$ rpki-client -vvf repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft File: E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft (raw, json) Hash identifier: KbtVbE8Nm5wF+Zkc+vtnafgx9QnWfU8OqFwYJ43tj/4= Subject key identifier: ED:A2:59:01:55:B7:E8:A8:E8:47:BC:89:49:BA:B8:59:01:E9:1A:1A Authority key identifier: E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61 Certificate issuer: /CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61 Certificate serial: 5EDE4C0FB55BDF84EEF15CEFB010347FE7AAE847 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft Manifest number: 0516 Signing time: Sun 19 Oct 2025 12:31:41 +0000 Manifest this update: Sun 19 Oct 2025 12:26:40 +0000 Manifest next update: Wed 22 Oct 2025 12:42:40 +0000 Files and hashes: 1: 3138332e38312e3135322e302f32312d3234203d3e203234353237.roa (hash: HrGCjeL9LpaajCgOCMCFmtzXiHgvf2onAjSq9sq+a5M=) 2: E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl (hash: lWZ1gAREXOPo5LIQhSqsivygQ72Qs2cnA78c+60GwMY=) 3: 3130332e3134382e34362e302f32332d3234203d3e203234353237.roa (hash: eQEzsyxVfpTHgHfaMJEWpEAU8ae5FhvdVXRN2kONR8w=) 4: 323430353a366334303a3a2f33322d3438203d3e203234353237.roa (hash: sdUNTLR9jp0dwpPELDIKx4SufivRxg0Tg+/QbjfBOQs=) 5: 3230332e3136302e35362e302f32312d3234203d3e203234353237.roa (hash: P99HVIzqHVCWDBqJ4r8v17rUky9V8VmAdjN3/2RrLPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 12:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:de:4c:0f:b5:5b:df:84:ee:f1:5c:ef:b0:10:34:7f:e7:aa:e8:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61 Validity Not Before: Oct 19 12:26:40 2025 GMT Not After : Oct 22 12:42:40 2025 GMT Subject: CN=EDA2590155B7E8A8E847BC8949BAB85901E91A1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bb:25:59:a8:e6:76:bb:c5:f8:75:5d:55:cb: ff:ec:e9:aa:8e:3d:89:83:32:21:a6:f6:96:24:51: 0a:76:ba:42:83:43:55:d5:c0:9f:e2:78:2a:7a:c3: 23:01:74:ad:0a:ff:73:0d:3a:bd:a1:c0:17:57:f5: fc:90:49:b4:04:7c:73:32:f5:6a:3c:b6:9e:01:f8: 5b:6b:2b:ee:68:5e:f7:6b:aa:d7:70:4e:e9:19:b7: 01:34:29:62:59:4e:38:9a:91:9f:66:7f:0d:29:20: c1:92:55:59:b2:01:75:1f:b2:0b:be:cd:bb:b4:75: 9b:55:a9:94:bf:7c:69:3a:4e:26:63:82:0c:0d:d0: 39:13:99:52:7d:15:e3:02:79:61:86:53:be:dd:d5: 40:89:88:5b:39:99:9a:d8:a4:e0:37:80:9a:c3:1a: ae:7f:d6:29:18:80:a3:cb:2b:c8:c5:19:ef:f2:c0: 2a:89:d9:9b:14:8a:99:9f:e8:b3:88:5d:1a:ee:a5: 8e:30:73:e3:58:53:f3:48:d2:77:d7:39:fb:82:a9: 69:56:10:34:8d:8a:93:da:52:5b:89:59:93:5b:85: 39:74:e6:65:fc:16:02:c8:76:ba:b6:1d:a2:89:ba: 6b:36:f5:45:04:fb:91:b5:34:83:e7:77:0e:ca:6f: c9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A2:59:01:55:B7:E8:A8:E8:47:BC:89:49:BA:B8:59:01:E9:1A:1A X509v3 Authority Key Identifier: keyid:E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:72:f6:82:4b:04:6d:eb:74:1f:0d:8b:c9:b6:c2:b7:49:a2: a4:f0:91:6f:5d:20:49:29:4f:9d:93:a3:5d:3f:58:56:bd:8a: 50:a0:5f:ae:02:e1:c7:45:f7:ca:c8:51:7a:fc:55:46:d3:f2: a5:94:c7:98:8f:48:b9:97:36:16:5f:ef:3e:b1:5f:72:ba:98: 91:2c:00:9e:eb:c5:3a:1e:b1:64:4b:38:4d:b5:a2:ac:53:0c: 49:29:9b:bd:a3:4a:23:40:98:70:57:75:3a:b3:96:50:46:da: e1:aa:d5:82:80:56:83:b0:36:4f:a3:9f:10:fd:67:d0:8d:58: c5:b8:9a:d8:e2:bc:87:75:29:89:6d:7e:4c:0c:92:e8:ef:dc: 5e:98:76:67:3f:3e:07:22:b2:b3:ad:22:72:32:f6:6f:5c:1d: 1c:d2:3d:92:fb:98:28:dc:a3:ee:f3:8a:d8:36:03:a7:d6:d5: ee:db:13:84:5e:b2:58:68:c7:9d:2f:da:e1:1e:c1:cf:e9:f6: 4c:b3:4b:38:2f:40:af:79:de:b7:75:20:20:a5:de:fe:5d:cd: 4d:93:7f:10:b0:e6:71:77:dd:45:63:66:6c:a8:f0:f4:66:21: a1:6b:7a:79:d8:4a:db:22:fe:e6:17:f5:7e:51:ae:49:aa:7d: 75:8a:d7:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXt5MD7Vb34Tu8VzvsBA0f+eq6EcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0QTAw NEFCMkM2MTAeFw0yNTEwMTkxMjI2NDBaFw0yNTEwMjIxMjQyNDBaMDMxMTAvBgNV BAMTKEVEQTI1OTAxNTVCN0U4QThFODQ3QkM4OTQ5QkFCODU5MDFFOTFBMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDguyVZqOZ2u8X4dV1Vy//s6aqO PYmDMiGm9pYkUQp2ukKDQ1XVwJ/ieCp6wyMBdK0K/3MNOr2hwBdX9fyQSbQEfHMy 9Wo8tp4B+FtrK+5oXvdrqtdwTukZtwE0KWJZTjiakZ9mfw0pIMGSVVmyAXUfsgu+ zbu0dZtVqZS/fGk6TiZjggwN0DkTmVJ9FeMCeWGGU77d1UCJiFs5mZrYpOA3gJrD Gq5/1ikYgKPLK8jFGe/ywCqJ2ZsUipmf6LOIXRrupY4wc+NYU/NI0nfXOfuCqWlW EDSNipPaUluJWZNbhTl05mX8FgLIdrq2HaKJums29UUE+5G1NIPndw7Kb8lnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7aJZAVW36KjoR7yJSbq4WQHpGhowHwYDVR0j BBgwFoAU6fegqm3Mof99PWFGDVU0oASrLGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmI4N2ZlYi0wZmUyLTQxOGEtYTM3YS1iZTNkZDFmMGU2M2MvMC9FOUY3QTBBQTZE Q0NBMUZGN0QzRDYxNDYwRDU1MzRBMDA0QUIyQzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0QTAwNEFC MkM2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZiODdmZWItMGZlMi00MThhLWEz N2EtYmUzZGQxZjBlNjNjLzAvRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0 QTAwNEFCMkM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxy9oJLBG3rdB8Ni8m2wrdJoqTwkW9dIEkp T52To10/WFa9ilCgX64C4cdF98rIUXr8VUbT8qWUx5iPSLmXNhZf7z6xX3K6mJEs AJ7rxToesWRLOE21oqxTDEkpm72jSiNAmHBXdTqzllBG2uGq1YKAVoOwNk+jnxD9 Z9CNWMW4mtjivId1KYltfkwMkujv3F6Ydmc/PgcisrOtInIy9m9cHRzSPZL7mCjc o+7zitg2A6fW1e7bE4Reslhox50v2uEewc/p9kyzSzgvQK953rd1ICCl3v5dzU2T fxCw5nF33UVjZmyo8PRmIaFrennYStsi/uYX9X5RrkmqfXWK16c= -----END CERTIFICATE-----Generated at Mon Oct 20 09:20:25 2025 by rpki-client