$ rpki-client -vvf repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft File: EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft (raw, json) Hash identifier: 99LAYi0zeAu6/VxfNLnsfjaOXM6hnJEvtd6rSJb8pvI= Subject key identifier: 55:79:34:A6:C5:70:8B:12:A2:03:72:D5:1D:DA:FD:F3:3F:E5:46:98 Authority key identifier: ED:BD:84:5A:95:97:FE:C4:AD:90:03:0F:90:18:E4:B8:B6:3F:CC:77 Certificate issuer: /CN=EDBD845A9597FEC4AD90030F9018E4B8B63FCC77 Certificate serial: 600AFA679D258D216A6B1C5376C5EE196AAB8EE1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft Manifest number: 051D Signing time: Sun 19 Oct 2025 00:41:54 +0000 Manifest this update: Sun 19 Oct 2025 00:36:54 +0000 Manifest next update: Wed 22 Oct 2025 04:36:54 +0000 Files and hashes: 1: EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl (hash: JihRbt6j5nkOFcurar+H+RVylclribDm8K3Jvygll2Q=) 2: 3130332e3133372e33372e302f32342d3234203d3e20313335343731.roa (hash: mC7pHV7NYsbpeeW0ZP+ibU3Ewbq2p4OfCkZ3LiVxhX4=) 3: 323030313a6466343a6530303a3a2f34382d3438203d3e20313335343731.roa (hash: PpwdW1Sh67VcI29Rs6SsVeiTKG/TdkizTmZ0n4tpRMU=) 4: 3130332e37312e3235352e302f32342d3234203d3e20313335343731.roa (hash: gIKkIGkZm7OxQ7k8KYXU1OguRf76El1DoB7NPk29hSo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 04:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:0a:fa:67:9d:25:8d:21:6a:6b:1c:53:76:c5:ee:19:6a:ab:8e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDBD845A9597FEC4AD90030F9018E4B8B63FCC77 Validity Not Before: Oct 19 00:36:54 2025 GMT Not After : Oct 22 04:36:54 2025 GMT Subject: CN=557934A6C5708B12A20372D51DDAFDF33FE54698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8c:b2:88:98:0d:9d:df:09:36:e3:c7:0d:30: 72:18:ef:5a:25:65:80:d5:a5:1a:d6:b5:a1:0a:f6: 21:c8:e4:de:be:92:7c:a6:79:09:c7:04:20:0b:cc: 83:55:81:1b:30:04:44:59:bd:d6:1b:b3:ca:60:02: be:23:52:93:f5:da:93:01:10:7d:ad:f2:41:b4:4c: a9:2f:08:69:e3:e5:8c:b5:4a:0f:c0:0b:01:59:a5: a8:31:b1:3f:c2:bb:e1:2c:54:3d:8e:af:20:4e:0e: df:bc:44:d4:94:69:6b:8b:05:1c:61:7a:14:b0:dd: aa:79:e6:4a:d9:ec:b1:f4:ed:37:36:23:c0:bf:7f: e6:18:3f:12:ff:5b:0d:f5:02:6f:64:d6:1d:d4:04: 5b:6b:ca:36:c5:8c:c5:3f:18:74:95:f2:7f:0c:14: de:88:04:98:48:20:ac:9b:fb:a2:c3:df:78:fb:95: 26:30:9c:0f:bc:17:5a:c2:f6:f9:2c:a5:34:a4:6a: 2a:0d:f2:ab:28:bd:9b:cf:b9:00:28:1f:02:26:c0: fa:19:de:0c:6c:c1:e9:29:6b:f6:8d:b1:fc:4e:8b: 60:69:6c:ee:86:08:00:15:38:4b:58:1b:59:3c:22: 89:6d:2d:35:20:fa:f2:c0:47:26:d3:b6:cd:f8:1c: 26:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:79:34:A6:C5:70:8B:12:A2:03:72:D5:1D:DA:FD:F3:3F:E5:46:98 X509v3 Authority Key Identifier: keyid:ED:BD:84:5A:95:97:FE:C4:AD:90:03:0F:90:18:E4:B8:B6:3F:CC:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d9:4f:aa:fa:f3:37:07:76:70:b5:b9:b7:dd:d4:7e:85:ac: cf:cd:51:da:b9:6f:28:69:31:fd:8c:2f:25:3c:f3:70:07:14: fa:2a:b8:85:a3:0e:37:9a:98:00:f9:18:bc:00:18:d7:62:1b: 34:0b:59:6a:5d:64:32:b0:6c:53:cf:aa:5e:b0:91:f7:0f:8f: 7b:df:7b:fb:48:39:c1:2c:f8:6c:75:96:14:f1:64:43:b5:e9: 7a:5c:36:0b:01:d5:56:97:6c:3f:f1:69:73:20:49:17:50:e0: de:8f:81:6a:ae:68:33:dc:73:3d:8d:3f:f0:dd:66:8d:55:a9: c1:6d:51:be:eb:b8:1d:cb:3f:a7:b2:fc:b7:e8:eb:13:06:da: bf:d4:d2:ad:62:ff:2c:ce:a8:43:69:ba:18:f5:58:ff:e9:93: 25:b6:ca:eb:6c:e3:47:6d:97:5a:21:9e:a7:11:4d:7c:ba:d6: 28:e0:00:2a:b0:68:0b:1a:f7:a7:b8:2b:69:0f:6b:a2:b3:dc: 70:32:7c:2d:95:da:9b:04:c9:2b:ea:aa:65:00:be:96:b0:92: c9:48:5e:8b:26:a6:ea:71:8e:05:d7:30:37:01:c6:79:39:0a: 97:78:53:59:fb:b9:10:22:ab:fd:39:c1:0d:fb:5b:cd:93:14: 73:c8:ea:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYAr6Z50ljSFqaxxTdsXuGWqrjuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURCRDg0NUE5NTk3RkVDNEFEOTAwMzBGOTAxOEU0QjhC NjNGQ0M3NzAeFw0yNTEwMTkwMDM2NTRaFw0yNTEwMjIwNDM2NTRaMDMxMTAvBgNV BAMTKDU1NzkzNEE2QzU3MDhCMTJBMjAzNzJENTFEREFGREYzM0ZFNTQ2OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhjLKImA2d3wk248cNMHIY71ol ZYDVpRrWtaEK9iHI5N6+knymeQnHBCALzINVgRswBERZvdYbs8pgAr4jUpP12pMB EH2t8kG0TKkvCGnj5Yy1Sg/ACwFZpagxsT/Cu+EsVD2OryBODt+8RNSUaWuLBRxh ehSw3ap55krZ7LH07Tc2I8C/f+YYPxL/Ww31Am9k1h3UBFtryjbFjMU/GHSV8n8M FN6IBJhIIKyb+6LD33j7lSYwnA+8F1rC9vkspTSkaioN8qsovZvPuQAoHwImwPoZ 3gxswekpa/aNsfxOi2BpbO6GCAAVOEtYG1k8IoltLTUg+vLARybTts34HCZVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVXk0psVwixKiA3LVHdr98z/lRpgwHwYDVR0j BBgwFoAU7b2EWpWX/sStkAMPkBjkuLY/zHcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjMwMjgxMC01NjRjLTQ1YjctOGE3Mi1lZjZiOGY2MzA5YzAvMC9FREJEODQ1QTk1 OTdGRUM0QUQ5MDAzMEY5MDE4RTRCOEI2M0ZDQzc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRURCRDg0NUE5NTk3RkVDNEFEOTAwMzBGOTAxOEU0QjhCNjNG Q0M3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDYzMDI4MTAtNTY0Yy00NWI3LThh NzItZWY2YjhmNjMwOWMwLzAvRURCRDg0NUE5NTk3RkVDNEFEOTAwMzBGOTAxOEU0 QjhCNjNGQ0M3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvZT6r68zcHdnC1ubfd1H6FrM/NUdq5byhp Mf2MLyU883AHFPoquIWjDjeamAD5GLwAGNdiGzQLWWpdZDKwbFPPql6wkfcPj3vf e/tIOcEs+Gx1lhTxZEO16XpcNgsB1VaXbD/xaXMgSRdQ4N6PgWquaDPccz2NP/Dd Zo1VqcFtUb7ruB3LP6ey/Lfo6xMG2r/U0q1i/yzOqENpuhj1WP/pkyW2yuts40dt l1ohnqcRTXy61ijgACqwaAsa96e4K2kPa6Kz3HAyfC2V2psEySvqqmUAvpawkslI XosmpupxjgXXMDcBxnk5Cpd4U1n7uRAiq/05wQ37W82TFHPI6uU= -----END CERTIFICATE-----Generated at Mon Oct 20 12:13:29 2025 by rpki-client