$ rpki-client -vvf repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft File: E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft (raw, json) Hash identifier: Ch4gS4QdqdVK+KukV4mMtAF8zW8gqe9p2ZyO7QtMcjs= Subject key identifier: BD:DD:5B:EF:45:D4:7D:5E:66:8A:91:00:7D:13:A4:CA:55:03:CC:17 Authority key identifier: E1:B7:08:FE:CC:3E:90:64:3F:33:B8:31:1E:29:F1:B4:6F:E9:2B:7F Certificate issuer: /CN=E1B708FECC3E90643F33B8311E29F1B46FE92B7F Certificate serial: 404C5BA2C02B58DE608DA2FF8D23E6DFFDA58F42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft Manifest number: 01A3 Signing time: Sat 18 Oct 2025 18:21:39 +0000 Manifest this update: Sat 18 Oct 2025 18:16:39 +0000 Manifest next update: Wed 22 Oct 2025 00:39:39 +0000 Files and hashes: 1: E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl (hash: ZWGpHEQSdnaAD8xU93oA/LowamwNnhEwbNbATFtxoIM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 00:39:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:4c:5b:a2:c0:2b:58:de:60:8d:a2:ff:8d:23:e6:df:fd:a5:8f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1B708FECC3E90643F33B8311E29F1B46FE92B7F Validity Not Before: Oct 18 18:16:39 2025 GMT Not After : Oct 22 00:39:39 2025 GMT Subject: CN=BDDD5BEF45D47D5E668A91007D13A4CA5503CC17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b2:05:fd:8f:0b:01:6d:e1:7e:8a:a5:54:a7: 1b:1f:37:2e:9d:33:91:7f:0b:e7:cc:f9:e9:98:50: 40:d6:9f:84:63:c5:c8:fd:4e:a0:bf:f5:df:4b:29: dc:1c:0e:f2:6f:14:85:fb:91:7d:2e:7b:99:a7:bb: 75:a0:8a:83:be:a1:fb:0f:2f:26:0e:ee:98:a5:01: 95:e4:da:c7:3b:fd:08:e2:40:d8:44:86:96:58:2b: 9a:5f:16:ce:54:43:35:76:10:b6:0a:96:c9:7c:12: 03:cf:f3:72:be:ad:56:5b:54:11:87:71:15:83:b7: 0e:4d:24:4b:6b:23:c8:76:25:88:16:06:60:4f:24: bd:a3:89:56:e8:12:d0:f4:6a:c8:1f:f1:01:12:83: ec:78:31:80:0b:19:bd:09:f1:08:02:76:b8:e7:b6: 42:f7:94:61:67:fb:47:84:02:7f:ac:86:95:f4:21: 38:3e:ff:60:86:7b:a0:63:c9:3d:1e:78:b0:9e:a0: b1:f8:aa:ad:4c:5a:30:d8:70:01:76:3f:93:6a:2c: b3:22:c9:77:af:4e:ba:c5:39:44:c1:5e:46:06:2d: 01:93:89:b9:72:3c:73:37:58:06:0b:ef:14:d0:fb: 80:89:5a:50:18:91:96:77:27:64:c4:33:20:f2:ad: 29:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DD:5B:EF:45:D4:7D:5E:66:8A:91:00:7D:13:A4:CA:55:03:CC:17 X509v3 Authority Key Identifier: keyid:E1:B7:08:FE:CC:3E:90:64:3F:33:B8:31:1E:29:F1:B4:6F:E9:2B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:d6:dc:5f:89:c0:d4:ac:b8:c4:7c:c7:1b:b5:ac:3b:8b:4d: 0a:6e:91:e7:bc:c5:36:f6:5d:7f:48:15:5b:52:65:7a:66:af: 12:20:c0:0b:86:55:9b:2d:5b:02:14:18:0e:c7:63:c6:16:9c: bc:70:6c:32:c9:7e:fc:06:6f:31:33:e8:4c:2a:12:8a:f5:70: ec:80:bd:8f:43:17:15:3a:65:b4:c8:a2:0d:68:58:16:06:50: df:fa:10:d5:01:38:d8:f1:fa:f7:6e:0e:77:d8:d8:64:73:47: 4b:8c:6b:b8:75:f0:1f:10:65:67:83:a6:4d:10:f7:24:8b:e5: b1:3c:03:57:42:dc:45:04:e0:ea:6b:0c:20:7e:24:97:dc:04: 17:2f:2f:f3:6f:05:2f:4a:49:eb:e3:df:57:e2:54:a8:80:8e: 2f:8e:85:0e:b0:32:f1:18:63:d5:95:1e:2e:a1:57:4d:b7:99: e4:ee:c0:8f:2f:a2:8f:42:51:c3:a9:9f:69:5d:0c:84:11:72: 23:de:09:03:7a:14:2c:2a:3a:17:4e:14:9d:bf:a8:51:9e:ac: 80:e2:d2:fd:70:6b:76:d4:b0:fa:0f:38:a5:9a:9c:8e:18:9d: c8:37:1e:8f:c1:28:e6:66:3f:08:f9:01:67:6c:58:a1:70:7a: 25:84:8e:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQExbosArWN5gjaL/jSPm3/2lj0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYxQjQ2 RkU5MkI3RjAeFw0yNTEwMTgxODE2MzlaFw0yNTEwMjIwMDM5MzlaMDMxMTAvBgNV BAMTKEJEREQ1QkVGNDVENDdENUU2NjhBOTEwMDdEMTNBNENBNTUwM0NDMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4sgX9jwsBbeF+iqVUpxsfNy6d M5F/C+fM+emYUEDWn4Rjxcj9TqC/9d9LKdwcDvJvFIX7kX0ue5mnu3WgioO+ofsP LyYO7pilAZXk2sc7/QjiQNhEhpZYK5pfFs5UQzV2ELYKlsl8EgPP83K+rVZbVBGH cRWDtw5NJEtrI8h2JYgWBmBPJL2jiVboEtD0asgf8QESg+x4MYALGb0J8QgCdrjn tkL3lGFn+0eEAn+shpX0ITg+/2CGe6BjyT0eeLCeoLH4qq1MWjDYcAF2P5NqLLMi yXevTrrFOUTBXkYGLQGTiblyPHM3WAYL7xTQ+4CJWlAYkZZ3J2TEMyDyrSlrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvd1b70XUfV5mipEAfROkylUDzBcwHwYDVR0j BBgwFoAU4bcI/sw+kGQ/M7gxHinxtG/pK38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjRkMWMzNi00YTMxLTQ4NTctOWUzNi0wZGRmM2Q2OTFlYjUvMC9FMUI3MDhGRUND M0U5MDY0M0YzM0I4MzExRTI5RjFCNDZGRTkyQjdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYxQjQ2RkU5 MkI3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmY0ZDFjMzYtNGEzMS00ODU3LTll MzYtMGRkZjNkNjkxZWI1LzAvRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYx QjQ2RkU5MkI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL/W3F+JwNSsuMR8xxu1rDuLTQpukee8xTb2 XX9IFVtSZXpmrxIgwAuGVZstWwIUGA7HY8YWnLxwbDLJfvwGbzEz6EwqEor1cOyA vY9DFxU6ZbTIog1oWBYGUN/6ENUBONjx+vduDnfY2GRzR0uMa7h18B8QZWeDpk0Q 9ySL5bE8A1dC3EUE4OprDCB+JJfcBBcvL/NvBS9KSevj31fiVKiAji+OhQ6wMvEY Y9WVHi6hV023meTuwI8voo9CUcOpn2ldDIQRciPeCQN6FCwqOhdOFJ2/qFGerIDi 0v1wa3bUsPoPOKWanI4Yncg3Ho/BKOZmPwj5AWdsWKFweiWEjsw= -----END CERTIFICATE-----Generated at Mon Oct 20 06:50:07 2025 by rpki-client