$ rpki-client -vvf repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft File: E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft (raw, json) Hash identifier: WLuKGOiqqawBz9ZCThiCSzaBdecwSxtW70FcNPsEiVE= Subject key identifier: 17:12:54:66:80:A4:3B:DE:9E:5A:13:D3:87:5D:86:9A:ED:4F:87:24 Authority key identifier: E0:AC:9F:73:54:2C:4F:A1:E5:2F:9E:56:5E:ED:95:2D:45:28:AB:D5 Certificate issuer: /CN=E0AC9F73542C4FA1E52F9E565EED952D4528ABD5 Certificate serial: 0E5856DE478A28E77AB8C320BC22896224F79FB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft Manifest number: 01A8 Signing time: Sat 18 Oct 2025 06:21:53 +0000 Manifest this update: Sat 18 Oct 2025 06:16:53 +0000 Manifest next update: Tue 21 Oct 2025 14:53:53 +0000 Files and hashes: 1: 3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa (hash: bfGWWBYLFdBS0ipwVQx4h+wBe1EIqVM2TX2GM2uhPGQ=) 2: E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl (hash: FnRKyjhW0uYiUpuAZ88C36kRXoSkzaN3BTlNe1pdHRE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 14:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:58:56:de:47:8a:28:e7:7a:b8:c3:20:bc:22:89:62:24:f7:9f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0AC9F73542C4FA1E52F9E565EED952D4528ABD5 Validity Not Before: Oct 18 06:16:53 2025 GMT Not After : Oct 21 14:53:53 2025 GMT Subject: CN=1712546680A43BDE9E5A13D3875D869AED4F8724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:61:9a:70:ed:c5:4f:63:92:c1:e2:1a:49:8b: 7e:eb:63:f1:7e:0d:64:84:2d:f8:ac:b0:c4:7d:f7: 40:8c:94:93:ae:72:f0:2a:a6:93:74:8f:bf:8c:1d: 8b:b2:e5:fd:a2:0a:e0:4d:3b:11:e8:e8:eb:7d:16: 22:3e:3b:4f:49:86:25:c6:d0:bc:eb:c1:7f:30:26: f8:65:63:d6:69:f7:20:96:12:15:32:8a:dc:76:c1: ce:01:0a:1f:13:62:1e:2c:5b:b3:c6:cc:40:85:80: e5:f0:93:b8:a9:45:2f:c4:64:ea:56:01:9d:cb:65: f7:7d:9a:9f:41:60:bc:a0:7c:6c:c9:71:36:e4:d6: f2:ed:a1:20:af:67:e6:2a:bf:46:73:f8:4f:5e:67: 61:4b:01:59:9e:b3:a1:75:84:98:9a:29:2e:33:33: 4e:32:ee:d9:70:cc:86:1e:f4:6e:6e:f1:3b:86:86: d3:1a:91:69:97:3d:05:17:72:26:64:84:50:c5:ad: 4f:f7:91:9a:36:a9:24:c2:fa:12:4a:ed:ab:1a:8a: 5e:38:a0:fc:66:70:75:88:e2:81:a9:13:fd:3c:40: f6:a2:d3:72:11:fb:fc:a2:e3:05:00:89:95:ea:25: 62:a1:e5:59:6e:99:12:b8:31:84:df:35:bc:e5:63: 4a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:12:54:66:80:A4:3B:DE:9E:5A:13:D3:87:5D:86:9A:ED:4F:87:24 X509v3 Authority Key Identifier: keyid:E0:AC:9F:73:54:2C:4F:A1:E5:2F:9E:56:5E:ED:95:2D:45:28:AB:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:99:ee:8c:27:c5:3c:d8:71:77:63:c3:62:a8:cb:f0:ce:d2: f9:47:79:93:bd:d8:b6:aa:87:69:98:80:58:64:d5:14:e1:cd: f9:99:e8:05:b1:0b:49:10:f0:dd:cc:0f:d8:4c:eb:ff:fe:3e: 10:fd:96:78:0f:af:f0:61:5b:d7:bf:01:61:34:36:ee:9a:36: 29:ee:d0:a2:d0:30:56:10:c7:95:58:18:71:e4:97:73:bb:09: a8:91:a9:b2:8a:2d:8d:96:01:5f:e5:a5:49:c0:8d:a6:ca:04: c2:90:57:2d:74:bc:46:9a:43:74:c3:7c:8e:a4:db:1d:de:b0: 57:99:97:42:16:e2:8d:91:2b:14:43:25:da:0a:a0:58:14:23: ac:29:e5:74:0b:61:82:c5:87:d9:25:48:ce:d3:1b:63:fc:0a: c2:56:af:19:fb:09:89:f1:30:89:35:ff:f9:d3:82:90:8f:d0: f8:f1:48:96:e9:ca:58:e4:57:81:0c:93:50:47:01:42:d7:16: ae:ad:01:34:eb:91:fd:02:45:4f:f7:ce:ce:75:8d:e5:7f:1c: da:b5:41:ff:35:5f:75:19:39:4c:ec:8d:b3:9f:2c:43:32:d9: 9a:36:19:8c:38:32:36:ec:31:ab:f8:c1:8d:8d:f7:15:d7:f4: 45:90:fc:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDlhW3keKKOd6uMMgvCKJYiT3n7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBBQzlGNzM1NDJDNEZBMUU1MkY5RTU2NUVFRDk1MkQ0 NTI4QUJENTAeFw0yNTEwMTgwNjE2NTNaFw0yNTEwMjExNDUzNTNaMDMxMTAvBgNV BAMTKDE3MTI1NDY2ODBBNDNCREU5RTVBMTNEMzg3NUQ4NjlBRUQ0Rjg3MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEYZpw7cVPY5LB4hpJi37rY/F+ DWSELfissMR990CMlJOucvAqppN0j7+MHYuy5f2iCuBNOxHo6Ot9FiI+O09JhiXG 0LzrwX8wJvhlY9Zp9yCWEhUyitx2wc4BCh8TYh4sW7PGzECFgOXwk7ipRS/EZOpW AZ3LZfd9mp9BYLygfGzJcTbk1vLtoSCvZ+Yqv0Zz+E9eZ2FLAVmes6F1hJiaKS4z M04y7tlwzIYe9G5u8TuGhtMakWmXPQUXciZkhFDFrU/3kZo2qSTC+hJK7asail44 oPxmcHWI4oGpE/08QPai03IR+/yi4wUAiZXqJWKh5VlumRK4MYTfNbzlY0o9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFxJUZoCkO96eWhPTh12Gmu1PhyQwHwYDVR0j BBgwFoAU4Kyfc1QsT6HlL55WXu2VLUUoq9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWYwMDEzYi01OWE2LTQ3MzMtODlmOC0yOGZhM2Q4ODU3OWYvMC9FMEFDOUY3MzU0 MkM0RkExRTUyRjlFNTY1RUVEOTUyRDQ1MjhBQkQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBBQzlGNzM1NDJDNEZBMUU1MkY5RTU2NUVFRDk1MkQ0NTI4 QUJENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmMDAxM2ItNTlhNi00NzMzLTg5 ZjgtMjhmYTNkODg1NzlmLzAvRTBBQzlGNzM1NDJDNEZBMUU1MkY5RTU2NUVFRDk1 MkQ0NTI4QUJENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGiZ7ownxTzYcXdjw2Koy/DO0vlHeZO92Laq h2mYgFhk1RThzfmZ6AWxC0kQ8N3MD9hM6//+PhD9lngPr/BhW9e/AWE0Nu6aNinu 0KLQMFYQx5VYGHHkl3O7CaiRqbKKLY2WAV/lpUnAjabKBMKQVy10vEaaQ3TDfI6k 2x3esFeZl0IW4o2RKxRDJdoKoFgUI6wp5XQLYYLFh9klSM7TG2P8CsJWrxn7CYnx MIk1//nTgpCP0PjxSJbpyljkV4EMk1BHAULXFq6tATTrkf0CRU/3zs51jeV/HNq1 Qf81X3UZOUzsjbOfLEMy2Zo2GYw4MjbsMav4wY2N9xXX9EWQ/IA= -----END CERTIFICATE-----Generated at Mon Oct 20 13:10:51 2025 by rpki-client