$ rpki-client -vvf repo-rpki.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/E380A055DD3B1E364672B9F0DD6852AE31F93906.mft File: E380A055DD3B1E364672B9F0DD6852AE31F93906.mft (raw, json) Hash identifier: 0uXcBxmBNVbockptrVypppF8WhSuLl9AKvUb3YHlA5Q= Subject key identifier: C7:2E:83:8C:CE:8A:7D:B8:6E:DD:B8:13:27:36:CF:69:B5:07:6E:01 Authority key identifier: E3:80:A0:55:DD:3B:1E:36:46:72:B9:F0:DD:68:52:AE:31:F9:39:06 Certificate issuer: /CN=E380A055DD3B1E364672B9F0DD6852AE31F93906 Certificate serial: 3EBBFAE5968BD01A100F64F5B6A4B9E99814BEA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E380A055DD3B1E364672B9F0DD6852AE31F93906.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/E380A055DD3B1E364672B9F0DD6852AE31F93906.mft Manifest number: D9 Signing time: Mon 20 Oct 2025 09:11:13 +0000 Manifest this update: Mon 20 Oct 2025 09:06:13 +0000 Manifest next update: Thu 23 Oct 2025 19:48:13 +0000 Files and hashes: 1: E380A055DD3B1E364672B9F0DD6852AE31F93906.crl (hash: CjcWCKW+vFr5PwmPGdm1bW0cRliYsS6axxEaT/trlyA=) 2: 3136302e32322e37322e302f32342d3234203d3e20313532383033.roa (hash: KXi3wp4OORvn6TsBUOzJaVybFRf6vF3ckUcKEtOB1Ho=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/E380A055DD3B1E364672B9F0DD6852AE31F93906.crl rsync://repo-rpki.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/E380A055DD3B1E364672B9F0DD6852AE31F93906.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E380A055DD3B1E364672B9F0DD6852AE31F93906.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:bb:fa:e5:96:8b:d0:1a:10:0f:64:f5:b6:a4:b9:e9:98:14:be:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E380A055DD3B1E364672B9F0DD6852AE31F93906 Validity Not Before: Oct 20 09:06:13 2025 GMT Not After : Oct 23 19:48:13 2025 GMT Subject: CN=C72E838CCE8A7DB86EDDB8132736CF69B5076E01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:dc:7b:ce:7a:7b:1d:5c:f9:c4:0a:80:11:cc: d2:6b:82:57:0e:9e:ec:b3:1a:f0:28:29:a4:3c:92: ce:ca:aa:25:93:bd:a1:96:8a:f5:36:a4:4f:e8:1d: 91:6b:42:fa:32:e5:31:02:b9:df:4e:18:e4:ae:a5: a3:db:d0:46:7f:cf:9e:25:52:14:49:60:6b:1a:ef: 58:03:5c:a0:23:a7:d6:57:59:e3:58:44:f9:6f:96: 1b:87:46:17:01:9e:0f:09:a9:4b:14:b6:7a:a2:d7: 9d:1d:15:62:ca:4a:58:5f:65:99:ff:39:60:db:9b: 1d:e2:a8:36:32:b7:a2:77:3e:12:24:83:d8:60:d7: 94:cf:3d:da:8d:ba:58:61:fc:da:0f:bd:18:96:db: 1d:6a:0d:7d:a2:ad:d2:c2:c0:5c:2c:0b:8a:c8:87: ef:4a:f3:b9:c1:f2:86:60:97:50:9f:80:95:15:52: 2d:3d:0c:16:c5:92:47:4d:ab:52:3a:8c:94:9f:c6: dc:ee:06:20:72:80:a6:7b:fa:64:1f:4b:12:e8:c1: 87:1c:b6:02:0e:d3:b1:0f:3f:11:93:92:fb:9a:56: 02:e5:e3:b6:c2:d9:45:22:51:1d:1e:24:f9:54:bf: 1e:54:24:7b:d4:d1:6d:d7:cd:be:4f:9a:16:1c:5d: 86:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:2E:83:8C:CE:8A:7D:B8:6E:DD:B8:13:27:36:CF:69:B5:07:6E:01 X509v3 Authority Key Identifier: keyid:E3:80:A0:55:DD:3B:1E:36:46:72:B9:F0:DD:68:52:AE:31:F9:39:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/E380A055DD3B1E364672B9F0DD6852AE31F93906.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E380A055DD3B1E364672B9F0DD6852AE31F93906.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/E380A055DD3B1E364672B9F0DD6852AE31F93906.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:44:37:c0:2d:be:6d:1b:1b:b7:3d:50:77:dd:72:0c:08:66: f8:07:a4:4f:4f:3b:83:ce:09:75:b7:f8:d0:47:00:b9:3f:5c: 34:c5:00:84:fc:5b:4a:2a:e0:dd:7d:a7:f1:3f:74:d4:92:5a: f9:99:fa:b0:a1:28:65:ac:f2:94:f3:6b:78:ae:6f:c1:ac:5d: 90:88:3a:26:91:cb:04:9f:55:bb:03:88:e8:bf:25:38:d8:b4: 97:a9:be:5a:6a:34:77:58:a2:e3:b2:71:e5:b7:f9:55:3e:cd: 8c:4e:1c:54:d4:01:26:24:27:3d:2d:bc:c6:f0:b7:30:5f:93: a1:1d:98:d9:8d:8e:74:07:a1:93:f4:0d:5a:ef:8f:ce:b4:ac: ee:97:18:d1:c4:a2:b1:19:be:3f:d6:36:44:89:bd:74:b1:70: 48:8c:9c:e5:fd:5c:94:21:1c:3d:8c:27:c0:93:05:0d:52:d0: 09:81:ae:86:bc:c3:c0:9e:de:f0:1e:e5:b7:58:59:47:04:f9: e3:41:6f:8a:fd:03:7c:98:fc:cb:df:66:40:7b:99:d1:e4:5c: 2f:20:a4:7b:09:4f:94:cb:18:33:be:1c:d1:9a:f7:54:12:d1: be:d1:f6:ca:7e:8b:67:37:b2:61:94:d1:b1:0b:18:19:f8:f2: 02:f5:f0:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPrv65ZaL0BoQD2T1tqS56ZgUvqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM4MEEwNTVERDNCMUUzNjQ2NzJCOUYwREQ2ODUyQUUz MUY5MzkwNjAeFw0yNTEwMjAwOTA2MTNaFw0yNTEwMjMxOTQ4MTNaMDMxMTAvBgNV BAMTKEM3MkU4MzhDQ0U4QTdEQjg2RUREQjgxMzI3MzZDRjY5QjUwNzZFMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd3HvOensdXPnECoARzNJrglcO nuyzGvAoKaQ8ks7KqiWTvaGWivU2pE/oHZFrQvoy5TECud9OGOSupaPb0EZ/z54l UhRJYGsa71gDXKAjp9ZXWeNYRPlvlhuHRhcBng8JqUsUtnqi150dFWLKSlhfZZn/ OWDbmx3iqDYyt6J3PhIkg9hg15TPPdqNulhh/NoPvRiW2x1qDX2irdLCwFwsC4rI h+9K87nB8oZgl1CfgJUVUi09DBbFkkdNq1I6jJSfxtzuBiBygKZ7+mQfSxLowYcc tgIO07EPPxGTkvuaVgLl47bC2UUiUR0eJPlUvx5UJHvU0W3Xzb5PmhYcXYbTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxy6DjM6Kfbhu3bgTJzbPabUHbgEwHwYDVR0j BBgwFoAU44CgVd07HjZGcrnw3WhSrjH5OQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmYyNjBjZS0yM2Y1LTQwOTUtODJkYi1lZjcxMTRlNDcxYjIvMC9FMzgwQTA1NURE M0IxRTM2NDY3MkI5RjBERDY4NTJBRTMxRjkzOTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTM4MEEwNTVERDNCMUUzNjQ2NzJCOUYwREQ2ODUyQUUzMUY5 MzkwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJmMjYwY2UtMjNmNS00MDk1LTgy ZGItZWY3MTE0ZTQ3MWIyLzAvRTM4MEEwNTVERDNCMUUzNjQ2NzJCOUYwREQ2ODUy QUUzMUY5MzkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxEN8Atvm0bG7c9UHfdcgwIZvgHpE9PO4PO CXW3+NBHALk/XDTFAIT8W0oq4N19p/E/dNSSWvmZ+rChKGWs8pTza3iub8GsXZCI OiaRywSfVbsDiOi/JTjYtJepvlpqNHdYouOyceW3+VU+zYxOHFTUASYkJz0tvMbw tzBfk6EdmNmNjnQHoZP0DVrvj860rO6XGNHEorEZvj/WNkSJvXSxcEiMnOX9XJQh HD2MJ8CTBQ1S0AmBroa8w8Ce3vAe5bdYWUcE+eNBb4r9A3yY/MvfZkB7mdHkXC8g pHsJT5TLGDO+HNGa91QS0b7R9sp+i2c3smGU0bELGBn48gL18Fo= -----END CERTIFICATE-----Generated at Mon Oct 20 11:07:20 2025 by rpki-client