$ rpki-client -vvf repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft File: E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft (raw, json) Hash identifier: nSp0W4hNlYn4rhb+IOUnkeXlBFgh4757wb8eqqG5mUs= Subject key identifier: F6:97:2A:40:01:23:A4:39:4F:86:47:47:04:7A:F2:ED:77:7D:4F:F9 Authority key identifier: E4:C5:17:8B:DB:BD:EF:7B:7D:D4:1B:AF:58:EB:3D:25:B2:13:27:71 Certificate issuer: /CN=E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771 Certificate serial: 1DE101BE786C7A67D8C24431103A321D18A78663 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft Manifest number: 01F0 Signing time: Sat 18 Oct 2025 11:11:18 +0000 Manifest this update: Sat 18 Oct 2025 11:06:18 +0000 Manifest next update: Tue 21 Oct 2025 17:29:18 +0000 Files and hashes: 1: E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.crl (hash: IXZZ1A3JQp0+INn+YWOX/hxXKitQ1G4LE/7fNYqVw/0=) 2: 3130332e36362e33362e302f32342d3234203d3e20313530323233.roa (hash: ajl2EFm0qBhjAXALIOJlI8I7dBianNhiyu03BfEHE4I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.crl rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 17:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:e1:01:be:78:6c:7a:67:d8:c2:44:31:10:3a:32:1d:18:a7:86:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771 Validity Not Before: Oct 18 11:06:18 2025 GMT Not After : Oct 21 17:29:18 2025 GMT Subject: CN=F6972A400123A4394F864747047AF2ED777D4FF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:77:24:fe:0c:e6:55:fd:52:f1:c2:c0:75:6c: 08:e9:a9:57:58:7e:77:9e:71:06:e8:95:cd:d1:24: 13:7c:fa:d1:8e:aa:3f:9e:10:c9:a3:2b:4b:99:19: f3:0e:d4:0c:c1:50:55:68:ff:1d:99:42:78:a7:79: 53:83:52:d4:bd:8b:71:79:ec:06:e9:0f:38:b3:aa: 36:6c:53:12:93:ac:28:41:8e:a4:6f:d2:af:4e:db: d8:cb:6b:b1:25:fa:97:90:b6:e4:40:a8:e2:4f:b9: c1:85:df:43:d5:4f:91:94:73:38:60:48:23:13:f0: f7:e6:c8:8f:0b:f0:ed:dd:00:24:0a:c4:f5:2c:72: 7a:99:b8:53:f4:5c:a0:55:50:c6:5c:2f:48:ac:4f: d2:24:39:e9:2b:f2:6f:6c:2c:8f:10:6c:df:ae:8b: 58:20:76:0c:ef:da:07:37:fc:04:73:03:0c:60:d6: 3d:22:fa:87:2f:f6:cf:4a:7d:e2:4a:c9:e1:78:49: 17:bc:c5:a1:b6:5d:5f:13:41:e5:ad:1f:3a:7a:64: 7a:d3:80:8a:36:e1:e7:b5:bd:12:bc:3b:01:4c:52: 19:6b:13:db:a2:89:e9:e5:5c:71:b4:f4:24:f7:64: 6e:f5:d5:ef:f2:ba:85:44:cf:f5:81:59:c0:8f:33: 7b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:97:2A:40:01:23:A4:39:4F:86:47:47:04:7A:F2:ED:77:7D:4F:F9 X509v3 Authority Key Identifier: keyid:E4:C5:17:8B:DB:BD:EF:7B:7D:D4:1B:AF:58:EB:3D:25:B2:13:27:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/E4C5178BDBBDEF7B7DD41BAF58EB3D25B2132771.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:4f:6d:9d:0f:14:06:35:c1:9b:44:16:9f:36:2e:64:15:ed: 94:7a:2a:8c:b5:c1:82:12:a5:93:b1:d7:73:7e:25:ae:0a:b3: e3:a4:d9:37:15:5d:db:87:1b:b2:4a:9a:cc:58:85:f3:ae:4d: 15:74:62:ca:03:a1:8e:d5:1f:6c:1f:86:99:72:70:1c:34:d3: e1:f6:07:66:3a:8c:82:69:7e:37:fc:f3:94:77:a5:1d:7b:dd: 01:15:15:ad:9f:07:eb:c6:0b:12:8f:76:52:25:11:fe:d8:6b: c7:74:16:a3:e2:66:af:6e:6c:26:32:3f:4f:b0:56:15:83:bb: a2:c7:fd:45:55:e2:c2:ca:d3:f4:68:ab:b7:ca:00:0c:a1:71: e3:27:e0:b4:d7:9b:32:26:24:67:77:41:d3:b1:31:8a:b5:96: ce:cb:08:e7:48:42:76:84:44:f3:6d:4a:ec:0c:68:08:9f:32: ab:fb:fe:1c:0e:aa:1d:68:72:29:12:fc:8e:7d:f2:1d:d3:5a: d9:90:db:29:f5:2b:0e:fc:1b:f4:2b:a7:3d:8f:4e:e7:77:38: 64:f5:ea:42:23:03:5a:1c:21:3c:6b:3a:93:09:9a:df:4f:d8: db:3a:e2:3c:ab:84:54:54:ec:76:89:0b:94:78:b0:29:32:85: 6b:ac:8a:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHeEBvnhsemfYwkQxEDoyHRinhmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDNTE3OEJEQkJERUY3QjdERDQxQkFGNThFQjNEMjVC MjEzMjc3MTAeFw0yNTEwMTgxMTA2MThaFw0yNTEwMjExNzI5MThaMDMxMTAvBgNV BAMTKEY2OTcyQTQwMDEyM0E0Mzk0Rjg2NDc0NzA0N0FGMkVENzc3RDRGRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmdyT+DOZV/VLxwsB1bAjpqVdY fneecQbolc3RJBN8+tGOqj+eEMmjK0uZGfMO1AzBUFVo/x2ZQnineVODUtS9i3F5 7AbpDzizqjZsUxKTrChBjqRv0q9O29jLa7El+peQtuRAqOJPucGF30PVT5GUczhg SCMT8PfmyI8L8O3dACQKxPUscnqZuFP0XKBVUMZcL0isT9IkOekr8m9sLI8QbN+u i1ggdgzv2gc3/ARzAwxg1j0i+ocv9s9KfeJKyeF4SRe8xaG2XV8TQeWtHzp6ZHrT gIo24ee1vRK8OwFMUhlrE9uiienlXHG09CT3ZG711e/yuoVEz/WBWcCPM3sTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9pcqQAEjpDlPhkdHBHry7Xd9T/kwHwYDVR0j BBgwFoAU5MUXi9u973t91BuvWOs9JbITJ3EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmRiZDc4NS02YmNhLTQ5M2ItOGE2NS0zYjUyNzcwMDdmZWQvMC9FNEM1MTc4QkRC QkRFRjdCN0RENDFCQUY1OEVCM0QyNUIyMTMyNzcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDNTE3OEJEQkJERUY3QjdERDQxQkFGNThFQjNEMjVCMjEz Mjc3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJkYmQ3ODUtNmJjYS00OTNiLThh NjUtM2I1Mjc3MDA3ZmVkLzAvRTRDNTE3OEJEQkJERUY3QjdERDQxQkFGNThFQjNE MjVCMjEzMjc3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1PbZ0PFAY1wZtEFp82LmQV7ZR6Koy1wYIS pZOx13N+Ja4Ks+Ok2TcVXduHG7JKmsxYhfOuTRV0YsoDoY7VH2wfhplycBw00+H2 B2Y6jIJpfjf885R3pR173QEVFa2fB+vGCxKPdlIlEf7Ya8d0FqPiZq9ubCYyP0+w VhWDu6LH/UVV4sLK0/Roq7fKAAyhceMn4LTXmzImJGd3QdOxMYq1ls7LCOdIQnaE RPNtSuwMaAifMqv7/hwOqh1ocikS/I598h3TWtmQ2yn1Kw78G/Qrpz2PTud3OGT1 6kIjA1ocITxrOpMJmt9P2Ns64jyrhFRU7HaJC5R4sCkyhWusitk= -----END CERTIFICATE-----Generated at Mon Oct 20 15:01:41 2025 by rpki-client