$ rpki-client -vvf repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft File: EC39D766063B56E5EA4DBFB2A502298FB995956A.mft (raw, json) Hash identifier: HnaWaZe6V1tz8nc5IYdSTcy16EWt6DtPLCoofHoTz6o= Subject key identifier: 99:41:8E:36:19:09:BB:66:14:E0:96:BE:E3:4E:1B:10:87:54:16:35 Authority key identifier: EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A Certificate issuer: /CN=EC39D766063B56E5EA4DBFB2A502298FB995956A Certificate serial: 67E863A117EA00974F8F324FB5E520C4C53A1BA9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft Manifest number: 0517 Signing time: Sat 18 Oct 2025 18:30:38 +0000 Manifest this update: Sat 18 Oct 2025 18:25:38 +0000 Manifest next update: Tue 21 Oct 2025 22:01:38 +0000 Files and hashes: 1: EC39D766063B56E5EA4DBFB2A502298FB995956A.crl (hash: KoWD9RVt268bl2R+4iLcGw5P28GivwAGNzTunYn/4bc=) 2: 3130332e3133392e32352e302f32342d3234203d3e20313338383738.roa (hash: fXYsqxCjsvIrOq+7nStBZ2/w2ahyZCjmKRe5J8m8wVg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 22:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e8:63:a1:17:ea:00:97:4f:8f:32:4f:b5:e5:20:c4:c5:3a:1b:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC39D766063B56E5EA4DBFB2A502298FB995956A Validity Not Before: Oct 18 18:25:38 2025 GMT Not After : Oct 21 22:01:38 2025 GMT Subject: CN=99418E361909BB6614E096BEE34E1B1087541635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3a:3c:c5:6c:31:75:6d:a8:29:cf:a4:4b:0c: a0:9a:bf:08:c4:cf:d0:38:1e:99:03:98:6d:64:b8: 7a:22:f9:f9:b9:d7:66:69:91:23:43:c9:8d:98:31: 2d:53:d0:f9:68:b6:0d:40:a4:0c:b7:08:b4:0a:d6: 01:ab:ee:52:3b:40:dd:99:a0:aa:06:4d:4f:ed:79: 6c:11:62:b0:56:6c:7c:e5:b5:44:a9:83:0c:0e:d3: 85:34:43:90:86:51:70:4c:1d:8e:d8:45:a8:4f:07: 33:4a:f6:c8:87:f6:a7:20:5c:80:5e:17:e9:0c:da: 63:c1:13:c0:06:f6:35:4f:95:e0:9d:5c:7f:ea:7d: 19:cc:04:b0:8c:36:9d:39:71:95:e4:82:5e:55:19: f4:c9:8a:59:e5:a7:28:77:4e:b5:69:f6:76:65:b2: 12:80:5a:c3:b8:0b:49:99:9b:2b:1d:98:ae:36:0b: c4:93:43:71:3d:71:e1:ee:77:e5:bf:65:d4:4e:43: f3:06:27:3f:81:a4:69:04:b6:87:b3:d9:90:01:0d: 0b:2d:38:bf:96:d2:34:28:c6:ec:01:6f:68:bd:d7: d7:32:7f:60:70:04:1b:c9:c2:57:d9:84:83:9b:a3: 95:91:a9:62:8e:f0:a5:b1:85:5d:88:78:10:08:9a: 87:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:41:8E:36:19:09:BB:66:14:E0:96:BE:E3:4E:1B:10:87:54:16:35 X509v3 Authority Key Identifier: keyid:EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:9e:a2:f6:1f:90:cd:08:24:30:48:64:b4:bd:f7:64:ea:b2: 77:c9:f6:51:16:e9:2b:5d:c3:07:9d:21:0b:4a:f8:c9:54:75: bc:ed:00:ed:e3:db:c8:e3:aa:6b:19:16:e2:7e:5c:d9:77:03: b5:71:08:49:17:1a:24:e2:97:e3:b6:35:aa:1d:15:0d:30:a7: 77:f5:54:0b:a5:57:f3:69:7c:f1:dc:a9:6e:03:fa:c0:22:82: a1:81:2c:7d:3a:48:11:d4:ac:9b:2c:f0:32:59:ab:14:30:83: 83:62:17:21:49:7d:6f:51:62:4d:8e:c8:ba:5b:46:a9:15:93: 7f:79:77:be:bd:8e:52:19:f1:05:7e:34:c8:8e:28:52:cd:6f: 25:f4:c4:c2:3a:ce:26:eb:7a:1c:18:fe:04:29:dd:70:64:cf: 9c:3c:50:c8:73:58:5d:a5:82:ae:88:6b:66:0f:3b:c0:61:56: 17:cc:b0:09:02:20:ad:14:15:19:5c:c3:41:03:04:b6:a3:b5: c6:fd:28:02:05:21:f3:53:cf:fd:30:7e:5e:a3:37:8c:d0:9b: fe:ea:ce:dd:f5:3f:8a:af:5d:d5:9b:12:61:1c:06:bd:57:5c: a4:78:5c:35:5e:72:6c:5d:2f:a5:17:4d:2f:e4:8b:44:74:2f: 1d:90:80:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ+hjoRfqAJdPjzJPteUgxMU6G6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5OEZC OTk1OTU2QTAeFw0yNTEwMTgxODI1MzhaFw0yNTEwMjEyMjAxMzhaMDMxMTAvBgNV BAMTKDk5NDE4RTM2MTkwOUJCNjYxNEUwOTZCRUUzNEUxQjEwODc1NDE2MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNOjzFbDF1bagpz6RLDKCavwjE z9A4HpkDmG1kuHoi+fm512ZpkSNDyY2YMS1T0Plotg1ApAy3CLQK1gGr7lI7QN2Z oKoGTU/teWwRYrBWbHzltUSpgwwO04U0Q5CGUXBMHY7YRahPBzNK9siH9qcgXIBe F+kM2mPBE8AG9jVPleCdXH/qfRnMBLCMNp05cZXkgl5VGfTJilnlpyh3TrVp9nZl shKAWsO4C0mZmysdmK42C8STQ3E9ceHud+W/ZdROQ/MGJz+BpGkEtoez2ZABDQst OL+W0jQoxuwBb2i919cyf2BwBBvJwlfZhIObo5WRqWKO8KWxhV2IeBAImofTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmUGONhkJu2YU4Ja+404bEIdUFjUwHwYDVR0j BBgwFoAU7DnXZgY7VuXqTb+ypQIpj7mVlWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2ZlNDI1NS0xZDkxLTRmY2MtYmNlNC04YTQyYWRmZTNjMjkvMC9FQzM5RDc2NjA2 M0I1NkU1RUE0REJGQjJBNTAyMjk4RkI5OTU5NTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5OEZCOTk1 OTU2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNmZTQyNTUtMWQ5MS00ZmNjLWJj ZTQtOGE0MmFkZmUzYzI5LzAvRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5 OEZCOTk1OTU2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFaeovYfkM0IJDBIZLS992TqsnfJ9lEW6Std wwedIQtK+MlUdbztAO3j28jjqmsZFuJ+XNl3A7VxCEkXGiTil+O2NaodFQ0wp3f1 VAulV/NpfPHcqW4D+sAigqGBLH06SBHUrJss8DJZqxQwg4NiFyFJfW9RYk2OyLpb RqkVk395d769jlIZ8QV+NMiOKFLNbyX0xMI6zibrehwY/gQp3XBkz5w8UMhzWF2l gq6Ia2YPO8BhVhfMsAkCIK0UFRlcw0EDBLajtcb9KAIFIfNTz/0wfl6jN4zQm/7q zt31P4qvXdWbEmEcBr1XXKR4XDVecmxdL6UXTS/ki0R0Lx2QgIA= -----END CERTIFICATE-----Generated at Mon Oct 20 07:04:40 2025 by rpki-client