$ rpki-client -vvf repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.mft File: E306D62165BEB9609E6DD25466BDD9071B1F23CF.mft (raw, json) Hash identifier: RXoo2CRvSxh52hw7KRmWNWXi2AXvCYRU4VPwRSSJVTw= Subject key identifier: 0F:F0:CC:E0:8A:A6:14:96:31:01:87:59:28:97:AD:B2:18:23:41:02 Authority key identifier: E3:06:D6:21:65:BE:B9:60:9E:6D:D2:54:66:BD:D9:07:1B:1F:23:CF Certificate issuer: /CN=E306D62165BEB9609E6DD25466BDD9071B1F23CF Certificate serial: 1D84EB9F801AA1627FAD704C83EF5C17D393F008 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E306D62165BEB9609E6DD25466BDD9071B1F23CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.mft Manifest number: 01D3 Signing time: Mon 20 Oct 2025 23:32:22 +0000 Manifest this update: Mon 20 Oct 2025 23:27:22 +0000 Manifest next update: Fri 24 Oct 2025 10:15:22 +0000 Files and hashes: 1: E306D62165BEB9609E6DD25466BDD9071B1F23CF.crl (hash: gC+3YU88S1wgPnIait71tLyNWM6sBReQfc1Y9txo9CE=) 2: 3130332e3231312e38322e302f32342d3234203d3e20313334363630.roa (hash: jSJGZxPCCtD074RANwY8W/XkjCb3t47mFXAmsQKSo8s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.crl rsync://repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E306D62165BEB9609E6DD25466BDD9071B1F23CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 10:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:84:eb:9f:80:1a:a1:62:7f:ad:70:4c:83:ef:5c:17:d3:93:f0:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E306D62165BEB9609E6DD25466BDD9071B1F23CF Validity Not Before: Oct 20 23:27:22 2025 GMT Not After : Oct 24 10:15:22 2025 GMT Subject: CN=0FF0CCE08AA61496310187592897ADB218234102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:8d:68:90:52:21:83:5a:4f:86:75:8f:10:bc: 62:2d:2e:51:5f:09:b0:8b:15:fe:11:e2:65:44:be: 0b:47:f2:fa:8f:7f:f9:15:9c:da:92:2f:8e:c6:29: 69:f1:0a:0c:ee:97:47:6b:f2:a0:cc:87:86:78:ff: d4:f7:09:be:51:69:c1:ce:15:c7:84:39:f3:87:f6: 90:54:a3:2c:a0:22:09:70:e9:f8:0f:9f:d8:a6:ef: c9:93:73:ac:af:65:d6:c0:66:7d:44:fd:e0:c2:43: 71:3a:7f:1d:39:b7:34:7c:83:7d:8a:45:15:0a:cf: fd:9e:a3:a1:4d:51:50:90:90:e4:cb:bc:c0:e0:52: b0:55:e6:80:b5:50:cb:7d:31:67:d5:2a:e2:8d:32: f5:cf:23:ea:bc:3c:7c:ac:3b:3c:e4:38:83:ff:a1: e8:e4:92:03:b5:f3:40:0c:a2:e3:c1:49:4e:29:44: b7:6c:9e:0f:6e:aa:50:a1:b0:d5:da:3d:ee:55:1f: 5e:9f:5f:58:c3:fa:1b:76:cb:dc:4f:1d:42:41:29: bd:85:12:72:d9:bc:aa:fa:d0:6c:11:a5:85:a8:99: 84:ad:01:cf:8c:8c:7d:8e:3d:e2:5b:4a:c6:08:98: ed:4f:03:ee:e5:7b:cb:45:79:64:ad:f5:59:75:34: 2d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F0:CC:E0:8A:A6:14:96:31:01:87:59:28:97:AD:B2:18:23:41:02 X509v3 Authority Key Identifier: keyid:E3:06:D6:21:65:BE:B9:60:9E:6D:D2:54:66:BD:D9:07:1B:1F:23:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E306D62165BEB9609E6DD25466BDD9071B1F23CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/544cfaac-5d11-4142-b1f3-88fcc41b338a/0/E306D62165BEB9609E6DD25466BDD9071B1F23CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:1c:db:61:be:2f:08:54:9b:73:a0:bc:4f:3d:0b:c3:63:0d: a1:9f:b0:5e:df:03:17:7f:32:ac:2e:63:a8:68:a0:34:0f:51: 96:37:a5:1a:ca:36:56:9c:23:ab:06:55:4b:fe:db:49:8d:c3: 05:57:27:87:d8:05:be:84:23:06:7c:c6:f8:16:df:1c:47:5e: 48:c6:2d:99:67:46:2c:51:ef:d9:d4:12:c8:17:46:f1:c5:f5: b5:71:32:f8:44:26:be:06:cf:d4:01:cf:8e:fd:ad:20:8b:1a: 78:48:5a:17:5e:a6:47:2a:45:4c:cb:2a:2e:47:3d:48:3f:3c: 9a:f3:a2:94:66:26:22:da:7c:1d:fe:1f:5b:6e:b7:21:e1:b0: 64:6f:ef:8a:fe:cd:4d:9a:c8:5f:45:b5:b5:a0:d5:b5:c5:10: 90:b1:cf:ed:ee:5a:b7:4f:21:d4:5d:b1:b2:2c:c2:2c:1b:4c: d1:ee:70:22:d8:9a:73:e1:b0:ad:31:3c:7f:f6:e1:a8:1e:57: 77:13:09:1a:e4:6a:93:2c:c4:f9:9c:3a:f2:d0:6d:d4:63:2e: e4:e7:b1:78:d0:05:34:14:00:5c:1f:cf:84:4a:6e:0e:9e:24: b6:5e:f8:59:b2:2d:77:24:3f:23:a9:18:f7:f0:ba:13:fb:29: fc:12:89:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHYTrn4AaoWJ/rXBMg+9cF9OT8AgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMwNkQ2MjE2NUJFQjk2MDlFNkREMjU0NjZCREQ5MDcx QjFGMjNDRjAeFw0yNTEwMjAyMzI3MjJaFw0yNTEwMjQxMDE1MjJaMDMxMTAvBgNV BAMTKDBGRjBDQ0UwOEFBNjE0OTYzMTAxODc1OTI4OTdBREIyMTgyMzQxMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDujWiQUiGDWk+GdY8QvGItLlFf CbCLFf4R4mVEvgtH8vqPf/kVnNqSL47GKWnxCgzul0dr8qDMh4Z4/9T3Cb5RacHO FceEOfOH9pBUoyygIglw6fgPn9im78mTc6yvZdbAZn1E/eDCQ3E6fx05tzR8g32K RRUKz/2eo6FNUVCQkOTLvMDgUrBV5oC1UMt9MWfVKuKNMvXPI+q8PHysOzzkOIP/ oejkkgO180AMouPBSU4pRLdsng9uqlChsNXaPe5VH16fX1jD+ht2y9xPHUJBKb2F EnLZvKr60GwRpYWomYStAc+MjH2OPeJbSsYImO1PA+7le8tFeWSt9Vl1NC2zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD/DM4IqmFJYxAYdZKJetshgjQQIwHwYDVR0j BBgwFoAU4wbWIWW+uWCebdJUZr3ZBxsfI88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDRjZmFhYy01ZDExLTQxNDItYjFmMy04OGZjYzQxYjMzOGEvMC9FMzA2RDYyMTY1 QkVCOTYwOUU2REQyNTQ2NkJERDkwNzFCMUYyM0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTMwNkQ2MjE2NUJFQjk2MDlFNkREMjU0NjZCREQ5MDcxQjFG MjNDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQ0Y2ZhYWMtNWQxMS00MTQyLWIx ZjMtODhmY2M0MWIzMzhhLzAvRTMwNkQ2MjE2NUJFQjk2MDlFNkREMjU0NjZCREQ5 MDcxQjFGMjNDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUc22G+LwhUm3OgvE89C8NjDaGfsF7fAxd/ MqwuY6hooDQPUZY3pRrKNlacI6sGVUv+20mNwwVXJ4fYBb6EIwZ8xvgW3xxHXkjG LZlnRixR79nUEsgXRvHF9bVxMvhEJr4Gz9QBz479rSCLGnhIWhdepkcqRUzLKi5H PUg/PJrzopRmJiLafB3+H1tutyHhsGRv74r+zU2ayF9FtbWg1bXFEJCxz+3uWrdP IdRdsbIswiwbTNHucCLYmnPhsK0xPH/24ageV3cTCRrkapMsxPmcOvLQbdRjLuTn sXjQBTQUAFwfz4RKbg6eJLZe+FmyLXckPyOpGPfwuhP7KfwSiQw= -----END CERTIFICATE-----Generated at Tue Oct 21 07:20:56 2025 by rpki-client