$ rpki-client -vvf repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft File: E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft (raw, json) Hash identifier: 14nVrgCiY807NohMJQ8hAFofrVgKZXkEQWhNhkCIv2o= Subject key identifier: 35:B6:AA:85:8E:A1:3C:06:C4:CA:B2:4A:C6:EE:21:CF:C5:20:C7:55 Authority key identifier: E9:C6:90:C5:1E:9B:F1:B5:97:83:32:FD:5B:A9:4A:85:01:92:F5:4C Certificate issuer: /CN=E9C690C51E9BF1B5978332FD5BA94A850192F54C Certificate serial: 5CE910AE46A65DF5DCF95A694CFCFFDB472AF187 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft Manifest number: CB Signing time: Sun 19 Oct 2025 22:10:42 +0000 Manifest this update: Sun 19 Oct 2025 22:05:42 +0000 Manifest next update: Thu 23 Oct 2025 06:29:42 +0000 Files and hashes: 1: 3136302e32352e3234322e302f32332d3234203d3e20313432333437.roa (hash: qYeddWCUDVszc7mZTW90CbBoRIOyBoY1LaUrZanAxXQ=) 2: E9C690C51E9BF1B5978332FD5BA94A850192F54C.crl (hash: XeZ6eVO/5SbNLYKknhnaQ6ppbKJlXOp4MvY/jKl5g3o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.crl rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e9:10:ae:46:a6:5d:f5:dc:f9:5a:69:4c:fc:ff:db:47:2a:f1:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9C690C51E9BF1B5978332FD5BA94A850192F54C Validity Not Before: Oct 19 22:05:42 2025 GMT Not After : Oct 23 06:29:42 2025 GMT Subject: CN=35B6AA858EA13C06C4CAB24AC6EE21CFC520C755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0d:4e:1f:83:2d:42:8e:7e:41:79:b0:b0:27: 18:ab:34:a4:b2:80:16:0b:db:0e:ad:c3:b8:25:22: 68:a6:3c:7e:a0:87:81:b1:9c:1f:58:5b:47:07:7d: 10:2c:d5:da:a3:5a:8f:90:f1:2b:2e:f8:8f:19:f0: 12:44:a1:1e:89:d8:b7:32:f9:4e:8e:f8:9d:de:ce: 78:dd:25:3d:10:ea:fb:14:41:bc:f9:d0:ef:ea:a2: 82:56:a1:76:70:78:54:9d:71:e4:1e:be:9f:4a:bd: 7c:6c:8f:73:d8:cc:55:a4:bd:18:60:c1:c7:1d:e1: 9e:1d:b8:49:62:19:55:23:61:7b:c2:8a:26:ca:e4: b6:c4:c0:fb:52:f1:ee:1c:bf:51:df:08:ab:ad:a6: 89:b1:aa:30:49:d9:62:24:15:48:d3:47:98:62:08: 33:21:d7:f4:c8:83:47:b5:02:84:c3:99:d9:bc:68: 02:00:6f:d0:8b:ae:f9:70:65:30:e5:76:61:e7:2e: 82:d4:5c:e8:1c:f6:a2:6c:82:d5:ac:da:ae:e7:1b: 6d:22:e0:8d:d1:cf:99:c2:24:a8:5b:f7:57:2d:0a: 48:4b:a4:fc:06:80:b9:59:e4:f5:36:f8:ca:ff:94: 0b:d2:e4:3b:40:53:88:a3:26:08:44:04:c5:45:39: 30:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B6:AA:85:8E:A1:3C:06:C4:CA:B2:4A:C6:EE:21:CF:C5:20:C7:55 X509v3 Authority Key Identifier: keyid:E9:C6:90:C5:1E:9B:F1:B5:97:83:32:FD:5B:A9:4A:85:01:92:F5:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E9C690C51E9BF1B5978332FD5BA94A850192F54C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/E9C690C51E9BF1B5978332FD5BA94A850192F54C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:21:96:65:0e:54:3e:c2:69:b9:9e:61:98:f6:a3:0e:8e:3f: 86:02:94:01:1c:db:0b:14:9c:2a:ee:ec:6c:61:b1:91:e0:da: c4:d8:a0:ec:a6:04:30:00:ee:7b:cb:5a:30:c0:11:35:9c:19: 5f:d2:0e:01:a6:fb:d8:c5:ad:0c:a0:91:0d:cd:5f:3f:f2:19: e0:32:02:a0:35:b3:6a:a8:f2:07:3e:d4:4f:d2:61:c6:c4:3f: 8c:bc:06:a0:e1:80:bc:15:77:26:83:60:b7:89:fc:8f:96:ce: d7:a3:55:fa:0b:7f:1e:5f:65:85:ec:b1:35:58:37:90:5f:dd: 20:92:28:89:73:cb:5f:a9:68:de:ec:10:4c:f6:62:41:6f:8b: 23:97:b2:25:db:9e:2c:4a:8d:00:35:eb:a4:ba:74:0d:89:7c: 57:2b:f3:39:c7:07:62:12:ea:fc:14:48:cd:52:2e:5a:66:39: 18:0b:5e:69:83:f6:1f:34:cc:9d:0a:7f:5e:ea:90:e3:f6:ed: ec:03:61:75:23:96:49:bd:41:3f:f2:d2:22:05:ae:bd:c1:a4: 2a:d2:94:65:02:94:0e:99:58:b5:37:28:c7:fc:dc:6e:66:85: 29:c5:14:51:71:00:ab:ca:51:df:d9:ea:4b:a5:db:2c:ca:07: 66:84:cb:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXOkQrkamXfXc+VppTPz/20cq8YcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlDNjkwQzUxRTlCRjFCNTk3ODMzMkZENUJBOTRBODUw MTkyRjU0QzAeFw0yNTEwMTkyMjA1NDJaFw0yNTEwMjMwNjI5NDJaMDMxMTAvBgNV BAMTKDM1QjZBQTg1OEVBMTNDMDZDNENBQjI0QUM2RUUyMUNGQzUyMEM3NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8DU4fgy1Cjn5BebCwJxirNKSy gBYL2w6tw7glImimPH6gh4GxnB9YW0cHfRAs1dqjWo+Q8Ssu+I8Z8BJEoR6J2Lcy +U6O+J3eznjdJT0Q6vsUQbz50O/qooJWoXZweFSdceQevp9KvXxsj3PYzFWkvRhg wccd4Z4duEliGVUjYXvCiibK5LbEwPtS8e4cv1HfCKutpomxqjBJ2WIkFUjTR5hi CDMh1/TIg0e1AoTDmdm8aAIAb9CLrvlwZTDldmHnLoLUXOgc9qJsgtWs2q7nG20i 4I3Rz5nCJKhb91ctCkhLpPwGgLlZ5PU2+Mr/lAvS5DtAU4ijJghEBMVFOTD3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNbaqhY6hPAbEyrJKxu4hz8Ugx1UwHwYDVR0j BBgwFoAU6caQxR6b8bWXgzL9W6lKhQGS9UwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDUzODhmNC0xMDdiLTQ0YTktOWQ4Zi0xNjAzZmVjZmRlZTkvMC9FOUM2OTBDNTFF OUJGMUI1OTc4MzMyRkQ1QkE5NEE4NTAxOTJGNTRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTlDNjkwQzUxRTlCRjFCNTk3ODMzMkZENUJBOTRBODUwMTky RjU0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA1Mzg4ZjQtMTA3Yi00NGE5LTlk OGYtMTYwM2ZlY2ZkZWU5LzAvRTlDNjkwQzUxRTlCRjFCNTk3ODMzMkZENUJBOTRB ODUwMTkyRjU0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL4hlmUOVD7CabmeYZj2ow6OP4YClAEc2wsU nCru7GxhsZHg2sTYoOymBDAA7nvLWjDAETWcGV/SDgGm+9jFrQygkQ3NXz/yGeAy AqA1s2qo8gc+1E/SYcbEP4y8BqDhgLwVdyaDYLeJ/I+WztejVfoLfx5fZYXssTVY N5Bf3SCSKIlzy1+paN7sEEz2YkFviyOXsiXbnixKjQA166S6dA2JfFcr8znHB2IS 6vwUSM1SLlpmORgLXmmD9h80zJ0Kf17qkOP27ewDYXUjlkm9QT/y0iIFrr3BpCrS lGUClA6ZWLU3KMf83G5mhSnFFFFxAKvKUd/Z6kul2yzKB2aEyzg= -----END CERTIFICATE-----Generated at Mon Oct 20 21:09:45 2025 by rpki-client