:e5:e5:5d:3d:57:b2:8c:97:12:f3:2a:54:f0:04:7b:cc: ad:0e:3b:f3:dc:3f:cd:e2:76:23:91:b7:44:32:b9:1c:d9:da: 59:99:69:3a:54:16:9d:f8:97:80:eb:c1:d4:bb:a4:4c:8a:e0: 6a:fd:49:5e:5c:11:30:bb:c4:cc:1d:1c:cf:e6:54:71:d2:f2: a5:42:87:e7:5c:5d:10:3a:a9:3e:09:1f:42:55:cb:7d:59:e1: 2a:98:8d:3e:89:a1:e1:1e:cd:3c:44:4b:57:b8:11:76:89:85: 1f:0d:8a:4a:98:2d:eb:94:73:4f:dd:1c:af:24:ae:34:ac:82: a1:ba:c9:52:19:2f:28:c6:fc:9c:88:60:ce:80:5e:02:98:80: 71:65:4a:a4:bc:66:eb:21:60:8e:ee:a5:6d:20:fe:e4:4f:f7: 0c:99:36:b9:ca:51:09:4f:34:95:0d:06:61:cd:5e:82:b4:da: 81:13:e3:a2:58:a1:18:1d:da:6a:e7:f7:e4:b1:1e:18:49:28: 24:73:4d:67:cb:be:8d:fb:27:b0:2c:2f:01:a5:35:dd:dd:83: dc:5c:92:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcEB77meuPLzUCMWjYOJqJcnxlEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYyRUU2 QzUwQzE4ODAeFw0yNTEwMTkxMjQ2MThaFw0yNTEwMjIxNDA5MThaMDMxMTAvBgNV BAMTKEE4MDU1REQxOUJCODhEQTU5REYxMTE1QzhCMzQwOUEwRkVGQUI0ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu6HFrVadHMMuBxz148ommHn4T JzXC5uMk9PiBAkVBK1dTdiMLiDzcmjp6lbNdWJpoAT8bVi/AQW2DmVW7nnOT6F0D p2WsMEauGmkenbTST1YApkBlO+Zdgnk6TLmyB3rEsHNMW05mu2LCxnGXmxm4+6lz OirS59qk/fsvuKzkZH+3+BfT4JaluYijw3LlU0mhLT6z/9WPdkf8kZf34uAsm3ie zjwkMwJ4sk/cobXU1XXMMK0rEOC5lB97Skir6GWPdQJ5lp6j/gzpKexakHGIKTre 2ZrGWUXJ79/zmXfJ5xh9mRU0dpOgc5TaLsSX7fN5x5zmD5i+AfpSDgInAn4jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqAVd0Zu4jaWd8RFcizQJoP76tIcwHwYDVR0j BBgwFoAU5CDxNPoaa6cFiEJL1Ohi7mxQwYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZmUzNWZhYS1lZDJiLTQyNzEtYjQ4Yy00ZWEyMWMzMDkzNTIvMC9FNDIwRjEzNEZB MUE2QkE3MDU4ODQyNEJENEU4NjJFRTZDNTBDMTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYyRUU2QzUw QzE4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZlMzVmYWEtZWQyYi00MjcxLWI0 OGMtNGVhMjFjMzA5MzUyLzAvRTQyMEYxMzRGQTFBNkJBNzA1ODg0MjRCRDRFODYy RUU2QzUwQzE4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsBl9NfxIm7LbePkTa5Ma6I7B2Phc7PF2ub 7XKn+RfUuFeRxT+m5eVdPVeyjJcS8ypU8AR7zK0OO/PcP83idiORt0QyuRzZ2lmZ aTpUFp34l4DrwdS7pEyK4Gr9SV5cETC7xMwdHM/mVHHS8qVCh+dcXRA6qT4JH0JV y31Z4SqYjT6JoeEezTxES1e4EXaJhR8NikqYLeuUc0/dHK8krjSsgqG6yVIZLyjG /JyIYM6AXgKYgHFlSqS8ZushYI7upW0g/uRP9wyZNrnKUQlPNJUNBmHNXoK02oET 46JYoRgd2mrn9+SxHhhJKCRzTWfLvo37J7AsLwGlNd3dg9xckgk= -----END CERTIFICATE-----Generated at Mon Oct 20 18:04:11 2025 by rpki-client