$ rpki-client -vvf repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft File: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft (raw, json) Hash identifier: uC8UM7HxO/KQ8/QR6826b2V9Jr3vIwtozfAEanEXDeU= Subject key identifier: C6:99:C7:FB:55:E2:2B:BC:AF:EC:92:1B:90:03:59:60:32:D9:C3:AD Authority key identifier: E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE Certificate issuer: /CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Certificate serial: 07C696466445DC937B607CCE82D4EE84A47DD0FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft Manifest number: F5 Signing time: Sun 19 Oct 2025 06:22:07 +0000 Manifest this update: Sun 19 Oct 2025 06:17:07 +0000 Manifest next update: Wed 22 Oct 2025 12:14:07 +0000 Files and hashes: 1: 3130332e36302e38392e302f32342d3234203d3e20313531353732.roa (hash: Enf4GZpiw8yRCRJ559txgbwn9cUloBn5l+xZd4CiSI4=) 2: 3130332e36302e38382e302f32342d3234203d3e20313531353732.roa (hash: k2+2S8JNGrIJgA3B1fWsPdcHVnZQhwJAO8DfE0j/qJE=) 3: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl (hash: ZAEySH71XCSdHPufIoYluSwILbZLMZ+qUHKwMgK7llQ=) 4: 3130332e36302e38382e302f32332d3233203d3e20313531353732.roa (hash: ZC6TgLNk0lzol6BMmLGccC1JZhUEJfXYzEcHnys8G1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 12:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:c6:96:46:64:45:dc:93:7b:60:7c:ce:82:d4:ee:84:a4:7d:d0:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Validity Not Before: Oct 19 06:17:07 2025 GMT Not After : Oct 22 12:14:07 2025 GMT Subject: CN=C699C7FB55E22BBCAFEC921B9003596032D9C3AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:70:68:b7:84:19:4d:af:ec:45:61:69:26:6f: 33:43:cf:d0:c1:e6:69:f2:01:d8:4a:7e:10:74:1c: ea:e8:23:2d:fd:02:58:fe:a2:ba:54:d7:29:ea:9b: b3:38:39:57:15:52:49:d0:13:04:bf:3f:6c:84:cf: 94:f0:0a:f7:37:c2:c1:e3:e1:e8:78:6d:e1:74:98: a3:b2:2f:28:16:61:72:11:12:20:85:31:73:c1:b1: 85:56:41:5a:1e:24:1c:87:2d:57:ea:f6:75:7a:8b: b1:ca:d6:90:99:78:05:e1:f5:ee:fe:4d:86:8d:e1: 4e:93:0d:44:ed:93:e1:3d:1a:8b:f9:2b:77:30:ed: 7b:16:d6:ab:c2:1b:bc:73:6f:af:d5:07:0c:23:5b: da:77:ac:77:8c:ba:9e:c4:31:99:33:4b:a5:ff:14: 9a:0c:49:8c:e0:6d:f9:2d:c8:e8:a9:03:17:e8:27: 8d:09:91:bb:c5:97:a9:e7:0a:04:c3:96:2a:b4:cb: 9b:59:21:9f:95:a8:8b:11:69:18:68:60:3f:88:18: cc:18:57:3f:5a:9c:a8:d6:f9:7b:83:12:b3:90:89: e5:48:c7:04:10:14:44:51:b3:3b:2d:2f:53:96:7c: 8d:c2:1d:ce:a3:3c:47:ee:e7:b1:bc:91:fb:0f:d1: 8e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:99:C7:FB:55:E2:2B:BC:AF:EC:92:1B:90:03:59:60:32:D9:C3:AD X509v3 Authority Key Identifier: keyid:E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:28:94:38:8d:98:a3:8d:1a:dd:b8:1b:e5:49:9e:4a:10:80: 72:8a:00:c6:24:80:6d:76:3e:15:83:82:71:02:5f:5f:75:d9: 56:cf:1a:3b:c0:e1:ae:04:68:d0:ef:3d:eb:b8:8f:57:5b:97: 48:b9:70:d8:94:8f:49:e7:60:7a:4d:87:45:fb:0d:73:2d:c1: 7c:ef:bf:0b:34:17:c6:ba:65:62:ac:80:e6:3f:ca:e9:b4:8e: 67:c4:6f:8c:65:42:1e:dd:dc:b9:9b:b0:b9:69:ff:d2:59:ac: b6:04:27:01:cf:61:77:c2:7a:8d:b3:9f:e1:5d:05:ee:cf:a3: b1:75:42:9d:19:da:35:ce:a9:19:c1:66:f9:a3:44:47:a5:d4: e6:1b:9d:d1:f1:fa:6d:42:ae:72:be:77:e2:d3:fd:39:0a:03: a4:e3:67:3c:3e:59:ae:96:1a:b5:f5:50:db:c8:a9:f0:6d:f5: 06:97:c4:83:23:87:ad:b5:24:2e:97:c0:5e:f9:cf:04:d0:ee: 25:b8:e4:f9:b8:d3:cf:cd:a4:14:04:2f:c2:83:8e:ca:dd:3a: 04:84:b2:6b:5e:8a:4e:ad:92:9b:69:0a:99:31:13:0b:19:0f: 38:d8:01:81:16:5c:31:a3:80:12:27:09:21:0e:50:ab:f9:6a: bb:25:2e:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB8aWRmRF3JN7YHzOgtTuhKR90P8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZF ODIxMkRERTAeFw0yNTEwMTkwNjE3MDdaFw0yNTEwMjIxMjE0MDdaMDMxMTAvBgNV BAMTKEM2OTlDN0ZCNTVFMjJCQkNBRkVDOTIxQjkwMDM1OTYwMzJEOUMzQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgcGi3hBlNr+xFYWkmbzNDz9DB 5mnyAdhKfhB0HOroIy39Alj+orpU1ynqm7M4OVcVUknQEwS/P2yEz5TwCvc3wsHj 4eh4beF0mKOyLygWYXIREiCFMXPBsYVWQVoeJByHLVfq9nV6i7HK1pCZeAXh9e7+ TYaN4U6TDUTtk+E9Gov5K3cw7XsW1qvCG7xzb6/VBwwjW9p3rHeMup7EMZkzS6X/ FJoMSYzgbfktyOipAxfoJ40JkbvFl6nnCgTDliq0y5tZIZ+VqIsRaRhoYD+IGMwY Vz9anKjW+XuDErOQieVIxwQQFERRszstL1OWfI3CHc6jPEfu57G8kfsP0Y7/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxpnH+1XiK7yv7JIbkANZYDLZw60wHwYDVR0j BBgwFoAU58nk5cjqmJ8P99b+bb1qT+ghLd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzExYWE0Ni1mMjhlLTRjNTUtYjliYS03ZDViZGM5NWI0ZjYvMC9FN0M5RTRFNUM4 RUE5ODlGMEZGN0Q2RkU2REJENkE0RkU4MjEyRERFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZFODIx MkRERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcxMWFhNDYtZjI4ZS00YzU1LWI5 YmEtN2Q1YmRjOTViNGY2LzAvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZB NEZFODIxMkRERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABAolDiNmKONGt24G+VJnkoQgHKKAMYkgG12 PhWDgnECX1912VbPGjvA4a4EaNDvPeu4j1dbl0i5cNiUj0nnYHpNh0X7DXMtwXzv vws0F8a6ZWKsgOY/yum0jmfEb4xlQh7d3LmbsLlp/9JZrLYEJwHPYXfCeo2zn+Fd Be7Po7F1Qp0Z2jXOqRnBZvmjREel1OYbndHx+m1CrnK+d+LT/TkKA6TjZzw+Wa6W GrX1UNvIqfBt9QaXxIMjh621JC6XwF75zwTQ7iW45Pm408/NpBQEL8KDjsrdOgSE smteik6tkptpCpkxEwsZDzjYAYEWXDGjgBInCSEOUKv5arslLts= -----END CERTIFICATE-----Generated at Mon Oct 20 09:57:33 2025 by rpki-client