$ rpki-client -vvf repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft File: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft (raw, json) Hash identifier: MBuxTPVjTCovPjdS3dnm7bXvEZpLOPqqJEUuSYGZ9io= Subject key identifier: 3B:A2:89:98:B0:94:04:A8:E8:48:F8:24:D5:27:3C:AA:61:17:D9:22 Authority key identifier: ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A Certificate issuer: /CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Certificate serial: 33C1019110CFE9692F55A8A0967C59CBCE942812 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft Manifest number: 0211 Signing time: Mon 20 Oct 2025 08:41:11 +0000 Manifest this update: Mon 20 Oct 2025 08:36:11 +0000 Manifest next update: Thu 23 Oct 2025 20:18:11 +0000 Files and hashes: 1: 3130332e3133352e34382e302f32322d3234203d3e203338333230.roa (hash: /cF+CKjnrx0BGZ8wL/sfXfp5hgNUQBZIeeM9AfAYFsU=) 2: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl (hash: cK5STq771CWZZ2pZK1lWrI+0k3mNcWbODhy0g/S4XAs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c1:01:91:10:cf:e9:69:2f:55:a8:a0:96:7c:59:cb:ce:94:28:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Validity Not Before: Oct 20 08:36:11 2025 GMT Not After : Oct 23 20:18:11 2025 GMT Subject: CN=3BA28998B09404A8E848F824D5273CAA6117D922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4b:bb:d7:67:80:e2:9d:b4:05:a7:18:5f:5a: bb:ff:86:65:cf:10:bd:72:4a:60:2b:df:68:e6:0f: 40:25:3f:06:65:a6:e3:5b:a3:3e:94:64:41:4a:c5: 32:f0:a5:07:e6:99:58:59:46:a3:ae:79:c1:e6:4f: 07:7c:a6:da:e3:37:90:71:b2:ed:f7:8f:68:22:18: a4:da:e0:88:a5:af:2e:b5:26:54:9c:dd:1c:7e:56: 05:2b:c7:07:8f:9b:9e:40:4b:22:f2:ee:31:04:3c: 89:8d:c4:fc:12:79:df:76:0f:a2:f9:17:fe:94:62: 0f:43:0b:69:d2:f4:e2:1e:62:79:b5:c1:ad:e7:29: e3:94:f5:71:db:fc:88:b6:f2:65:95:dd:a3:51:ef: 77:f5:5d:37:cb:c5:ed:b8:d0:5c:79:20:08:63:48: b9:78:1b:9b:a1:06:2f:ec:3f:4e:6a:51:8d:c3:3c: b1:db:89:09:2f:c9:88:6f:c4:f0:2a:24:b2:2f:d4: d0:69:90:9f:b5:22:3d:e9:a4:f4:18:f9:0a:ee:5b: 7f:f8:c3:c4:28:6d:48:d8:a3:28:47:26:76:5c:79: 55:df:83:ce:3b:b6:9f:4c:af:ec:6e:d6:e8:fa:32: 4a:44:56:8e:73:1a:40:f9:c8:04:0f:b6:e9:c3:59: 28:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A2:89:98:B0:94:04:A8:E8:48:F8:24:D5:27:3C:AA:61:17:D9:22 X509v3 Authority Key Identifier: keyid:ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:a3:2a:7a:52:9f:79:6e:86:5a:4a:74:a8:0c:90:90:3d:7d: 2f:82:8a:ec:27:6e:ec:6c:f2:b0:37:2b:1a:fe:c0:62:fd:88: 8f:87:4e:56:62:35:be:ce:67:f5:1e:f2:2e:66:46:b6:85:ef: 1f:26:f6:b8:a9:60:6d:52:a5:a6:c8:96:15:07:8f:b6:5c:99: 12:39:43:40:c3:f9:bc:d6:77:07:5f:9e:bd:34:c8:bf:7b:e0: f7:3e:d7:af:1e:31:77:74:a7:fd:77:52:70:9d:47:9f:e7:8e: 8b:23:3d:b7:79:94:93:e6:0c:4c:22:9e:70:e9:93:67:02:e0: f4:f0:7c:00:d1:bc:16:90:5f:cc:55:24:6d:6b:ab:35:52:b9: 99:dd:b7:86:fb:b8:6b:08:3a:16:6a:e9:5d:64:bf:05:b5:88: eb:8b:ad:7e:02:5c:dd:7a:f2:98:fb:18:60:86:3e:92:e7:e7: 35:5a:4a:f7:f1:42:6b:79:06:9d:84:aa:47:7d:28:16:ca:8c: 79:23:33:7f:00:97:fb:ae:81:ad:2c:36:77:64:c3:26:3a:49: d8:e3:00:98:b2:9b:7c:45:41:ff:c7:a8:1a:86:44:8e:34:87: c6:b7:30:f8:0a:0a:4b:f7:76:73:dc:2e:92:9e:06:be:e6:ae: 3d:42:df:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM8EBkRDP6WkvVaiglnxZy86UKBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RB OTFDQTE1QTAeFw0yNTEwMjAwODM2MTFaFw0yNTEwMjMyMDE4MTFaMDMxMTAvBgNV BAMTKDNCQTI4OTk4QjA5NDA0QThFODQ4RjgyNEQ1MjczQ0FBNjExN0Q5MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBS7vXZ4DinbQFpxhfWrv/hmXP EL1ySmAr32jmD0AlPwZlpuNboz6UZEFKxTLwpQfmmVhZRqOuecHmTwd8ptrjN5Bx su33j2giGKTa4Iilry61JlSc3Rx+VgUrxwePm55ASyLy7jEEPImNxPwSed92D6L5 F/6UYg9DC2nS9OIeYnm1wa3nKeOU9XHb/Ii28mWV3aNR73f1XTfLxe240Fx5IAhj SLl4G5uhBi/sP05qUY3DPLHbiQkvyYhvxPAqJLIv1NBpkJ+1Ij3ppPQY+QruW3/4 w8QobUjYoyhHJnZceVXfg847tp9Mr+xu1uj6MkpEVo5zGkD5yAQPtunDWSgTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO6KJmLCUBKjoSPgk1Sc8qmEX2SIwHwYDVR0j BBgwFoAU7TznJkVjrblA6vr0vYfNzakcoVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Y2NjMmFmNC1hNjJkLTQ3MDgtYjY4OC0xODkyNTk0YmE5ODkvMC9FRDNDRTcyNjQ1 NjNBREI5NDBFQUZBRjRCRDg3Q0RDREE5MUNBMTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RBOTFD QTE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGNjYzJhZjQtYTYyZC00NzA4LWI2 ODgtMTg5MjU5NGJhOTg5LzAvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NE Q0RBOTFDQTE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACejKnpSn3luhlpKdKgMkJA9fS+Ciuwnbuxs 8rA3Kxr+wGL9iI+HTlZiNb7OZ/Ue8i5mRraF7x8m9ripYG1SpabIlhUHj7ZcmRI5 Q0DD+bzWdwdfnr00yL974Pc+168eMXd0p/13UnCdR5/njosjPbd5lJPmDEwinnDp k2cC4PTwfADRvBaQX8xVJG1rqzVSuZndt4b7uGsIOhZq6V1kvwW1iOuLrX4CXN16 8pj7GGCGPpLn5zVaSvfxQmt5Bp2Eqkd9KBbKjHkjM38Al/uuga0sNndkwyY6Sdjj AJiym3xFQf/HqBqGRI40h8a3MPgKCkv3dnPcLpKeBr7mrj1C35A= -----END CERTIFICATE-----Generated at Mon Oct 20 15:26:26 2025 by rpki-client