$ rpki-client -vvf repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft File: 0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft (raw, json) Hash identifier: VRcvsFMJQ3SnXzxRZmQYRzhL6AqT+EiO7fR/N1IsV2s= Subject key identifier: 1E:8D:97:E4:C9:69:DF:D8:41:75:4D:00:9D:7C:10:96:84:D6:4F:AE Authority key identifier: 0E:1F:EF:A1:7B:36:15:40:F7:3B:24:95:37:DF:0B:5C:4F:93:B4:B9 Certificate issuer: /CN=0E1FEFA17B361540F73B249537DF0B5C4F93B4B9 Certificate serial: 3C49EDEC57B383B0AAA0E19B1176A20B9EA198AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft Manifest number: C4 Signing time: Sun 19 Oct 2025 20:21:02 +0000 Manifest this update: Sun 19 Oct 2025 20:16:02 +0000 Manifest next update: Wed 22 Oct 2025 23:44:02 +0000 Files and hashes: 1: 33362e35302e39362e302f32342d3234203d3e20313532333536.roa (hash: 0YTgb847tvQJ6aYcLp7rUu/koq2efZafX5EfBrU5MeY=) 2: 0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.crl (hash: Pvx8dae4LJsw86WPWl1pwk7B67CQlOEiXS+ZWQaE6Io=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.crl rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 23:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:49:ed:ec:57:b3:83:b0:aa:a0:e1:9b:11:76:a2:0b:9e:a1:98:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E1FEFA17B361540F73B249537DF0B5C4F93B4B9 Validity Not Before: Oct 19 20:16:02 2025 GMT Not After : Oct 22 23:44:02 2025 GMT Subject: CN=1E8D97E4C969DFD841754D009D7C109684D64FAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:95:53:e0:28:fb:29:63:de:aa:7c:c0:a8:7e: 77:20:be:d6:4b:7e:e3:eb:f0:9b:a7:ce:e9:a5:b3: 0b:30:32:d8:8c:42:de:f7:cc:8f:ad:76:7a:e0:e6: b4:a3:52:88:54:65:ee:38:e4:f2:e7:15:74:24:bb: ad:eb:59:4e:44:41:ff:07:ca:f4:04:74:a6:28:58: a8:88:75:44:b5:f1:76:07:6a:b4:a4:ee:02:44:69: e9:cd:a4:90:20:01:f3:70:1a:1c:4b:c9:36:48:fc: 30:5b:00:13:d7:6e:3e:4a:80:de:ef:20:a3:34:ed: 14:b0:fb:32:13:0f:2d:24:54:3d:ec:ad:f5:db:f8: 9f:dc:c5:5a:16:e5:48:98:32:82:bb:e9:f4:01:65: 5f:dd:84:bf:3c:53:ce:7c:d5:9a:c5:11:30:c4:e2: c9:a1:78:3a:cf:7a:ad:c9:94:c0:9a:91:0b:7e:9a: 35:e8:b5:53:8c:13:14:8e:98:53:21:95:5c:73:60: 59:a3:08:8a:17:a7:72:3c:e9:3f:ec:9d:94:e2:06: f4:c1:94:94:7f:fb:56:53:59:0e:59:7b:61:a0:90: 1f:42:99:0c:24:43:43:f3:ae:60:0a:3c:20:90:e3: c4:eb:df:39:26:98:2a:2e:5a:db:d9:56:e6:e1:e3: d6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:8D:97:E4:C9:69:DF:D8:41:75:4D:00:9D:7C:10:96:84:D6:4F:AE X509v3 Authority Key Identifier: keyid:0E:1F:EF:A1:7B:36:15:40:F7:3B:24:95:37:DF:0B:5C:4F:93:B4:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:df:22:e3:96:62:29:6e:e6:29:b5:3f:03:54:a0:6f:59:12: 92:87:bc:ee:bb:7e:31:12:b9:f4:c5:76:ea:a2:c3:43:49:79: de:70:02:98:a3:ab:ea:4a:59:a1:00:15:80:a0:9d:be:72:e0: 48:1f:26:e4:28:ff:d6:83:99:51:76:92:66:86:ad:29:36:45: 70:de:05:f0:9d:aa:9f:54:c1:5e:b8:7c:a2:b8:6d:ae:60:10: 35:34:45:a5:77:fd:f1:1e:25:c5:d3:cc:db:6b:b9:64:7e:42: b3:f3:e0:67:df:ea:b1:76:4d:f0:71:d9:f0:64:d0:5b:74:e7: 54:43:37:d2:94:a5:61:03:2b:e7:fd:96:8f:ba:33:68:76:b0: 98:a6:e8:13:6d:58:71:76:81:ba:9f:7a:91:6e:bd:d7:51:39: 25:43:f7:a5:dd:23:88:39:ac:40:82:93:5b:0b:c8:8d:fa:5c: 4b:81:4b:54:75:06:b7:92:45:33:d3:47:49:a8:04:52:ce:db: 0a:b9:55:84:6d:a1:4e:63:04:b2:e0:ce:e2:bf:c2:c7:b4:51: c4:49:60:e3:66:e3:34:49:a2:71:6f:cb:24:ec:0d:6d:a6:a7: cc:50:45:56:34:57:3d:39:20:0d:7b:3e:3b:84:23:83:ac:13: cd:ca:8b:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPEnt7Fezg7CqoOGbEXaiC56hmK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUxRkVGQTE3QjM2MTU0MEY3M0IyNDk1MzdERjBCNUM0 RjkzQjRCOTAeFw0yNTEwMTkyMDE2MDJaFw0yNTEwMjIyMzQ0MDJaMDMxMTAvBgNV BAMTKDFFOEQ5N0U0Qzk2OURGRDg0MTc1NEQwMDlEN0MxMDk2ODRENjRGQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAlVPgKPspY96qfMCofncgvtZL fuPr8JunzumlswswMtiMQt73zI+tdnrg5rSjUohUZe445PLnFXQku63rWU5EQf8H yvQEdKYoWKiIdUS18XYHarSk7gJEaenNpJAgAfNwGhxLyTZI/DBbABPXbj5KgN7v IKM07RSw+zITDy0kVD3srfXb+J/cxVoW5UiYMoK76fQBZV/dhL88U8581ZrFETDE 4smheDrPeq3JlMCakQt+mjXotVOMExSOmFMhlVxzYFmjCIoXp3I86T/snZTiBvTB lJR/+1ZTWQ5Ze2GgkB9CmQwkQ0PzrmAKPCCQ48Tr3zkmmCouWtvZVubh49Z5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHo2X5Mlp39hBdU0AnXwQloTWT64wHwYDVR0j BBgwFoAUDh/voXs2FUD3OySVN98LXE+TtLkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDkwZDg2Yi0wYjBkLTQ1NmYtODQxYS1iZmRiOWQ4MDdmYjcvMC8wRTFGRUZBMTdC MzYxNTQwRjczQjI0OTUzN0RGMEI1QzRGOTNCNEI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEUxRkVGQTE3QjM2MTU0MEY3M0IyNDk1MzdERjBCNUM0Rjkz QjRCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ5MGQ4NmItMGIwZC00NTZmLTg0 MWEtYmZkYjlkODA3ZmI3LzAvMEUxRkVGQTE3QjM2MTU0MEY3M0IyNDk1MzdERjBC NUM0RjkzQjRCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjfIuOWYilu5im1PwNUoG9ZEpKHvO67fjES ufTFduqiw0NJed5wApijq+pKWaEAFYCgnb5y4EgfJuQo/9aDmVF2kmaGrSk2RXDe BfCdqp9UwV64fKK4ba5gEDU0RaV3/fEeJcXTzNtruWR+QrPz4Gff6rF2TfBx2fBk 0Ft051RDN9KUpWEDK+f9lo+6M2h2sJim6BNtWHF2gbqfepFuvddROSVD96XdI4g5 rECCk1sLyI36XEuBS1R1BreSRTPTR0moBFLO2wq5VYRtoU5jBLLgzuK/wse0UcRJ YONm4zRJonFvyyTsDW2mp8xQRVY0Vz05IA17PjuEI4OsE83Ki7Y= -----END CERTIFICATE-----Generated at Mon Oct 20 09:38:40 2025 by rpki-client