$ rpki-client -vvf repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft File: E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft (raw, json) Hash identifier: mnGEJcNCLyMHmHBn3JKDEH4S0Ufu8/viOnwDi9TjilY= Subject key identifier: B5:F5:A3:E6:F0:A1:48:22:89:D6:94:42:DC:1D:87:B9:91:C1:99:26 Authority key identifier: E9:FC:7A:F3:FF:BA:00:98:63:D1:04:ED:E1:B4:5D:A0:59:25:35:E6 Certificate issuer: /CN=E9FC7AF3FFBA009863D104EDE1B45DA0592535E6 Certificate serial: 6045961EDF52057EB9214B857F368A978896B98E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft Manifest number: 023E Signing time: Mon 20 Oct 2025 03:02:19 +0000 Manifest this update: Mon 20 Oct 2025 02:57:19 +0000 Manifest next update: Thu 23 Oct 2025 07:15:19 +0000 Files and hashes: 1: 3130332e3137352e3233362e302f32332d3234203d3e20313437313231.roa (hash: LFOqzDAyDWWdrBcQS4m60ydnXXk+fQv19GMLbDiq/ow=) 2: E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl (hash: u884bIlmIkONALmICZk8iaq2wobu/wcgA5MOpcSyARw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 07:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:45:96:1e:df:52:05:7e:b9:21:4b:85:7f:36:8a:97:88:96:b9:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9FC7AF3FFBA009863D104EDE1B45DA0592535E6 Validity Not Before: Oct 20 02:57:19 2025 GMT Not After : Oct 23 07:15:19 2025 GMT Subject: CN=B5F5A3E6F0A1482289D69442DC1D87B991C19926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4e:0d:38:2d:a0:b1:1d:f9:0b:39:44:e0:77: 75:9c:e5:83:ab:ec:67:75:f9:20:40:95:77:3a:20: 4f:6a:69:0d:38:dc:7e:50:7f:7d:bc:2e:9f:35:f6: 6b:06:f3:1a:95:b4:42:c8:2c:62:37:10:a5:56:aa: 4d:50:79:f9:07:01:2e:9a:14:fb:89:da:f4:c4:90: e7:24:96:40:f6:78:6f:9c:05:59:14:77:a9:b0:51: a7:7d:19:20:60:2a:37:a2:52:ac:4b:15:5c:74:c6: 96:4b:04:67:96:5e:1d:57:ce:6d:7a:02:05:98:3f: 94:26:ad:ff:a6:db:33:3d:23:eb:c7:d1:20:c1:bc: 0e:11:0a:e8:b7:fb:93:89:a0:ea:41:26:f3:82:91: ce:80:f4:9b:41:ba:ab:23:cd:b6:39:9a:d2:e6:ef: 0e:b1:2d:bd:4d:b6:71:b0:08:06:e1:6f:cb:99:30: a8:b5:ff:53:b7:e0:23:2a:11:b3:20:e7:80:d7:d5: 9d:cb:9c:ed:67:53:42:08:85:3c:32:33:ad:7d:c7: 1a:e0:45:4e:19:11:84:5e:54:51:7b:4b:e8:1c:fe: 9f:84:4d:bd:e9:8f:b0:07:50:a7:25:1b:de:b1:ee: 8b:04:8b:94:68:52:b2:52:8f:c4:59:60:8d:53:6c: 68:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F5:A3:E6:F0:A1:48:22:89:D6:94:42:DC:1D:87:B9:91:C1:99:26 X509v3 Authority Key Identifier: keyid:E9:FC:7A:F3:FF:BA:00:98:63:D1:04:ED:E1:B4:5D:A0:59:25:35:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b4c70a1-5036-450b-b936-5084f78f81ef/0/E9FC7AF3FFBA009863D104EDE1B45DA0592535E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:f1:52:6a:66:fa:f1:8d:77:22:ea:93:11:d6:0f:1e:31:55: b4:bb:ef:40:0b:f7:7c:15:17:c1:94:c7:89:ed:77:db:36:8e: 8e:59:fc:39:eb:f3:ab:e7:ea:ae:bd:ba:ed:37:2b:b6:43:aa: 25:35:ce:89:9c:f3:3b:a0:93:a8:a5:c5:25:1b:11:5d:aa:e8: 31:ad:03:25:db:cb:6a:fd:b8:46:88:98:24:ee:58:9a:7c:91: 0d:bd:db:55:29:8c:a3:cb:4c:a9:ba:b6:ab:59:71:5f:16:26: d6:83:c0:24:87:5e:83:13:25:cc:41:2f:7a:7f:cd:fd:24:d7: 78:68:34:24:03:1c:96:00:a9:e3:e9:b9:9b:96:d3:48:07:27: a0:6c:77:fc:6a:c3:4e:f1:58:4c:d6:d3:ac:56:af:f6:e8:09: 1a:62:bb:bb:4f:2f:c2:c9:2b:f5:cc:5d:0f:50:06:63:57:a8: 73:df:06:4d:f8:45:9d:6b:9a:47:ba:2e:01:5f:8c:e4:6e:32: 85:6a:a4:0d:6a:b4:7f:58:b8:48:95:59:e9:24:fe:b2:97:47: 05:e4:b1:82:b6:83:fb:1b:b6:dd:c6:3f:12:67:4b:50:32:81: e7:7d:8b:82:70:82:df:a7:1d:9e:b1:7e:be:d4:ac:1e:fb:86: 06:28:a8:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYEWWHt9SBX65IUuFfzaKl4iWuY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVEQTA1 OTI1MzVFNjAeFw0yNTEwMjAwMjU3MTlaFw0yNTEwMjMwNzE1MTlaMDMxMTAvBgNV BAMTKEI1RjVBM0U2RjBBMTQ4MjI4OUQ2OTQ0MkRDMUQ4N0I5OTFDMTk5MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDITg04LaCxHfkLOUTgd3Wc5YOr 7Gd1+SBAlXc6IE9qaQ043H5Qf328Lp819msG8xqVtELILGI3EKVWqk1QefkHAS6a FPuJ2vTEkOcklkD2eG+cBVkUd6mwUad9GSBgKjeiUqxLFVx0xpZLBGeWXh1Xzm16 AgWYP5Qmrf+m2zM9I+vH0SDBvA4RCui3+5OJoOpBJvOCkc6A9JtBuqsjzbY5mtLm 7w6xLb1NtnGwCAbhb8uZMKi1/1O34CMqEbMg54DX1Z3LnO1nU0IIhTwyM619xxrg RU4ZEYReVFF7S+gc/p+ETb3pj7AHUKclG96x7osEi5RoUrJSj8RZYI1TbGivAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtfWj5vChSCKJ1pRC3B2HuZHBmSYwHwYDVR0j BBgwFoAU6fx68/+6AJhj0QTt4bRdoFklNeYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YjRjNzBhMS01MDM2LTQ1MGItYjkzNi01MDg0Zjc4ZjgxZWYvMC9FOUZDN0FGM0ZG QkEwMDk4NjNEMTA0RURFMUI0NURBMDU5MjUzNUU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVEQTA1OTI1 MzVFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmI0YzcwYTEtNTAzNi00NTBiLWI5 MzYtNTA4NGY3OGY4MWVmLzAvRTlGQzdBRjNGRkJBMDA5ODYzRDEwNEVERTFCNDVE QTA1OTI1MzVFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfxUmpm+vGNdyLqkxHWDx4xVbS770AL93wV F8GUx4ntd9s2jo5Z/Dnr86vn6q69uu03K7ZDqiU1zomc8zugk6ilxSUbEV2q6DGt AyXby2r9uEaImCTuWJp8kQ2921UpjKPLTKm6tqtZcV8WJtaDwCSHXoMTJcxBL3p/ zf0k13hoNCQDHJYAqePpuZuW00gHJ6Bsd/xqw07xWEzW06xWr/boCRpiu7tPL8LJ K/XMXQ9QBmNXqHPfBk34RZ1rmke6LgFfjORuMoVqpA1qtH9YuEiVWekk/rKXRwXk sYK2g/sbtt3GPxJnS1Ayged9i4Jwgt+nHZ6xfr7UrB77hgYoqHw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:01:17 2025 by rpki-client